$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: AXeNkciF6+Fc0xoNWdoZdWr4wCiPwijCl1aXgasy2Ac= Subject key identifier: 49:63:16:AC:68:47:E4:87:CD:E0:B5:B4:F8:F2:42:97:73:B6:49:0B Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 354C939A32DBC7F9B53FA75EF8E5A3DE5BAC4B2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 019F Signing time: Fri 17 Apr 2026 08:11:27 +0000 Manifest this update: Fri 17 Apr 2026 08:06:27 +0000 Manifest next update: Mon 20 Apr 2026 11:37:27 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: Lzap7nJS9KoOyzRTrOtkvRHBv2qYRTXLovxOcWhGMiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:93:9a:32:db:c7:f9:b5:3f:a7:5e:f8:e5:a3:de:5b:ac:4b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Apr 17 08:06:27 2026 GMT Not After : Apr 20 11:37:27 2026 GMT Subject: CN=496316AC6847E487CDE0B5B4F8F2429773B6490B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:45:23:8c:52:f3:41:f5:55:86:bc:cf:f5:e0: bd:c6:6e:d0:49:2d:5a:90:d1:f1:c9:d5:b9:07:a5: f1:1e:80:7d:b5:01:1b:1a:61:3f:f9:34:99:37:17: f2:57:65:00:1a:76:d5:5f:30:13:13:92:e0:5f:f5: 42:67:20:b0:45:26:40:71:2e:65:a0:22:75:ae:17: 06:2e:b0:91:2a:7f:3c:42:01:12:4c:e5:79:9c:56: 28:4e:dc:34:d0:75:44:6e:4c:91:95:ff:63:6a:d9: fb:9e:ff:fb:e8:3d:9e:83:7d:07:2e:f0:91:e0:a5: 69:48:33:b3:9f:2d:b0:ae:0d:e0:23:63:74:b1:8b: e1:6f:5a:da:12:7c:c5:6f:5e:0a:4d:36:79:58:da: 02:3a:fb:5e:b3:e7:dc:69:45:df:f9:25:be:b7:c4: 6a:fd:04:63:83:dd:d4:d2:a4:0c:d8:3d:b6:b6:4c: ef:5e:d0:33:e7:10:36:65:85:4f:4c:69:65:c8:a1: 8b:0d:d3:06:94:7b:ff:ca:54:64:76:70:8c:f2:f6: 32:e2:d8:0b:65:19:e4:f7:e7:28:94:70:58:c6:3a: 70:44:cc:fd:02:c7:46:62:f2:ad:a6:de:9e:b0:db: f5:03:11:1a:9b:81:46:ba:37:d4:80:72:cc:4e:14: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:63:16:AC:68:47:E4:87:CD:E0:B5:B4:F8:F2:42:97:73:B6:49:0B X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:38:36:f6:3d:c3:ff:f9:dd:e1:99:b2:28:c6:d1:28:7d:fc: e3:07:7c:02:e3:08:7b:7c:35:8c:44:33:c8:70:d6:da:df:7b: 2a:ce:5b:39:4a:b8:7a:cd:98:2a:3b:d1:13:98:4e:b3:10:aa: b3:5f:e5:54:74:18:d3:50:e4:f6:29:71:bc:b5:d1:81:9f:cb: f5:17:77:c6:a2:c2:4e:27:6e:79:fd:57:8d:4b:0a:14:3e:12: 93:6e:77:d7:b4:f4:ba:11:f5:66:8e:3b:17:cc:5c:c9:99:a9: 70:f5:5d:f6:67:24:12:a5:5b:2c:30:83:e9:73:c6:87:5a:f1: ce:f0:1b:8d:35:64:36:dc:f2:a7:23:f8:0e:ab:e2:47:03:48: 68:73:56:81:3b:0d:d1:82:be:07:9e:b8:89:9e:32:76:50:49: 66:e9:87:b2:01:65:60:96:42:14:34:8f:0d:ec:80:c7:93:46: f0:8d:12:7f:fe:e7:f2:af:1a:3d:2f:01:84:e9:db:84:8c:44: c7:1c:8e:25:cb:24:a2:9d:76:f5:43:46:fe:4d:3d:41:40:6d: f0:31:bc:dc:74:e4:5f:b6:bf:82:03:0a:93:e4:76:57:96:32: f6:39:ed:f0:cd:67:6c:b5:07:87:8c:42:31:d1:50:3b:bf:0e: 95:42:e5:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUyTmjLbx/m1P6de+OWj3lusSyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNjA0MTcwODA2MjdaFw0yNjA0MjAxMTM3MjdaMDMxMTAvBgNV BAMTKDQ5NjMxNkFDNjg0N0U0ODdDREUwQjVCNEY4RjI0Mjk3NzNCNjQ5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRSOMUvNB9VWGvM/14L3GbtBJ LVqQ0fHJ1bkHpfEegH21ARsaYT/5NJk3F/JXZQAadtVfMBMTkuBf9UJnILBFJkBx LmWgInWuFwYusJEqfzxCARJM5XmcVihO3DTQdURuTJGV/2Nq2fue//voPZ6DfQcu 8JHgpWlIM7OfLbCuDeAjY3Sxi+FvWtoSfMVvXgpNNnlY2gI6+16z59xpRd/5Jb63 xGr9BGOD3dTSpAzYPba2TO9e0DPnEDZlhU9MaWXIoYsN0waUe//KVGR2cIzy9jLi 2AtlGeT35yiUcFjGOnBEzP0Cx0Zi8q2m3p6w2/UDERqbgUa6N9SAcsxOFEnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWMWrGhH5IfN4LW0+PJCl3O2SQswHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALM4NvY9w//53eGZsijG0Sh9/OMHfALjCHt8 NYxEM8hw1trfeyrOWzlKuHrNmCo70ROYTrMQqrNf5VR0GNNQ5PYpcby10YGfy/UX d8aiwk4nbnn9V41LChQ+EpNud9e09LoR9WaOOxfMXMmZqXD1XfZnJBKlWywwg+lz xoda8c7wG401ZDbc8qcj+A6r4kcDSGhzVoE7DdGCvgeeuImeMnZQSWbph7IBZWCW QhQ0jw3sgMeTRvCNEn/+5/KvGj0vAYTp24SMRMccjiXLJKKddvVDRv5NPUFAbfAx vNx05F+2v4IDCpPkdleWMvY57fDNZ2y1B4eMQjHRUDu/DpVC5UQ= -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:21 2026 by rpki-client