$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: v6CImslbZcWCQ5JQA+Gqjjw8mwTfBuZM61mViHqKEHU= Subject key identifier: 3C:91:65:11:8D:8B:01:13:3D:E8:0A:1E:A0:09:4D:D0:92:B4:00:C9 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 4FAF6061C28590734DAEC29E866F1132D46389EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 0138 Signing time: Fri 17 Apr 2026 02:31:19 +0000 Manifest this update: Fri 17 Apr 2026 02:26:19 +0000 Manifest next update: Mon 20 Apr 2026 13:42:19 +0000 Files and hashes: 1: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: Bk9RT2j1xJVQqo4BfwCv4yGBSJq/H9qBEHKahbf7tQc=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: q9toowJOz16uhrBCtofU3traOAjII8kFB2udCQItBiM=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Uw+aclh2qxCETkaiurOCAIwByyRhtpJmoX60PZbRrk0=) 4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: dzVwDfvwn6dt955PrwcJUO1vUOBgoedqKYbnGtvlqDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:af:60:61:c2:85:90:73:4d:ae:c2:9e:86:6f:11:32:d4:63:89:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Apr 17 02:26:19 2026 GMT Not After : Apr 20 13:42:19 2026 GMT Subject: CN=3C9165118D8B01133DE80A1EA0094DD092B400C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:c8:c1:6f:ae:1d:c0:2f:85:5b:fa:2d:79: 9a:e7:81:ec:8d:a1:26:0a:c4:e2:44:bb:6c:39:ff: bc:c3:0e:f2:fc:17:8d:96:d9:47:5e:0a:6a:ec:17: ff:ed:be:c2:78:5c:85:04:48:c8:2b:ea:b1:35:67: 37:07:db:3d:5f:64:95:c2:0b:3d:f4:8a:0e:47:75: 15:e6:29:bf:43:f6:14:8e:25:e6:20:25:71:a0:14: b4:6e:bb:7e:f4:be:08:a1:1e:31:d0:a7:cd:c8:bd: 0c:18:d0:cf:2e:a0:62:47:49:eb:5f:1b:c7:83:2f: dc:49:b7:ca:a4:d6:3f:8a:c6:78:78:93:61:2f:59: e3:51:f0:ab:2b:df:9e:be:09:c4:3a:35:10:d2:e8: 5b:29:c4:ca:61:4a:37:dc:54:f2:aa:c8:26:88:1d: 1b:df:1f:be:b3:6d:41:f9:98:3e:6c:38:c1:20:eb: 7c:3b:78:78:e3:4b:d5:85:a4:87:48:25:c4:20:1f: 08:10:83:75:66:d4:73:d1:05:4b:81:15:ec:a6:ae: 34:3e:b7:54:e4:11:45:83:72:3a:88:48:32:ea:c1: 02:a5:aa:58:13:47:d4:1c:31:b9:82:90:dc:c2:23: 1d:43:08:fb:ac:2c:9a:b3:45:a3:12:a0:c1:53:73: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:91:65:11:8D:8B:01:13:3D:E8:0A:1E:A0:09:4D:D0:92:B4:00:C9 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:49:c6:31:1b:08:f7:9d:2b:8b:52:7c:09:6d:17:3c:b7:82: af:ad:17:9d:3a:d6:72:01:3b:8d:37:ab:f9:0e:f8:8b:3d:b6: bd:64:fc:5e:92:7a:ce:f9:ac:b7:6a:4b:81:53:ff:49:cd:9c: 64:5f:13:91:7b:5c:ee:77:76:ba:b0:84:65:c9:6f:47:7f:33: ac:32:e3:ec:ec:b5:41:78:d0:42:57:1d:8c:66:09:c7:73:fe: f3:b1:c9:19:9e:f9:ba:5b:31:39:9e:7c:39:4c:5d:1b:8d:39: 3b:79:ce:d4:39:be:f8:a1:bb:38:ff:b4:73:41:87:75:ee:07: 84:d7:59:93:a7:7b:ac:e5:f5:2d:7c:3d:36:c1:1f:3a:d2:df: 9b:ec:c7:6c:8d:3c:97:2d:76:02:cf:91:35:f7:05:84:4c:2e: 25:50:b2:08:ac:7c:f3:33:2a:67:09:53:af:ed:6a:1e:d1:00: eb:b0:61:1a:c1:04:1e:ca:70:1c:84:6f:77:a3:0a:1a:82:0f: 8f:78:da:95:94:48:48:71:79:8e:37:2f:6d:d9:fb:18:a8:38: 4f:75:22:13:49:19:47:2d:69:29:36:6a:e7:94:72:1b:54:2e: 11:e5:3e:67:6d:05:a3:63:9e:16:0e:4d:d1:bc:00:19:dc:e7: 07:f0:ca:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT69gYcKFkHNNrsKehm8RMtRjie8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNjA0MTcwMjI2MTlaFw0yNjA0MjAxMzQyMTlaMDMxMTAvBgNV BAMTKDNDOTE2NTExOEQ4QjAxMTMzREU4MEExRUEwMDk0REQwOTJCNDAwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TsjBb64dwC+FW/oteZrngeyN oSYKxOJEu2w5/7zDDvL8F42W2UdeCmrsF//tvsJ4XIUESMgr6rE1ZzcH2z1fZJXC Cz30ig5HdRXmKb9D9hSOJeYgJXGgFLRuu370vgihHjHQp83IvQwY0M8uoGJHSetf G8eDL9xJt8qk1j+Kxnh4k2EvWeNR8Ksr356+CcQ6NRDS6FspxMphSjfcVPKqyCaI HRvfH76zbUH5mD5sOMEg63w7eHjjS9WFpIdIJcQgHwgQg3Vm1HPRBUuBFeymrjQ+ t1TkEUWDcjqISDLqwQKlqlgTR9QcMbmCkNzCIx1DCPusLJqzRaMSoMFTc+LxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJFlEY2LARM96AoeoAlN0JK0AMkwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5JxjEbCPedK4tSfAltFzy3gq+tF5061nIB O403q/kO+Is9tr1k/F6Ses75rLdqS4FT/0nNnGRfE5F7XO53drqwhGXJb0d/M6wy 4+zstUF40EJXHYxmCcdz/vOxyRme+bpbMTmefDlMXRuNOTt5ztQ5vvihuzj/tHNB h3XuB4TXWZOne6zl9S18PTbBHzrS35vsx2yNPJctdgLPkTX3BYRMLiVQsgisfPMz KmcJU6/tah7RAOuwYRrBBB7KcByEb3ejChqCD4942pWUSEhxeY43L23Z+xioOE91 IhNJGUctaSk2aueUchtULhHlPmdtBaNjnhYOTdG8ABnc5wfwyow= -----END CERTIFICATE-----Generated at Fri Apr 17 15:00:13 2026 by rpki-client