$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: cAbcVMOm7eCPcIXK805IgWV3kizXO3pjFCwQW5VErzw= Subject key identifier: F8:13:83:00:0B:2A:EA:9F:91:C6:2A:0D:2B:48:88:27:75:91:75:D9 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 3C861D85DD377723B7D159558B7B8B4085D837C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 0127 Signing time: Thu 16 Apr 2026 21:20:59 +0000 Manifest this update: Thu 16 Apr 2026 21:15:59 +0000 Manifest next update: Sun 19 Apr 2026 23:38:59 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) 2: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: DiczlrD9CkQYSGr5zSUA4ThIZ0vVPfCEW/FALyV2SVw=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:86:1d:85:dd:37:77:23:b7:d1:59:55:8b:7b:8b:40:85:d8:37:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Apr 16 21:15:59 2026 GMT Not After : Apr 19 23:38:59 2026 GMT Subject: CN=F81383000B2AEA9F91C62A0D2B488827759175D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:39:ba:ad:30:9f:92:90:b2:3b:95:57:65:6c: bc:93:6c:a7:63:e5:27:c7:0b:51:74:d5:30:aa:37: 62:b4:ee:47:30:05:22:b5:6b:65:3b:57:d0:93:8d: f3:fa:c6:73:b4:a6:9d:d9:52:36:40:ff:45:81:15: f2:87:69:98:42:b7:80:99:53:5a:b9:44:1d:96:b4: 92:8a:23:4e:24:9b:c3:03:94:de:5e:19:bf:a2:53: 3c:e3:13:78:a1:ed:c1:3c:37:6b:eb:fd:25:0d:fb: 5a:74:e3:90:a9:54:63:9e:34:52:08:3d:cd:59:ed: de:8b:de:58:ab:77:bd:7b:cf:8a:bc:8d:60:41:c6: 60:fe:55:60:a3:1e:3a:fe:b9:23:8e:22:74:49:38: ba:1d:8f:73:1b:a4:f1:60:1a:bc:28:9e:aa:ab:c6: 00:be:bb:a9:0f:61:a1:1c:5f:8b:ee:cd:7d:4f:df: 33:be:1f:9f:0a:10:5d:14:8b:3a:e9:80:78:02:65: 9f:c3:07:d9:cd:a9:36:d6:3e:aa:4e:b6:e8:4f:a3: a5:91:5d:4b:a8:3c:d5:41:3f:37:f8:46:d5:e7:ad: cc:11:94:30:a2:a2:5d:6c:22:ec:1c:e5:48:51:01: 5a:ca:e8:82:da:63:4c:5b:3f:7d:4e:9a:09:62:e1: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:13:83:00:0B:2A:EA:9F:91:C6:2A:0D:2B:48:88:27:75:91:75:D9 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:3f:2e:43:71:54:71:06:fd:20:fa:ab:f3:a6:c9:6a:70: e2:dd:8a:83:9d:dc:42:e9:a7:fa:13:ef:69:38:6f:78:0d:c4: c5:d1:0a:0f:e4:33:ae:9e:dc:2d:3e:ff:37:6a:c0:d3:53:b5: 1f:65:c5:7f:e1:11:f1:79:0a:05:56:be:4b:ca:56:09:c4:c8: d5:0a:24:3d:f7:70:85:24:da:b5:a2:e9:31:55:0e:af:7f:4e: fe:69:0f:d7:d6:fd:5c:04:d2:b7:60:a5:6f:14:08:4d:fc:fa: 94:2c:83:40:12:e1:3b:af:1e:30:a8:ef:d2:5f:7e:49:03:72: 6f:91:89:d5:3d:86:11:d9:34:37:5c:38:98:51:42:52:ec:12: 75:5a:97:e6:85:a9:c2:41:83:f6:7d:b6:f1:96:99:94:27:26: ae:a1:bf:b4:bf:2b:43:a9:36:ed:bc:b5:db:b3:7f:cf:97:2b: 96:52:d6:4e:6e:37:93:59:43:32:1c:a6:27:b4:c2:7e:9c:3d: d6:94:11:9e:51:9f:ad:ab:75:d9:81:06:15:6e:eb:d1:6f:c5: 28:18:ac:a5:40:b0:12:96:98:b1:4f:2a:42:61:90:b6:85:28: 50:01:86:be:f1:ea:bb:d9:fb:66:2d:3b:5e:92:92:07:d4:39: 60:f9:dc:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIYdhd03dyO30VlVi3uLQIXYN8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNjA0MTYyMTE1NTlaFw0yNjA0MTkyMzM4NTlaMDMxMTAvBgNV BAMTKEY4MTM4MzAwMEIyQUVBOUY5MUM2MkEwRDJCNDg4ODI3NzU5MTc1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhObqtMJ+SkLI7lVdlbLyTbKdj 5SfHC1F01TCqN2K07kcwBSK1a2U7V9CTjfP6xnO0pp3ZUjZA/0WBFfKHaZhCt4CZ U1q5RB2WtJKKI04km8MDlN5eGb+iUzzjE3ih7cE8N2vr/SUN+1p045CpVGOeNFII Pc1Z7d6L3lird717z4q8jWBBxmD+VWCjHjr+uSOOInRJOLodj3MbpPFgGrwonqqr xgC+u6kPYaEcX4vuzX1P3zO+H58KEF0UizrpgHgCZZ/DB9nNqTbWPqpOtuhPo6WR XUuoPNVBPzf4RtXnrcwRlDCiol1sIuwc5UhRAVrK6ILaY0xbP31Omgli4WV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+BODAAsq6p+RxioNK0iIJ3WRddkwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJBPy5DcVRxBv0g+qvzpslqcOLdioOd3ELp p/oT72k4b3gNxMXRCg/kM66e3C0+/zdqwNNTtR9lxX/hEfF5CgVWvkvKVgnEyNUK JD33cIUk2rWi6TFVDq9/Tv5pD9fW/VwE0rdgpW8UCE38+pQsg0AS4TuvHjCo79Jf fkkDcm+RidU9hhHZNDdcOJhRQlLsEnVal+aFqcJBg/Z9tvGWmZQnJq6hv7S/K0Op Nu28tduzf8+XK5ZS1k5uN5NZQzIcpie0wn6cPdaUEZ5Rn62rddmBBhVu69FvxSgY rKVAsBKWmLFPKkJhkLaFKFABhr7x6rvZ+2YtO16SkgfUOWD53MA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:35 2026 by rpki-client