$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: 0m3AF9kWS037AJaymphBYEpXB9Qt3Pq+8kuEOrTqDh4= Subject key identifier: 88:1A:3D:CD:72:B3:11:2D:36:96:48:6C:C8:3A:E7:70:70:14:F4:90 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 35B9332E4B2951FB2F15FBA0E57F2A85EE50B698 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 03B7 Signing time: Sun 01 Mar 2026 11:31:50 +0000 Manifest this update: Sun 01 Mar 2026 11:26:50 +0000 Manifest next update: Wed 04 Mar 2026 21:54:50 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: OmW97SLMwFKgRh5atU/ZUjZoUTTFlXl7O0fmgCDWF44=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b9:33:2e:4b:29:51:fb:2f:15:fb:a0:e5:7f:2a:85:ee:50:b6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Mar 1 11:26:50 2026 GMT Not After : Mar 4 21:54:50 2026 GMT Subject: CN=881A3DCD72B3112D3696486CC83AE7707014F490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:b0:41:2d:fd:a1:80:aa:ad:8c:27:86:27: db:78:27:e7:d8:d7:7d:42:c9:55:3b:10:f4:31:6a: 46:4d:be:2d:1a:f2:cd:9b:ec:58:b4:e4:c7:77:f7: 21:7d:ae:5f:0b:a9:8c:47:f3:43:36:cd:7e:18:1b: 29:73:9a:6d:36:e9:da:0d:69:fe:48:f9:50:31:d9: c9:b1:e8:e4:63:b1:0a:c3:b8:ab:4b:ed:c0:71:b4: e7:9d:31:ce:0f:9e:01:ac:01:72:20:3e:ac:e1:3f: 33:81:06:54:96:18:3f:13:76:46:0f:9c:ff:c2:86: a9:75:f4:cf:0f:25:2d:e3:de:5d:2b:de:b6:ce:af: 46:df:74:30:7e:ea:92:99:ea:75:9e:c6:96:6f:12: 92:2b:97:f0:b1:87:e6:54:50:05:2f:45:58:ee:4c: dd:dd:2f:f2:1c:af:fa:67:3e:85:84:6f:b1:d3:6a: 20:ef:f8:77:6c:5a:f8:8a:aa:90:25:17:9e:bc:b2: ad:1c:56:94:73:90:2e:57:70:48:3c:36:c5:87:d3: c7:1b:34:f7:3d:49:78:fb:7f:40:da:80:8d:d7:1c: 55:8d:49:ee:92:f2:26:82:fa:03:57:ae:43:99:f8: 2b:0c:56:bb:1c:b6:46:2d:88:bd:90:52:f1:c7:6b: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:3D:CD:72:B3:11:2D:36:96:48:6C:C8:3A:E7:70:70:14:F4:90 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f9:34:f7:d3:5a:0e:db:ea:b3:ae:be:bd:18:04:34:10:69: 46:53:97:01:c4:f8:a3:17:34:3e:fe:72:92:f1:5b:f6:76:7d: 69:6a:b5:9c:8f:12:e1:65:af:c5:5c:72:63:c1:92:39:d5:71: ad:0a:00:8d:2a:d6:a0:df:c1:02:75:e7:bd:46:e4:4b:d5:0a: 64:b3:34:a4:bc:e4:ef:4f:5e:fb:f8:70:20:bf:d4:24:d1:00: 46:0e:df:bd:1c:d7:02:c2:bb:ed:8f:bd:25:4c:07:e5:5c:85: 0d:57:43:d8:72:64:eb:ea:98:dc:d9:9f:89:cf:65:fd:86:04: 4b:1f:17:6e:2c:12:12:66:f6:27:e0:a2:89:67:f6:27:46:77: bf:66:aa:6a:db:56:29:3c:f5:0a:be:1f:74:19:56:d6:9b:af: 11:49:9e:9e:6e:cb:f7:dd:d8:85:7e:97:e7:3c:4b:c3:56:db: 5e:e4:d9:53:a2:80:29:04:a8:d7:7c:91:a8:55:3a:da:62:e2: a0:7b:6b:35:e7:8d:0b:28:de:28:f6:98:70:1c:ed:69:3d:a3: 7b:ee:9e:e3:08:8e:27:7a:ca:c2:9c:2f:88:d3:16:1c:3c:0c: 06:4a:64:48:7c:bd:6b:75:09:d6:d8:5b:36:f0:5e:bf:fe:8e: c6:3b:c7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbkzLkspUfsvFfug5X8qhe5QtpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNjAzMDExMTI2NTBaFw0yNjAzMDQyMTU0NTBaMDMxMTAvBgNV BAMTKDg4MUEzRENENzJCMzExMkQzNjk2NDg2Q0M4M0FFNzcwNzAxNEY0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaLBBLf2hgKqtjCeGJ9t4J+fY 131CyVU7EPQxakZNvi0a8s2b7Fi05Md39yF9rl8LqYxH80M2zX4YGylzmm026doN af5I+VAx2cmx6ORjsQrDuKtL7cBxtOedMc4PngGsAXIgPqzhPzOBBlSWGD8TdkYP nP/Chql19M8PJS3j3l0r3rbOr0bfdDB+6pKZ6nWexpZvEpIrl/Cxh+ZUUAUvRVju TN3dL/Icr/pnPoWEb7HTaiDv+HdsWviKqpAlF568sq0cVpRzkC5XcEg8NsWH08cb NPc9SXj7f0DagI3XHFWNSe6S8iaC+gNXrkOZ+CsMVrsctkYtiL2QUvHHaxEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiBo9zXKzES02lkhsyDrncHAU9JAwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH5NPfTWg7b6rOuvr0YBDQQaUZTlwHE+KMX ND7+cpLxW/Z2fWlqtZyPEuFlr8VccmPBkjnVca0KAI0q1qDfwQJ1571G5EvVCmSz NKS85O9PXvv4cCC/1CTRAEYO370c1wLCu+2PvSVMB+VchQ1XQ9hyZOvqmNzZn4nP Zf2GBEsfF24sEhJm9ifgooln9idGd79mqmrbVik89Qq+H3QZVtabrxFJnp5uy/fd 2IV+l+c8S8NW217k2VOigCkEqNd8kahVOtpi4qB7azXnjQso3ij2mHAc7Wk9o3vu nuMIjid6ysKcL4jTFhw8DAZKZEh8vWt1CdbYWzbwXr/+jsY7xzg= -----END CERTIFICATE-----Generated at Mon Mar 2 21:59:46 2026 by rpki-client