$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: h7iogzX1HBcl9YCxwSc2OsjE8QKfzrexfjPu0PfAW/k= Subject key identifier: A6:3F:5E:10:E1:AC:EE:6D:3C:F1:90:63:F9:B5:DB:F3:56:51:E7:8E Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 33D33A2C9AC02A5A691A5959F650C497552A3F8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 16:22:27 +0000 Manifest this update: Sat 18 Apr 2026 16:17:27 +0000 Manifest next update: Tue 21 Apr 2026 22:39:27 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: MseDkp2UAKOzNFXtkObsUd2vXrDBHUKsxAXqUmlzXsc=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d3:3a:2c:9a:c0:2a:5a:69:1a:59:59:f6:50:c4:97:55:2a:3f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Apr 18 16:17:27 2026 GMT Not After : Apr 21 22:39:27 2026 GMT Subject: CN=A63F5E10E1ACEE6D3CF19063F9B5DBF35651E78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:da:64:6c:fb:18:c1:4c:ff:77:f9:cb:87: cd:2b:2e:d4:cb:2e:a5:44:78:f9:24:21:25:60:0b: 6c:0f:d2:91:0d:26:36:51:fb:b1:1c:29:6e:9e:3c: 14:92:12:97:95:42:9e:1b:78:7c:94:a1:2a:95:0c: b4:1a:74:ed:81:9f:7c:4c:aa:96:87:ce:20:72:60: 9e:a1:c4:5d:07:bc:0c:bc:7f:66:b6:f6:92:9e:69: 09:fe:28:c4:fa:20:59:8d:b6:4b:b1:fc:a9:14:bb: 6f:09:41:39:4f:f6:a0:59:49:d7:93:f3:fc:4f:e3: 4c:bf:ef:f3:67:f7:bb:22:88:24:5a:ac:31:18:3a: e5:fe:5e:57:21:60:84:6c:a2:3d:30:75:ad:bb:f0: fa:3b:c6:99:82:2a:2a:ee:21:f2:db:b1:7c:cc:fe: bd:37:23:40:e2:93:71:5a:ed:38:98:d1:38:07:38: 2d:ff:84:ea:66:3a:d4:d3:f5:60:df:61:5d:0d:2e: 9e:2b:93:f3:f8:6f:6c:28:7e:ab:6e:21:d2:32:e2: 84:2e:2b:30:3b:ec:f5:07:20:90:1b:58:18:5f:1a: f9:cc:90:f2:df:4b:37:ae:78:73:0d:0c:4c:b1:67: 7f:c5:78:f0:a6:b6:0b:f7:42:65:f4:09:db:3b:1d: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:5E:10:E1:AC:EE:6D:3C:F1:90:63:F9:B5:DB:F3:56:51:E7:8E X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a5:71:72:c8:e2:b9:dd:8a:47:f5:f1:40:89:43:2b:2c:31: cf:b2:f6:c6:a2:7e:ff:6c:60:45:4b:e4:6d:15:af:f7:07:b5: 6c:60:94:11:6e:f2:eb:45:db:d3:29:16:37:0e:3f:69:38:1f: 0a:85:5b:c4:db:b7:68:73:f6:1a:f2:7d:23:98:3e:6e:c3:a7: ef:df:bc:e3:b0:0d:b2:d2:74:f6:e4:c2:d6:30:fb:0f:98:77: 59:d7:ca:a3:92:b8:d0:64:90:e0:03:6c:0a:ac:ea:b0:4e:2d: df:4d:72:d2:21:58:0d:0a:01:2a:09:24:cd:eb:3a:00:82:af: 5f:2b:61:f1:06:e0:bc:d9:28:a7:e7:4b:45:4c:c4:2c:9f:24: c8:cb:8a:9c:86:85:14:b5:8c:36:ff:9d:a9:f6:eb:b9:bc:a1: 82:1d:62:38:6d:5f:a7:2a:86:f7:4e:7a:ad:21:8f:cd:7a:df: cd:27:71:38:cd:ac:ad:71:bd:9f:55:cd:f6:28:44:33:2c:3f: b8:9a:bf:bb:45:85:73:cc:d4:ec:7a:b7:7c:14:5c:77:be:c6: b0:7b:b8:06:48:b2:bd:75:e7:51:08:c9:45:c8:ed:67:1b:d5: 8e:45:0d:53:a9:ec:de:4d:b5:2f:7d:6c:c0:93:5d:cb:cf:a5: 95:c9:74:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9M6LJrAKlppGllZ9lDEl1UqP40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNjA0MTgxNjE3MjdaFw0yNjA0MjEyMjM5MjdaMDMxMTAvBgNV BAMTKEE2M0Y1RTEwRTFBQ0VFNkQzQ0YxOTA2M0Y5QjVEQkYzNTY1MUU3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/tpkbPsYwUz/d/nLh80rLtTL LqVEePkkISVgC2wP0pENJjZR+7EcKW6ePBSSEpeVQp4beHyUoSqVDLQadO2Bn3xM qpaHziByYJ6hxF0HvAy8f2a29pKeaQn+KMT6IFmNtkux/KkUu28JQTlP9qBZSdeT 8/xP40y/7/Nn97siiCRarDEYOuX+XlchYIRsoj0wda278Po7xpmCKiruIfLbsXzM /r03I0Dik3Fa7TiY0TgHOC3/hOpmOtTT9WDfYV0NLp4rk/P4b2wofqtuIdIy4oQu KzA77PUHIJAbWBhfGvnMkPLfSzeueHMNDEyxZ3/FePCmtgv3QmX0Cds7HZ0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpj9eEOGs7m088ZBj+bXb81ZR544wHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJalcXLI4rndikf18UCJQyssMc+y9saifv9s YEVL5G0Vr/cHtWxglBFu8utF29MpFjcOP2k4HwqFW8Tbt2hz9hryfSOYPm7Dp+/f vOOwDbLSdPbkwtYw+w+Yd1nXyqOSuNBkkOADbAqs6rBOLd9NctIhWA0KASoJJM3r OgCCr18rYfEG4LzZKKfnS0VMxCyfJMjLipyGhRS1jDb/nan267m8oYIdYjhtX6cq hvdOeq0hj816380ncTjNrK1xvZ9VzfYoRDMsP7iav7tFhXPM1Ox6t3wUXHe+xrB7 uAZIsr1151EIyUXI7Wcb1Y5FDVOp7N5NtS99bMCTXcvPpZXJdAU= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:29 2026 by rpki-client