$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: QoC3H7o3lbmYOBlobe3eC3gLyXomntz2OrGnd3CYrnk= Subject key identifier: E8:A4:9A:17:28:09:4E:B8:3E:44:3A:1C:56:6A:DA:56:6B:AF:42:7B Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 60B594DB4E27D797E872FB9595D80EDD286AD089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 02C2 Signing time: Sun 01 Mar 2026 11:50:04 +0000 Manifest this update: Sun 01 Mar 2026 11:45:04 +0000 Manifest next update: Wed 04 Mar 2026 18:33:04 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: d/0qI5TX85NwH8pqk2yjCzeXklRjanACNaMGDSY6k7Y=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b5:94:db:4e:27:d7:97:e8:72:fb:95:95:d8:0e:dd:28:6a:d0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Mar 1 11:45:04 2026 GMT Not After : Mar 4 18:33:04 2026 GMT Subject: CN=E8A49A1728094EB83E443A1C566ADA566BAF427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:22:3f:8c:4f:95:69:eb:56:7f:fb:e9:f5: 21:0f:e4:76:70:3f:ab:e9:00:44:d5:31:53:80:07: 61:08:93:ec:f8:85:94:aa:0c:a2:e9:08:bd:12:17: a9:be:d7:5c:ba:6e:56:97:b9:9a:f1:79:33:33:0c: 87:43:0a:af:bf:d8:81:e4:dd:4a:32:01:bd:f8:c0: 5a:29:91:62:b3:af:81:af:50:22:7d:a7:32:b7:3c: 7e:35:f8:e0:f6:dd:b4:9d:72:31:35:76:0c:74:a1: c8:38:c7:53:c2:28:c3:71:5c:21:5b:b5:04:83:fb: 01:25:cf:4d:20:57:46:1e:3a:6c:b4:59:04:63:64: cb:c2:7b:56:32:ec:32:98:31:de:58:47:fa:eb:e0: 9a:7f:4c:7a:70:e8:44:2d:4c:7a:54:c9:6c:3e:ca: 1e:13:ef:98:85:2e:87:c6:d1:69:28:f8:1b:56:03: 87:0d:03:0d:d7:78:70:67:90:df:6f:71:77:ae:d2: f2:9c:be:b5:1d:55:4a:1a:6b:7f:a6:c4:87:bc:1c: b0:ef:71:59:54:23:59:ff:b3:6d:28:f4:67:3d:22: af:8e:b4:f7:4e:43:9a:69:52:01:f4:40:31:3a:2c: 39:99:38:50:2b:c4:7f:80:b8:b6:ca:34:94:4c:dd: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A4:9A:17:28:09:4E:B8:3E:44:3A:1C:56:6A:DA:56:6B:AF:42:7B X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:3d:a4:e9:10:e0:3a:38:ab:78:cd:75:b9:62:e1:c9:e2: fa:3a:25:65:20:db:03:88:92:44:e7:1f:08:13:92:b0:01:b5: c9:67:f9:7e:7d:d0:26:87:df:e4:ed:6a:94:c2:66:b9:62:8a: a6:28:89:b5:5b:cc:f7:fb:24:5d:ad:d8:9d:b0:3f:37:7b:06: 63:45:ca:c0:79:c3:d6:f3:16:7a:5b:11:ed:6e:72:f5:b3:fb: 1f:7d:fb:c0:b1:d9:c2:f5:07:9f:3d:e9:d9:11:2c:cd:33:07: 51:9e:f7:6d:a9:03:9c:b3:63:d0:d8:9a:ba:c4:e0:df:4a:2d: e5:f5:11:80:bd:ad:12:f2:6f:6e:83:79:e2:e7:b7:32:56:16: 41:1e:6d:af:92:13:e9:1e:d4:35:e5:e1:ec:4a:f6:73:72:0c: 5c:d9:89:17:da:c3:9d:55:1e:72:42:fc:f1:2a:b9:fa:69:24: 02:fa:54:b0:52:17:f1:0a:4c:aa:6d:fe:f9:cd:f1:fd:fb:14: 48:df:62:40:14:db:55:9e:f4:d0:28:89:03:5b:9b:60:e5:61: 95:69:a3:3d:7d:de:e4:51:65:0a:09:7e:aa:1f:9c:7e:c4:8e: 2a:5a:ce:f3:c1:de:f8:6a:36:ac:a5:6d:56:2c:4f:0e:bb:2a: 6c:54:d9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLWU204n15focvuVldgO3Shq0IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNjAzMDExMTQ1MDRaFw0yNjAzMDQxODMzMDRaMDMxMTAvBgNV BAMTKEU4QTQ5QTE3MjgwOTRFQjgzRTQ0M0ExQzU2NkFEQTU2NkJBRjQyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtiI/jE+VaetWf/vp9SEP5HZw P6vpAETVMVOAB2EIk+z4hZSqDKLpCL0SF6m+11y6blaXuZrxeTMzDIdDCq+/2IHk 3UoyAb34wFopkWKzr4GvUCJ9pzK3PH41+OD23bSdcjE1dgx0ocg4x1PCKMNxXCFb tQSD+wElz00gV0YeOmy0WQRjZMvCe1Yy7DKYMd5YR/rr4Jp/THpw6EQtTHpUyWw+ yh4T75iFLofG0Wko+BtWA4cNAw3XeHBnkN9vcXeu0vKcvrUdVUoaa3+mxIe8HLDv cVlUI1n/s20o9Gc9Iq+OtPdOQ5ppUgH0QDE6LDmZOFArxH+AuLbKNJRM3e1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KSaFygJTrg+RDocVmraVmuvQnswHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlxPaTpEOA6OKt4zXW5YuHJ4vo6JWUg2wOI kkTnHwgTkrABtcln+X590CaH3+TtapTCZrliiqYoibVbzPf7JF2t2J2wPzd7BmNF ysB5w9bzFnpbEe1ucvWz+x99+8Cx2cL1B5896dkRLM0zB1Ge922pA5yzY9DYmrrE 4N9KLeX1EYC9rRLyb26DeeLntzJWFkEeba+SE+ke1DXl4exK9nNyDFzZiRfaw51V HnJC/PEqufppJAL6VLBSF/EKTKpt/vnN8f37FEjfYkAU21We9NAoiQNbm2DlYZVp oz193uRRZQoJfqofnH7EjipazvPB3vhqNqylbVYsTw67KmxU2WY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:22:41 2026 by rpki-client