$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json) Hash identifier: wm+7NlWMJYmo3Wc2NbousX150K16vHxGr42Tugg8PVQ= Subject key identifier: 9B:08:FE:13:5A:90:0F:6A:EA:81:DF:50:98:4B:2C:BB:FF:B9:78:2F Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Certificate serial: 2600BA16A39CE75FAC88BF60D652E6FAED29D42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 09:42:04 +0000 Manifest this update: Sat 18 Apr 2026 09:37:04 +0000 Manifest next update: Tue 21 Apr 2026 12:08:04 +0000 Files and hashes: 1: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=) 2: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=) 3: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=) 4: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=) 5: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=) 6: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=) 7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=) 8: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=) 9: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: 2DwaQagokoEm0npaBQceE2PLngBHTziGgoEYRiun1nc=) 10: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=) 11: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:00:ba:16:a3:9c:e7:5f:ac:88:bf:60:d6:52:e6:fa:ed:29:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Validity Not Before: Apr 18 09:37:04 2026 GMT Not After : Apr 21 12:08:04 2026 GMT Subject: CN=9B08FE135A900F6AEA81DF50984B2CBBFFB9782F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3f:fc:b2:e3:e3:2d:11:37:21:b5:ee:90:d4: 7a:98:e4:ec:99:3e:ba:f4:bb:7e:fb:79:c8:51:e2: b3:0c:f3:2d:29:fd:90:8b:85:c6:07:36:61:45:2c: 97:19:c9:6d:bc:4a:df:f6:e6:fc:b4:16:fc:d9:33: 41:85:43:b9:df:08:f9:0b:28:8c:5b:1c:c8:04:33: 12:82:fc:61:1c:93:1e:49:01:1d:79:09:56:10:43: 7b:ae:4f:16:62:91:7f:48:5e:7a:8e:ff:e0:e1:2e: b3:6a:ed:01:7e:ba:78:95:6c:64:c4:aa:bd:7a:5e: a3:c5:d2:3f:2d:12:4a:30:ea:25:0e:32:6f:48:c4: 28:f2:66:26:b8:25:77:6f:19:78:5f:8a:eb:6d:3c: c8:96:2c:20:e5:93:71:19:aa:a4:9a:ee:f4:8c:f8: b7:8c:ee:1e:7e:9a:8b:c7:40:84:b9:4f:74:32:63: c1:fa:83:be:7b:7e:df:b6:93:6e:4a:52:16:58:b7: 5b:d1:91:4a:08:3c:52:0f:a1:3f:8c:c7:97:a5:19: 64:71:ca:7f:aa:7a:7d:8e:c4:93:05:49:94:ad:b7: 73:80:8d:ad:43:47:54:38:91:53:b9:39:15:5e:71: ad:bc:ab:fc:28:46:02:3d:5f:55:f2:30:bc:c7:e2: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:08:FE:13:5A:90:0F:6A:EA:81:DF:50:98:4B:2C:BB:FF:B9:78:2F X509v3 Authority Key Identifier: keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:48:da:d4:d7:da:64:b0:88:61:cd:40:25:d4:04:5e:13: 65:a8:1c:9a:5d:1f:5f:fe:e1:20:c9:8a:9f:d8:09:f5:3a:40: 2a:9c:dd:fc:6a:a5:4d:14:9b:f8:17:eb:44:21:10:8d:6c:d3: fd:39:94:55:28:eb:5d:59:a9:76:a3:4c:23:42:5e:be:13:35: 1c:d3:54:e8:42:b5:26:b1:0f:7b:1d:17:7b:2e:d3:06:b0:af: 06:bf:1a:43:91:bf:ef:55:ad:cf:cd:b7:3d:9d:7d:1a:07:40: 7e:0a:d6:ce:05:cb:91:61:cf:4b:6e:b5:7b:45:9e:fd:81:b3: 9d:d6:3b:4c:8a:52:68:4e:ca:ea:28:e2:4f:66:93:04:d8:8d: d0:e7:38:0a:3f:fc:35:b1:34:56:bf:7e:d7:ef:44:41:cf:ce: 55:2e:bd:d7:64:c3:12:72:5a:ed:1b:1c:25:7d:06:a2:00:07: 19:90:08:41:e0:e6:14:5a:c3:36:e2:30:23:66:83:15:05:12: 3f:f8:21:d9:04:61:06:ec:a7:c0:26:87:7a:82:49:d9:22:e4: 1a:b3:22:af:40:50:b4:80:8d:a2:ae:13:5c:0c:69:58:5d:14: da:59:6e:da:c3:c6:ab:b3:0e:c9:dc:0e:5f:4c:ed:31:e5:82: 6c:30:78:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgC6FqOc51+siL9g1lLm+u0p1C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz RjBCNzBCNTAeFw0yNjA0MTgwOTM3MDRaFw0yNjA0MjExMjA4MDRaMDMxMTAvBgNV BAMTKDlCMDhGRTEzNUE5MDBGNkFFQTgxREY1MDk4NEIyQ0JCRkZCOTc4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmP/yy4+MtETchte6Q1HqY5OyZ Prr0u377echR4rMM8y0p/ZCLhcYHNmFFLJcZyW28St/25vy0FvzZM0GFQ7nfCPkL KIxbHMgEMxKC/GEckx5JAR15CVYQQ3uuTxZikX9IXnqO/+DhLrNq7QF+uniVbGTE qr16XqPF0j8tEkow6iUOMm9IxCjyZia4JXdvGXhfiuttPMiWLCDlk3EZqqSa7vSM +LeM7h5+movHQIS5T3QyY8H6g757ft+2k25KUhZYt1vRkUoIPFIPoT+Mx5elGWRx yn+qen2OxJMFSZStt3OAja1DR1Q4kVO5ORVeca28q/woRgI9X1XyMLzH4g1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwj+E1qQD2rqgd9QmEssu/+5eC8wHwYDVR0j BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZD NUEzRjBCNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ7SNrU19pksIhhzUAl1AReE2WoHJpdH1/+ 4SDJip/YCfU6QCqc3fxqpU0Um/gX60QhEI1s0/05lFUo611ZqXajTCNCXr4TNRzT VOhCtSaxD3sdF3su0wawrwa/GkORv+9Vrc/Ntz2dfRoHQH4K1s4Fy5Fhz0tutXtF nv2Bs53WO0yKUmhOyuoo4k9mkwTYjdDnOAo//DWxNFa/ftfvREHPzlUuvddkwxJy Wu0bHCV9BqIABxmQCEHg5hRawzbiMCNmgxUFEj/4IdkEYQbsp8Amh3qCSdki5Bqz Iq9AULSAjaKuE1wMaVhdFNpZbtrDxquzDsncDl9M7THlgmwweP4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:14 2026 by rpki-client