$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: nw/g6cWHcHToD7jZWn2FoQCla+ZHM9qCzDgqOn8FAvY= Subject key identifier: 99:F1:79:E1:94:51:9B:31:45:8A:C2:6C:CC:A4:4B:E2:5A:6F:58:C9 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 54C9104CCA38AA2F335D58627FEF87C288BFF876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 0249 Signing time: Sun 01 Mar 2026 09:12:32 +0000 Manifest this update: Sun 01 Mar 2026 09:07:32 +0000 Manifest next update: Wed 04 Mar 2026 16:12:32 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) 2: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: nX9lHUIqbjedTlHF4trNaATJmXV+HPXW/KC1pwIRQXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c9:10:4c:ca:38:aa:2f:33:5d:58:62:7f:ef:87:c2:88:bf:f8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Mar 1 09:07:32 2026 GMT Not After : Mar 4 16:12:32 2026 GMT Subject: CN=99F179E194519B31458AC26CCCA44BE25A6F58C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bf:5e:55:62:d0:44:ee:b5:ce:de:82:e1:01: 57:47:e8:75:b3:bf:87:9d:8b:1e:f0:cf:3f:a3:4c: c0:08:01:e3:9f:e6:be:95:9a:16:ee:27:d3:ba:e4: 5f:a8:64:ed:70:68:07:51:42:43:bb:42:75:4e:00: 15:71:d7:1d:9a:a1:af:d2:78:e7:0f:71:4c:b1:18: 02:27:5d:91:35:81:d1:54:be:bc:f1:6b:0e:69:d6: c5:4f:92:58:c4:42:f0:a0:54:bd:99:20:e8:e7:26: 80:7a:20:20:bc:37:ec:87:30:7c:20:59:d1:8b:f9: ab:0e:a3:90:da:f3:9d:ed:9b:12:83:79:85:55:c8: 99:7a:54:8d:48:bc:28:48:18:e8:9e:e7:7c:42:5f: 4a:f5:03:5b:50:10:f1:bd:b3:69:64:66:5e:1e:7e: 60:59:54:99:c4:f7:b0:13:c8:d0:d7:5c:a3:5a:62: d5:54:4f:38:53:27:1f:13:fe:5d:46:ff:8e:0a:5f: 10:d6:bc:fe:18:9f:75:50:40:2b:f1:5a:ab:87:69: 70:2f:9e:93:ff:7e:c5:cb:57:9e:81:aa:81:c1:bf: bf:a8:0f:c7:b4:e7:b8:6a:81:06:48:75:3a:9b:9c: e8:fe:d4:ed:44:4e:f6:9f:78:5e:86:fe:85:1c:ff: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:79:E1:94:51:9B:31:45:8A:C2:6C:CC:A4:4B:E2:5A:6F:58:C9 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:7b:c5:28:e4:b7:d9:83:3d:fc:ba:c0:7b:37:14:3f:22: 04:b2:99:dd:a0:57:39:21:7e:b2:e3:e2:e6:f0:e1:5a:e9:b2: 8d:38:bb:4a:71:27:13:d1:c1:fc:59:0b:8e:43:f2:c7:b8:57: 1c:ac:89:39:3a:41:b2:e7:7a:4b:c9:bd:5e:54:6b:3d:57:4d: ae:50:6e:91:55:58:ea:68:32:5d:54:7f:3d:f2:e3:26:f3:3c: 9d:1a:92:95:ae:6a:11:9b:a1:75:bf:0f:86:a5:f5:2c:4e:05: f2:77:aa:d6:70:7a:9e:15:1b:a6:60:ec:a9:1f:54:ec:25:ba: bb:4e:f9:a1:a6:8c:9d:4c:90:cc:e1:82:ac:86:49:94:af:e3: 88:93:af:36:9c:8f:16:57:95:f1:16:e1:95:23:b3:54:ec:4d: 55:4b:ef:84:5e:14:36:c5:84:2a:ba:d8:72:a5:77:fb:23:47: b2:ac:4c:bb:1f:09:84:57:5f:13:e7:c5:1b:ce:9b:50:d9:b0: 0e:36:d0:4c:24:4b:c0:20:7d:6d:2f:27:10:df:97:8e:ff:ad: fd:51:42:01:c4:ea:d4:1b:a2:3e:a3:7e:d1:aa:c4:69:36:e5: f1:34:c4:e3:5c:b8:ef:0a:80:a5:19:70:ca:1f:45:a0:d3:c5: f8:02:b2:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMkQTMo4qi8zXVhif++Hwoi/+HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNjAzMDEwOTA3MzJaFw0yNjAzMDQxNjEyMzJaMDMxMTAvBgNV BAMTKDk5RjE3OUUxOTQ1MTlCMzE0NThBQzI2Q0NDQTQ0QkUyNUE2RjU4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDov15VYtBE7rXO3oLhAVdH6HWz v4edix7wzz+jTMAIAeOf5r6VmhbuJ9O65F+oZO1waAdRQkO7QnVOABVx1x2aoa/S eOcPcUyxGAInXZE1gdFUvrzxaw5p1sVPkljEQvCgVL2ZIOjnJoB6ICC8N+yHMHwg WdGL+asOo5Da853tmxKDeYVVyJl6VI1IvChIGOie53xCX0r1A1tQEPG9s2lkZl4e fmBZVJnE97ATyNDXXKNaYtVUTzhTJx8T/l1G/44KXxDWvP4Yn3VQQCvxWquHaXAv npP/fsXLV56BqoHBv7+oD8e057hqgQZIdTqbnOj+1O1ETvafeF6G/oUc/03rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfF54ZRRmzFFisJszKRL4lpvWMkwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCGe8Uo5LfZgz38usB7NxQ/IgSymd2gVzkh frLj4ubw4Vrpso04u0pxJxPRwfxZC45D8se4VxysiTk6QbLnekvJvV5Uaz1XTa5Q bpFVWOpoMl1Ufz3y4ybzPJ0akpWuahGboXW/D4al9SxOBfJ3qtZwep4VG6Zg7Kkf VOwlurtO+aGmjJ1MkMzhgqyGSZSv44iTrzacjxZXlfEW4ZUjs1TsTVVL74ReFDbF hCq62HKld/sjR7KsTLsfCYRXXxPnxRvOm1DZsA420EwkS8AgfW0vJxDfl47/rf1R QgHE6tQboj6jftGqxGk25fE0xONcuO8KgKUZcMofRaDTxfgCsqs= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:00 2026 by rpki-client