$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: Jbe09TQ18FMjP6gc2HNW7XKxf1/LPI3D97yXZDLU8J4= Subject key identifier: 07:96:33:5C:B6:5A:1B:86:D4:45:65:8C:E1:DB:97:30:ED:08:68:D2 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 0D025C5A32D3F54F2E8B93B6EBBAAA0258212DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 02:20:01 +0000 Manifest this update: Thu 16 Apr 2026 02:15:01 +0000 Manifest next update: Sun 19 Apr 2026 12:10:01 +0000 Files and hashes: 1: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: 3+LX0R7lcPK05BQ4qA3i+ZVeUZVi75EhGQSGWXUTofs=) 2: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:02:5c:5a:32:d3:f5:4f:2e:8b:93:b6:eb:ba:aa:02:58:21:2d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Apr 16 02:15:01 2026 GMT Not After : Apr 19 12:10:01 2026 GMT Subject: CN=0796335CB65A1B86D445658CE1DB9730ED0868D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:97:eb:a1:ea:74:93:46:b3:9d:90:fe:1d: cb:89:79:cd:1c:7e:32:8f:76:7e:ec:24:a8:4c:0f: c0:63:c9:81:5a:5c:66:da:fc:ae:e7:61:f8:dc:cf: 37:5b:78:4d:54:5f:08:a3:d5:03:bb:0b:1a:f9:74: d5:c4:5f:d7:e2:d1:76:8a:1a:a5:04:20:ef:79:e3: c8:3f:e5:2f:4a:a0:2c:db:8d:25:2f:89:97:cc:af: 6a:71:3f:8d:3c:55:52:94:f2:8f:f6:5c:6f:4b:14: 98:a6:bb:c3:81:3b:4a:e1:8f:5b:6a:67:60:da:c8: df:4f:1f:0e:da:aa:d8:99:d1:4c:89:95:2e:14:87: 8f:89:a7:95:aa:a6:25:99:86:5e:95:c3:5d:51:e1: 77:e1:15:e3:ef:2b:8d:2c:e5:34:56:17:d6:26:ea: 82:dc:72:fc:03:df:13:fb:0c:6a:c3:23:18:8d:a4: 6b:d6:e1:88:66:ce:23:0b:de:11:43:52:68:d7:4e: 51:9c:fd:cc:e5:04:7b:f9:cb:5d:47:34:fc:c9:fa: 54:7b:de:51:5f:3c:fa:a9:a8:44:94:c2:0b:33:f1: 2c:f8:2e:0f:86:f8:4d:1c:db:f1:4c:98:e1:61:d8: 73:46:ce:4d:c6:45:58:f5:7b:7b:55:9c:df:72:68: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:33:5C:B6:5A:1B:86:D4:45:65:8C:E1:DB:97:30:ED:08:68:D2 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:9c:69:56:a6:b6:10:1a:a7:3e:7b:6e:3f:ac:ed:c2:c3: 0a:d2:b1:22:ec:49:c8:57:39:bb:d6:99:1a:43:79:b1:ca:86: 54:79:63:7e:53:9a:c7:01:c6:25:76:11:54:8b:c7:2c:4d:b1: 80:06:96:2b:b9:e3:0f:54:7d:0e:a5:e4:61:f6:58:96:6a:5a: 84:63:56:d8:01:1c:5d:65:b5:c1:62:2a:0a:1f:51:11:15:13: a4:81:7e:58:d1:56:85:99:10:68:af:ca:b5:00:a3:67:4e:a8: f8:e1:01:b6:47:68:30:d0:e9:80:f8:72:a2:62:cc:44:02:a2: 87:f2:09:04:4e:6f:3d:8c:88:06:cd:33:c2:bf:6a:95:16:b2: 30:f0:30:c1:b0:39:7c:b3:42:2f:4d:16:b5:da:0f:8f:10:99: 21:b3:48:d0:91:07:34:17:41:22:a7:95:59:5c:d2:17:9d:58: b3:b7:12:b3:72:97:d4:1a:fe:cd:9e:e1:c3:ee:93:0c:26:2c: 56:1d:6d:a3:89:e8:0d:d7:bf:9a:06:49:c4:aa:0b:fd:25:4f: 31:2a:7f:ea:9c:8c:c6:b3:db:62:62:41:77:33:ac:c4:64:98: 9f:a7:3b:5b:b6:42:e6:2c:58:9f:fd:ad:06:cf:80:de:e6:07: 3f:10:9c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQJcWjLT9U8ui5O267qqAlghLdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNjA0MTYwMjE1MDFaFw0yNjA0MTkxMjEwMDFaMDMxMTAvBgNV BAMTKDA3OTYzMzVDQjY1QTFCODZENDQ1NjU4Q0UxREI5NzMwRUQwODY4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCke5froep0k0aznZD+HcuJec0c fjKPdn7sJKhMD8BjyYFaXGba/K7nYfjczzdbeE1UXwij1QO7Cxr5dNXEX9fi0XaK GqUEIO9548g/5S9KoCzbjSUviZfMr2pxP408VVKU8o/2XG9LFJimu8OBO0rhj1tq Z2DayN9PHw7aqtiZ0UyJlS4Uh4+Jp5WqpiWZhl6Vw11R4XfhFePvK40s5TRWF9Ym 6oLccvwD3xP7DGrDIxiNpGvW4YhmziML3hFDUmjXTlGc/czlBHv5y11HNPzJ+lR7 3lFfPPqpqESUwgsz8Sz4Lg+G+E0c2/FMmOFh2HNGzk3GRVj1e3tVnN9yaFppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5YzXLZaG4bURWWM4duXMO0IaNIwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/pnGlWprYQGqc+e24/rO3CwwrSsSLsSchX ObvWmRpDebHKhlR5Y35TmscBxiV2EVSLxyxNsYAGliu54w9UfQ6l5GH2WJZqWoRj VtgBHF1ltcFiKgofUREVE6SBfljRVoWZEGivyrUAo2dOqPjhAbZHaDDQ6YD4cqJi zEQCoofyCQRObz2MiAbNM8K/apUWsjDwMMGwOXyzQi9NFrXaD48QmSGzSNCRBzQX QSKnlVlc0hedWLO3ErNyl9Qa/s2e4cPukwwmLFYdbaOJ6A3Xv5oGScSqC/0lTzEq f+qcjMaz22JiQXczrMRkmJ+nO1u2QuYsWJ/9rQbPgN7mBz8QnC8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:59 2026 by rpki-client