$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: 13d/4Sfmfuel8FHV/eo035jxRojkRXAxikbJKwCcJ3w= Subject key identifier: 4E:59:89:E5:FF:89:24:A9:2F:0F:23:C5:FB:07:F0:6C:70:14:5D:73 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 081815343E64C88DAC8C4660B70BC990B9AC409F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: F6 Signing time: Fri 17 Apr 2026 05:50:06 +0000 Manifest this update: Fri 17 Apr 2026 05:45:06 +0000 Manifest next update: Mon 20 Apr 2026 09:31:06 +0000 Files and hashes: 1: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: 4DQesXwo2ziuq6MAPdl+RO31Q0TGqKaxwkym1emvZBg=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:18:15:34:3e:64:c8:8d:ac:8c:46:60:b7:0b:c9:90:b9:ac:40:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Apr 17 05:45:06 2026 GMT Not After : Apr 20 09:31:06 2026 GMT Subject: CN=4E5989E5FF8924A92F0F23C5FB07F06C70145D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:23:e5:ef:17:e2:d5:8e:6c:8f:07:2e:78: 7c:86:8d:89:5f:b6:ea:e5:61:99:17:8f:29:7a:83: bc:c2:ab:bf:51:93:10:2d:9a:83:4a:37:95:ec:f4: 87:ef:30:eb:50:7c:cd:ae:8c:8c:6b:15:29:09:82: f8:6d:9f:ce:56:e6:78:15:38:80:b3:c9:df:97:e2: 55:60:fe:a9:f9:1e:af:51:bc:26:3c:8c:aa:76:5d: f3:87:6c:e4:9f:ef:6b:4a:10:73:d9:96:33:c8:06: 62:67:8d:51:23:93:d6:16:2f:42:9a:db:b3:a7:e3: ab:62:09:5e:fa:d8:b3:ea:42:b0:32:e6:57:c3:3a: 58:bd:37:1f:68:77:7b:bd:6b:bd:fa:85:f8:fc:d7: ed:c5:61:87:76:87:e0:69:9d:62:7e:12:55:88:a6: 62:f6:44:50:99:62:db:d4:66:9a:74:55:79:e8:3c: f8:3b:63:8e:f1:22:2f:dd:14:22:18:8f:d8:92:2b: 41:f9:ae:cd:f3:78:07:07:ff:14:ee:cf:f3:b9:18: 52:bc:50:ed:7d:ad:9c:66:a9:26:e5:38:50:84:81: 70:f9:79:b7:d3:d9:46:9b:0e:9c:e9:df:90:c2:56: 5f:1e:88:04:8d:2d:e4:a0:60:d4:22:af:c0:fc:d4: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:89:E5:FF:89:24:A9:2F:0F:23:C5:FB:07:F0:6C:70:14:5D:73 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ee:c7:da:f0:d3:34:d0:35:c6:91:39:33:eb:fa:0b:1d:b7: fe:a8:49:26:01:2c:8f:5b:e1:8a:ca:be:82:e7:41:09:06:c7: e5:9c:a9:eb:7a:52:65:52:86:ca:e0:db:90:a2:5e:79:00:6b: 3a:d7:8c:42:fd:c3:b0:7a:2b:9e:be:08:5c:cd:6b:15:c8:d4: 1c:3f:16:5c:f3:66:72:cf:30:62:20:fc:b1:c9:fe:be:eb:4f: a9:1c:7d:af:7b:89:27:f4:e7:be:07:22:cc:6c:8f:64:43:7f: d4:66:26:cb:bf:f0:ca:76:a4:f9:b8:a6:7a:1f:94:15:1d:e6: 4f:d8:15:9b:4b:d8:59:70:ff:b5:b2:6e:8d:94:3b:b4:1a:c5: a5:41:c3:94:a2:8d:e5:51:25:36:9e:72:16:64:cf:00:d1:6f: 8e:66:f0:44:d7:b5:2c:19:ec:34:87:15:d1:a6:28:67:8a:2e: 91:35:0e:b7:57:3b:a9:c3:e9:d5:53:84:6a:85:3e:50:40:37: 88:4f:bd:11:2e:0f:c7:ad:85:e8:6a:4d:32:0e:72:dc:b8:96: f2:f0:3b:e5:81:04:0f:7e:3f:50:4b:ee:58:02:a4:94:e9:ff: 6e:02:c7:b0:0c:72:ce:85:b1:f1:bb:14:8f:57:e4:e9:b9:82: 8b:37:bd:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBgVND5kyI2sjEZgtwvJkLmsQJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNjA0MTcwNTQ1MDZaFw0yNjA0MjAwOTMxMDZaMDMxMTAvBgNV BAMTKDRFNTk4OUU1RkY4OTI0QTkyRjBGMjNDNUZCMDdGMDZDNzAxNDVENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1CPl7xfi1Y5sjwcueHyGjYlf turlYZkXjyl6g7zCq79RkxAtmoNKN5Xs9IfvMOtQfM2ujIxrFSkJgvhtn85W5ngV OICzyd+X4lVg/qn5Hq9RvCY8jKp2XfOHbOSf72tKEHPZljPIBmJnjVEjk9YWL0Ka 27On46tiCV762LPqQrAy5lfDOli9Nx9od3u9a736hfj81+3FYYd2h+BpnWJ+ElWI pmL2RFCZYtvUZpp0VXnoPPg7Y47xIi/dFCIYj9iSK0H5rs3zeAcH/xTuz/O5GFK8 UO19rZxmqSblOFCEgXD5ebfT2UabDpzp35DCVl8eiASNLeSgYNQir8D81IpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTlmJ5f+JJKkvDyPF+wfwbHAUXXMwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/ux9rw0zTQNcaROTPr+gsdt/6oSSYBLI9b 4YrKvoLnQQkGx+Wcqet6UmVShsrg25CiXnkAazrXjEL9w7B6K56+CFzNaxXI1Bw/ FlzzZnLPMGIg/LHJ/r7rT6kcfa97iSf0574HIsxsj2RDf9RmJsu/8Mp2pPm4pnof lBUd5k/YFZtL2Flw/7Wybo2UO7QaxaVBw5SijeVRJTaechZkzwDRb45m8ETXtSwZ 7DSHFdGmKGeKLpE1DrdXO6nD6dVThGqFPlBAN4hPvREuD8ethehqTTIOcty4lvLw O+WBBA9+P1BL7lgCpJTp/24Cx7AMcs6FsfG7FI9X5Om5gos3vUg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:51 2026 by rpki-client