$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: bqWLOEaRQ3zMqDY3avs9cVlGui1SZo/5zXDhTYutCRs= Subject key identifier: 1D:50:05:9B:1A:85:0E:E0:EE:BA:21:1B:C3:6F:78:54:70:86:56:EA Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 2464586C0B402F57383E66DF9F20099B0DED6EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 01B5 Signing time: Sat 28 Feb 2026 22:10:56 +0000 Manifest this update: Sat 28 Feb 2026 22:05:56 +0000 Manifest next update: Wed 04 Mar 2026 07:21:56 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: X1ZrbmylTGttBiQBK9g2fCNdL9Ud/Km5i1FFti97xY8=) 2: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 3: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:64:58:6c:0b:40:2f:57:38:3e:66:df:9f:20:09:9b:0d:ed:6e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Feb 28 22:05:56 2026 GMT Not After : Mar 4 07:21:56 2026 GMT Subject: CN=1D50059B1A850EE0EEBA211BC36F7854708656EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:25:a6:af:dc:75:0b:11:79:37:47:6a:4e: 36:8a:a4:6c:08:44:d3:5a:bb:f4:aa:58:8b:85:ae: 6a:a6:e3:04:56:79:ed:4e:66:f0:fc:bc:5c:a3:27: cc:ff:49:a1:77:2f:65:6c:b6:10:b7:c7:76:ee:a6: 22:2a:9e:5f:f9:de:29:c6:0e:2f:82:55:ce:7f:04: 9f:44:44:e6:78:07:28:fa:d2:01:62:ba:e7:5a:11: e4:77:b5:b9:49:8e:1a:88:9c:94:68:34:04:6a:31: 17:5d:9d:bd:da:0a:da:05:03:d6:be:79:ee:f0:96: 78:eb:f1:30:8a:8b:cb:92:34:61:3c:0f:17:be:c4: 89:56:33:be:2c:91:a3:0d:ef:fc:47:8a:53:f6:80: fb:f7:80:75:be:b5:ca:e9:a4:aa:9e:e8:20:71:a2: 73:70:5f:e4:98:0e:c1:34:eb:90:e1:8a:fd:24:0a: 97:07:55:1b:18:f9:47:6a:95:02:9d:c3:ed:ea:e5: 42:71:89:1d:b0:6a:9d:df:28:ca:43:ba:0d:88:ed: d5:c3:ea:6c:1a:f8:43:65:67:93:a6:37:f6:e7:de: 99:1e:53:ed:25:b4:f2:84:e9:71:f9:2b:29:db:dc: 6c:98:54:d1:73:6a:8b:bf:3f:b6:bb:32:c4:92:a3: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:50:05:9B:1A:85:0E:E0:EE:BA:21:1B:C3:6F:78:54:70:86:56:EA X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:df:13:67:a0:15:fe:88:42:45:bb:02:8d:38:8c:e6:68: ad:1a:95:50:b5:c3:17:c6:00:c8:c9:1c:11:93:1a:f5:c0:6d: be:bf:14:78:22:4d:72:8c:bf:95:de:2f:1b:21:3d:f5:bb:73: 8c:fb:04:7d:bc:ae:d8:ec:ea:0c:0b:67:cc:f1:f8:25:b2:96: 8d:11:94:48:0a:fa:f5:8c:7e:3f:e5:a6:24:37:25:78:c0:f9: 95:30:36:07:d4:f2:7e:f0:aa:f3:7b:34:cc:5d:c5:e9:d1:2c: 5e:63:ab:5f:ab:a0:b3:e7:01:b1:f0:d2:37:fc:0c:57:da:61: 50:2c:b9:6d:e4:f6:da:9c:db:00:e6:52:af:68:25:fe:ef:78: e6:ac:98:95:d0:b2:66:ac:a5:1d:7a:32:ed:17:a4:90:88:0a: 79:ee:7e:f8:9c:a2:ef:0b:b0:a6:3b:56:1b:78:4f:e7:db:0b: e7:a2:8e:7b:d6:3c:ff:f2:74:01:05:0f:30:d9:0b:c7:c0:53: c0:9a:e5:9f:c2:87:04:78:56:ff:fe:91:ca:b4:39:97:a8:cd: a9:06:7b:f8:0e:0a:57:d4:95:5e:20:cd:c5:36:0e:1f:2d:4e: a8:0c:32:f7:86:67:08:13:ac:a8:4e:f9:34:8d:c9:6b:8b:ba: 42:0d:95:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGRYbAtAL1c4PmbfnyAJmw3tbq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjAyMjgyMjA1NTZaFw0yNjAzMDQwNzIxNTZaMDMxMTAvBgNV BAMTKDFENTAwNTlCMUE4NTBFRTBFRUJBMjExQkMzNkY3ODU0NzA4NjU2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aCWmr9x1CxF5N0dqTjaKpGwI RNNau/SqWIuFrmqm4wRWee1OZvD8vFyjJ8z/SaF3L2VsthC3x3bupiIqnl/53inG Di+CVc5/BJ9EROZ4Byj60gFiuudaEeR3tblJjhqInJRoNARqMRddnb3aCtoFA9a+ ee7wlnjr8TCKi8uSNGE8Dxe+xIlWM74skaMN7/xHilP2gPv3gHW+tcrppKqe6CBx onNwX+SYDsE065Dhiv0kCpcHVRsY+UdqlQKdw+3q5UJxiR2wap3fKMpDug2I7dXD 6mwa+ENlZ5OmN/bn3pkeU+0ltPKE6XH5Kynb3GyYVNFzaou/P7a7MsSSo5FJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVAFmxqFDuDuuiEbw294VHCGVuowHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItT3xNnoBX+iEJFuwKNOIzmaK0alVC1wxfG AMjJHBGTGvXAbb6/FHgiTXKMv5XeLxshPfW7c4z7BH28rtjs6gwLZ8zx+CWylo0R lEgK+vWMfj/lpiQ3JXjA+ZUwNgfU8n7wqvN7NMxdxenRLF5jq1+roLPnAbHw0jf8 DFfaYVAsuW3k9tqc2wDmUq9oJf7veOasmJXQsmaspR16Mu0XpJCICnnufvicou8L sKY7Vht4T+fbC+eijnvWPP/ydAEFDzDZC8fAU8Ca5Z/ChwR4Vv/+kcq0OZeozakG e/gOClfUlV4gzcU2Dh8tTqgMMveGZwgTrKhO+TSNyWuLukINlcQ= -----END CERTIFICATE-----Generated at Mon Mar 2 01:50:50 2026 by rpki-client