$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: 4gz0DRV4No9T84EAOHF3OjkYrwFz+Z+wHCJz8czO+5g= Subject key identifier: 37:BF:00:6E:32:59:64:B9:B0:07:0C:65:4B:27:1E:12:55:BD:94:44 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 4315682E140B1B1662A4D48F4C915CF1178A8BC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 03CD Signing time: Fri 17 Apr 2026 14:51:53 +0000 Manifest this update: Fri 17 Apr 2026 14:46:53 +0000 Manifest next update: Mon 20 Apr 2026 19:50:53 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: RuHUvzchGudSW/NnFW67CqS7JMkZMTsijND4NNJrM3w=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: kxgspDzYS/DkH6ZTyH3CIKOfMPet4y8hTk8yqtZ6GPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:15:68:2e:14:0b:1b:16:62:a4:d4:8f:4c:91:5c:f1:17:8a:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Apr 17 14:46:53 2026 GMT Not After : Apr 20 19:50:53 2026 GMT Subject: CN=37BF006E325964B9B0070C654B271E1255BD9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:4d:e6:49:c9:52:21:d4:08:4c:f0:9a:7b: 00:d9:fd:c2:38:d3:72:fb:33:28:5d:fe:93:2f:b9: 41:08:df:ea:c7:bd:23:ed:2e:73:98:d4:6b:31:a1: a9:e6:40:c2:76:26:5e:20:00:d7:80:a1:e3:3b:50: 43:80:c7:14:a9:4d:77:99:b9:cc:24:4c:eb:9d:9d: 79:30:bd:f4:e0:c6:d7:ad:cf:6e:c3:2f:4d:23:77: 22:c9:fa:5d:c4:cd:bf:ed:57:1b:9b:ae:92:e3:21: b3:f0:14:11:5d:56:5e:9d:a4:4b:32:6a:f4:04:9b: d4:74:47:79:ef:24:fa:6a:eb:88:ee:82:40:4a:c6: d2:93:73:ed:61:90:e0:b4:32:29:90:0e:3c:9b:9e: 0f:53:6d:e6:1a:8e:ef:87:f6:7e:7d:ee:fa:e6:f5: 51:5e:64:cd:8d:5e:be:bf:e3:88:e0:08:e3:a0:98: 0f:5c:58:9f:cc:df:86:8c:90:0f:77:a1:2f:b8:0e: cd:c9:c3:0d:cf:74:9f:4d:1c:cd:57:6e:8b:3d:ad: d8:a0:cf:79:3e:fc:63:e5:c6:1e:82:a8:f6:f0:ed: 0e:cc:64:d4:07:c9:e1:bd:83:51:15:e4:0d:93:13: 6e:af:2c:19:13:33:b9:46:47:87:97:1d:92:4c:6e: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:00:6E:32:59:64:B9:B0:07:0C:65:4B:27:1E:12:55:BD:94:44 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:5b:79:d8:c1:43:38:8b:23:b9:6f:5a:99:2a:f3:7c:97: 1e:c5:06:3c:aa:b3:19:9c:99:d2:59:22:70:92:e1:05:c6:48: fa:7a:dd:38:e4:32:20:13:1d:1e:93:ee:05:2c:b3:7a:28:c2: 05:4f:56:7b:5a:a5:69:58:08:2d:dc:d1:bd:05:7c:06:1f:80: c4:63:8e:ff:b9:27:0a:9f:3d:f0:79:ce:4c:58:1d:44:38:17: 43:7d:86:b4:e7:56:c1:63:b1:07:fe:40:f6:11:1a:1a:bd:96: 30:c6:7f:72:d9:60:61:0f:df:91:2b:a4:0a:56:51:97:2a:d1: dd:b7:55:ee:96:e7:ac:ba:c6:08:ac:34:c4:6b:52:74:ec:5f: 88:93:9e:bd:1f:92:de:c3:96:5c:eb:53:0a:3d:6c:47:d0:15: 8d:62:fa:34:45:be:b5:fe:de:4e:31:d8:77:13:2c:3d:35:45: 0a:5e:d4:a8:f1:9c:72:ed:ba:be:52:76:35:88:90:68:11:a3: 4a:c9:e0:61:20:65:b4:65:6d:3a:f7:fa:bd:83:82:30:01:81: 02:b5:5c:56:bf:ad:ac:d9:7b:56:58:84:21:ad:05:18:42:0a: b0:7f:e4:d0:f1:e5:23:15:5f:56:cd:a5:12:70:d3:d2:03:9a: a9:8e:4c:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxVoLhQLGxZipNSPTJFc8ReKi8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNjA0MTcxNDQ2NTNaFw0yNjA0MjAxOTUwNTNaMDMxMTAvBgNV BAMTKDM3QkYwMDZFMzI1OTY0QjlCMDA3MEM2NTRCMjcxRTEyNTVCRDk0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDU3mSclSIdQITPCaewDZ/cI4 03L7Myhd/pMvuUEI3+rHvSPtLnOY1GsxoanmQMJ2Jl4gANeAoeM7UEOAxxSpTXeZ ucwkTOudnXkwvfTgxtetz27DL00jdyLJ+l3Ezb/tVxubrpLjIbPwFBFdVl6dpEsy avQEm9R0R3nvJPpq64jugkBKxtKTc+1hkOC0MimQDjybng9TbeYaju+H9n597vrm 9VFeZM2NXr6/44jgCOOgmA9cWJ/M34aMkA93oS+4Ds3Jww3PdJ9NHM1Xbos9rdig z3k+/GPlxh6CqPbw7Q7MZNQHyeG9g1EV5A2TE26vLBkTM7lGR4eXHZJMbpFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN78AbjJZZLmwBwxlSyceElW9lEQwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfJW3nYwUM4iyO5b1qZKvN8lx7FBjyqsxmc mdJZInCS4QXGSPp63TjkMiATHR6T7gUss3oowgVPVntapWlYCC3c0b0FfAYfgMRj jv+5JwqfPfB5zkxYHUQ4F0N9hrTnVsFjsQf+QPYRGhq9ljDGf3LZYGEP35ErpApW UZcq0d23Ve6W56y6xgisNMRrUnTsX4iTnr0fkt7DllzrUwo9bEfQFY1i+jRFvrX+ 3k4x2HcTLD01RQpe1KjxnHLtur5SdjWIkGgRo0rJ4GEgZbRlbTr3+r2DgjABgQK1 XFa/razZe1ZYhCGtBRhCCrB/5NDx5SMVX1bNpRJw09IDmqmOTHo= -----END CERTIFICATE-----Generated at Fri Apr 17 23:46:53 2026 by rpki-client