$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: wfLx2uiNp7AoPkubyImKUsJIbPVVvihcRfmv710cwus= Subject key identifier: B9:18:FD:EC:54:F1:D8:C8:6D:AF:41:B7:DD:0F:95:07:64:96:14:23 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 018837D3FB2040D932EAC1827DEF010F60B52A62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0445 Signing time: Sat 28 Feb 2026 19:31:36 +0000 Manifest this update: Sat 28 Feb 2026 19:26:36 +0000 Manifest next update: Wed 04 Mar 2026 00:54:36 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: zqpJXJIOBhnwLUMtiPQXOx2KMC9Zw7fPIh3iuLnJlNg=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: wYE1H9Wr7TBPEnivLA+AmwtO90AzuAp/OA0G1iMo88I=) 3: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 4: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 211ck8uiGDq3r89fc2Gy+xJMdTrtKGonCPKsvXBhJw0=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:37:d3:fb:20:40:d9:32:ea:c1:82:7d:ef:01:0f:60:b5:2a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Feb 28 19:26:36 2026 GMT Not After : Mar 4 00:54:36 2026 GMT Subject: CN=B918FDEC54F1D8C86DAF41B7DD0F950764961423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:c6:eb:dc:88:c4:97:8a:29:24:aa:e7:0b: 21:72:38:86:96:a6:8c:ee:84:2c:a5:a5:7d:12:28: 8a:a5:d4:e8:72:4a:54:3f:28:ff:57:d2:2b:29:17: d1:d7:46:15:e2:c3:ab:05:e1:d6:27:83:51:5f:0c: d7:fb:96:f3:c6:d5:99:91:67:3d:c2:2c:ab:25:18: 62:99:e5:7e:76:a9:9f:82:37:b2:58:17:a1:db:0f: 78:3e:f1:ca:e2:0b:09:a0:8d:3e:c2:e7:7f:92:38: f3:4e:dc:01:4f:c6:40:59:b7:11:0a:53:83:73:31: 9e:43:2d:91:03:5a:fa:fa:ba:20:fa:48:da:92:02: df:a7:2a:c0:db:84:b9:e2:f8:3f:cc:c6:08:2e:f2: 4c:0c:37:c2:cb:61:72:44:f2:e1:69:78:38:2a:7c: 77:2b:55:be:0b:3c:4c:46:89:c0:77:0d:86:5e:19: 4b:95:78:68:8d:fd:c8:ac:49:85:a5:1f:5b:ed:bd: c4:a3:ce:0f:1e:32:34:7f:e1:cd:a0:eb:c3:34:8f: ed:87:fc:d3:93:bb:7e:98:3a:d3:c2:da:f2:ca:98: 08:cd:cf:6a:16:73:5e:18:18:2b:67:97:b5:25:87: 51:ec:84:f7:b7:b5:0d:42:32:7a:1c:09:dc:30:3e: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:FD:EC:54:F1:D8:C8:6D:AF:41:B7:DD:0F:95:07:64:96:14:23 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:38:41:c3:ac:8c:38:df:08:a5:43:46:0c:6c:2d:ba:2c: 6d:92:f9:9a:17:1a:d9:a6:79:ff:dd:4f:3c:e7:ea:2c:5b:9c: 77:dc:a3:4d:2a:13:e8:9d:2e:f4:59:cf:ce:ff:24:90:27:ac: 89:9f:e8:b4:5d:9a:63:cf:8a:1c:4d:b0:52:c8:9f:ab:64:f3: 58:dd:d6:72:a4:09:fe:64:9f:ff:82:43:9b:bd:14:0b:63:90: 57:b3:e5:f6:ae:40:3c:85:f4:59:4e:e8:52:99:4a:50:51:a8: 7b:cf:57:48:63:f2:27:4c:fe:b1:68:af:6a:74:df:e1:39:19: df:8f:1e:9e:ed:2a:a5:11:ad:39:2b:0e:00:e2:09:a9:24:20: 7e:aa:ae:a6:a3:5e:f9:3a:44:a5:d4:44:b6:5f:06:03:fb:d1: 4d:9e:29:42:09:8b:80:4c:10:d4:a4:94:d6:a9:47:3a:d1:33: 55:71:87:61:ee:64:04:c1:5c:cc:54:dc:40:3f:f0:62:f7:ef: 4a:8d:19:22:d2:7f:f5:12:7c:3a:fe:d7:15:37:20:14:26:96: 9a:ba:3d:37:c1:01:c2:2f:5f:32:3c:44:f5:26:15:9a:6f:d8: 21:81:a7:64:c5:3e:5f:ba:d7:9b:e0:44:a0:3f:b3:9c:d5:c2: e4:ed:4a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYg30/sgQNky6sGCfe8BD2C1KmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNjAyMjgxOTI2MzZaFw0yNjAzMDQwMDU0MzZaMDMxMTAvBgNV BAMTKEI5MThGREVDNTRGMUQ4Qzg2REFGNDFCN0REMEY5NTA3NjQ5NjE0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwS8br3IjEl4opJKrnCyFyOIaW pozuhCylpX0SKIql1OhySlQ/KP9X0ispF9HXRhXiw6sF4dYng1FfDNf7lvPG1ZmR Zz3CLKslGGKZ5X52qZ+CN7JYF6HbD3g+8criCwmgjT7C53+SOPNO3AFPxkBZtxEK U4NzMZ5DLZEDWvr6uiD6SNqSAt+nKsDbhLni+D/Mxggu8kwMN8LLYXJE8uFpeDgq fHcrVb4LPExGicB3DYZeGUuVeGiN/cisSYWlH1vtvcSjzg8eMjR/4c2g68M0j+2H /NOTu36YOtPC2vLKmAjNz2oWc14YGCtnl7Ulh1HshPe3tQ1CMnocCdwwPswdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRj97FTx2Mhtr0G33Q+VB2SWFCMwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuKOEHDrIw43wilQ0YMbC26LG2S+ZoXGtmm ef/dTzzn6ixbnHfco00qE+idLvRZz87/JJAnrImf6LRdmmPPihxNsFLIn6tk81jd 1nKkCf5kn/+CQ5u9FAtjkFez5fauQDyF9FlO6FKZSlBRqHvPV0hj8idM/rFor2p0 3+E5Gd+PHp7tKqURrTkrDgDiCakkIH6qrqajXvk6RKXURLZfBgP70U2eKUIJi4BM ENSklNapRzrRM1Vxh2HuZATBXMxU3EA/8GL370qNGSLSf/USfDr+1xU3IBQmlpq6 PTfBAcIvXzI8RPUmFZpv2CGBp2TFPl+615vgRKA/s5zVwuTtSmY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:28 2026 by rpki-client