$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: jsx+qa1y3dmtY6YJFMgNoWwfKG1CSY5PnKJ/Og/olKc= Subject key identifier: D7:D9:CD:2B:B7:59:FB:30:AB:57:E7:DD:6E:31:85:E5:91:97:88:24 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 7428745A77DF6E9D79DE6AEEA16D2D913C91991C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 0210 Signing time: Sun 01 Mar 2026 15:02:35 +0000 Manifest this update: Sun 01 Mar 2026 14:57:35 +0000 Manifest next update: Thu 05 Mar 2026 01:33:35 +0000 Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) 3: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: M9LBjzpkul5L+mvZ+VfK84FXDf/n7U05LWex0hnEKVA=) 4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:28:74:5a:77:df:6e:9d:79:de:6a:ee:a1:6d:2d:91:3c:91:99:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Mar 1 14:57:35 2026 GMT Not After : Mar 5 01:33:35 2026 GMT Subject: CN=D7D9CD2BB759FB30AB57E7DD6E3185E591978824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:56:eb:6c:6a:39:76:92:6a:5b:41:a6:23: a7:23:a0:c9:26:c5:b2:37:5a:1d:0f:5e:4b:65:12: 7a:dc:49:e5:c7:90:3b:1e:f1:ed:2b:bb:c5:f7:78: bb:e4:e3:10:40:00:1f:8e:c4:5b:4c:2f:b8:d9:dd: 26:60:3f:7c:cc:84:72:96:47:ea:ed:2e:e0:b9:6d: 2b:b1:a7:84:f9:66:ea:09:a2:8c:c1:c6:b1:79:3e: 3c:bf:91:b4:64:46:57:2f:71:5a:0a:6e:2f:11:d5: 69:54:c8:49:f5:29:6a:07:f3:ab:45:5e:f4:69:ac: 02:e6:e0:0a:0f:c3:24:e1:b3:34:92:78:5e:88:86: 21:70:1f:96:2e:06:27:ff:82:9b:43:7d:84:23:9d: 55:2f:7e:66:78:30:a6:ae:51:11:f5:bb:2d:ee:06: 6f:cf:27:ac:af:10:2e:6e:be:cd:68:df:64:a7:c9: 14:c3:2c:72:f0:4c:30:7d:8c:be:70:ad:d4:b7:5d: d7:13:b4:61:42:62:7f:ab:e0:a8:7c:49:24:2c:e0: 1f:76:e5:00:32:1c:61:31:16:63:c9:4e:76:af:3b: 07:9e:93:fc:28:c6:af:e4:47:a2:a9:cf:98:cb:4b: f4:fb:5a:46:2b:b3:10:23:58:3d:10:3a:ab:c8:e5: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D9:CD:2B:B7:59:FB:30:AB:57:E7:DD:6E:31:85:E5:91:97:88:24 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7d:54:33:87:0d:40:ba:51:1b:35:53:07:90:85:ad:1f:a4: 7e:57:71:87:4d:f6:58:d4:87:f4:9b:39:60:58:fb:2e:8e:92: f2:cc:52:64:af:6a:75:ea:67:38:6e:16:58:99:98:cd:5f:0f: a4:fc:15:1d:e9:d7:8e:35:25:df:11:28:1f:37:1a:76:39:f4: 7a:cf:de:46:23:ad:03:87:b0:7d:91:8d:c9:f3:6e:7e:a3:3b: 13:d1:36:4b:73:a6:e1:bc:78:7c:fe:90:d5:63:21:a9:7a:7c: 59:0d:7a:66:d2:a4:ba:76:02:8e:75:b4:64:73:1e:6b:aa:54: 49:c1:76:7a:f9:96:bb:ce:e7:6f:3d:81:75:88:55:f4:b9:7c: a7:25:5f:77:0b:13:7c:4d:78:f5:b0:eb:94:30:04:86:f2:30: 0b:eb:b7:0c:5b:cb:f7:15:c4:22:9d:e6:57:e2:e4:8b:a0:f3: 5d:c4:94:74:15:da:8a:48:9b:0e:5f:29:f6:a8:01:af:71:e0: 07:15:f5:43:2b:ed:7c:43:57:bc:cf:2e:43:2c:fe:86:85:e9: 37:23:6a:7f:61:fd:12:8f:ec:1c:a5:da:e0:e3:bc:60:5b:e6: 12:ad:f6:6f:b6:bd:7d:8d:d8:8e:b3:97:4b:1e:52:fd:a3:4d: a7:c7:87:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCh0Wnffbp153mruoW0tkTyRmRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNjAzMDExNDU3MzVaFw0yNjAzMDUwMTMzMzVaMDMxMTAvBgNV BAMTKEQ3RDlDRDJCQjc1OUZCMzBBQjU3RTdERDZFMzE4NUU1OTE5Nzg4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBlbrbGo5dpJqW0GmI6cjoMkm xbI3Wh0PXktlEnrcSeXHkDse8e0ru8X3eLvk4xBAAB+OxFtML7jZ3SZgP3zMhHKW R+rtLuC5bSuxp4T5ZuoJoozBxrF5Pjy/kbRkRlcvcVoKbi8R1WlUyEn1KWoH86tF XvRprALm4AoPwyThszSSeF6IhiFwH5YuBif/gptDfYQjnVUvfmZ4MKauURH1uy3u Bm/PJ6yvEC5uvs1o32SnyRTDLHLwTDB9jL5wrdS3XdcTtGFCYn+r4Kh8SSQs4B92 5QAyHGExFmPJTnavOweek/woxq/kR6Kpz5jLS/T7WkYrsxAjWD0QOqvI5ZWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19nNK7dZ+zCrV+fdbjGF5ZGXiCQwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR9VDOHDUC6URs1UweQha0fpH5XcYdN9ljU h/SbOWBY+y6OkvLMUmSvanXqZzhuFliZmM1fD6T8FR3p1441Jd8RKB83GnY59HrP 3kYjrQOHsH2Rjcnzbn6jOxPRNktzpuG8eHz+kNVjIal6fFkNembSpLp2Ao51tGRz HmuqVEnBdnr5lrvO5289gXWIVfS5fKclX3cLE3xNePWw65QwBIbyMAvrtwxby/cV xCKd5lfi5Iug813ElHQV2opImw5fKfaoAa9x4AcV9UMr7XxDV7zPLkMs/oaF6Tcj an9h/RKP7Byl2uDjvGBb5hKt9m+2vX2N2I6zl0seUv2jTafHh2s= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:40 2026 by rpki-client