$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: vpAwT3P3dlMNW0231vrPGbMPEzw7kyDHVSAxPB5XgRI= Subject key identifier: 1F:C8:91:31:53:91:D7:D1:EB:2F:C7:2C:D0:3F:25:6A:1E:46:93:B8 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 248E0C1FFFC0CA7C28A74603D94EF7177DA683FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 0152 Signing time: Sat 28 Feb 2026 22:50:41 +0000 Manifest this update: Sat 28 Feb 2026 22:45:41 +0000 Manifest next update: Wed 04 Mar 2026 04:53:41 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: ZWvf4dR042s1lKC6AR9yTVNyJ2nTnLm5xyOWHwnvZi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8e:0c:1f:ff:c0:ca:7c:28:a7:46:03:d9:4e:f7:17:7d:a6:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Feb 28 22:45:41 2026 GMT Not After : Mar 4 04:53:41 2026 GMT Subject: CN=1FC891315391D7D1EB2FC72CD03F256A1E4693B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:38:a3:ea:84:aa:d1:e1:f6:91:e3:95:d2: 62:f7:cf:a1:1e:5c:bb:6f:97:a3:d1:06:3c:07:6b: 08:d6:7c:fc:9e:f8:3a:56:79:ed:71:9e:fe:84:1c: 8a:0d:47:11:dc:2b:8b:4d:91:9f:19:cb:9f:c8:45: c3:da:57:02:0d:ae:57:e3:2b:52:4a:d9:71:3e:8e: 72:2c:20:07:7a:4e:63:c9:a5:1e:79:76:46:00:4d: 5a:cc:91:61:84:cb:bd:b5:a4:c3:66:b1:8b:36:5f: 92:ee:c0:ac:87:9d:00:0c:73:ec:d9:a1:f0:1d:19: 8c:84:79:36:e3:fe:cf:7c:b7:aa:3d:38:b8:eb:c3: 87:e6:8b:86:0b:80:5d:0d:7f:8a:66:63:ea:80:c2: a0:9c:85:ad:9f:e3:37:bc:c9:ca:18:75:22:94:9f: 9a:dc:30:05:d0:08:00:6d:30:2c:d0:84:0a:70:20: 86:9b:45:f0:af:fd:c3:3b:72:20:5c:45:99:47:e0: c9:44:23:d9:0f:b5:df:33:12:75:11:a7:69:f5:4e: b9:16:e1:97:a0:08:4d:9c:a9:f6:ec:00:98:33:ad: c9:3d:30:88:1e:0c:e2:02:56:c0:08:0e:5d:ce:42: 22:ca:94:b8:ca:b8:81:1c:d0:01:63:6c:36:37:06: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:91:31:53:91:D7:D1:EB:2F:C7:2C:D0:3F:25:6A:1E:46:93:B8 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:11:30:ae:33:a1:c9:01:8b:8d:e5:52:03:b0:5d:95:c7:71: 1a:bc:5e:ff:28:59:d4:4a:4a:2c:1e:b9:f2:51:65:ee:3e:91: 83:f2:7e:94:5b:b9:8f:8f:62:6d:4e:57:74:8f:24:78:83:58: 03:cf:0e:50:80:fa:82:18:d8:27:d1:43:a6:7f:dd:76:75:07: 83:54:de:60:38:35:4b:a2:0f:ba:e8:5f:27:01:1b:67:f9:5a: eb:14:d1:03:ce:bb:ea:19:17:01:6d:6f:06:f1:ff:11:25:db: c8:7f:01:9d:e9:b3:25:3c:bc:03:77:35:7d:25:7b:56:68:8e: 7f:72:a6:35:c1:d9:43:18:38:38:e4:01:f6:90:f3:fd:40:ba: 53:22:0d:2f:5c:b9:55:5b:63:29:82:d0:43:9f:e3:26:31:fb: c5:40:c3:b5:9f:da:ba:59:ca:70:28:82:f0:69:7c:f8:3c:35: 38:ff:06:b4:ef:8b:f7:e6:ec:69:e0:ac:b6:8d:d7:f0:1a:04: 0b:2c:3c:53:ce:8a:93:48:f4:c8:3f:cd:e5:9b:e5:4d:c9:71: dc:0c:cf:45:66:c7:88:7f:5d:62:85:e7:49:ee:67:77:9d:b8: d8:ae:03:40:a8:af:6d:93:f3:19:68:42:ec:83:65:90:5c:ce: c3:e9:7e:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI4MH//Aynwop0YD2U73F32mg/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNjAyMjgyMjQ1NDFaFw0yNjAzMDQwNDUzNDFaMDMxMTAvBgNV BAMTKDFGQzg5MTMxNTM5MUQ3RDFFQjJGQzcyQ0QwM0YyNTZBMUU0NjkzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ODij6oSq0eH2keOV0mL3z6Ee XLtvl6PRBjwHawjWfPye+DpWee1xnv6EHIoNRxHcK4tNkZ8Zy5/IRcPaVwINrlfj K1JK2XE+jnIsIAd6TmPJpR55dkYATVrMkWGEy721pMNmsYs2X5LuwKyHnQAMc+zZ ofAdGYyEeTbj/s98t6o9OLjrw4fmi4YLgF0Nf4pmY+qAwqCcha2f4ze8ycoYdSKU n5rcMAXQCABtMCzQhApwIIabRfCv/cM7ciBcRZlH4MlEI9kPtd8zEnURp2n1TrkW 4ZegCE2cqfbsAJgzrck9MIgeDOICVsAIDl3OQiLKlLjKuIEc0AFjbDY3BqcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8iRMVOR19HrL8cs0D8lah5Gk7gwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKARMK4zockBi43lUgOwXZXHcRq8Xv8oWdRK SiweufJRZe4+kYPyfpRbuY+PYm1OV3SPJHiDWAPPDlCA+oIY2CfRQ6Z/3XZ1B4NU 3mA4NUuiD7roXycBG2f5WusU0QPOu+oZFwFtbwbx/xEl28h/AZ3psyU8vAN3NX0l e1Zojn9ypjXB2UMYODjkAfaQ8/1AulMiDS9cuVVbYymC0EOf4yYx+8VAw7Wf2rpZ ynAogvBpfPg8NTj/BrTvi/fm7GngrLaN1/AaBAssPFPOipNI9Mg/zeWb5U3JcdwM z0Vmx4h/XWKF50nuZ3eduNiuA0Cor22T8xloQuyDZZBczsPpfow= -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:20 2026 by rpki-client