$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: uoaQFbz5a/U88JDVcoaWbqbVpSlt2Gl4weZZsW0mNpY= Subject key identifier: CC:95:D1:E2:9F:00:94:03:B0:4A:0B:E7:1A:55:CE:4A:E6:42:67:EE Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 4380F9B18279569D3DAE355DA6EF5EC8AF9CCBF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0278 Signing time: Fri 17 Apr 2026 14:33:50 +0000 Manifest this update: Fri 17 Apr 2026 14:28:50 +0000 Manifest next update: Mon 20 Apr 2026 14:57:50 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: 2Zi8Xu5OQ5fR/PBeyFlMZ/G39uU0WZUC5UvEttyFjlg=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: iQWBLlqIhDVaQel1mjDud9rhiarI0+EVMzv8EoEyA1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:80:f9:b1:82:79:56:9d:3d:ae:35:5d:a6:ef:5e:c8:af:9c:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Apr 17 14:28:50 2026 GMT Not After : Apr 20 14:57:50 2026 GMT Subject: CN=CC95D1E29F009403B04A0BE71A55CE4AE64267EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:93:04:39:e0:fb:33:1e:cd:6c:19:ef:2a: 1e:20:07:e4:7b:c9:6b:39:6f:12:e4:32:e3:db:35: 5b:fd:0b:23:2b:38:2f:75:25:c5:a2:f2:b1:77:e6: 42:8b:ba:ff:ec:3d:81:df:f7:ed:10:56:2f:57:8d: 59:98:b3:d1:a8:25:5b:37:7a:26:9a:8c:0b:da:99: 52:d6:d1:9b:17:79:24:f3:92:51:c4:ee:2e:df:b1: ab:4b:9d:1a:a2:cf:dd:12:00:1e:c1:cc:5b:c9:39: 31:3a:e4:a2:57:4c:1e:1a:53:12:0c:53:ab:8e:4f: f5:ec:bb:49:7f:5f:85:f7:5a:75:2c:be:62:01:09: 1e:9c:34:e4:fd:82:d8:7a:a3:eb:f6:92:92:69:2c: 7a:96:92:b7:64:c4:30:bd:ad:ed:dc:44:bf:04:c8: 17:6e:a3:77:e7:09:cc:6d:97:36:f0:68:a3:b6:c8: 8c:ce:d9:76:62:ff:d2:56:a0:3e:cc:78:1a:81:7a: 05:c0:46:10:fb:78:8e:fd:6c:e3:60:d5:fc:8c:92: c0:33:33:69:02:80:bd:2c:0e:7a:61:16:f3:f9:a6: 10:53:a6:e1:5c:88:ad:d2:60:09:a0:d7:90:38:e0: 12:54:31:c3:42:78:7e:4d:68:ac:87:63:38:6c:5c: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:95:D1:E2:9F:00:94:03:B0:4A:0B:E7:1A:55:CE:4A:E6:42:67:EE X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:4c:9e:94:72:a0:1a:e8:36:74:11:19:d0:fc:25:36:a1: 0d:ef:d7:ec:f4:27:55:89:6b:6b:7f:13:40:a9:0c:c1:37:9a: 60:ad:d4:d8:10:7e:89:0f:6b:80:11:00:56:2e:5b:d1:d4:56: c0:84:c1:66:eb:0c:53:46:79:bf:95:ab:02:e7:9f:d6:1e:9c: c4:14:67:e2:f9:bb:fc:2e:a3:58:8b:26:b2:c5:fa:f9:c8:5d: 62:10:a4:c7:2b:bc:70:24:bc:8b:33:74:f4:ef:84:a0:06:29: 68:fe:cc:4a:c7:9c:ae:a9:d2:86:a6:8b:f4:02:9a:61:6d:15: fa:f9:9c:c7:66:a9:11:f9:c2:16:3e:c0:c3:e6:38:4c:e0:3b: c1:8f:35:ce:35:60:2c:5e:44:f0:d7:89:ab:2e:3c:87:4e:3e: b2:43:e7:ad:52:cd:24:79:65:97:1b:e0:25:09:e6:14:62:4d: e0:5d:c5:69:64:bc:4e:3b:48:dd:59:1b:4e:a9:54:34:be:41: 7c:2e:f4:fd:f7:f5:44:9d:12:ce:90:ef:e8:9a:8d:ba:30:f0: 3f:ba:5d:4b:e1:b2:b2:31:7e:95:ff:ef:b0:1c:03:3d:73:b2: 8d:66:e7:09:e8:e7:74:26:cd:34:e3:08:29:f3:cc:79:ef:5b: b6:c7:20:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4D5sYJ5Vp09rjVdpu9eyK+cy/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNjA0MTcxNDI4NTBaFw0yNjA0MjAxNDU3NTBaMDMxMTAvBgNV BAMTKENDOTVEMUUyOUYwMDk0MDNCMDRBMEJFNzFBNTVDRTRBRTY0MjY3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBJMEOeD7Mx7NbBnvKh4gB+R7 yWs5bxLkMuPbNVv9CyMrOC91JcWi8rF35kKLuv/sPYHf9+0QVi9XjVmYs9GoJVs3 eiaajAvamVLW0ZsXeSTzklHE7i7fsatLnRqiz90SAB7BzFvJOTE65KJXTB4aUxIM U6uOT/Xsu0l/X4X3WnUsvmIBCR6cNOT9gth6o+v2kpJpLHqWkrdkxDC9re3cRL8E yBduo3fnCcxtlzbwaKO2yIzO2XZi/9JWoD7MeBqBegXARhD7eI79bONg1fyMksAz M2kCgL0sDnphFvP5phBTpuFciK3SYAmg15A44BJUMcNCeH5NaKyHYzhsXC67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJXR4p8AlAOwSgvnGlXOSuZCZ+4wHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3UTJ6UcqAa6DZ0ERnQ/CU2oQ3v1+z0J1WJ a2t/E0CpDME3mmCt1NgQfokPa4ARAFYuW9HUVsCEwWbrDFNGeb+VqwLnn9YenMQU Z+L5u/wuo1iLJrLF+vnIXWIQpMcrvHAkvIszdPTvhKAGKWj+zErHnK6p0oami/QC mmFtFfr5nMdmqRH5whY+wMPmOEzgO8GPNc41YCxeRPDXiasuPIdOPrJD561SzSR5 ZZcb4CUJ5hRiTeBdxWlkvE47SN1ZG06pVDS+QXwu9P339USdEs6Q7+iajbow8D+6 XUvhsrIxfpX/77AcAz1zso1m5wno53QmzTTjCCnzzHnvW7bHIDM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:10 2026 by rpki-client