$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft File: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft (raw, json) Hash identifier: j4hjq/sMWyDAYnTnfRJNiyYeTRqrxfjWMtXE9sWJ7fQ= Subject key identifier: B7:8E:D0:C0:B3:AA:BB:D1:D0:AF:89:13:CF:C0:21:F6:10:A5:EA:3E Authority key identifier: 9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 Certificate issuer: /CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Certificate serial: 386F14D15EC3CBEF33E52CF3322BEEC95BA67481 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft Manifest number: 37 Signing time: Fri 17 Apr 2026 00:52:34 +0000 Manifest this update: Fri 17 Apr 2026 00:47:34 +0000 Manifest next update: Mon 20 Apr 2026 05:05:34 +0000 Files and hashes: 1: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl (hash: sqB9x/HN4pOr9xsZJxj2E+qbVSRJuWmh/IY+LcELHT8=) 2: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: oUENuD0SMegzfgG7zCwjryjELhYU0l7sm/nxY+l6d1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6f:14:d1:5e:c3:cb:ef:33:e5:2c:f3:32:2b:ee:c9:5b:a6:74:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Validity Not Before: Apr 17 00:47:34 2026 GMT Not After : Apr 20 05:05:34 2026 GMT Subject: CN=B78ED0C0B3AABBD1D0AF8913CFC021F610A5EA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:55:3b:d9:dd:8b:97:76:2c:cc:7a:53:03: 5f:d8:ce:fe:03:15:ed:2c:00:e5:86:1f:02:21:14: 83:cd:e5:9f:14:ed:8f:21:1d:9f:f4:ff:cc:70:fa: 00:f6:15:e0:e6:f7:46:3a:a2:54:96:25:cc:12:9c: ca:81:af:10:b8:76:87:a3:5b:ce:a2:c3:e4:f8:77: 04:22:99:00:9a:17:24:a0:61:a2:35:14:87:d0:5f: 60:8e:e4:7f:d2:8a:87:30:7b:71:dd:21:d7:88:c4: f9:a4:1f:21:3a:10:fb:a4:33:75:39:66:d3:91:9b: f7:d6:ff:4a:29:20:e5:f5:e7:95:b7:d0:f6:0c:95: d5:4e:90:98:9d:8e:e3:77:01:ec:a3:1a:dc:8a:01: c7:8d:d6:34:6a:16:83:9d:45:5b:76:21:be:4e:c5: cb:35:5f:8b:4e:9b:be:0b:01:e3:d9:d1:86:b7:95: 7e:79:f4:0e:04:37:ec:84:ab:2f:bf:de:75:21:33: 11:3c:5a:21:3c:7d:1f:b0:5e:75:ab:d8:cc:7c:e8: d7:ca:c5:b9:d6:40:b8:96:d7:6e:03:3d:8d:bb:ac: 56:bc:a8:09:c1:5a:24:56:0a:c7:30:9e:08:27:80: 9a:2b:71:24:3f:dc:b1:ed:1b:d6:09:60:5a:60:3e: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:D0:C0:B3:AA:BB:D1:D0:AF:89:13:CF:C0:21:F6:10:A5:EA:3E X509v3 Authority Key Identifier: keyid:9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f3:d2:a6:39:a6:0a:f1:a3:45:a0:c6:42:5b:d9:d6:6b:ef: ff:c0:54:cb:cf:06:be:e8:79:5b:ff:da:53:e4:5a:fb:cf:ad: b2:6c:17:48:ee:06:2e:d6:51:4d:02:38:b0:98:1f:61:54:36: 77:ae:b4:eb:a4:ef:60:56:16:ac:c9:22:20:4b:7a:18:e0:cc: ba:96:9e:cc:e6:c9:b0:0f:7e:aa:6f:ec:77:80:23:78:07:de: 88:fe:9e:85:c8:26:b1:a2:ea:78:a9:ed:a3:e6:b4:3c:37:75: 3f:e9:db:ea:78:09:fe:6f:fb:9f:4e:f3:56:fe:37:bc:4f:c6: 74:4b:f8:21:b5:cf:5b:b0:02:a1:83:37:13:c3:a2:ca:a7:20: ee:9b:6d:3a:cf:f1:8a:91:d1:4a:91:df:1c:c7:b2:14:ce:a5: bc:3c:eb:26:ca:55:b3:29:5f:1b:d8:8e:18:8d:6e:46:60:16: 6f:ed:bc:02:89:33:cc:e4:48:bd:63:93:a6:8e:2a:9e:21:56: 2e:1a:47:2e:d1:4d:a3:f8:f2:fc:38:94:17:55:b9:ae:27:91: 76:b7:62:50:19:53:92:da:0b:da:93:c3:b0:66:88:a5:40:a2: e6:32:2a:c7:63:9c:98:d1:c4:40:a5:7e:8c:01:f9:56:9d:7a: 04:1c:57:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOG8U0V7Dy+8z5SzzMivuyVumdIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVB Q0EzRkU0NTAeFw0yNjA0MTcwMDQ3MzRaFw0yNjA0MjAwNTA1MzRaMDMxMTAvBgNV BAMTKEI3OEVEMEMwQjNBQUJCRDFEMEFGODkxM0NGQzAyMUY2MTBBNUVBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zVU72d2Ll3YszHpTA1/Yzv4D Fe0sAOWGHwIhFIPN5Z8U7Y8hHZ/0/8xw+gD2FeDm90Y6olSWJcwSnMqBrxC4doej W86iw+T4dwQimQCaFySgYaI1FIfQX2CO5H/Siocwe3HdIdeIxPmkHyE6EPukM3U5 ZtORm/fW/0opIOX155W30PYMldVOkJidjuN3AeyjGtyKAceN1jRqFoOdRVt2Ib5O xcs1X4tOm74LAePZ0Ya3lX559A4EN+yEqy+/3nUhMxE8WiE8fR+wXnWr2Mx86NfK xbnWQLiW124DPY27rFa8qAnBWiRWCscwnggngJorcSQ/3LHtG9YJYFpgPikxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt47QwLOqu9HQr4kTz8Ah9hCl6j4wHwYDVR0j BBgwFoAUnZumcPIcILy3tCeFiuVCxayj/kUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMC85RDlCQTY3MEYy MUMyMEJDQjdCNDI3ODU4QUU1NDJDNUFDQTNGRTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVBQ0Ez RkU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThlNDYxMGEtYTc5NC00MDU5LTk3 ZDktZjJjNjlkYTU0YzhiLzAvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQy QzVBQ0EzRkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3z0qY5pgrxo0WgxkJb2dZr7//AVMvPBr7o eVv/2lPkWvvPrbJsF0juBi7WUU0COLCYH2FUNneutOuk72BWFqzJIiBLehjgzLqW nszmybAPfqpv7HeAI3gH3oj+noXIJrGi6nip7aPmtDw3dT/p2+p4Cf5v+59O81b+ N7xPxnRL+CG1z1uwAqGDNxPDosqnIO6bbTrP8YqR0UqR3xzHshTOpbw86ybKVbMp XxvYjhiNbkZgFm/tvAKJM8zkSL1jk6aOKp4hVi4aRy7RTaP48vw4lBdVua4nkXa3 YlAZU5LaC9qTw7BmiKVAouYyKsdjnJjRxEClfowB+VadegQcV9Q= -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:45 2026 by rpki-client