$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: RfSvOACV4Wc7XS5RYx+HhVMgEa+iMt2wGXTiPcLHQ7s= Subject key identifier: F7:E5:F6:23:D2:A1:D2:22:1E:2A:93:E0:C4:6C:23:22:57:07:A7:EA Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 4B69D8C15600F250DCB84C2B13C91115563EDD0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03DD Signing time: Thu 16 Apr 2026 11:21:05 +0000 Manifest this update: Thu 16 Apr 2026 11:16:05 +0000 Manifest next update: Sun 19 Apr 2026 20:27:05 +0000 Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: GTaf7L6Y3wfU5RJ7D0zvwMuo6IQ+c/QheAfrd6XFhTk=) 2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: yOWWrmF7VI65mmW/qJSqfIDXS5If5ryvU0shcYEJ4r4=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: 2Mco9ackQ4PwcAVBn4smFndK+Bf6IWVVGl+ndoOGQrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:69:d8:c1:56:00:f2:50:dc:b8:4c:2b:13:c9:11:15:56:3e:dd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Apr 16 11:16:05 2026 GMT Not After : Apr 19 20:27:05 2026 GMT Subject: CN=F7E5F623D2A1D2221E2A93E0C46C23225707A7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:3e:53:81:cd:92:6c:c2:ab:3b:99:c1:49: 18:60:b3:46:92:9e:a8:05:d9:b4:65:6a:49:84:bc: d0:66:ed:54:41:ab:87:7f:21:54:7d:f4:88:ac:03: 3c:7d:1b:01:50:1a:82:a9:88:81:d1:02:b7:8b:b9: 66:d3:e4:51:20:2a:7e:0e:9f:71:74:cd:a7:df:e1: be:b7:fa:90:ea:a1:58:31:49:71:53:b0:28:18:88: a7:19:2e:fc:8d:50:fb:a7:2e:0a:20:1d:be:e1:96: 9b:fd:eb:fe:c0:00:8f:64:60:ec:e6:a8:81:29:2c: 88:33:a3:9e:3e:41:4e:58:8c:cc:a9:fa:0e:22:43: bd:ba:d2:b6:f8:b5:a4:6a:20:cc:75:33:20:0f:12: 36:11:d6:8d:82:7f:cb:b5:24:25:ab:fc:c9:4f:5d: db:cc:29:63:c9:a0:ae:84:3b:5a:6a:87:92:81:06: 31:6c:c4:96:cc:96:51:3c:15:93:e0:60:23:5f:9e: dc:90:d6:01:2c:1b:9e:34:7a:78:0e:e1:37:95:27: 1d:77:b5:f7:f0:e9:0b:7c:98:74:84:ce:5c:95:c4: 6e:e9:fc:2b:b8:9e:25:dc:68:b6:43:d6:86:64:1a: a4:fb:55:76:95:a3:07:2a:53:e2:28:9b:72:d2:c6: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:F6:23:D2:A1:D2:22:1E:2A:93:E0:C4:6C:23:22:57:07:A7:EA X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:c6:30:05:18:4a:bd:9a:53:23:e2:01:7a:50:5b:00:1c: 63:48:ab:23:47:98:5d:66:c7:a6:cf:a5:11:04:f8:d7:66:1a: bd:da:84:64:4e:56:fd:b3:70:22:54:cd:91:a4:9c:7d:04:2a: 49:bc:c8:b4:75:15:c9:4e:49:02:67:9a:2b:06:1f:dd:2c:6d: a1:54:39:91:0e:66:f3:ab:99:0b:7c:fe:27:64:17:0b:46:fa: 21:2c:c2:48:e3:28:c8:d3:12:b7:c7:13:00:41:92:92:f3:3e: d4:6e:50:39:5d:93:6c:f6:c4:f2:45:27:22:c9:b7:71:83:65: 35:2c:75:62:52:2c:88:28:29:1c:25:18:6c:6e:22:3d:1b:28: 72:00:28:8d:6b:9c:e8:d1:4c:22:d6:f9:be:09:03:17:a6:63: 17:a3:8a:95:7c:7a:01:3c:61:89:f4:aa:a1:76:f4:3c:4f:6a: 85:c3:3f:13:69:d6:2e:ad:65:5a:60:8c:00:2f:50:42:96:69: 74:5b:5e:8d:9e:21:20:29:47:7c:2d:a4:6b:03:92:b1:43:90: 64:4a:82:4a:5d:88:34:d8:2d:b2:41:f1:48:1f:44:ee:da:31: b0:23:e7:6a:7b:25:69:41:54:68:cb:f6:31:af:e2:bf:20:5e: 96:d5:15:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2nYwVYA8lDcuEwrE8kRFVY+3Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNjA0MTYxMTE2MDVaFw0yNjA0MTkyMDI3MDVaMDMxMTAvBgNV BAMTKEY3RTVGNjIzRDJBMUQyMjIxRTJBOTNFMEM0NkMyMzIyNTcwN0E3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1z5Tgc2SbMKrO5nBSRhgs0aS nqgF2bRlakmEvNBm7VRBq4d/IVR99IisAzx9GwFQGoKpiIHRAreLuWbT5FEgKn4O n3F0zaff4b63+pDqoVgxSXFTsCgYiKcZLvyNUPunLgogHb7hlpv96/7AAI9kYOzm qIEpLIgzo54+QU5YjMyp+g4iQ7260rb4taRqIMx1MyAPEjYR1o2Cf8u1JCWr/MlP XdvMKWPJoK6EO1pqh5KBBjFsxJbMllE8FZPgYCNfntyQ1gEsG540engO4TeVJx13 tffw6Qt8mHSEzlyVxG7p/Cu4niXcaLZD1oZkGqT7VXaVowcqU+Iom3LSxvaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+X2I9Kh0iIeKpPgxGwjIlcHp+owHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkixjAFGEq9mlMj4gF6UFsAHGNIqyNHmF1m x6bPpREE+NdmGr3ahGROVv2zcCJUzZGknH0EKkm8yLR1FclOSQJnmisGH90sbaFU OZEOZvOrmQt8/idkFwtG+iEswkjjKMjTErfHEwBBkpLzPtRuUDldk2z2xPJFJyLJ t3GDZTUsdWJSLIgoKRwlGGxuIj0bKHIAKI1rnOjRTCLW+b4JAxemYxejipV8egE8 YYn0qqF29DxPaoXDPxNp1i6tZVpgjAAvUEKWaXRbXo2eISApR3wtpGsDkrFDkGRK gkpdiDTYLbJB8UgfRO7aMbAj52p7JWlBVGjL9jGv4r8gXpbVFTc= -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:47 2026 by rpki-client