$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: 4+YLms1rbk1vqVweZy+2l9T5hovJ6U+Jdds6GPJoiGo= Subject key identifier: BF:56:C7:9B:24:AC:2C:D0:F5:96:D6:26:17:DE:72:4D:9B:F3:B5:CB Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 4C4D10CB86020C7A38E053F8701E9020C4C562BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 01CA Signing time: Thu 16 Apr 2026 23:00:59 +0000 Manifest this update: Thu 16 Apr 2026 22:55:59 +0000 Manifest next update: Mon 20 Apr 2026 00:58:59 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: vkjLobJjAXkTJHAhzFgURhjEGs0mynyi67Rg0fR8SlY=) 2: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: nlnGPxCuH+cOfFfVViDDGUvqLoe9398fU4PoM9EiIUw=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: DA/n2B5BD31L2iky4qlBwpU9wDYSyS4sXSJH6JyxfG0=) 4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: veTUym4V2MwCWzP5HPakWwXr51tOjSeHtBuEZPVCr+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4d:10:cb:86:02:0c:7a:38:e0:53:f8:70:1e:90:20:c4:c5:62:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Apr 16 22:55:59 2026 GMT Not After : Apr 20 00:58:59 2026 GMT Subject: CN=BF56C79B24AC2CD0F596D62617DE724D9BF3B5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:e8:04:6b:09:ab:1a:46:30:b0:9e:f4:b9: 27:90:c7:8a:44:a9:35:51:b4:30:33:9a:af:73:04: 3f:de:a5:de:32:99:18:7c:6e:13:e8:90:92:94:17: 5b:6e:41:2a:eb:98:ea:00:d9:d9:1d:8b:50:69:7a: bd:7f:4b:05:dd:89:27:23:f8:d8:ad:f6:4b:0f:a8: 90:c3:d2:b8:8b:b7:d3:2c:c6:78:21:80:29:b9:e3: 7e:7c:68:77:57:42:f2:6d:e9:39:07:e3:69:ea:1e: 6e:dd:da:0a:e6:01:62:5e:49:d8:09:ad:0b:32:a6: 29:8d:8b:7f:27:9c:00:7a:bc:0e:07:ca:5c:c2:53: d8:7b:39:76:cd:50:5f:25:58:0d:bc:ad:19:ca:07: f2:57:ff:40:79:e5:5e:42:d8:d1:c3:ed:b0:ea:7a: 48:92:b2:40:88:ac:53:a8:66:ab:74:09:4c:25:61: 2e:cd:65:ed:49:6a:1c:6c:26:a5:8b:63:57:e6:85: c0:e8:37:5e:58:93:c4:d5:82:2b:7b:4a:21:9b:4d: 1d:24:45:2c:8b:5f:87:01:fc:ca:6d:90:e2:dd:dc: 96:65:0c:42:30:96:8b:c5:ce:48:a7:c1:8a:8e:54: 8c:9a:36:94:18:bf:cd:1a:af:ef:b0:3d:33:8a:cc: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:C7:9B:24:AC:2C:D0:F5:96:D6:26:17:DE:72:4D:9B:F3:B5:CB X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9c:85:5e:da:6a:89:46:3b:b7:38:c8:82:47:75:db:39:fe: c2:5e:b9:68:94:04:bc:c1:e6:cd:7c:e8:2b:eb:a0:af:21:2e: 85:17:58:b9:10:c9:87:f6:7f:54:11:a7:be:88:1f:0c:d5:bf: 6d:f2:f6:2d:41:cd:da:2c:40:a6:5e:1e:6e:2b:9e:19:f3:92: 15:04:c5:1b:0a:97:43:63:15:9b:10:53:f6:db:63:f2:6d:c5: 86:a3:21:fe:89:6c:fd:89:ad:ad:03:f7:de:06:db:50:fe:7e: fa:e6:e6:d2:dc:42:86:fa:dd:1f:03:ec:49:b9:fe:77:12:a8: 48:41:3b:75:78:f4:6e:10:95:e0:6a:ea:2b:94:08:aa:06:b1: c8:ec:79:01:e3:57:77:52:47:5c:61:7e:80:d6:51:9f:02:80: 8c:96:8e:d2:e3:15:61:d9:e7:98:5a:6c:8b:a1:b2:26:53:4a: 37:3d:50:31:9c:6a:c5:8f:9c:0e:fe:37:00:0f:40:3d:87:11: 3e:65:1e:55:c8:a5:eb:62:79:ee:01:4e:1c:ec:b1:10:35:6a: be:5b:8e:bc:01:a5:a7:a7:56:90:a0:24:f1:0c:10:65:97:5d: aa:33:1f:b4:3f:2a:b1:85:c5:6c:fc:23:f4:18:97:ff:23:2b: 0d:82:80:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTE0Qy4YCDHo44FP4cB6QIMTFYr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjA0MTYyMjU1NTlaFw0yNjA0MjAwMDU4NTlaMDMxMTAvBgNV BAMTKEJGNTZDNzlCMjRBQzJDRDBGNTk2RDYyNjE3REU3MjREOUJGM0I1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8egEawmrGkYwsJ70uSeQx4pE qTVRtDAzmq9zBD/epd4ymRh8bhPokJKUF1tuQSrrmOoA2dkdi1Bper1/SwXdiScj +Nit9ksPqJDD0riLt9MsxnghgCm54358aHdXQvJt6TkH42nqHm7d2grmAWJeSdgJ rQsypimNi38nnAB6vA4HylzCU9h7OXbNUF8lWA28rRnKB/JX/0B55V5C2NHD7bDq ekiSskCIrFOoZqt0CUwlYS7NZe1JahxsJqWLY1fmhcDoN15Yk8TVgit7SiGbTR0k RSyLX4cB/MptkOLd3JZlDEIwlovFzkinwYqOVIyaNpQYv80ar++wPTOKzNcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1bHmySsLND1ltYmF95yTZvztcswHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCchV7aaolGO7c4yIJHdds5/sJeuWiUBLzB 5s186CvroK8hLoUXWLkQyYf2f1QRp76IHwzVv23y9i1BzdosQKZeHm4rnhnzkhUE xRsKl0NjFZsQU/bbY/JtxYajIf6JbP2Jra0D994G21D+fvrm5tLcQob63R8D7Em5 /ncSqEhBO3V49G4QleBq6iuUCKoGscjseQHjV3dSR1xhfoDWUZ8CgIyWjtLjFWHZ 55habIuhsiZTSjc9UDGcasWPnA7+NwAPQD2HET5lHlXIpetiee4BThzssRA1ar5b jrwBpaenVpCgJPEMEGWXXaozH7Q/KrGFxWz8I/QYl/8jKw2CgAQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:15:03 2026 by rpki-client