$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: 8pbDS2YZbNpsFOjNfwUWKbJzCHsmRszCTKoSImYoyGc= Subject key identifier: 39:CA:6D:9D:86:1F:E7:5B:29:62:E1:32:DA:A9:86:F2:E8:25:9C:C9 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 524B80DAFB144B584E9EA547BE97D2D561CBA166 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02DD Signing time: Mon 02 Mar 2026 02:41:16 +0000 Manifest this update: Mon 02 Mar 2026 02:36:16 +0000 Manifest next update: Thu 05 Mar 2026 11:19:16 +0000 Files and hashes: 1: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) 2: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 3: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: gMO1XBIdnswDg0eGnhNL11FJ+CuNllUGvCQ6N5UABII=) 4: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 5: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 6: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 7: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:80:da:fb:14:4b:58:4e:9e:a5:47:be:97:d2:d5:61:cb:a1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Mar 2 02:36:16 2026 GMT Not After : Mar 5 11:19:16 2026 GMT Subject: CN=39CA6D9D861FE75B2962E132DAA986F2E8259CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:0d:51:44:2f:e6:9e:3a:80:da:8c:08:6a: d9:da:9f:d0:44:c1:7f:af:4a:e4:8e:ee:d2:03:db: 5d:69:5c:3c:05:9c:9e:53:3f:05:d2:67:3c:d9:91: 74:8c:55:37:92:07:14:f9:eb:4a:43:a6:93:20:9c: 81:5d:49:a4:a3:b2:f1:5b:41:c6:ed:de:6e:7a:2f: f6:c8:61:e9:ce:ce:11:a1:70:f0:f6:99:3d:0f:4b: 9a:5b:42:bf:36:cd:2a:25:0a:88:66:0b:4c:fe:eb: ca:40:96:13:01:d0:0c:e7:df:33:e4:3f:b7:67:11: d8:1c:3a:c0:4f:d3:67:8e:a3:c0:fb:c1:0c:64:32: 0d:ee:47:8e:84:dc:9b:ae:17:7f:6f:31:22:3a:bc: 81:44:2d:a0:fb:0d:70:c7:e5:e5:f3:72:5e:97:22: f3:8e:25:05:e6:64:86:4b:dc:a7:d5:64:ac:34:6e: 7c:ef:5b:dd:84:17:7e:c1:eb:b6:1c:75:66:35:db: f7:70:80:23:2e:ec:03:ea:19:7d:71:d4:4a:87:b8: 5d:1b:38:49:32:05:be:ec:a9:eb:d8:eb:2f:da:2e: e1:9a:7e:7a:e8:c4:f8:e7:2e:75:5e:07:60:2b:62: 65:14:27:05:9d:c8:35:a3:f2:08:48:c9:7d:0e:a7: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:6D:9D:86:1F:E7:5B:29:62:E1:32:DA:A9:86:F2:E8:25:9C:C9 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:89:0b:78:17:75:4b:05:c3:cf:15:14:c8:c4:7c:e9:2c:00: 74:dc:70:3d:8e:ae:76:29:8f:ac:10:38:86:c7:9e:5b:5d:a7: cd:de:28:21:30:dc:b1:d1:1d:6a:1d:1e:91:0c:c6:2b:cf:fc: 9d:53:62:d6:37:9e:a5:3f:62:67:5e:0b:22:94:fe:b1:eb:53: 00:7f:fe:0c:dc:25:83:73:94:8c:37:a7:0b:25:83:c6:ef:75: ea:34:2f:af:fc:e3:92:3c:ba:ce:d4:7a:b7:ac:23:99:87:45: 90:c5:6d:3d:aa:64:74:d2:7c:04:07:36:25:a2:58:36:f7:4d: 82:9b:da:3f:67:a1:74:4d:1c:58:e9:03:fd:a2:dc:e7:dd:00: 00:6b:31:d7:0b:40:47:2d:c2:a1:6e:26:e8:d1:05:69:f6:9d: 4d:29:80:61:7c:31:5f:f1:ca:58:cc:91:79:c8:84:98:3f:08: 12:a0:f3:e2:f2:63:b6:af:68:f3:fb:84:e3:2d:bc:1f:d0:0e: 9f:33:15:38:0f:7c:1f:8e:53:e3:48:18:1d:a4:a8:91:39:79: fe:f2:9b:dd:44:74:63:2f:d1:46:71:2a:e1:54:f3:e4:5b:56: ed:a1:60:a5:82:da:85:07:88:ce:aa:11:62:3f:e1:26:50:9a: 01:88:9e:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkuA2vsUS1hOnqVHvpfS1WHLoWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNjAzMDIwMjM2MTZaFw0yNjAzMDUxMTE5MTZaMDMxMTAvBgNV BAMTKDM5Q0E2RDlEODYxRkU3NUIyOTYyRTEzMkRBQTk4NkYyRTgyNTlDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2w1RRC/mnjqA2owIatnan9BE wX+vSuSO7tID211pXDwFnJ5TPwXSZzzZkXSMVTeSBxT560pDppMgnIFdSaSjsvFb Qcbt3m56L/bIYenOzhGhcPD2mT0PS5pbQr82zSolCohmC0z+68pAlhMB0Azn3zPk P7dnEdgcOsBP02eOo8D7wQxkMg3uR46E3JuuF39vMSI6vIFELaD7DXDH5eXzcl6X IvOOJQXmZIZL3KfVZKw0bnzvW92EF37B67YcdWY12/dwgCMu7APqGX1x1EqHuF0b OEkyBb7sqevY6y/aLuGafnroxPjnLnVeB2ArYmUUJwWdyDWj8ghIyX0Op4JBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOcptnYYf51spYuEy2qmG8uglnMkwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKJC3gXdUsFw88VFMjEfOksAHTccD2OrnYp j6wQOIbHnltdp83eKCEw3LHRHWodHpEMxivP/J1TYtY3nqU/YmdeCyKU/rHrUwB/ /gzcJYNzlIw3pwslg8bvdeo0L6/845I8us7UeresI5mHRZDFbT2qZHTSfAQHNiWi WDb3TYKb2j9noXRNHFjpA/2i3OfdAABrMdcLQEctwqFuJujRBWn2nU0pgGF8MV/x yljMkXnIhJg/CBKg8+LyY7avaPP7hOMtvB/QDp8zFTgPfB+OU+NIGB2kqJE5ef7y m91EdGMv0UZxKuFU8+RbVu2hYKWC2oUHiM6qEWI/4SZQmgGInj8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:21 2026 by rpki-client