$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: NzCqc1TN3QJiaryfYOB/zqHXvGOnuqehndtAJCRGMmA= Subject key identifier: 47:3E:9E:A3:1F:05:86:42:4D:7C:83:2B:8F:E2:5A:8F:8F:65:A4:96 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 327E234793FB748B462747AB6D119FF15EE64E3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: 0125 Signing time: Fri 17 Apr 2026 10:50:05 +0000 Manifest this update: Fri 17 Apr 2026 10:45:05 +0000 Manifest next update: Mon 20 Apr 2026 17:35:05 +0000 Files and hashes: 1: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 2: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: 2pV/YreN2CIZsKI4GilIP2xR5CN9Okwvn3V+L+bwTno=) 3: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7e:23:47:93:fb:74:8b:46:27:47:ab:6d:11:9f:f1:5e:e6:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Apr 17 10:45:05 2026 GMT Not After : Apr 20 17:35:05 2026 GMT Subject: CN=473E9EA31F0586424D7C832B8FE25A8F8F65A496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:12:bc:ba:ae:ed:37:b8:b9:fd:6e:d8:26: 87:e8:17:37:7c:c5:b3:b3:ae:65:ea:10:dd:7d:b3: e1:12:23:43:f8:04:11:37:ee:a9:a8:a8:b4:60:3d: 7e:7b:f3:eb:6d:07:2e:f1:e1:76:3f:db:03:2d:e8: 51:da:ea:69:ec:f8:c4:7c:5a:2f:4a:42:b0:79:41: 33:72:93:12:2d:e8:4b:1f:1d:39:0b:df:0d:6b:e8: a3:3c:7d:26:9e:af:9e:03:35:54:2f:47:55:f5:5b: 29:75:25:92:d7:9e:c7:71:ec:71:e2:76:da:92:92: 16:f8:b6:9b:f4:68:41:b6:38:c3:69:b7:9f:65:bf: 22:cc:4c:46:c2:47:06:c1:c4:fe:44:12:7f:6d:dd: e9:1b:43:09:69:a4:0d:53:1e:b9:71:7f:33:5c:1e: 29:e8:14:9a:35:a0:2f:5b:bb:bd:48:e6:45:7f:b8: 3d:dc:2d:0e:8a:ec:4c:20:e2:e7:c9:aa:33:d3:a6: 8d:10:df:53:13:dd:ef:c7:7b:32:fb:95:23:1f:76: 1e:5c:51:25:48:a5:9b:e9:ba:2e:0e:3a:a7:2a:3f: c2:56:85:8a:be:08:94:9a:f5:01:f8:33:13:9e:8c: 07:c6:a1:21:3e:87:3a:57:18:2a:38:ee:da:4c:fc: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:9E:A3:1F:05:86:42:4D:7C:83:2B:8F:E2:5A:8F:8F:65:A4:96 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:05:e6:42:e2:70:b8:fd:cf:d4:83:28:bf:7e:92:67:3c:4e: 37:02:c5:76:1e:0a:fa:8e:82:e5:11:a1:e2:86:04:ca:0f:6d: 02:49:58:34:44:7c:24:9e:e6:f9:8a:1b:66:a6:a9:3d:72:eb: b5:e9:12:f5:c9:0b:21:6f:9b:cb:84:e0:4c:e3:56:29:e9:82: 79:49:62:be:3f:fe:24:e7:5e:a8:b5:23:93:22:ac:55:b0:79: 42:73:f1:5f:ff:99:8d:4c:8b:77:c2:5f:24:bc:f9:05:49:40: d8:40:81:a3:b3:32:99:c9:8e:66:f8:55:46:24:6b:5f:73:7a: 2d:63:41:29:aa:3d:89:8a:a0:24:11:c0:90:12:7a:6a:14:02: f5:b9:5d:3c:b3:69:2e:9f:99:b1:98:00:b9:ec:4a:aa:d5:b4: ae:00:42:d1:fb:3e:83:9a:94:81:41:0b:c0:8f:80:64:a8:0b: cb:9a:5e:3f:ab:d0:e5:5e:e5:e7:39:30:95:73:32:73:e0:a6: 9e:1b:ea:c9:a0:45:39:35:c9:99:0b:6d:15:d3:d4:e6:ad:16: ed:e3:d4:d6:2a:ee:a0:1d:80:5d:c5:db:92:8f:c9:02:c9:f2: 08:ab:6e:80:d5:ff:11:00:86:07:df:7b:ab:1a:12:7f:c0:96: 2e:80:92:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMn4jR5P7dItGJ0erbRGf8V7mTjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNjA0MTcxMDQ1MDVaFw0yNjA0MjAxNzM1MDVaMDMxMTAvBgNV BAMTKDQ3M0U5RUEzMUYwNTg2NDI0RDdDODMyQjhGRTI1QThGOEY2NUE0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aRK8uq7tN7i5/W7YJofoFzd8 xbOzrmXqEN19s+ESI0P4BBE37qmoqLRgPX578+ttBy7x4XY/2wMt6FHa6mns+MR8 Wi9KQrB5QTNykxIt6EsfHTkL3w1r6KM8fSaer54DNVQvR1X1Wyl1JZLXnsdx7HHi dtqSkhb4tpv0aEG2OMNpt59lvyLMTEbCRwbBxP5EEn9t3ekbQwlppA1THrlxfzNc HinoFJo1oC9bu71I5kV/uD3cLQ6K7Ewg4ufJqjPTpo0Q31MT3e/HezL7lSMfdh5c USVIpZvpui4OOqcqP8JWhYq+CJSa9QH4MxOejAfGoSE+hzpXGCo47tpM/G8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURz6eox8FhkJNfIMrj+Jaj49lpJYwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8F5kLicLj9z9SDKL9+kmc8TjcCxXYeCvqO guURoeKGBMoPbQJJWDREfCSe5vmKG2amqT1y67XpEvXJCyFvm8uE4EzjVinpgnlJ Yr4//iTnXqi1I5MirFWweUJz8V//mY1Mi3fCXyS8+QVJQNhAgaOzMpnJjmb4VUYk a19zei1jQSmqPYmKoCQRwJASemoUAvW5XTyzaS6fmbGYALnsSqrVtK4AQtH7PoOa lIFBC8CPgGSoC8uaXj+r0OVe5ec5MJVzMnPgpp4b6smgRTk1yZkLbRXT1OatFu3j 1NYq7qAdgF3F25KPyQLJ8girboDV/xEAhgffe6saEn/Ali6Akkw= -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:12 2026 by rpki-client