$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: VMT0KXElJ9DJk0PnsET6VqurlRoKYAK4/NP8YFv/cDo= Subject key identifier: 24:A0:4A:6F:91:A6:0F:36:FE:77:3C:F9:9B:B5:70:76:24:32:39:6D Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 1E6C4369858E080CD5C0EED8F0B8F2FAB464976C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 0178 Signing time: Sat 18 Apr 2026 06:31:26 +0000 Manifest this update: Sat 18 Apr 2026 06:26:26 +0000 Manifest next update: Tue 21 Apr 2026 16:47:26 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) 2: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) 4: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: u2Eb72tdY0tUzuPp0okREmAlMfnXtf+G/g8KXPLuQwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 16:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6c:43:69:85:8e:08:0c:d5:c0:ee:d8:f0:b8:f2:fa:b4:64:97:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Apr 18 06:26:26 2026 GMT Not After : Apr 21 16:47:26 2026 GMT Subject: CN=24A04A6F91A60F36FE773CF99BB570762432396D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:64:e3:7c:53:02:f9:cf:1e:65:44:2b:86: 6d:93:1c:97:75:91:ae:f9:cb:a0:4c:a5:4f:b6:f6: 25:08:26:3f:6e:e3:63:bf:b4:64:9f:b5:25:ce:59: 09:66:44:57:85:bf:92:f0:ab:ef:32:c4:a6:af:eb: a3:5d:29:c7:e6:a8:49:96:3d:7e:bc:a5:62:9c:a0: d9:0a:ee:6f:4f:12:fc:6e:10:55:a7:54:a1:a8:ec: 2f:2d:8e:50:80:c4:88:42:72:99:2a:05:48:6c:6a: 7a:12:1c:94:34:34:41:b8:b3:ff:fb:66:00:4b:b8: 3d:dc:f1:47:35:7e:02:46:36:2d:7c:1f:6f:6e:29: f6:67:1d:bb:80:f7:74:f2:f5:3d:51:04:36:17:ae: 75:3d:5d:7d:1e:7f:75:a9:e0:46:c3:e2:74:03:f7: d7:02:00:bd:79:48:88:5f:79:8b:65:5a:ce:cc:7b: 81:da:ce:50:37:6a:79:53:0d:ea:bf:c5:28:63:0a: 7b:3f:dc:e4:7f:8c:90:54:20:dd:68:2f:6c:d7:f4: a4:e5:43:e4:21:73:41:a4:25:55:4c:d4:bb:fe:42: 1a:27:6b:69:cc:24:5c:c7:6c:70:ea:4b:aa:3c:d5: 51:04:35:99:3b:b6:fd:66:37:02:bf:91:e6:a2:a1: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:4A:6F:91:A6:0F:36:FE:77:3C:F9:9B:B5:70:76:24:32:39:6D X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:f6:0b:c5:36:7f:e3:51:ee:07:25:b0:f6:e1:b4:57:3a: 92:2e:04:6a:74:69:17:02:67:e1:ed:84:e3:c7:c7:c2:df:1f: 80:3e:47:f7:49:52:38:06:6a:72:9c:50:90:29:d6:cb:77:6f: ff:92:f4:35:3e:0c:3a:e0:0f:ac:20:23:f2:08:25:6e:79:36: 94:92:be:2a:01:6e:e5:47:ec:2d:a0:3d:15:69:09:de:c5:b0: 1e:8a:4f:50:1f:fd:1f:db:40:6e:13:19:3b:84:25:da:af:30: 07:2a:18:07:0d:01:5b:1b:10:a0:ec:31:02:79:d3:2e:6b:fa: b4:4c:c7:d2:4f:85:11:25:00:ea:27:8d:df:a4:c1:82:74:65: d1:30:c3:d6:83:ca:3c:63:d1:c1:53:f8:c5:48:a2:ef:2f:4c: d7:f3:d8:73:d9:b5:dd:7c:b6:35:b5:20:d8:fe:fc:0e:f7:59: 5e:25:f5:d4:4f:b9:fe:3e:fc:16:9d:c5:ac:79:5e:3b:00:65: 9d:90:b6:ad:9b:fe:af:f0:67:63:0b:cc:98:83:0d:12:51:c1: f6:5d:bd:22:9b:c8:7e:08:56:4f:11:f4:e9:45:d9:d1:fd:e1: 2b:43:e7:0c:0c:fe:93:14:10:d4:ff:d2:c8:7f:d1:3b:fa:a0: 7d:dc:f3:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmxDaYWOCAzVwO7Y8Ljy+rRkl2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNjA0MTgwNjI2MjZaFw0yNjA0MjExNjQ3MjZaMDMxMTAvBgNV BAMTKDI0QTA0QTZGOTFBNjBGMzZGRTc3M0NGOTlCQjU3MDc2MjQzMjM5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5GTjfFMC+c8eZUQrhm2THJd1 ka75y6BMpU+29iUIJj9u42O/tGSftSXOWQlmRFeFv5Lwq+8yxKav66NdKcfmqEmW PX68pWKcoNkK7m9PEvxuEFWnVKGo7C8tjlCAxIhCcpkqBUhsanoSHJQ0NEG4s//7 ZgBLuD3c8Uc1fgJGNi18H29uKfZnHbuA93Ty9T1RBDYXrnU9XX0ef3Wp4EbD4nQD 99cCAL15SIhfeYtlWs7Me4HazlA3anlTDeq/xShjCns/3OR/jJBUIN1oL2zX9KTl Q+Qhc0GkJVVM1Lv+Qhona2nMJFzHbHDqS6o81VEENZk7tv1mNwK/keaioc6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJKBKb5GmDzb+dzz5m7VwdiQyOW0wHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTX9gvFNn/jUe4HJbD24bRXOpIuBGp0aRcC Z+HthOPHx8LfH4A+R/dJUjgGanKcUJAp1st3b/+S9DU+DDrgD6wgI/IIJW55NpSS vioBbuVH7C2gPRVpCd7FsB6KT1Af/R/bQG4TGTuEJdqvMAcqGAcNAVsbEKDsMQJ5 0y5r+rRMx9JPhRElAOonjd+kwYJ0ZdEww9aDyjxj0cFT+MVIou8vTNfz2HPZtd18 tjW1INj+/A73WV4l9dRPuf4+/Badxax5XjsAZZ2Qtq2b/q/wZ2MLzJiDDRJRwfZd vSKbyH4IVk8R9OlF2dH94StD5wwM/pMUENT/0sh/0Tv6oH3c8yo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:13 2026 by rpki-client