$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: 65FsTiCKYVXCSVmrW+q44ANYuPDlDly/jvcfowS+sLk= Subject key identifier: 02:DE:AF:51:52:2A:03:41:38:D3:1B:05:68:6C:76:59:9E:6C:A5:EC Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 3B30A75341C0AA062966AD106226AE22C4D04E2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 0126 Signing time: Wed 15 Apr 2026 14:12:25 +0000 Manifest this update: Wed 15 Apr 2026 14:07:25 +0000 Manifest next update: Sat 18 Apr 2026 20:49:25 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 2: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: IDcKpFhy2UpOPHDONqcb/d/oM3D+kcoP6fMrwnrYXSI=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:30:a7:53:41:c0:aa:06:29:66:ad:10:62:26:ae:22:c4:d0:4e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Apr 15 14:07:25 2026 GMT Not After : Apr 18 20:49:25 2026 GMT Subject: CN=02DEAF51522A034138D31B05686C76599E6CA5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:6a:5d:f6:0e:96:b8:a8:90:27:33:8c:7a: b2:65:79:20:8d:53:1c:91:cf:93:84:76:1c:ba:07: 42:bc:5b:50:df:81:fb:83:ec:40:3d:42:cf:88:fd: 23:af:b4:c5:07:1f:5a:c5:91:f4:47:a3:eb:af:b9: 7f:96:5b:23:6b:c7:30:de:0d:69:14:86:03:74:d9: 2a:ea:85:db:9b:8b:0d:9e:b7:87:51:fc:f3:3a:4f: a7:f8:c5:72:1d:ce:df:78:60:1b:e9:41:83:6d:d0: 97:30:31:61:1f:8d:1f:90:50:40:e8:9c:be:1c:96: 43:57:95:36:ee:8e:7b:3c:4e:30:88:91:0d:be:c9: 76:4b:98:1d:11:a3:33:91:85:78:33:9a:9f:9d:ab: b1:94:a5:b4:4a:31:59:4d:8a:74:a8:c3:0b:5d:7a: 04:b1:00:0f:00:ab:f9:de:83:01:d3:e4:02:78:1d: be:ac:18:75:81:01:4f:31:9f:f3:36:f1:54:4a:92: c2:d3:14:6a:80:a0:bd:de:d6:11:5e:43:bb:4d:a0: 31:48:e5:dd:8d:33:ad:a6:56:05:c9:5d:e2:45:34: c6:c0:3a:af:83:bf:7f:ed:e6:6a:b8:3b:7e:fe:45: f1:46:14:97:1b:bc:93:b9:ef:ed:0c:a0:5a:49:49: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DE:AF:51:52:2A:03:41:38:D3:1B:05:68:6C:76:59:9E:6C:A5:EC X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:89:d0:60:a9:e2:49:5c:af:30:41:5e:43:82:15:a9:12:c7: e0:0d:45:ce:52:8a:e0:33:76:a4:3a:82:ac:6b:0a:d8:d1:02: 3c:9e:4b:a0:7d:d7:ea:c5:9c:87:2e:83:36:3f:2e:c1:37:77: 06:e9:fd:3a:38:82:ca:3a:fd:8f:23:e5:69:ed:94:7b:ca:f0: 86:88:02:6d:3e:09:55:79:32:54:6a:4d:a8:30:12:e1:3d:ac: ac:b6:b3:91:2d:10:f1:57:74:82:e6:e4:50:4b:09:74:de:85: b8:f0:28:30:0d:56:dd:e8:05:5e:34:65:d0:f5:43:e2:d6:bd: 1a:a6:5d:b8:72:cd:c0:37:7b:fd:db:93:77:65:ac:78:a4:cc: 70:89:08:5a:f9:02:56:62:b4:6b:4c:58:63:37:45:fe:b8:fa: 1b:16:3f:d2:8d:25:ce:bd:4a:a9:d5:38:31:5e:0e:9c:90:63: e2:c7:78:0c:73:1b:23:7c:4d:70:74:35:1d:25:1d:4c:e9:ce: 5c:1d:6e:fe:cb:7e:e2:f6:ad:6f:1d:35:50:94:df:3e:9a:af: 0e:ef:ba:9f:11:8f:ee:8c:dc:82:77:10:db:bd:8a:99:0a:aa: 3c:2f:2f:4b:5c:50:c8:80:19:a7:80:c7:f2:00:80:53:45:f2: 44:8e:13:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzCnU0HAqgYpZq0QYiauIsTQTiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNjA0MTUxNDA3MjVaFw0yNjA0MTgyMDQ5MjVaMDMxMTAvBgNV BAMTKDAyREVBRjUxNTIyQTAzNDEzOEQzMUIwNTY4NkM3NjU5OUU2Q0E1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kWpd9g6WuKiQJzOMerJleSCN UxyRz5OEdhy6B0K8W1DfgfuD7EA9Qs+I/SOvtMUHH1rFkfRHo+uvuX+WWyNrxzDe DWkUhgN02Srqhdubiw2et4dR/PM6T6f4xXIdzt94YBvpQYNt0JcwMWEfjR+QUEDo nL4clkNXlTbujns8TjCIkQ2+yXZLmB0RozORhXgzmp+dq7GUpbRKMVlNinSowwtd egSxAA8Aq/negwHT5AJ4Hb6sGHWBAU8xn/M28VRKksLTFGqAoL3e1hFeQ7tNoDFI 5d2NM62mVgXJXeJFNMbAOq+Dv3/t5mq4O37+RfFGFJcbvJO57+0MoFpJSbjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAt6vUVIqA0E40xsFaGx2WZ5spewwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCJ0GCp4klcrzBBXkOCFakSx+ANRc5SiuAz dqQ6gqxrCtjRAjyeS6B91+rFnIcugzY/LsE3dwbp/To4gso6/Y8j5WntlHvK8IaI Am0+CVV5MlRqTagwEuE9rKy2s5EtEPFXdILm5FBLCXTehbjwKDANVt3oBV40ZdD1 Q+LWvRqmXbhyzcA3e/3bk3dlrHikzHCJCFr5AlZitGtMWGM3Rf64+hsWP9KNJc69 SqnVODFeDpyQY+LHeAxzGyN8TXB0NR0lHUzpzlwdbv7LfuL2rW8dNVCU3z6arw7v up8Rj+6M3IJ3ENu9ipkKqjwvL0tcUMiAGaeAx/IAgFNF8kSOE34= -----END CERTIFICATE-----Generated at Fri Apr 17 16:31:21 2026 by rpki-client