$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: 10GhdvcU3gVLJz0+EHTJgsQK/Z5t6C6n0PhIWreCdKo= Subject key identifier: BF:E6:7C:77:82:6E:C0:FB:57:B9:F2:67:1B:75:FF:89:7E:E6:1A:65 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 7D50752BF3F7C7EB9FB44E96CAB88719124182EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: 0117 Signing time: Sun 19 Apr 2026 07:31:22 +0000 Manifest this update: Sun 19 Apr 2026 07:26:22 +0000 Manifest next update: Wed 22 Apr 2026 08:54:22 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: +vAbKEQbefpT/r8dztlOHzYIQAfMEYWo3v3F8yEgmQA=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: v6LmFd/T+Q18hViAVgo7YGWsfgbS5BdFapubty8W4rc=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:50:75:2b:f3:f7:c7:eb:9f:b4:4e:96:ca:b8:87:19:12:41:82:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Apr 19 07:26:22 2026 GMT Not After : Apr 22 08:54:22 2026 GMT Subject: CN=BFE67C77826EC0FB57B9F2671B75FF897EE61A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:24:87:65:0a:6b:fe:f4:43:11:21:3c:ff: 56:23:6d:f1:61:0b:8c:03:0f:0c:68:3e:2a:22:00: 17:db:49:f7:23:a8:2c:59:0b:f0:bc:78:02:9f:0d: ed:a3:12:ae:da:86:52:a6:d7:36:28:79:0e:72:91: 3b:35:c3:b6:89:cc:0a:32:52:32:a4:6d:ee:21:f8: 0e:ab:06:b5:66:4a:2d:3f:d2:00:66:f5:a5:81:65: 0c:96:ad:de:0c:ba:e8:d5:c1:62:60:a7:d8:fa:c6: c6:20:75:1a:c9:5b:e6:0a:04:7d:a2:ce:be:68:b6: 22:fa:41:3b:be:5c:3e:46:68:a6:f6:f1:c9:5f:c6: 92:98:5f:15:3e:2f:18:bc:66:70:9b:18:42:70:e9: 83:e1:0a:f6:42:75:e6:df:8a:a9:8e:8e:e1:31:8c: 09:30:02:4d:1d:09:e5:0d:e7:82:1b:a5:dd:22:1e: c0:88:a9:49:42:34:3f:24:50:ab:cd:e7:61:90:96: a3:23:ac:9b:67:c7:7d:59:d0:45:4e:5b:c5:b8:7c: b5:cd:28:49:0c:fe:34:80:01:53:12:20:7a:1b:2e: f0:63:d8:4b:66:ae:43:b2:3c:fc:46:88:a8:19:f7: 01:e8:46:f0:2e:c9:57:e8:5a:64:b1:ab:b8:34:a0: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E6:7C:77:82:6E:C0:FB:57:B9:F2:67:1B:75:FF:89:7E:E6:1A:65 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3d:e4:8d:4b:35:b3:1a:54:9e:b0:f6:48:1b:cb:c8:b6:64: 43:e6:8f:8a:b6:b7:66:81:32:ef:5e:15:11:88:62:a8:3c:85: 64:d4:d7:0e:ca:7b:fc:89:85:6c:1b:84:30:11:03:a7:9e:12: b9:39:b7:53:2a:32:fd:f1:4b:35:5e:f6:48:11:10:95:60:01: a6:12:4a:94:b4:26:5c:e0:55:fb:35:76:bb:6d:da:62:d3:bd: 2c:96:08:2d:85:d8:08:df:dd:79:11:03:ae:46:c3:54:55:20: 41:0d:f3:cf:e8:2f:32:28:80:21:92:13:f7:de:9d:31:89:90: 90:8e:9e:e6:b0:b5:d2:d1:ad:31:d4:a4:cc:b4:86:60:8c:34: ac:51:4c:62:16:dc:14:4f:79:fe:3f:e4:37:6d:59:b3:95:f2: 7f:73:5d:c0:57:c3:91:25:a1:4a:1d:a4:92:16:da:97:08:13: 5e:b1:18:c1:ed:74:6d:d3:3b:78:d6:de:7e:97:1b:7b:30:04: f6:b5:37:56:3b:73:b2:7c:83:ec:94:c4:09:9c:e8:ef:d6:eb: 5c:79:48:44:ef:ef:89:2e:2b:15:58:cb:92:58:b9:db:04:97: c9:32:58:6d:98:22:a7:69:13:df:d0:3e:69:4b:b0:37:6e:c3: ba:de:87:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVB1K/P3x+uftE6WyriHGRJBguwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNjA0MTkwNzI2MjJaFw0yNjA0MjIwODU0MjJaMDMxMTAvBgNV BAMTKEJGRTY3Qzc3ODI2RUMwRkI1N0I5RjI2NzFCNzVGRjg5N0VFNjFBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmSSHZQpr/vRDESE8/1YjbfFh C4wDDwxoPioiABfbSfcjqCxZC/C8eAKfDe2jEq7ahlKm1zYoeQ5ykTs1w7aJzAoy UjKkbe4h+A6rBrVmSi0/0gBm9aWBZQyWrd4MuujVwWJgp9j6xsYgdRrJW+YKBH2i zr5otiL6QTu+XD5GaKb28clfxpKYXxU+Lxi8ZnCbGEJw6YPhCvZCdebfiqmOjuEx jAkwAk0dCeUN54Ibpd0iHsCIqUlCND8kUKvN52GQlqMjrJtnx31Z0EVOW8W4fLXN KEkM/jSAAVMSIHobLvBj2EtmrkOyPPxGiKgZ9wHoRvAuyVfoWmSxq7g0oGp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+Z8d4JuwPtXufJnG3X/iX7mGmUwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg95I1LNbMaVJ6w9kgby8i2ZEPmj4q2t2aB Mu9eFRGIYqg8hWTU1w7Ke/yJhWwbhDARA6eeErk5t1MqMv3xSzVe9kgREJVgAaYS SpS0JlzgVfs1drtt2mLTvSyWCC2F2Ajf3XkRA65Gw1RVIEEN88/oLzIogCGSE/fe nTGJkJCOnuawtdLRrTHUpMy0hmCMNKxRTGIW3BRPef4/5DdtWbOV8n9zXcBXw5El oUodpJIW2pcIE16xGMHtdG3TO3jW3n6XG3swBPa1N1Y7c7J8g+yUxAmc6O/W61x5 SETv74kuKxVYy5JYudsEl8kyWG2YIqdpE9/QPmlLsDduw7rehzA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:59:58 2026 by rpki-client