$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: QQN0LOxzELWG8XmNzHM15J67o6o8+C2xCploM5ajEK4= Subject key identifier: A4:56:7F:F2:B3:44:35:8B:E1:FE:F7:D4:3E:6E:39:BF:92:B4:0A:90 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 1BF0E9EAAF8630594E46C5BAA778D25677A5E98A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0361 Signing time: Sat 28 Feb 2026 04:41:49 +0000 Manifest this update: Sat 28 Feb 2026 04:36:49 +0000 Manifest next update: Tue 03 Mar 2026 12:59:49 +0000 Files and hashes: 1: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 0RstqkudyqWzsOOTEY7NpHEDhYVtBxJbQN2+3RnVQU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f0:e9:ea:af:86:30:59:4e:46:c5:ba:a7:78:d2:56:77:a5:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Feb 28 04:36:49 2026 GMT Not After : Mar 3 12:59:49 2026 GMT Subject: CN=A4567FF2B344358BE1FEF7D43E6E39BF92B40A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:ba:ea:57:9f:47:1b:e5:15:34:c5:56:f6: 60:57:21:3b:a8:18:0e:14:bb:c0:96:f4:6e:21:e9: c6:84:57:6b:7a:6a:f7:9f:75:5c:86:d7:e2:d2:5a: ba:49:21:89:fa:0b:90:f9:6f:36:52:33:12:ed:42: c7:3e:61:e9:21:12:82:83:9a:87:64:e0:eb:2c:b4: 7d:c4:d8:05:33:3b:ff:0d:f2:cb:7f:da:8b:6b:50: f8:9f:41:33:4c:b2:5f:0d:a9:7e:5d:24:61:3a:e4: 4e:dc:92:42:eb:5d:d8:b7:30:af:73:5e:c1:cc:d5: cc:54:52:f0:c7:38:b5:30:67:95:23:7a:02:0c:62: aa:8a:65:a9:3a:17:d6:bb:99:ed:bd:55:e4:25:68: ca:73:08:38:8b:84:66:7c:c9:72:43:cc:bd:fa:01: 2f:49:78:43:91:e4:17:eb:a8:80:00:ba:cf:4d:52: b2:0a:95:9e:17:92:75:cf:c0:06:5e:1c:b5:0a:09: 8e:b6:e3:1b:18:46:ba:d7:32:3b:0a:c2:c9:e5:c8: 7a:7e:ed:a0:f9:df:cc:42:56:c1:04:9f:67:0f:b9: 6f:8f:94:a2:16:44:99:70:30:6c:b5:b6:7c:9a:e7: c9:eb:de:c9:92:dd:f4:61:8d:c8:d4:78:85:c7:8d: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:7F:F2:B3:44:35:8B:E1:FE:F7:D4:3E:6E:39:BF:92:B4:0A:90 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:06:63:c1:2a:de:f1:36:4d:54:6e:53:c5:61:9c:31:9b:27: 05:6c:18:62:50:23:d2:79:e8:a4:82:ef:d5:2e:25:6b:98:2c: 7e:fa:03:d5:cc:6f:a0:4b:06:c0:80:e1:6d:25:e9:c0:14:bc: 9b:ff:72:07:db:ee:cf:63:ef:17:1e:43:d1:5d:e5:70:3d:4d: 2f:46:e7:71:32:49:fb:1b:18:06:1c:da:84:cf:25:9a:72:4c: ca:a6:58:ef:41:4f:65:b0:dc:f7:c4:89:c4:2c:ef:58:d5:c1: 7e:bc:db:5e:2e:af:04:95:e8:03:27:a9:54:3f:ba:21:67:2a: 00:ed:50:00:5c:55:1b:97:08:e1:d7:bc:3b:76:cd:82:49:bb: c7:e8:dc:bc:e7:0e:89:33:83:e3:83:d5:47:be:1c:23:29:a6: 5a:63:58:03:31:59:97:0d:4d:a9:ae:c6:50:f9:e7:07:b1:ca: 98:90:a4:d9:d8:24:9d:82:e8:ed:5f:28:38:cb:ff:00:3c:2a: dd:c3:35:75:15:76:41:ea:b5:e5:d3:b4:e5:d8:9e:a4:50:58: 9c:0c:5b:f3:c7:83:da:94:cc:d3:90:d1:37:03:3b:34:49:ee: a2:f8:18:5d:ba:af:51:6b:24:21:74:8c:da:38:ff:be:21:d9: de:65:1f:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/Dp6q+GMFlORsW6p3jSVnel6YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNjAyMjgwNDM2NDlaFw0yNjAzMDMxMjU5NDlaMDMxMTAvBgNV BAMTKEE0NTY3RkYyQjM0NDM1OEJFMUZFRjdENDNFNkUzOUJGOTJCNDBBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKLrqV59HG+UVNMVW9mBXITuo GA4Uu8CW9G4h6caEV2t6avefdVyG1+LSWrpJIYn6C5D5bzZSMxLtQsc+YekhEoKD modk4OsstH3E2AUzO/8N8st/2otrUPifQTNMsl8NqX5dJGE65E7ckkLrXdi3MK9z XsHM1cxUUvDHOLUwZ5UjegIMYqqKZak6F9a7me29VeQlaMpzCDiLhGZ8yXJDzL36 AS9JeEOR5BfrqIAAus9NUrIKlZ4XknXPwAZeHLUKCY624xsYRrrXMjsKwsnlyHp+ 7aD538xCVsEEn2cPuW+PlKIWRJlwMGy1tnya58nr3smS3fRhjcjUeIXHjRsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFZ/8rNENYvh/vfUPm45v5K0CpAwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcGY8Eq3vE2TVRuU8VhnDGbJwVsGGJQI9J5 6KSC79UuJWuYLH76A9XMb6BLBsCA4W0l6cAUvJv/cgfb7s9j7xceQ9Fd5XA9TS9G 53EySfsbGAYc2oTPJZpyTMqmWO9BT2Ww3PfEicQs71jVwX68214urwSV6AMnqVQ/ uiFnKgDtUABcVRuXCOHXvDt2zYJJu8fo3LznDokzg+OD1Ue+HCMpplpjWAMxWZcN TamuxlD55wexypiQpNnYJJ2C6O1fKDjL/wA8Kt3DNXUVdkHqteXTtOXYnqRQWJwM W/PHg9qUzNOQ0TcDOzRJ7qL4GF26r1FrJCF0jNo4/74h2d5lH9A= -----END CERTIFICATE-----Generated at Mon Mar 2 07:45:00 2026 by rpki-client