$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: 4ltfVRscfLkvZ0lk4C7Oo+RH6pR4kP0R1V7FNv8cLwE= Subject key identifier: 7A:B4:2C:F1:27:54:56:45:E0:F6:52:98:AD:AB:A7:12:34:D7:E5:83 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 49A4D19C1538B8E8A7B36E10DFBCAD8B591CE784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 03C1 Signing time: Mon 02 Mar 2026 01:51:47 +0000 Manifest this update: Mon 02 Mar 2026 01:46:47 +0000 Manifest next update: Thu 05 Mar 2026 06:12:47 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: uPrqe+3VY4iMsKPq0O6BgXZ3jDOMsF1P9U++HibeByE=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: Oja3kpR33mjx+32VwkK3O9j+/Uy2DqERIgndc/3ms8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a4:d1:9c:15:38:b8:e8:a7:b3:6e:10:df:bc:ad:8b:59:1c:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Mar 2 01:46:47 2026 GMT Not After : Mar 5 06:12:47 2026 GMT Subject: CN=7AB42CF127545645E0F65298ADABA71234D7E583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:45:cf:d5:6b:d6:bb:80:5b:8d:23:2b:7e: d3:df:78:03:f8:3e:90:af:5f:7e:5f:77:18:d7:a6: 68:a8:8b:c7:59:0b:6b:2d:4f:d4:e3:30:df:8d:be: 17:e5:6d:94:41:80:5c:3a:34:92:2b:e8:0b:aa:9c: 49:e1:68:50:9b:e7:87:8e:c3:dc:b0:a3:b5:15:cd: f1:80:17:20:e7:69:2c:9a:d8:c5:f9:fe:38:b0:64: 8e:fa:e3:02:7c:95:2a:af:b0:67:9b:4f:5b:5b:1c: 49:c8:24:1c:c9:cb:8f:f8:a1:72:31:cf:23:ea:53: ff:f7:58:fe:0d:8c:fc:b6:b8:ed:fa:e6:44:cf:68: 1f:a0:17:95:b9:00:77:9e:91:0a:8e:7d:26:c0:64: 5f:a2:9e:d0:78:9f:1c:50:f0:09:de:43:a1:9f:a7: 83:28:ab:25:87:60:54:f6:bf:0a:a0:55:c0:2c:c0: 7f:17:fb:5f:c3:34:12:70:1c:77:d4:70:82:0a:db: 67:6b:92:49:fa:ab:ea:48:39:13:1e:20:2f:f8:f0: fe:b0:30:ed:49:5e:db:fc:82:e9:8f:50:5e:de:c4: c7:03:c2:51:46:a4:ca:32:a1:e1:68:5e:b1:f4:e7: 32:09:ab:51:78:34:1e:ab:d6:c7:d1:f6:de:17:ee: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:2C:F1:27:54:56:45:E0:F6:52:98:AD:AB:A7:12:34:D7:E5:83 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0a:8d:43:91:59:ed:ce:de:6a:06:d0:73:f6:fa:ab:28:e1: c7:80:b9:6c:20:43:aa:7f:1b:af:47:f5:b1:8d:a7:50:cf:2f: 34:82:01:29:87:11:ff:f1:63:3f:fc:12:5f:e0:7d:70:1b:b2: e5:74:a2:60:d7:bd:6a:a3:78:f5:89:9e:69:64:b9:5a:b9:eb: 81:d2:97:fb:8f:93:92:e4:a4:35:92:2f:a9:43:ae:13:31:13: f6:26:36:48:8b:1a:46:36:36:78:0e:6c:3b:85:e0:f0:76:14: 87:5a:0e:58:b5:d6:6a:1c:10:52:71:d8:60:aa:82:a4:36:be: a8:d6:f9:63:00:a2:b7:0d:63:3f:06:3c:e2:04:a3:57:b7:8d: e1:63:05:06:fc:ab:96:89:15:99:73:8a:32:ac:fa:80:11:fc: b3:0d:0a:ef:75:60:69:76:44:70:bc:c9:f0:4a:dc:4b:3a:cd: cf:4a:f2:bc:21:c4:76:ce:fb:a5:c1:94:52:1b:f1:64:6a:2a: d2:ee:29:d0:43:c6:ef:63:f7:57:91:ad:54:5b:d9:08:c3:53: 42:1f:63:56:a2:43:32:1d:9e:7b:8d:fa:0e:26:22:49:02:19: 86:62:66:6c:2b:ec:ff:32:e1:84:10:0d:05:47:9f:0a:3b:66: d8:ff:48:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaTRnBU4uOins24Q37yti1kc54QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNjAzMDIwMTQ2NDdaFw0yNjAzMDUwNjEyNDdaMDMxMTAvBgNV BAMTKDdBQjQyQ0YxMjc1NDU2NDVFMEY2NTI5OEFEQUJBNzEyMzREN0U1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgG0XP1WvWu4BbjSMrftPfeAP4 PpCvX35fdxjXpmioi8dZC2stT9TjMN+NvhflbZRBgFw6NJIr6AuqnEnhaFCb54eO w9ywo7UVzfGAFyDnaSya2MX5/jiwZI764wJ8lSqvsGebT1tbHEnIJBzJy4/4oXIx zyPqU//3WP4NjPy2uO365kTPaB+gF5W5AHeekQqOfSbAZF+intB4nxxQ8AneQ6Gf p4MoqyWHYFT2vwqgVcAswH8X+1/DNBJwHHfUcIIK22drkkn6q+pIORMeIC/48P6w MO1JXtv8gumPUF7exMcDwlFGpMoyoeFoXrH05zIJq1F4NB6r1sfR9t4X7s03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerQs8SdUVkXg9lKYraunEjTX5YMwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQKjUORWe3O3moG0HP2+qso4ceAuWwgQ6p/ G69H9bGNp1DPLzSCASmHEf/xYz/8El/gfXAbsuV0omDXvWqjePWJnmlkuVq564HS l/uPk5LkpDWSL6lDrhMxE/YmNkiLGkY2NngObDuF4PB2FIdaDli11mocEFJx2GCq gqQ2vqjW+WMAorcNYz8GPOIEo1e3jeFjBQb8q5aJFZlzijKs+oAR/LMNCu91YGl2 RHC8yfBK3Es6zc9K8rwhxHbO+6XBlFIb8WRqKtLuKdBDxu9j91eRrVRb2QjDU0If Y1aiQzIdnnuN+g4mIkkCGYZiZmwr7P8y4YQQDQVHnwo7Ztj/SKA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:04 2026 by rpki-client