$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: WUBMKM4YhhcXt4ZjafqKyS+gjpThp8cP2x34dZR6BkU= Subject key identifier: 24:2C:37:81:2A:3C:39:26:0F:2A:B1:CA:B9:B6:A3:83:8D:57:6A:32 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 48B1EC5E7BE7B077F4EC5A2255C9AD84FD3B0061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0554 Signing time: Sun 01 Mar 2026 01:31:17 +0000 Manifest this update: Sun 01 Mar 2026 01:26:17 +0000 Manifest next update: Wed 04 Mar 2026 02:50:17 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: BNnKvvCVYuhYuPiWLtu0g7CENyoqMhejtTMBFTTfKsk=) 2: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: T7pT3m50bD1TtJQnSE7uRmUGoMQoMkMp3Yiyl2FWmEI=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 4: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: 5+Dgl1CJnt10y5JHSgysaKnAPBPgr4S9yvBZ0DrH0ZY=) 5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b1:ec:5e:7b:e7:b0:77:f4:ec:5a:22:55:c9:ad:84:fd:3b:00:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Mar 1 01:26:17 2026 GMT Not After : Mar 4 02:50:17 2026 GMT Subject: CN=242C37812A3C39260F2AB1CAB9B6A3838D576A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:df:c4:8d:2a:97:3c:cb:7f:06:55:be:ab: 81:0c:8d:eb:85:96:3e:5e:9b:89:c9:3c:6f:80:b7: a7:bd:0c:44:41:9b:a7:21:aa:01:2d:50:6b:62:bb: 70:1b:4d:5e:a7:51:4d:42:94:7d:c9:82:c2:df:12: 76:da:e0:dc:12:32:58:96:1f:c8:8e:35:3f:9d:57: e0:e8:ae:92:9c:30:3a:a2:7a:ee:8b:0c:9b:98:ad: 9a:e8:e6:48:15:59:92:68:bf:26:c0:9e:12:af:07: ea:c7:2a:21:6b:f4:a1:53:43:ee:49:a6:5d:ba:ec: de:84:f5:49:f3:4e:86:10:b1:58:c5:cb:25:f0:a3: 02:ea:72:dc:f8:af:cd:79:9e:96:ac:56:c9:43:03: 23:94:ae:50:03:b5:12:b1:7b:1c:d8:da:5c:89:73: 53:57:90:fc:1a:b1:37:21:aa:14:82:94:1d:d6:20: 9e:ba:92:8f:f2:24:90:4e:7f:4c:bd:ca:59:8f:38: c9:1a:42:cd:e8:a2:3e:94:77:97:d9:b3:9e:ed:34: 3e:3c:a3:38:a1:c8:39:46:5e:63:6c:fa:80:8a:d5: 32:31:76:ba:18:d1:3c:9f:42:72:fb:a9:b4:57:97: cd:76:09:52:cd:99:2c:7e:69:e3:ae:11:21:74:ad: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2C:37:81:2A:3C:39:26:0F:2A:B1:CA:B9:B6:A3:83:8D:57:6A:32 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e6:e9:1c:60:a7:00:84:86:a2:61:78:fe:3c:64:ac:80:6b: 8a:30:8b:9e:c4:d3:f8:9a:3e:f9:f8:bd:ee:ff:08:97:14:52: d0:bc:1c:1a:64:fb:b9:1b:5f:22:cc:42:d2:c3:d4:bf:12:3a: 3b:55:e3:a9:17:fd:e5:cd:d0:83:45:80:bf:00:92:39:3c:8a: e1:87:e8:20:94:10:41:1f:63:96:49:63:2e:25:28:ca:fd:bc: a9:72:09:27:90:f6:85:91:77:61:7d:f3:a5:67:45:71:e1:4b: 84:ab:84:9d:f6:13:68:59:68:9a:81:2f:bc:49:24:cd:da:26: 75:8b:ab:94:64:7c:4c:23:2d:dc:20:37:1f:64:16:a5:6c:87: 3f:8d:b9:fe:7d:da:f8:bf:03:28:64:5f:58:5c:9c:91:23:fd: 40:21:a5:f0:28:87:c3:33:b9:02:28:1e:b1:52:2c:73:1f:57: 09:c1:27:53:a9:ad:5c:5a:94:32:43:08:1f:df:50:5e:2f:b2: 2c:4f:60:5c:53:18:26:26:79:82:3f:23:5e:79:f2:ee:04:8f: e5:77:57:ec:16:3b:66:1f:80:da:7e:81:e6:f9:29:dc:7a:44: bf:8c:9d:9d:b6:85:b8:42:56:e9:e1:ff:af:8c:8a:e7:8c:98: 9a:b1:b0:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLHsXnvnsHf07FoiVcmthP07AGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNjAzMDEwMTI2MTdaFw0yNjAzMDQwMjUwMTdaMDMxMTAvBgNV BAMTKDI0MkMzNzgxMkEzQzM5MjYwRjJBQjFDQUI5QjZBMzgzOEQ1NzZBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs9d/EjSqXPMt/BlW+q4EMjeuF lj5em4nJPG+At6e9DERBm6chqgEtUGtiu3AbTV6nUU1ClH3JgsLfEnba4NwSMliW H8iONT+dV+DorpKcMDqieu6LDJuYrZro5kgVWZJovybAnhKvB+rHKiFr9KFTQ+5J pl267N6E9UnzToYQsVjFyyXwowLqctz4r815npasVslDAyOUrlADtRKxexzY2lyJ c1NXkPwasTchqhSClB3WIJ66ko/yJJBOf0y9ylmPOMkaQs3ooj6Ud5fZs57tND48 ozihyDlGXmNs+oCK1TIxdroY0TyfQnL7qbRXl812CVLNmSx+aeOuESF0rbQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCw3gSo8OSYPKrHKubajg41XajIwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvm6RxgpwCEhqJheP48ZKyAa4owi57E0/ia Pvn4ve7/CJcUUtC8HBpk+7kbXyLMQtLD1L8SOjtV46kX/eXN0INFgL8Akjk8iuGH 6CCUEEEfY5ZJYy4lKMr9vKlyCSeQ9oWRd2F986VnRXHhS4SrhJ32E2hZaJqBL7xJ JM3aJnWLq5RkfEwjLdwgNx9kFqVshz+Nuf592vi/AyhkX1hcnJEj/UAhpfAoh8Mz uQIoHrFSLHMfVwnBJ1OprVxalDJDCB/fUF4vsixPYFxTGCYmeYI/I1558u4Ej+V3 V+wWO2YfgNp+geb5Kdx6RL+MnZ22hbhCVunh/6+MiueMmJqxsGc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:29 2026 by rpki-client