$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: cl4RDdvvN93w/AQvLJtYW+JabTeaaSPQyBxEfvb1RNE= Subject key identifier: B3:E3:07:73:81:42:7D:23:AC:ED:74:A3:0E:FA:67:24:20:D1:64:F3 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 7C374ED260EF549540C42CF96D6E7B3F6B196E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 0127 Signing time: Wed 15 Apr 2026 13:20:44 +0000 Manifest this update: Wed 15 Apr 2026 13:15:44 +0000 Manifest next update: Sat 18 Apr 2026 16:40:44 +0000 Files and hashes: 1: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: D9/NjxbNUrFsLKmEOZ5zEy+vQ7dKDj33U9ZPDd3ZIF8=) 2: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 4: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:37:4e:d2:60:ef:54:95:40:c4:2c:f9:6d:6e:7b:3f:6b:19:6e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Apr 15 13:15:44 2026 GMT Not After : Apr 18 16:40:44 2026 GMT Subject: CN=B3E3077381427D23ACED74A30EFA672420D164F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:a2:9b:8a:1a:c1:f0:b7:c0:3d:dc:9c:c6: c7:7b:89:9e:dc:25:bc:2a:02:f9:18:04:bc:9c:6f: c3:f3:cb:1e:ee:88:98:ed:9a:fd:06:55:81:d6:b2: 69:cd:2d:48:a7:7c:1b:54:c2:ea:5d:98:ac:43:03: e6:3d:8d:3e:0f:bc:10:4f:cd:c3:d8:24:f7:8d:cb: 45:59:09:a2:a3:bd:d6:43:4b:e5:be:32:c0:99:7d: 07:30:cd:e3:5b:72:04:6c:9a:3a:cc:54:37:76:0f: 9d:78:fd:d8:56:9d:f1:e3:bc:01:a0:ba:c1:b0:59: 54:f8:c5:fb:6e:7b:11:7a:95:45:8e:3b:32:ed:31: b8:07:f3:af:bf:9d:81:83:e2:fc:79:f1:2e:e4:1f: 78:71:ab:f5:15:3d:16:c1:f7:97:33:3d:39:bf:d5: c3:a0:5d:04:95:c4:7c:cb:b0:e0:61:f8:d3:47:ff: 62:ed:ee:f1:85:82:64:c3:e8:20:b3:f2:44:56:b4: 37:2a:b2:86:62:e8:b6:ce:b9:4b:fb:5c:12:71:14: c6:73:87:28:13:f0:77:ad:a8:0c:5d:04:3a:a1:66: 42:3c:61:9e:03:27:a0:80:23:d2:c4:07:d4:e8:62: 9c:ce:66:7f:41:6c:c1:1a:6d:ef:64:e1:d5:9c:f4: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E3:07:73:81:42:7D:23:AC:ED:74:A3:0E:FA:67:24:20:D1:64:F3 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:83:f8:26:9f:ed:d7:1f:30:e4:ed:2e:76:60:cd:37:00: b8:f2:1c:1c:44:b3:ac:fc:27:01:94:7e:26:67:11:c8:70:54: 5b:e7:02:d8:70:40:c4:6c:4e:51:5a:53:3e:0f:a1:9e:54:ac: 08:6d:74:8c:53:45:8d:3f:43:0d:11:67:02:33:a6:f9:b8:9d: db:1f:e5:c1:b0:52:b2:ee:5e:88:fb:68:33:31:be:e2:0d:3d: 21:1b:62:43:13:2b:16:21:0e:22:b9:eb:9e:24:40:c8:5c:ff: 5f:f4:26:62:cb:2b:3e:d1:54:65:8c:67:17:89:38:5c:ee:30: c0:fe:1c:b2:ae:84:d7:fc:74:fc:9c:b3:68:71:40:29:84:60: 51:5f:c1:3f:42:09:8b:04:e0:de:ea:5b:59:0a:3f:24:1e:90: 10:2c:e3:27:b0:02:e5:6c:9b:a6:c5:19:c9:5c:64:08:a2:35: c6:77:0d:4e:94:9d:18:57:b0:f2:35:0e:cb:50:17:38:a1:80: 5b:58:0b:f2:b4:5b:ad:2a:8c:ea:f3:28:03:81:0a:74:5c:c2: 9f:d6:56:8e:7d:55:07:54:31:3a:79:bd:cb:64:b9:35:3b:73: 16:a3:e5:af:ac:ff:5b:9f:84:23:cb:5e:3f:2e:65:2a:8e:73: c1:5d:22:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDdO0mDvVJVAxCz5bW57P2sZbhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNjA0MTUxMzE1NDRaFw0yNjA0MTgxNjQwNDRaMDMxMTAvBgNV BAMTKEIzRTMwNzczODE0MjdEMjNBQ0VENzRBMzBFRkE2NzI0MjBEMTY0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U6KbihrB8LfAPdycxsd7iZ7c JbwqAvkYBLycb8Pzyx7uiJjtmv0GVYHWsmnNLUinfBtUwupdmKxDA+Y9jT4PvBBP zcPYJPeNy0VZCaKjvdZDS+W+MsCZfQcwzeNbcgRsmjrMVDd2D514/dhWnfHjvAGg usGwWVT4xftuexF6lUWOOzLtMbgH86+/nYGD4vx58S7kH3hxq/UVPRbB95czPTm/ 1cOgXQSVxHzLsOBh+NNH/2Lt7vGFgmTD6CCz8kRWtDcqsoZi6LbOuUv7XBJxFMZz hygT8HetqAxdBDqhZkI8YZ4DJ6CAI9LEB9ToYpzOZn9BbMEabe9k4dWc9ERjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+MHc4FCfSOs7XSjDvpnJCDRZPMwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEBg/gmn+3XHzDk7S52YM03ALjyHBxEs6z8 JwGUfiZnEchwVFvnAthwQMRsTlFaUz4PoZ5UrAhtdIxTRY0/Qw0RZwIzpvm4ndsf 5cGwUrLuXoj7aDMxvuINPSEbYkMTKxYhDiK5654kQMhc/1/0JmLLKz7RVGWMZxeJ OFzuMMD+HLKuhNf8dPycs2hxQCmEYFFfwT9CCYsE4N7qW1kKPyQekBAs4yewAuVs m6bFGclcZAiiNcZ3DU6UnRhXsPI1DstQFzihgFtYC/K0W60qjOrzKAOBCnRcwp/W Vo59VQdUMTp5vctkuTU7cxaj5a+s/1ufhCPLXj8uZSqOc8FdIkM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:47 2026 by rpki-client