$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: dcNmhyJX31r6+YRGved4pYpqfD1c2RXk1z5Y9qfpBdc= Subject key identifier: 6C:F9:99:EB:2D:C8:DA:CE:B3:31:FD:85:74:56:D1:F0:B2:BE:2E:22 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 7277A7BF632DC21FED47DDE680CD00C97DEB0164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 0214 Signing time: Fri 17 Apr 2026 05:41:40 +0000 Manifest this update: Fri 17 Apr 2026 05:36:40 +0000 Manifest next update: Mon 20 Apr 2026 06:45:40 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: Hg8oWG164Y0Dz0OH2cwj6JjK/OmfQmVg/cUvcWXZfYs=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: abrBJodRCx5xNvn2142HhlgOkzWj2GA0de3Mgx2vU6c=) 3: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: DBYyQ0uiIiiCA5r7e03E2Pe47GANbSPd4Jr7kUqGr8o=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Nka7D2jqXbj79FFV3Yc8UZRbj0fZb/aLLQS8vVOKGSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:77:a7:bf:63:2d:c2:1f:ed:47:dd:e6:80:cd:00:c9:7d:eb:01:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Apr 17 05:36:40 2026 GMT Not After : Apr 20 06:45:40 2026 GMT Subject: CN=6CF999EB2DC8DACEB331FD857456D1F0B2BE2E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:d9:e7:5a:26:a2:dc:8d:ef:af:89:5b:6d: 1f:31:c3:d1:68:1e:2c:6b:27:03:f1:bc:11:99:2c: 6f:a3:71:10:fc:17:2e:46:c4:a3:c3:84:6e:9b:e5: 11:3c:5e:d1:a4:7c:82:55:b8:99:9c:04:f8:4b:90: a3:3f:71:e5:d8:71:ea:fd:55:a2:76:c7:f7:60:4f: d0:2f:d8:f5:15:e8:11:27:12:f7:1e:fe:55:eb:46: df:1f:b1:95:6a:65:c4:b8:d5:7a:51:a5:d8:44:80: 0d:55:ad:25:21:1a:d1:f2:df:6a:e3:de:e4:ee:82: 5d:bf:f9:10:91:d6:94:c6:ab:08:e0:ef:84:9f:06: 7e:db:bc:30:48:34:e7:df:fd:28:1f:91:0c:ff:c2: 6f:c5:42:b9:ba:80:4e:3c:58:18:8c:a4:64:1d:9e: a1:11:04:31:77:59:e3:59:07:97:ba:39:c1:04:20: ed:eb:0c:fb:2b:1d:82:12:45:d1:49:76:fc:93:ff: d0:0c:52:8f:e5:0a:50:32:08:2e:71:f8:71:1d:a0: 09:be:8a:de:b9:1e:01:21:70:f2:8b:00:da:b9:4e: f8:0d:af:c0:44:93:ee:3a:c6:ea:0a:0f:dc:86:48: ec:a5:30:ae:ee:c1:f6:69:6d:08:3c:3e:ff:50:60: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:99:EB:2D:C8:DA:CE:B3:31:FD:85:74:56:D1:F0:B2:BE:2E:22 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:40:0b:50:51:77:e3:8a:a7:be:af:52:04:f2:74:d9:cb:39: f9:9a:55:37:f4:40:93:bb:f9:05:95:3a:92:74:d9:45:f4:87: 33:2f:46:ab:6f:4e:51:4c:c9:06:76:b3:5e:33:3b:8e:15:c8: 97:5a:4f:e3:ec:73:ee:c6:92:22:88:7d:ac:59:bc:d3:64:84: ec:9e:1b:25:73:85:c9:f0:ea:f4:37:d0:cd:db:ac:51:a0:d4: eb:d5:76:4e:d0:42:7c:e6:ff:6c:bb:00:ac:82:f1:dc:85:7f: 70:bd:de:35:90:9c:dc:a2:41:f0:6c:55:04:e6:7d:d1:9f:d8: 4d:04:b6:07:d4:1b:75:e3:90:9e:73:30:86:b4:0b:55:54:6d: 13:12:5b:7e:e4:ce:56:25:80:57:5a:ad:75:e6:31:56:bd:b8: ec:01:19:ee:1d:3c:36:30:9b:9b:51:42:57:30:40:6a:8b:cd: 5f:be:ba:29:34:9d:12:62:e0:c7:44:34:c0:da:35:a5:a2:f7: 36:b4:12:05:4d:06:f1:6d:e0:19:6c:e7:67:f3:46:4b:d4:c6: 66:e7:e6:73:a0:5f:5b:28:97:cc:44:ed:58:52:9b:17:e2:3f: 78:73:92:4f:bd:ef:d8:ba:96:2f:b7:f7:cb:02:e7:a7:a3:c9: 08:bf:08:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnenv2Mtwh/tR93mgM0AyX3rAWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjA0MTcwNTM2NDBaFw0yNjA0MjAwNjQ1NDBaMDMxMTAvBgNV BAMTKDZDRjk5OUVCMkRDOERBQ0VCMzMxRkQ4NTc0NTZEMUYwQjJCRTJFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpotnnWiai3I3vr4lbbR8xw9Fo HixrJwPxvBGZLG+jcRD8Fy5GxKPDhG6b5RE8XtGkfIJVuJmcBPhLkKM/ceXYcer9 VaJ2x/dgT9Av2PUV6BEnEvce/lXrRt8fsZVqZcS41XpRpdhEgA1VrSUhGtHy32rj 3uTugl2/+RCR1pTGqwjg74SfBn7bvDBINOff/SgfkQz/wm/FQrm6gE48WBiMpGQd nqERBDF3WeNZB5e6OcEEIO3rDPsrHYISRdFJdvyT/9AMUo/lClAyCC5x+HEdoAm+ it65HgEhcPKLANq5TvgNr8BEk+46xuoKD9yGSOylMK7uwfZpbQg8Pv9QYBSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbPmZ6y3I2s6zMf2FdFbR8LK+LiIwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFAC1BRd+OKp76vUgTydNnLOfmaVTf0QJO7 +QWVOpJ02UX0hzMvRqtvTlFMyQZ2s14zO44VyJdaT+Psc+7GkiKIfaxZvNNkhOye GyVzhcnw6vQ30M3brFGg1OvVdk7QQnzm/2y7AKyC8dyFf3C93jWQnNyiQfBsVQTm fdGf2E0EtgfUG3XjkJ5zMIa0C1VUbRMSW37kzlYlgFdarXXmMVa9uOwBGe4dPDYw m5tRQlcwQGqLzV++uik0nRJi4MdENMDaNaWi9za0EgVNBvFt4Bls52fzRkvUxmbn 5nOgX1sol8xE7VhSmxfiP3hzkk+979i6li+398sC56ejyQi/CCw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:50 2026 by rpki-client