$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: Xp+EIiC4jC1gCuNCo23S+mheNpNDYTNHAPzJmuK3AmU= Subject key identifier: CF:D4:E4:BE:F9:04:97:F8:92:A9:25:FE:73:C1:0C:67:7E:82:3C:7D Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 244B9DE50FAD62FBBF6EBC7EC25B9775103E9C52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0263 Signing time: Thu 16 Apr 2026 09:04:33 +0000 Manifest this update: Thu 16 Apr 2026 08:59:33 +0000 Manifest next update: Sun 19 Apr 2026 13:09:33 +0000 Files and hashes: 1: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: 1LaVLKJydCdtnkBShHGTk6ZlOayh5GtE/ZWlv15AvXg=) 2: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: TQ1P9+Ueo7t848GajM1Rqo7V7lYwYUfL96+Uk8WEO/o=) 3: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: 9qEvIzOy0D8JAXDM1zYF6HhMW0WOzNrErV421v4pSGY=) 4: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 5: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: dTTw1IZ3BImbrODm1sWSz9DeIvvIV+CkogY6l3pC9R8=) 6: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: cfcpdborixLmAvnOvVOT9mmgPVfdvgBwX3rdy8MUCdQ=) 7: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: hNqZ+JkFdmpVBbnrfgYR7HGeym8OAEjOYscDgCH/5hM=) 8: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: MZclv9K4GJgA+tCVziLM3YS62d2tX/hGsU3amrc5L0U=) 9: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: mPZNOPsgfXa1c64eoZKp1e0U6o0A6Ehpqgp0nKGoNs4=) 10: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: Ww/jNd61B9A1/46Fmq9/EbBn/KqfNGTttbLAchHUnzk=) 11: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 12: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: arNaPVVJzpieAXuTdc4wf10gLc7zsuQ9t90cD2/EEfE=) 13: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Trdt5DuwnGYJQwzDh9LPySvcRxJZEwdVpuGD0dy7U9w=) 14: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: 4C67Et4Tmkkm4HgecHix/D+upKfqIaXlX/gO10UpfVk=) 15: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 16: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 17: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: OpWI2hnQ50BYj2vyQu4MX8i+rC2Aw8SH2cQtCnW4i+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4b:9d:e5:0f:ad:62:fb:bf:6e:bc:7e:c2:5b:97:75:10:3e:9c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Apr 16 08:59:33 2026 GMT Not After : Apr 19 13:09:33 2026 GMT Subject: CN=CFD4E4BEF90497F892A925FE73C10C677E823C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:54:11:ac:98:dc:74:7e:6c:bd:a7:3b:67: d1:37:9f:41:7a:2f:27:fc:7b:18:43:01:e0:2c:cc: c3:18:5f:36:b5:ba:24:8e:fa:1f:d4:dd:5e:48:78: 4b:31:83:85:c1:f1:fc:0f:0f:32:b7:a9:54:da:9e: ee:17:9b:e6:14:a0:ea:71:83:37:81:2c:50:92:6c: 73:c6:3d:b6:06:9a:f4:ac:bf:4b:02:ba:07:07:97: 53:48:90:65:9c:8b:57:25:2a:8b:23:1b:69:f7:d6: 06:10:08:74:de:d3:7a:ec:95:bc:b7:13:d8:71:01: 07:87:1f:65:a7:1c:8b:4e:5a:ed:55:13:31:fe:bb: 0c:6d:62:bf:9c:5e:9b:ba:92:1c:32:24:c3:eb:b1: 78:82:aa:4f:b6:20:61:7e:dc:f9:ad:9f:ad:2d:05: d6:6f:34:09:13:ae:14:52:27:52:43:05:0c:a6:f5: 05:1e:be:a1:d3:80:b8:08:4e:ed:22:73:18:7e:d3: bc:e8:5d:5b:f2:1e:bf:5e:75:8f:c0:24:c5:b5:84: 56:6e:21:75:d1:08:77:7a:b2:66:e3:a4:da:20:4a: 9c:cc:9e:24:20:59:83:0f:55:88:00:c7:0f:32:b2: 72:76:dc:4e:bf:fc:3b:a5:2d:df:23:01:62:13:67: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:E4:BE:F9:04:97:F8:92:A9:25:FE:73:C1:0C:67:7E:82:3C:7D X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0a:b1:7d:06:f2:36:a1:8f:96:d7:e9:f3:ad:95:5a:07:b3: 92:ca:47:a7:99:b1:9c:ce:b7:37:85:78:8a:ef:2b:11:bb:26: 10:34:29:d1:9f:88:97:c8:61:59:9f:23:c8:64:f4:ab:53:4c: d9:ab:83:28:7d:d8:0d:b7:7f:c9:65:50:36:cb:7d:38:da:c4: 22:4d:36:d4:74:28:fd:fb:a8:fd:d4:b4:81:f9:fe:08:7d:77: c0:d7:e2:da:2a:c4:2c:9d:be:3d:63:bd:78:d1:86:cb:50:9c: be:f8:11:e6:9b:a9:c7:81:91:a2:f7:83:28:a1:ee:37:ce:94: 62:c8:d8:70:fe:c8:44:40:53:a6:c2:73:07:1e:5e:3f:6d:2c: df:53:01:5b:cd:11:91:15:7a:b3:52:c8:21:25:c8:d8:68:f3: a7:56:9c:33:65:5f:21:03:0b:55:9b:62:a4:32:ea:4e:d5:cc: 93:bc:0e:86:d1:e2:ab:d5:d9:b0:ec:5b:be:28:1b:62:4c:3d: 06:bb:a9:85:a2:38:2a:18:44:5a:be:d5:18:48:77:8c:6d:67: 1a:03:1f:ad:36:c9:8e:46:7a:7e:17:ae:fa:d6:a3:4a:3b:c5: 74:0e:98:9b:23:54:98:9d:74:b6:77:d8:31:ac:87:d2:89:e1: 62:4e:e6:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEud5Q+tYvu/brx+wluXdRA+nFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjA0MTYwODU5MzNaFw0yNjA0MTkxMzA5MzNaMDMxMTAvBgNV BAMTKENGRDRFNEJFRjkwNDk3Rjg5MkE5MjVGRTczQzEwQzY3N0U4MjNDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyR1QRrJjcdH5svac7Z9E3n0F6 Lyf8exhDAeAszMMYXza1uiSO+h/U3V5IeEsxg4XB8fwPDzK3qVTanu4Xm+YUoOpx gzeBLFCSbHPGPbYGmvSsv0sCugcHl1NIkGWci1clKosjG2n31gYQCHTe03rslby3 E9hxAQeHH2WnHItOWu1VEzH+uwxtYr+cXpu6khwyJMPrsXiCqk+2IGF+3Pmtn60t BdZvNAkTrhRSJ1JDBQym9QUevqHTgLgITu0icxh+07zoXVvyHr9edY/AJMW1hFZu IXXRCHd6smbjpNogSpzMniQgWYMPVYgAxw8ysnJ23E6//DulLd8jAWITZ3N7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9TkvvkEl/iSqSX+c8EMZ36CPH0wHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0KsX0G8jahj5bX6fOtlVoHs5LKR6eZsZzO tzeFeIrvKxG7JhA0KdGfiJfIYVmfI8hk9KtTTNmrgyh92A23f8llUDbLfTjaxCJN NtR0KP37qP3UtIH5/gh9d8DX4toqxCydvj1jvXjRhstQnL74EeabqceBkaL3gyih 7jfOlGLI2HD+yERAU6bCcwceXj9tLN9TAVvNEZEVerNSyCElyNho86dWnDNlXyED C1WbYqQy6k7VzJO8DobR4qvV2bDsW74oG2JMPQa7qYWiOCoYRFq+1RhId4xtZxoD H602yY5Gen4XrvrWo0o7xXQOmJsjVJiddLZ32DGsh9KJ4WJO5ig= -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:30 2026 by rpki-client