$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: 79Es0Xy/WkYz3wW1uYZY247+JlWYMnYg6RMjxNAwFIk= Subject key identifier: 01:51:6D:30:B2:AC:7D:A3:C8:34:98:BA:BE:7E:FF:35:64:10:55:A8 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 49B71AD1D3D6EE049A752154D2BEB0D9E5F984C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: DC Signing time: Thu 16 Apr 2026 17:51:30 +0000 Manifest this update: Thu 16 Apr 2026 17:46:30 +0000 Manifest next update: Sun 19 Apr 2026 20:59:30 +0000 Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: 2wSOCS9NRvSmWg3wXxYXqvcmHr9kAzegqy3DecFLgVQ=) 2: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) 3: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b7:1a:d1:d3:d6:ee:04:9a:75:21:54:d2:be:b0:d9:e5:f9:84:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Apr 16 17:46:30 2026 GMT Not After : Apr 19 20:59:30 2026 GMT Subject: CN=01516D30B2AC7DA3C83498BABE7EFF35641055A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:df:61:bf:12:01:25:ff:4b:ef:2c:a7:64: ce:83:ed:ea:ac:09:ef:98:0e:7d:a5:e3:b7:8b:71: 45:75:9b:ed:e0:63:6f:13:58:59:aa:4d:19:ab:eb: 99:b7:8f:3a:1e:46:c6:9a:b6:9d:df:e6:6e:11:04: e3:48:38:9e:a0:4e:9e:84:db:d7:02:5c:e1:ff:97: 7b:c1:85:27:33:6d:03:1c:d7:a9:58:b7:41:1f:c1: 45:3b:6d:75:83:7e:4a:8f:fe:6b:f1:3f:68:71:62: 4d:37:52:3d:83:98:06:af:d8:0e:86:71:ce:13:4e: 9d:39:04:8c:60:9e:95:fa:18:f5:7f:22:f4:25:80: 16:77:10:b6:a1:83:2a:15:e9:04:57:d1:64:81:16: 25:31:ff:d8:75:15:e5:1d:dd:45:8d:5f:d6:48:da: 02:9c:a3:74:53:08:7f:df:97:e2:b0:bd:21:da:8b: fe:7e:3f:3c:13:32:60:5b:d6:5b:73:34:35:1c:5a: 97:eb:51:e8:63:5e:e5:13:cf:d6:78:46:57:c9:c3: e0:c2:6e:ee:a4:b6:64:86:62:f1:a9:67:4d:b4:7f: 32:75:c5:14:6d:33:37:c7:39:da:67:79:14:5c:70: 02:9e:08:5b:1e:0a:4c:88:5c:8e:f5:ec:c1:c2:f5: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:51:6D:30:B2:AC:7D:A3:C8:34:98:BA:BE:7E:FF:35:64:10:55:A8 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:dc:bc:18:07:72:49:65:b4:6a:ab:cf:f5:4f:ec:f7:08:10: 06:b7:05:94:2f:b4:1e:9b:d6:0d:bc:68:bf:07:e0:71:e6:f3: 68:5e:d3:68:81:89:ff:a4:42:17:57:42:a0:7c:9e:8c:6d:52: 7f:e6:9d:e8:1a:c3:4d:70:f8:6b:af:ae:2f:d5:c8:94:26:11: c1:bd:f1:b9:f8:59:68:44:99:58:bc:a3:05:17:53:d2:22:5a: 1d:b1:d0:93:43:3f:4c:d2:ee:c4:26:24:ae:5f:88:02:89:c2: 1d:1c:65:f2:f3:62:64:14:fd:5a:96:8c:26:c0:36:50:25:4d: 27:5b:ba:75:17:e3:d9:38:eb:79:6e:20:f4:db:a4:01:5d:ab: 85:7e:14:a2:69:56:cf:09:4c:77:f2:b8:2e:a7:8e:29:db:d1: b7:96:11:02:97:48:6b:a3:e0:b2:7e:98:0b:80:f7:40:64:0d: be:4f:78:6e:28:36:c8:8a:f2:a7:b3:20:88:16:b8:c8:b9:69: ad:9b:93:81:e8:fd:0d:1d:05:bf:f5:9a:12:93:dd:35:5e:14: a3:bd:fb:eb:fb:5d:76:13:83:ae:59:9a:48:c7:cb:89:b2:c6: 42:25:d3:bc:5c:60:3c:a7:0f:58:cb:73:c4:64:bc:61:68:5b: 7d:bc:a5:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbca0dPW7gSadSFU0r6w2eX5hMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNjA0MTYxNzQ2MzBaFw0yNjA0MTkyMDU5MzBaMDMxMTAvBgNV BAMTKDAxNTE2RDMwQjJBQzdEQTNDODM0OThCQUJFN0VGRjM1NjQxMDU1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHN9hvxIBJf9L7yynZM6D7eqs Ce+YDn2l47eLcUV1m+3gY28TWFmqTRmr65m3jzoeRsaatp3f5m4RBONIOJ6gTp6E 29cCXOH/l3vBhSczbQMc16lYt0EfwUU7bXWDfkqP/mvxP2hxYk03Uj2DmAav2A6G cc4TTp05BIxgnpX6GPV/IvQlgBZ3ELahgyoV6QRX0WSBFiUx/9h1FeUd3UWNX9ZI 2gKco3RTCH/fl+KwvSHai/5+PzwTMmBb1ltzNDUcWpfrUehjXuUTz9Z4RlfJw+DC bu6ktmSGYvGpZ020fzJ1xRRtMzfHOdpneRRccAKeCFseCkyIXI717MHC9Y0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVFtMLKsfaPINJi6vn7/NWQQVagwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7cvBgHcklltGqrz/VP7PcIEAa3BZQvtB6b 1g28aL8H4HHm82he02iBif+kQhdXQqB8noxtUn/mnegaw01w+Guvri/VyJQmEcG9 8bn4WWhEmVi8owUXU9IiWh2x0JNDP0zS7sQmJK5fiAKJwh0cZfLzYmQU/VqWjCbA NlAlTSdbunUX49k463luIPTbpAFdq4V+FKJpVs8JTHfyuC6njinb0beWEQKXSGuj 4LJ+mAuA90BkDb5PeG4oNsiK8qezIIgWuMi5aa2bk4Ho/Q0dBb/1mhKT3TVeFKO9 ++v7XXYTg65ZmkjHy4myxkIl07xcYDynD1jLc8RkvGFoW328pY8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:29:58 2026 by rpki-client