$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: peyxclfyyPS9lAH66rjXMlp2q4cYe27dDm93dpf/Gm8= Subject key identifier: C7:7C:54:5F:43:51:11:C1:CE:80:84:73:E6:C2:E2:E0:C8:21:63:91 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 54A4FEEB168859CC3B559220974733636228348F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 0226 Signing time: Fri 17 Apr 2026 08:41:30 +0000 Manifest this update: Fri 17 Apr 2026 08:36:30 +0000 Manifest next update: Mon 20 Apr 2026 09:47:30 +0000 Files and hashes: 1: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: zq27vFQ11VA60FLCWcUpxpRuWbJYUzm/mkCOpUo/+lM=) 2: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=) 3: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a4:fe:eb:16:88:59:cc:3b:55:92:20:97:47:33:63:62:28:34:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Apr 17 08:36:30 2026 GMT Not After : Apr 20 09:47:30 2026 GMT Subject: CN=C77C545F435111C1CE808473E6C2E2E0C8216391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:0f:91:23:04:a6:f1:31:6f:cc:ea:99:02: 71:5e:77:65:3d:64:78:94:da:a5:2e:ce:29:82:e6: c2:1a:a8:0a:f2:ef:30:ef:82:20:1c:3c:9e:32:93: e5:9d:ec:3e:1d:6f:dc:9b:c0:56:a3:af:67:8c:44: 31:cb:e1:fb:f2:63:c0:bb:45:d4:f6:46:a9:d3:12: cd:cf:3c:7b:ce:f2:b2:9a:dd:7c:bb:fe:97:40:40: 65:88:a6:62:39:e1:af:8c:70:f8:21:00:3d:11:ef: 77:9e:c5:d1:ed:db:b2:b6:22:3a:d2:69:d6:ec:2b: 97:e2:dd:b6:74:bd:bd:be:61:b3:c9:a9:77:10:17: 10:ec:3a:a1:a2:ae:b5:b4:4a:14:77:62:ef:15:7a: 2b:34:97:77:ec:0d:28:86:9c:d0:3a:21:2e:b8:56: 24:22:e0:7e:a6:57:da:a3:0f:48:44:cc:09:77:3f: 22:6c:22:fe:ec:fc:df:da:2f:55:3f:a9:80:d1:9e: 01:d5:2f:98:91:44:6f:21:f4:97:b5:6f:67:59:05: aa:c2:f7:40:6c:27:b6:14:38:a5:b9:57:57:6a:68: ab:3b:72:b9:90:ce:f3:e9:54:a2:d7:3b:36:65:27: 52:87:df:92:c9:58:fd:7c:74:7d:82:41:c0:12:9e: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7C:54:5F:43:51:11:C1:CE:80:84:73:E6:C2:E2:E0:C8:21:63:91 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ae:ee:d5:75:32:1d:eb:98:89:9d:43:9e:7a:fb:75:ec:a1: 21:89:f3:86:d7:61:53:5b:3c:1f:5b:5c:6c:83:75:c6:94:9e: 08:49:8d:6a:69:f1:fe:ed:74:da:52:30:ae:00:6b:5d:81:3c: 92:cf:d9:c5:a5:6c:5b:88:4d:3a:e9:61:b5:c9:3f:4e:70:de: 14:ef:ad:6e:67:05:46:1e:34:ee:a7:ae:f3:00:ec:4d:e4:0b: 73:13:bd:e2:87:2b:8e:71:3a:c9:9f:bd:8b:78:09:bd:76:ee: a8:b5:52:df:19:39:7b:fe:bd:73:46:c0:c5:09:ce:2b:70:e4: 20:48:3e:0a:f0:11:b2:50:8f:70:ff:9e:ee:db:2a:09:57:76: d3:14:c6:c3:93:ea:ac:a4:c8:4e:bc:db:5c:28:f4:f8:1f:77: dc:0a:57:2a:e9:76:5c:bd:82:38:e6:1b:08:93:95:7f:65:48: cf:2f:6a:fa:5c:eb:4c:6b:ae:c4:e6:13:7b:15:f1:c6:fa:2d: 94:aa:c3:27:32:26:a6:bb:f7:43:06:81:35:da:a5:e8:b9:92: 69:bd:ee:f9:cd:d4:9f:67:13:42:6d:69:2e:e7:13:a6:24:ad: 28:c1:7d:ad:6c:f0:08:cf:b2:4c:10:af:25:91:b7:fe:c3:05: 6e:97:15:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKT+6xaIWcw7VZIgl0czY2IoNI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNjA0MTcwODM2MzBaFw0yNjA0MjAwOTQ3MzBaMDMxMTAvBgNV BAMTKEM3N0M1NDVGNDM1MTExQzFDRTgwODQ3M0U2QzJFMkUwQzgyMTYzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsw+RIwSm8TFvzOqZAnFed2U9 ZHiU2qUuzimC5sIaqAry7zDvgiAcPJ4yk+Wd7D4db9ybwFajr2eMRDHL4fvyY8C7 RdT2RqnTEs3PPHvO8rKa3Xy7/pdAQGWIpmI54a+McPghAD0R73eexdHt27K2IjrS adbsK5fi3bZ0vb2+YbPJqXcQFxDsOqGirrW0ShR3Yu8Veis0l3fsDSiGnNA6IS64 ViQi4H6mV9qjD0hEzAl3PyJsIv7s/N/aL1U/qYDRngHVL5iRRG8h9Je1b2dZBarC 90BsJ7YUOKW5V1dqaKs7crmQzvPpVKLXOzZlJ1KH35LJWP18dH2CQcASnqEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3xUX0NREcHOgIRz5sLi4MghY5EwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALau7tV1Mh3rmImdQ556+3XsoSGJ84bXYVNb PB9bXGyDdcaUnghJjWpp8f7tdNpSMK4Aa12BPJLP2cWlbFuITTrpYbXJP05w3hTv rW5nBUYeNO6nrvMA7E3kC3MTveKHK45xOsmfvYt4Cb127qi1Ut8ZOXv+vXNGwMUJ zitw5CBIPgrwEbJQj3D/nu7bKglXdtMUxsOT6qykyE6821wo9Pgfd9wKVyrpdly9 gjjmGwiTlX9lSM8vavpc60xrrsTmE3sV8cb6LZSqwycyJqa790MGgTXapei5kmm9 7vnN1J9nE0JtaS7nE6YkrSjBfa1s8AjPskwQryWRt/7DBW6XFQ4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:47 2026 by rpki-client