$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: 8luaKIb3kZP2SSTpK5e/9kWQLrhFA9YObI/5DejjkSY= Subject key identifier: 83:CD:BF:C2:FE:F5:BD:3F:04:AB:7C:4E:DE:52:F3:0A:B1:09:45:7B Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 4184E2C120A49875773727435AEDEC4F6AAAFFF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: CA Signing time: Sun 01 Mar 2026 07:01:44 +0000 Manifest this update: Sun 01 Mar 2026 06:56:44 +0000 Manifest next update: Wed 04 Mar 2026 13:00:44 +0000 Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: sHqfqnhUipzZRHaKjvkMKip57pvRS/cmcQBGRFYCGZU=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:84:e2:c1:20:a4:98:75:77:37:27:43:5a:ed:ec:4f:6a:aa:ff:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Mar 1 06:56:44 2026 GMT Not After : Mar 4 13:00:44 2026 GMT Subject: CN=83CDBFC2FEF5BD3F04AB7C4EDE52F30AB109457B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:79:d3:21:64:79:c8:fd:38:b2:2c:4b:2e: f1:46:53:1e:44:81:76:60:81:3f:9d:f9:95:3e:d3: 49:57:74:fc:63:c1:7b:ec:2e:e3:ee:9b:53:71:7e: b3:47:27:63:ef:d9:40:91:01:de:6d:ba:e5:49:89: 78:a6:07:b4:c8:f5:c8:a8:84:41:f4:b9:d1:a9:90: 0c:af:37:55:a5:cc:38:29:e7:e8:3a:e6:c8:77:97: a7:8c:2c:ba:28:c2:d0:32:0d:fc:5a:bd:78:ef:66: eb:18:46:4c:4a:91:f2:fb:c6:d7:a6:99:6b:9e:72: b8:74:4e:6b:f3:89:eb:06:cc:c4:a2:1c:ec:59:45: e4:51:aa:d2:64:60:ce:54:f2:53:43:0b:66:c0:1d: 09:18:8f:3d:9b:3a:71:1b:56:a6:ae:f0:27:4c:95: 83:e0:8d:56:9d:bf:28:6b:5b:fc:9a:86:2e:3d:3d: 05:f9:c2:c3:03:dd:2b:e3:60:39:2e:cf:f8:3f:c7: 31:c8:91:1e:0e:c7:cc:98:9a:7f:41:cd:40:c7:e2: ae:70:2d:40:55:ba:d3:54:d8:2b:2a:5e:5a:0d:89: 42:72:d3:38:92:dd:44:46:0f:cd:7a:c1:a5:35:66: 3f:81:69:87:ff:b6:71:29:b3:15:b7:48:46:ee:74: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CD:BF:C2:FE:F5:BD:3F:04:AB:7C:4E:DE:52:F3:0A:B1:09:45:7B X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5d:57:7d:9f:f6:cb:44:5a:77:88:ef:36:36:10:1f:ec:d2: d8:aa:c7:92:e5:f4:ca:b7:fe:d5:b4:d6:d7:ae:5d:6b:f5:b4: ca:f5:f0:06:cf:07:44:be:62:c7:c0:d7:b9:48:8c:c6:6b:31: ac:34:77:08:b0:7c:79:e5:33:de:9d:15:8e:23:f7:fa:84:d7: 38:e0:42:2c:f6:cd:a0:dd:09:8a:b3:2f:14:d4:65:01:61:14: b6:6b:d1:5b:d3:9b:61:f5:17:dc:8c:12:f1:28:fd:da:c4:e0: 31:52:19:fb:51:00:f5:b3:32:3e:48:d6:82:54:ec:3e:dc:73: f1:19:ae:e6:a8:52:98:a8:47:b5:a1:31:3e:eb:b5:5f:f5:64: 1c:fa:dc:f9:fa:5a:e0:4b:01:66:e6:dd:b0:06:e4:46:35:91: 41:63:e0:0d:36:84:6d:51:83:57:a1:b5:54:b1:23:ce:4d:90: 40:44:07:15:2e:86:ea:f0:95:4f:26:fc:6b:07:03:a3:ff:d0: fd:b4:70:e9:a4:60:04:5d:ae:c6:d8:c1:82:b8:b9:eb:31:37: f7:79:6b:a9:83:b2:c0:79:4f:6e:2e:c6:65:2c:02:74:94:af: 67:70:4c:55:eb:a6:3d:d7:b5:a1:b3:c9:51:bc:b9:f2:30:52: a4:8a:ef:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYTiwSCkmHV3NydDWu3sT2qq//gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNjAzMDEwNjU2NDRaFw0yNjAzMDQxMzAwNDRaMDMxMTAvBgNV BAMTKDgzQ0RCRkMyRkVGNUJEM0YwNEFCN0M0RURFNTJGMzBBQjEwOTQ1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYXnTIWR5yP04sixLLvFGUx5E gXZggT+d+ZU+00lXdPxjwXvsLuPum1NxfrNHJ2Pv2UCRAd5tuuVJiXimB7TI9cio hEH0udGpkAyvN1WlzDgp5+g65sh3l6eMLLoowtAyDfxavXjvZusYRkxKkfL7xtem mWuecrh0TmvziesGzMSiHOxZReRRqtJkYM5U8lNDC2bAHQkYjz2bOnEbVqau8CdM lYPgjVadvyhrW/yahi49PQX5wsMD3SvjYDkuz/g/xzHIkR4Ox8yYmn9BzUDH4q5w LUBVutNU2CsqXloNiUJy0ziS3URGD816waU1Zj+BaYf/tnEpsxW3SEbudPiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg82/wv71vT8Eq3xO3lLzCrEJRXswHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5dV32f9stEWneI7zY2EB/s0tiqx5Ll9Mq3 /tW01teuXWv1tMr18AbPB0S+YsfA17lIjMZrMaw0dwiwfHnlM96dFY4j9/qE1zjg Qiz2zaDdCYqzLxTUZQFhFLZr0VvTm2H1F9yMEvEo/drE4DFSGftRAPWzMj5I1oJU 7D7cc/EZruaoUpioR7WhMT7rtV/1ZBz63Pn6WuBLAWbm3bAG5EY1kUFj4A02hG1R g1ehtVSxI85NkEBEBxUuhurwlU8m/GsHA6P/0P20cOmkYARdrsbYwYK4uesxN/d5 a6mDssB5T24uxmUsAnSUr2dwTFXrpj3XtaGzyVG8ufIwUqSK78I= -----END CERTIFICATE-----Generated at Mon Mar 2 10:37:48 2026 by rpki-client