$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: IF3VzqfREAv5/NTxj2GCGpKUqvsRe3CXrS6HHN31B5I= Subject key identifier: 29:93:56:01:83:C3:5B:06:1C:9F:F5:55:CA:56:02:8B:88:B9:18:91 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 46BC614B3CFF0CACF29FF6082FAB809BD641C2F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: 0101 Signing time: Sun 01 Mar 2026 03:51:22 +0000 Manifest this update: Sun 01 Mar 2026 03:46:22 +0000 Manifest next update: Wed 04 Mar 2026 13:04:22 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: 6NXe2LA/2TKk9k+gIQoimokVw882avFVFixQt3xhDJI=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: v6LmFd/T+Q18hViAVgo7YGWsfgbS5BdFapubty8W4rc=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:bc:61:4b:3c:ff:0c:ac:f2:9f:f6:08:2f:ab:80:9b:d6:41:c2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Mar 1 03:46:22 2026 GMT Not After : Mar 4 13:04:22 2026 GMT Subject: CN=2993560183C35B061C9FF555CA56028B88B91891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:4a:3e:36:4e:cd:f0:18:1f:0c:09:ed:87: 9b:0c:8c:d3:83:6f:33:e3:f0:12:7c:dd:43:c5:b1: 27:5f:4b:70:e0:07:e6:92:dc:7c:6b:cf:4a:73:5e: 7d:bb:84:f7:61:fb:11:8a:91:9e:24:e5:43:0a:74: e6:b7:af:5d:0b:df:37:ba:ac:9e:a0:cc:fa:b1:85: 37:dd:cc:04:fb:e0:61:5a:4a:a8:37:d3:21:25:55: 9b:2e:cc:87:a2:3e:4e:0c:d3:3b:8f:bd:57:f4:8b: ab:0c:3c:fe:65:26:a4:13:f9:c9:67:b0:0b:ba:61: 17:8d:d0:a0:7f:b8:9b:2c:4e:d2:43:e4:03:b3:7e: c9:f0:39:3b:29:7b:1f:e7:5c:23:03:c6:f6:d6:c6: 25:cf:07:81:97:77:84:52:89:36:c9:ff:15:b1:db: 53:09:3d:84:06:e8:41:b5:70:fa:2e:e9:02:f7:47: 4c:f3:b4:45:dc:5c:ee:1a:11:36:2c:c1:7d:be:a1: f8:67:d7:7c:fb:39:71:ff:ac:03:73:b6:82:8b:32: 29:12:93:61:7e:37:50:7e:69:14:44:1d:f3:60:8b: c5:6d:b4:d1:27:b6:b1:07:c5:d5:64:fc:ee:0f:ce: c2:2b:6d:23:8d:9e:51:a6:b8:7f:5a:0a:37:77:4a: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:56:01:83:C3:5B:06:1C:9F:F5:55:CA:56:02:8B:88:B9:18:91 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:35:ef:d9:17:08:2a:be:a9:4a:bc:bb:1b:de:fe:a4:37:8b: ee:ce:f3:00:db:82:de:40:24:3c:06:27:ca:bd:cc:1a:fe:a7: 38:8b:de:b7:84:a7:b4:67:ad:a4:74:68:20:5c:7e:27:3a:52: 41:8d:8d:e6:6f:7c:59:aa:fc:87:7c:50:2d:40:84:b8:f5:cb: 93:53:d1:51:d6:90:84:d3:40:90:af:93:2e:27:79:8c:b0:bb: 5d:98:02:e0:13:a6:9a:32:52:c5:87:b3:c5:86:e8:00:99:35: 65:a8:1f:7b:59:50:1c:5a:a8:e8:f9:f9:8f:a1:7a:0e:56:06: 98:0d:27:2b:7b:31:62:c2:91:7e:63:19:73:71:23:ea:98:d1: 4e:e0:c7:d3:d6:42:38:c8:0f:3b:1f:0e:05:52:da:5b:18:52: f5:12:31:e8:34:f8:f0:8f:5c:ad:e4:0d:1b:3a:22:32:bf:d5: 6e:4a:9f:78:3b:46:0d:64:2d:9d:d3:4f:64:79:7b:0e:9c:66: d5:26:1b:c3:fd:c3:78:48:d2:27:0a:39:35:e0:18:33:c7:07: 5a:58:19:ab:b6:24:dd:e4:a5:26:f7:af:bc:9b:78:be:95:27: bf:b4:35:0a:8e:36:87:28:a5:11:82:30:a4:e8:b1:a2:7c:93: ed:cd:34:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrxhSzz/DKzyn/YIL6uAm9ZBwvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNjAzMDEwMzQ2MjJaFw0yNjAzMDQxMzA0MjJaMDMxMTAvBgNV BAMTKDI5OTM1NjAxODNDMzVCMDYxQzlGRjU1NUNBNTYwMjhCODhCOTE4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNEo+Nk7N8BgfDAnth5sMjNOD bzPj8BJ83UPFsSdfS3DgB+aS3Hxrz0pzXn27hPdh+xGKkZ4k5UMKdOa3r10L3ze6 rJ6gzPqxhTfdzAT74GFaSqg30yElVZsuzIeiPk4M0zuPvVf0i6sMPP5lJqQT+cln sAu6YReN0KB/uJssTtJD5AOzfsnwOTspex/nXCMDxvbWxiXPB4GXd4RSiTbJ/xWx 21MJPYQG6EG1cPou6QL3R0zztEXcXO4aETYswX2+ofhn13z7OXH/rANztoKLMikS k2F+N1B+aRREHfNgi8VttNEntrEHxdVk/O4PzsIrbSONnlGmuH9aCjd3SuklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZNWAYPDWwYcn/VVylYCi4i5GJEwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk179kXCCq+qUq8uxve/qQ3i+7O8wDbgt5A JDwGJ8q9zBr+pziL3reEp7RnraR0aCBcfic6UkGNjeZvfFmq/Id8UC1AhLj1y5NT 0VHWkITTQJCvky4neYywu12YAuATppoyUsWHs8WG6ACZNWWoH3tZUBxaqOj5+Y+h eg5WBpgNJyt7MWLCkX5jGXNxI+qY0U7gx9PWQjjIDzsfDgVS2lsYUvUSMeg0+PCP XK3kDRs6IjK/1W5Kn3g7Rg1kLZ3TT2R5ew6cZtUmG8P9w3hI0icKOTXgGDPHB1pY Gau2JN3kpSb3r7ybeL6VJ7+0NQqONocopRGCMKTosaJ8k+3NNK4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:20 2026 by rpki-client