$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: xIYO9BBdY1AJtgXiu/b1mSip95+Elu51PNzALLGybqo= Subject key identifier: DC:57:98:EC:D6:CB:04:4C:2B:BA:08:2D:BC:FD:18:A6:C1:85:1A:F3 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 487E621F65265FCF2C86A158DF923765781E1912 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0567 Signing time: Fri 17 Apr 2026 22:01:18 +0000 Manifest this update: Fri 17 Apr 2026 21:56:18 +0000 Manifest next update: Tue 21 Apr 2026 06:03:18 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: 6VTg8gMTyCptsUm/AMrBKo+wSkyAJT/bzm9b8vT2pcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7e:62:1f:65:26:5f:cf:2c:86:a1:58:df:92:37:65:78:1e:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Apr 17 21:56:18 2026 GMT Not After : Apr 21 06:03:18 2026 GMT Subject: CN=DC5798ECD6CB044C2BBA082DBCFD18A6C1851AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:53:24:3e:ac:02:9f:af:86:8c:84:85:0f: e4:b9:b6:61:56:f4:01:64:6e:36:3b:0f:36:0f:05: f4:c6:a3:9e:8f:7f:e5:7b:87:51:e8:f2:a2:d1:d7: 6c:e4:c2:7c:6c:3c:86:a4:57:0b:16:d6:a6:18:85: b7:5c:81:c9:80:dc:b8:a5:bc:53:27:ed:d3:15:04: 85:a8:30:8e:34:69:8e:90:ef:70:a5:1c:26:09:06: 94:cf:0d:ea:0e:65:9b:09:1d:fa:f4:23:5d:52:ce: 2d:df:17:da:7d:a5:55:11:e5:2d:1d:09:d2:a0:64: 92:72:80:57:5c:4c:1f:f0:27:22:1e:b6:61:9f:83: 00:93:aa:38:a9:6a:86:06:dd:c4:26:aa:d6:98:10: c6:2a:da:f7:f3:73:3a:28:ba:73:d6:28:33:54:f9: 72:46:60:dd:2d:7b:70:76:3d:38:47:66:68:88:cc: 05:42:8d:66:cf:27:0b:00:7d:f9:09:9d:40:19:2e: c8:7d:a4:39:47:22:a9:7f:d6:f6:61:a7:98:0b:8f: d8:76:cc:c6:c6:88:07:57:ef:7b:af:11:3f:c7:bb: 4e:9f:d1:9c:c2:4d:16:ad:16:b2:94:56:7a:88:25: 97:57:36:b5:e1:29:16:34:8e:f5:f4:2c:11:7f:95: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:57:98:EC:D6:CB:04:4C:2B:BA:08:2D:BC:FD:18:A6:C1:85:1A:F3 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9d:19:f1:f6:a2:37:9a:25:25:52:99:c5:2a:8b:d7:7c:e3: 05:f2:42:89:dc:52:f2:85:de:65:f3:02:e1:a6:55:10:52:42: 5e:87:ce:fe:98:6c:75:70:66:30:ff:0f:e6:81:cd:fa:e5:8d: 6e:6c:c7:e2:ca:0d:28:51:71:8c:ed:31:a4:ed:83:b6:b4:f5: 55:e1:a8:a5:08:fe:a5:21:80:ee:3c:ec:b9:cd:74:e5:5f:2b: b5:a5:b3:6e:10:63:1d:ed:1a:27:b3:b1:58:e6:54:03:59:bc: d0:41:06:b3:ee:e4:6b:43:d0:ee:11:11:cc:10:f7:17:07:93: c6:ac:34:94:21:32:64:a2:44:80:8a:88:f4:f2:0a:b9:69:bf: 6b:ae:d0:47:44:50:32:9a:0b:ee:b7:69:f7:37:c8:85:99:da: 11:65:d1:12:d6:dd:44:66:f5:03:bc:d3:fe:87:e2:ee:5e:81: 75:93:be:bd:21:42:36:d2:7d:22:41:9f:52:a6:59:ac:49:28: 39:22:d5:76:d6:d0:ac:3b:84:c6:1c:57:3f:dd:84:8f:96:6d: 8d:27:ec:a4:a8:f8:cb:b2:14:13:66:da:73:20:ff:79:cc:20: 81:89:67:76:31:b1:ae:1b:f3:3e:36:61:8d:a4:74:be:af:02: 4d:22:42:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSH5iH2UmX88shqFY35I3ZXgeGRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNjA0MTcyMTU2MThaFw0yNjA0MjEwNjAzMThaMDMxMTAvBgNV BAMTKERDNTc5OEVDRDZDQjA0NEMyQkJBMDgyREJDRkQxOEE2QzE4NTFBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBH1MkPqwCn6+GjISFD+S5tmFW 9AFkbjY7DzYPBfTGo56Pf+V7h1Ho8qLR12zkwnxsPIakVwsW1qYYhbdcgcmA3Lil vFMn7dMVBIWoMI40aY6Q73ClHCYJBpTPDeoOZZsJHfr0I11Szi3fF9p9pVUR5S0d CdKgZJJygFdcTB/wJyIetmGfgwCTqjipaoYG3cQmqtaYEMYq2vfzczoounPWKDNU +XJGYN0te3B2PThHZmiIzAVCjWbPJwsAffkJnUAZLsh9pDlHIql/1vZhp5gLj9h2 zMbGiAdX73uvET/Hu06f0ZzCTRatFrKUVnqIJZdXNrXhKRY0jvX0LBF/lUi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FeY7NbLBEwruggtvP0YpsGFGvMwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECdGfH2ojeaJSVSmcUqi9d84wXyQoncUvKF 3mXzAuGmVRBSQl6Hzv6YbHVwZjD/D+aBzfrljW5sx+LKDShRcYztMaTtg7a09VXh qKUI/qUhgO487LnNdOVfK7Wls24QYx3tGiezsVjmVANZvNBBBrPu5GtD0O4REcwQ 9xcHk8asNJQhMmSiRICKiPTyCrlpv2uu0EdEUDKaC+63afc3yIWZ2hFl0RLW3URm 9QO80/6H4u5egXWTvr0hQjbSfSJBn1KmWaxJKDki1XbW0Kw7hMYcVz/dhI+WbY0n 7KSo+MuyFBNm2nMg/3nMIIGJZ3Yxsa4b8z42YY2kdL6vAk0iQl8= -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:25 2026 by rpki-client