$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: 9QkeFtX6nXdJKGsE97xwm4CVj9GSKwh7/O14Y+jvHVA= Subject key identifier: 42:8C:FD:09:B6:6A:96:8D:34:02:97:71:21:95:63:7E:F7:42:D9:45 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 081816BD00BAD37FAE55937702352197D7150A0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 0112 Signing time: Thu 16 Apr 2026 02:50:00 +0000 Manifest this update: Thu 16 Apr 2026 02:45:00 +0000 Manifest next update: Sun 19 Apr 2026 13:49:00 +0000 Files and hashes: 1: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) 2: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 3: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: aSpPR7MIKDtBafI2F3GkwibOIJ93yJ6zIp1y0V3Gb4s=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:18:16:bd:00:ba:d3:7f:ae:55:93:77:02:35:21:97:d7:15:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Apr 16 02:45:00 2026 GMT Not After : Apr 19 13:49:00 2026 GMT Subject: CN=428CFD09B66A968D340297712195637EF742D945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:3c:76:04:2d:c9:32:2b:fe:21:52:18:16: 69:1c:85:4b:fc:64:9d:10:b5:1a:5e:90:0a:d5:6d: 08:ea:b9:c7:d1:91:19:0b:3b:4c:1b:b6:5b:30:2e: 8c:41:46:0b:d8:de:52:da:1c:ff:b5:9c:a0:08:07: 51:0e:23:69:cc:12:9c:7b:b7:37:57:1c:4b:30:26: 73:27:99:cc:54:80:a0:7f:af:5e:75:e6:a0:bf:a3: b8:5a:00:a9:f2:4b:93:2b:ee:19:42:35:e1:c8:84: 16:68:2e:af:3c:5d:59:db:9b:30:22:5d:e2:06:e3: cb:71:78:59:2d:9a:7f:31:e5:00:65:19:57:1a:f6: 8f:79:e2:f3:5d:84:4a:a7:67:c9:17:8e:ed:63:05: 15:58:79:56:c0:39:1d:90:c6:5d:ed:79:2c:19:e2: 8b:40:45:b8:ef:d3:55:d4:15:5a:2d:84:0c:81:cf: 10:16:2e:af:3e:cf:16:b6:f8:9a:f6:b8:d9:ed:34: 79:d7:16:13:13:98:b8:14:2d:48:75:f0:ec:f6:45: 3a:43:a7:b0:6a:9a:e1:d3:87:39:c2:6c:45:8c:f9: 7c:2a:6a:fe:44:86:94:69:8c:9d:f4:5d:a5:6c:c7: c1:f8:ca:54:99:37:ed:76:a5:51:04:ab:d1:5d:01: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:FD:09:B6:6A:96:8D:34:02:97:71:21:95:63:7E:F7:42:D9:45 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:88:91:90:af:23:67:b8:9e:89:a3:0d:11:56:5e:d5:e3:06: f1:ba:cc:3a:5b:28:97:b8:7d:53:e5:87:71:cd:a7:8e:7d:84: 23:a1:5f:1d:d3:49:2a:81:67:a0:1b:3e:1c:9e:5d:45:4d:1c: 11:6f:27:8f:2c:77:3f:7c:99:76:03:bd:62:05:1e:c6:c9:44: 5d:58:90:11:39:a1:c0:e2:b3:f1:05:44:ec:58:14:bf:c8:4a: 07:2c:7b:1a:61:82:b6:6a:0c:ae:dd:55:46:a2:4a:6b:94:70: 03:f4:8c:3b:c2:07:30:84:9f:e9:bc:bd:0a:6a:74:1e:1e:f5: 40:8e:20:e1:49:52:02:2c:5f:46:ef:0d:47:4a:1d:55:e8:25: 5d:81:eb:b5:f5:39:ac:6f:3d:9b:0d:8a:bc:80:08:91:00:e8: 65:3e:3f:5f:2e:8b:5b:69:fe:a3:53:17:fc:bd:bd:17:85:85: bf:f8:f9:aa:bb:7b:57:49:7b:46:54:9d:38:aa:f9:0d:40:a5: 9d:df:8f:ab:ea:b6:26:45:d9:02:c5:23:d4:1b:c8:e3:d0:ba: ae:6e:3d:2d:7b:89:4f:75:11:04:36:f6:3d:6d:d7:f6:71:25: a3:d9:8b:2d:d4:5a:f9:91:f7:78:df:47:a5:64:e5:d2:22:d5: dc:20:d3:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBgWvQC603+uVZN3AjUhl9cVCg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNjA0MTYwMjQ1MDBaFw0yNjA0MTkxMzQ5MDBaMDMxMTAvBgNV BAMTKDQyOENGRDA5QjY2QTk2OEQzNDAyOTc3MTIxOTU2MzdFRjc0MkQ5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Gjx2BC3JMiv+IVIYFmkchUv8 ZJ0QtRpekArVbQjqucfRkRkLO0wbtlswLoxBRgvY3lLaHP+1nKAIB1EOI2nMEpx7 tzdXHEswJnMnmcxUgKB/r1515qC/o7haAKnyS5Mr7hlCNeHIhBZoLq88XVnbmzAi XeIG48txeFktmn8x5QBlGVca9o954vNdhEqnZ8kXju1jBRVYeVbAOR2Qxl3teSwZ 4otARbjv01XUFVothAyBzxAWLq8+zxa2+Jr2uNntNHnXFhMTmLgULUh18Oz2RTpD p7BqmuHThznCbEWM+Xwqav5EhpRpjJ30XaVsx8H4ylSZN+12pVEEq9FdAW/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoz9CbZqlo00ApdxIZVjfvdC2UUwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuIkZCvI2e4nomjDRFWXtXjBvG6zDpbKJe4 fVPlh3HNp459hCOhXx3TSSqBZ6AbPhyeXUVNHBFvJ48sdz98mXYDvWIFHsbJRF1Y kBE5ocDis/EFROxYFL/ISgcsexphgrZqDK7dVUaiSmuUcAP0jDvCBzCEn+m8vQpq dB4e9UCOIOFJUgIsX0bvDUdKHVXoJV2B67X1OaxvPZsNiryACJEA6GU+P18ui1tp /qNTF/y9vReFhb/4+aq7e1dJe0ZUnTiq+Q1ApZ3fj6vqtiZF2QLFI9QbyOPQuq5u PS17iU91EQQ29j1t1/ZxJaPZiy3UWvmR93jfR6Vk5dIi1dwg04U= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:08 2026 by rpki-client