$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: UFdRje7VymoA/0Ej8HocfIFgFQQX73L+q8ZusQMx6Uk= Subject key identifier: EA:81:5E:C0:88:A2:2C:A0:59:4B:11:6D:80:D1:C2:6A:B6:AC:28:DA Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 4BA6F026F932E4E56C107008C62602C787FE4F0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 0126 Signing time: Thu 16 Apr 2026 19:31:30 +0000 Manifest this update: Thu 16 Apr 2026 19:26:30 +0000 Manifest next update: Sun 19 Apr 2026 20:22:30 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: 8u+87a0aAYDUYotwi/tAa2c/5oxBkVUnbUnGhP5bBDQ=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a6:f0:26:f9:32:e4:e5:6c:10:70:08:c6:26:02:c7:87:fe:4f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Apr 16 19:26:30 2026 GMT Not After : Apr 19 20:22:30 2026 GMT Subject: CN=EA815EC088A22CA0594B116D80D1C26AB6AC28DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:61:54:78:ff:d3:46:0a:bb:da:6c:80:a3: c6:5c:c7:7c:82:3b:d4:d8:7d:0a:bb:58:75:f2:66: f6:71:9a:b8:a2:96:56:5f:52:d9:97:69:b4:ba:ad: b4:c5:b4:cd:29:24:01:1d:97:a1:fa:06:2b:11:c8: 92:3d:4a:6d:0c:87:9f:18:77:89:61:0e:e9:76:9d: 76:94:62:d3:fa:85:4d:e4:7f:59:e2:39:cc:fd:d8: 76:65:eb:87:9f:0b:19:1f:e5:a4:af:f3:36:4a:b3: 5d:24:90:04:8a:fc:27:4f:7a:ed:fc:03:6e:21:c5: 75:e6:08:b1:f1:da:38:cd:e3:bc:ac:8a:36:60:c8: e7:3a:1e:15:7e:5b:95:fe:19:33:fe:ea:c6:6a:80: 7f:0d:76:5b:40:eb:3f:04:1f:ac:b7:5b:7b:77:6e: 75:08:58:d7:53:dd:b6:c3:d9:52:79:9b:0f:28:f8: a9:f7:8e:a8:74:6c:06:c0:1c:65:27:2c:b1:85:b1: 18:b0:7d:61:4c:53:4c:c5:05:4c:9b:63:aa:73:29: 05:93:bb:f1:c3:fa:30:43:47:c5:df:18:99:cf:e6: 92:47:18:cc:1f:32:2f:2b:d8:50:f2:3f:e8:dd:26: 9e:6c:c5:9a:e1:aa:0b:cc:b5:ff:ba:99:cc:2d:b6: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:5E:C0:88:A2:2C:A0:59:4B:11:6D:80:D1:C2:6A:B6:AC:28:DA X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:98:57:f7:ef:8f:f2:45:a3:6a:5a:2e:e3:97:25:70:f5:25: bf:f0:37:30:d3:9f:18:47:99:61:e3:79:ac:4f:81:ec:be:68: 31:a2:26:a5:90:56:ca:b9:4e:2e:51:06:9d:35:05:23:7d:52: 09:72:7c:07:ac:b2:69:58:a8:9d:ab:c9:b9:fe:3f:af:0d:9c: db:f7:ba:05:4a:39:65:42:d5:ce:69:16:37:bd:00:85:7b:2f: 8f:10:ef:a0:36:e0:85:6a:12:6c:84:bc:c6:30:c6:3c:a5:dd: ec:5a:21:47:7a:11:d1:22:21:7b:64:35:3f:0f:ce:c9:91:01: d9:2b:63:07:df:bd:34:f8:3a:56:bc:ad:ba:07:f9:b6:03:fd: cf:8c:c7:26:9b:ce:4c:36:93:20:b5:32:ee:3a:48:1f:48:50: 05:2a:d5:3e:a0:76:38:38:02:fd:d4:8e:f6:07:98:db:3d:6b: b0:0c:8c:6d:c1:49:46:ce:8b:26:03:a3:34:5e:e3:0a:8f:fa: cb:9c:c1:38:23:b4:dc:91:bc:52:85:6b:52:52:03:8a:2d:ae: 0f:8d:23:4d:3f:cd:c9:54:c6:60:b9:2a:dc:00:fc:f5:6d:46: 9b:8a:f3:2b:e8:b4:07:6f:20:2f:1d:62:f7:64:30:ae:d0:d9: 84:05:71:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6bwJvky5OVsEHAIxiYCx4f+TwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNjA0MTYxOTI2MzBaFw0yNjA0MTkyMDIyMzBaMDMxMTAvBgNV BAMTKEVBODE1RUMwODhBMjJDQTA1OTRCMTE2RDgwRDFDMjZBQjZBQzI4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCmFUeP/TRgq72myAo8Zcx3yC O9TYfQq7WHXyZvZxmriillZfUtmXabS6rbTFtM0pJAEdl6H6BisRyJI9Sm0Mh58Y d4lhDul2nXaUYtP6hU3kf1niOcz92HZl64efCxkf5aSv8zZKs10kkASK/CdPeu38 A24hxXXmCLHx2jjN47ysijZgyOc6HhV+W5X+GTP+6sZqgH8NdltA6z8EH6y3W3t3 bnUIWNdT3bbD2VJ5mw8o+Kn3jqh0bAbAHGUnLLGFsRiwfWFMU0zFBUybY6pzKQWT u/HD+jBDR8XfGJnP5pJHGMwfMi8r2FDyP+jdJp5sxZrhqgvMtf+6mcwttvNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oFewIiiLKBZSxFtgNHCarasKNowHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmYV/fvj/JFo2paLuOXJXD1Jb/wNzDTnxhH mWHjeaxPgey+aDGiJqWQVsq5Ti5RBp01BSN9UglyfAessmlYqJ2rybn+P68NnNv3 ugVKOWVC1c5pFje9AIV7L48Q76A24IVqEmyEvMYwxjyl3exaIUd6EdEiIXtkNT8P zsmRAdkrYwffvTT4Ola8rboH+bYD/c+Mxyabzkw2kyC1Mu46SB9IUAUq1T6gdjg4 Av3UjvYHmNs9a7AMjG3BSUbOiyYDozRe4wqP+sucwTgjtNyRvFKFa1JSA4otrg+N I00/zclUxmC5KtwA/PVtRpuK8yvotAdvIC8dYvdkMK7Q2YQFcWI= -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:19 2026 by rpki-client