$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: OqRq0pC3RS+EP+NMmLu0otieHODNI2KI7eyQUcdLbfI= Subject key identifier: 02:48:4F:68:35:5B:98:49:E1:DE:71:2B:4B:73:3F:60:CA:1B:30:7E Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 7FE6B5C9556AD07DE3E0AABEE771427B9BC76165 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 018A Signing time: Sun 01 Mar 2026 07:31:24 +0000 Manifest this update: Sun 01 Mar 2026 07:26:24 +0000 Manifest next update: Wed 04 Mar 2026 10:18:24 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: PuV4xGQFYmndvXSlSpckSU0JD6d+uMKRM3PqsLPJwuw=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e6:b5:c9:55:6a:d0:7d:e3:e0:aa:be:e7:71:42:7b:9b:c7:61:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Mar 1 07:26:24 2026 GMT Not After : Mar 4 10:18:24 2026 GMT Subject: CN=02484F68355B9849E1DE712B4B733F60CA1B307E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:26:b4:5e:e6:fb:87:e8:8b:55:22:aa:21: fb:74:a1:37:5c:c2:e0:ab:bd:f5:f2:0a:76:56:c3: 1a:7f:4e:ba:45:7e:c6:73:c0:d2:e7:7c:04:a8:c4: 3e:80:e1:9c:3a:76:ad:79:55:02:3b:f4:f2:1b:e2: 79:7e:73:d3:07:c7:0d:c7:0b:3f:e6:0a:fa:a2:cd: 94:c0:a1:96:1a:5c:cd:11:c7:23:9e:0d:2a:c4:b8: 82:e2:c5:5b:25:f4:62:b8:28:0f:67:b8:32:58:e6: 41:52:a7:ed:79:e1:24:79:7a:84:72:bf:ef:4f:fb: 58:1c:d4:70:75:e7:8f:c0:a9:8c:b3:aa:1a:74:58: 7e:4a:66:7d:e4:f7:03:d8:32:94:40:3b:cb:e6:01: 7c:a4:f7:8c:a6:25:06:f1:77:d5:d8:55:c2:e6:26: 22:a1:da:22:1d:11:56:d0:9d:b1:09:38:a5:81:78: 42:da:ac:17:b2:40:12:f2:23:de:8a:aa:11:1e:8d: 9c:e8:44:e3:c6:9f:fa:3a:63:22:c3:82:dd:85:8b: 12:87:dc:9a:66:52:aa:f9:67:b2:c8:c4:09:b8:24: 61:8d:14:f0:d4:87:ef:9f:b0:f0:94:53:c1:16:c0: 6c:f5:84:17:9c:08:54:17:87:37:3c:81:92:89:5c: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:48:4F:68:35:5B:98:49:E1:DE:71:2B:4B:73:3F:60:CA:1B:30:7E X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:fa:15:08:cc:47:42:d8:9c:1a:db:78:f0:98:0d:15:e7:a4: cf:77:1e:38:8e:a5:db:b8:ff:55:27:0c:69:28:ad:79:d5:ca: 0c:25:c8:99:f0:52:50:24:c9:c1:35:d4:55:e4:05:ef:9e:d9: 1c:5a:d8:75:77:18:64:c8:53:3a:7a:f7:d7:d5:32:72:b5:93: 16:02:d7:60:cc:c2:3e:bd:6d:18:6d:02:8f:63:26:6a:d5:9c: 3a:36:2d:60:bb:a8:49:12:de:eb:d3:28:cc:ee:ee:ee:2b:e0: 54:12:37:7d:e9:36:88:b3:cb:c2:f4:c8:11:8a:ce:89:ee:7b: bd:7a:bc:03:ed:32:ef:6c:37:11:c5:b1:87:8b:3d:04:8d:37: 0e:ce:fe:79:99:8e:f6:47:c9:9e:f5:a1:41:db:b8:34:4f:71: a2:b6:b9:03:90:49:80:6f:fb:ec:63:86:2d:da:62:ae:99:21: 85:6f:32:a6:fb:1f:d0:6b:b4:ef:e0:48:1f:44:54:8c:0d:a3: 0f:90:29:fd:00:c9:ad:6b:fb:bf:8f:dc:17:ec:9a:87:2a:9b: 3e:0a:52:3e:97:f0:14:2a:e8:e7:48:2a:2b:85:e9:ce:e4:6c: 88:72:1a:a3:f5:3d:dc:4a:16:92:8b:ac:f1:8a:3a:32:b4:58: 85:a5:7c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+a1yVVq0H3j4Kq+53FCe5vHYWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNjAzMDEwNzI2MjRaFw0yNjAzMDQxMDE4MjRaMDMxMTAvBgNV BAMTKDAyNDg0RjY4MzU1Qjk4NDlFMURFNzEyQjRCNzMzRjYwQ0ExQjMwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaSa0Xub7h+iLVSKqIft0oTdc wuCrvfXyCnZWwxp/TrpFfsZzwNLnfASoxD6A4Zw6dq15VQI79PIb4nl+c9MHxw3H Cz/mCvqizZTAoZYaXM0RxyOeDSrEuILixVsl9GK4KA9nuDJY5kFSp+154SR5eoRy v+9P+1gc1HB154/AqYyzqhp0WH5KZn3k9wPYMpRAO8vmAXyk94ymJQbxd9XYVcLm JiKh2iIdEVbQnbEJOKWBeELarBeyQBLyI96KqhEejZzoROPGn/o6YyLDgt2FixKH 3JpmUqr5Z7LIxAm4JGGNFPDUh++fsPCUU8EWwGz1hBecCFQXhzc8gZKJXOY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkhPaDVbmEnh3nErS3M/YMobMH4wHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJP6FQjMR0LYnBrbePCYDRXnpM93HjiOpdu4 /1UnDGkorXnVygwlyJnwUlAkycE11FXkBe+e2Rxa2HV3GGTIUzp699fVMnK1kxYC 12DMwj69bRhtAo9jJmrVnDo2LWC7qEkS3uvTKMzu7u4r4FQSN33pNoizy8L0yBGK zonue716vAPtMu9sNxHFsYeLPQSNNw7O/nmZjvZHyZ71oUHbuDRPcaK2uQOQSYBv ++xjhi3aYq6ZIYVvMqb7H9BrtO/gSB9EVIwNow+QKf0Aya1r+7+P3Bfsmocqmz4K Uj6X8BQq6OdIKiuF6c7kbIhyGqP1PdxKFpKLrPGKOjK0WIWlfF8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:51 2026 by rpki-client