$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: FhhlT0ydauWCbULBMBKaRTRza/ueCu5xN3/h7+Fx5kg= Subject key identifier: A9:FE:80:67:EE:25:CF:2D:23:56:CC:38:5B:05:58:52:94:0C:94:86 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 72DF4C4ABBC975E584B73C14DA5B6B386EB10240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 01FC Signing time: Wed 15 Apr 2026 22:51:23 +0000 Manifest this update: Wed 15 Apr 2026 22:46:23 +0000 Manifest next update: Sun 19 Apr 2026 05:55:23 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: 0mF5QgaxgkPxzsHWAzcWWKway5zZo5zChllEZrH74x4=) 2: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: 5qf4yfdtRFxDwTXbS5Sd8oS1lIYlWxfJ25SqGelkTSo=) 3: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:df:4c:4a:bb:c9:75:e5:84:b7:3c:14:da:5b:6b:38:6e:b1:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Apr 15 22:46:23 2026 GMT Not After : Apr 19 05:55:23 2026 GMT Subject: CN=A9FE8067EE25CF2D2356CC385B055852940C9486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:d0:84:77:38:b1:0e:65:b3:02:c8:9a:57: 14:5f:8e:14:45:c4:d2:42:73:2d:b4:58:55:c4:e4: 5e:de:39:4a:e7:88:09:9c:28:22:ef:ed:0a:a4:df: e4:a7:7c:b6:3e:6a:02:f4:a9:97:f1:de:ab:c6:3a: bb:b1:bb:33:ab:46:02:52:13:72:63:b5:33:2f:cf: 7a:c7:ac:8f:03:b5:53:b7:c4:9f:e9:22:d1:12:a8: 5b:67:b8:d1:c0:f8:e0:e9:07:b9:91:20:15:c4:11: 42:95:8f:bb:ad:44:d3:86:1a:cd:c1:db:1c:f9:46: c1:92:67:7d:ed:2a:aa:82:b8:c9:62:4f:d7:cd:e5: 3f:d2:77:c2:d0:16:9a:41:b4:83:d9:92:59:0e:ec: 65:6a:bf:20:78:e5:27:06:71:e2:a8:2e:1d:ab:b0: bc:28:71:d9:31:bc:12:3b:74:75:fa:28:5a:33:e9: 3f:1f:76:d0:95:28:36:59:d4:99:c0:83:4f:1c:9e: 34:a8:90:ca:ae:39:90:93:2a:a0:d7:2d:3b:f2:0a: d6:14:4a:8a:f1:c3:bb:f5:47:13:e6:24:66:f2:24: 46:05:be:9f:62:3c:ed:01:bd:64:bc:e3:8d:5f:98: a6:65:e4:a2:9c:10:81:ba:b3:e7:59:3b:a5:a0:69: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FE:80:67:EE:25:CF:2D:23:56:CC:38:5B:05:58:52:94:0C:94:86 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:e7:33:ef:5d:40:c7:d8:40:e3:f8:83:1b:92:1e:4c:1e: 99:5b:08:20:3a:45:35:ec:ad:64:3e:64:ac:53:59:ab:81:20: 23:29:f4:20:be:8d:e1:72:b0:ab:88:ac:a6:aa:b5:11:c4:de: b9:33:b1:68:91:59:b4:f6:c4:99:5f:90:6e:e5:f2:04:ec:af: 22:96:43:67:16:b9:16:51:2d:44:f4:f6:c0:64:37:fb:ea:53: c3:5b:e2:04:44:dd:91:f1:3a:c5:80:3e:c7:23:2d:1d:87:2c: e4:28:ec:27:7b:43:2e:7a:7d:c9:98:fe:ae:98:bc:ba:2c:22: cb:06:c9:86:07:24:f1:75:07:3c:6c:8e:42:05:14:27:80:8f: cf:a5:ff:1e:43:07:55:e7:38:4b:fe:41:71:2f:a4:00:c1:89: c1:a0:5a:4b:bd:7d:73:b9:d4:78:5a:af:c4:c6:11:58:8c:fe: 13:17:ff:d8:78:06:0a:ae:67:9a:de:87:6d:df:0f:d3:0f:f2: a3:b7:0e:bf:f1:b1:2e:cf:a7:dd:6f:10:03:6f:78:a6:84:ef: 8b:75:9d:23:de:9a:38:d1:bd:21:f6:32:84:f2:44:53:6d:e2: ff:c5:81:53:78:a8:93:22:92:f3:e5:46:6a:48:e4:f4:eb:a9: 0b:05:0a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUct9MSrvJdeWEtzwU2ltrOG6xAkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNjA0MTUyMjQ2MjNaFw0yNjA0MTkwNTU1MjNaMDMxMTAvBgNV BAMTKEE5RkU4MDY3RUUyNUNGMkQyMzU2Q0MzODVCMDU1ODUyOTQwQzk0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxtCEdzixDmWzAsiaVxRfjhRF xNJCcy20WFXE5F7eOUrniAmcKCLv7Qqk3+SnfLY+agL0qZfx3qvGOruxuzOrRgJS E3JjtTMvz3rHrI8DtVO3xJ/pItESqFtnuNHA+ODpB7mRIBXEEUKVj7utRNOGGs3B 2xz5RsGSZ33tKqqCuMliT9fN5T/Sd8LQFppBtIPZklkO7GVqvyB45ScGceKoLh2r sLwocdkxvBI7dHX6KFoz6T8fdtCVKDZZ1JnAg08cnjSokMquOZCTKqDXLTvyCtYU Sorxw7v1RxPmJGbyJEYFvp9iPO0BvWS8441fmKZl5KKcEIG6s+dZO6WgaaxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqf6AZ+4lzy0jVsw4WwVYUpQMlIYwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6I5zPvXUDH2EDj+IMbkh5MHplbCCA6RTXs rWQ+ZKxTWauBICMp9CC+jeFysKuIrKaqtRHE3rkzsWiRWbT2xJlfkG7l8gTsryKW Q2cWuRZRLUT09sBkN/vqU8Nb4gRE3ZHxOsWAPscjLR2HLOQo7Cd7Qy56fcmY/q6Y vLosIssGyYYHJPF1BzxsjkIFFCeAj8+l/x5DB1XnOEv+QXEvpADBicGgWku9fXO5 1Hhar8TGEViM/hMX/9h4BgquZ5reh23fD9MP8qO3Dr/xsS7Pp91vEANveKaE74t1 nSPemjjRvSH2MoTyRFNt4v/FgVN4qJMikvPlRmpI5PTrqQsFCus= -----END CERTIFICATE-----Generated at Sat Apr 18 00:38:57 2026 by rpki-client