$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: vszlaDclF885SxuM7N0e9SNhmHyqYPO5oAxIQ9Gmt7I= Subject key identifier: 5C:C3:50:3D:CC:42:C8:F0:D5:9B:90:66:08:E4:B0:28:21:23:18:F0 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 31690062654C1B818625D34B6DA24C0EB5199F82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 01CA Signing time: Fri 17 Apr 2026 20:00:44 +0000 Manifest this update: Fri 17 Apr 2026 19:55:44 +0000 Manifest next update: Mon 20 Apr 2026 20:04:44 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: 6eGq5Grf/17DUmvNZU2vEIQolUHgC0ZiZ91hQRslHK8=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: s0kIj0B26XAdQj3WyvS/g5GtCvo3ulJbl7Z3bHciit0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:69:00:62:65:4c:1b:81:86:25:d3:4b:6d:a2:4c:0e:b5:19:9f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Apr 17 19:55:44 2026 GMT Not After : Apr 20 20:04:44 2026 GMT Subject: CN=5CC3503DCC42C8F0D59B906608E4B028212318F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:bc:12:36:cc:9f:28:43:79:1a:51:9c:a1: 6b:f0:eb:30:91:89:ae:dc:7e:a9:1d:2d:4b:30:b3: 26:4a:c8:da:55:bb:f4:ca:74:ea:3b:ed:b3:3a:56: 9a:c2:e8:ca:2d:7d:26:99:8b:d3:b1:53:ca:31:11: 40:0c:b4:88:ef:a5:46:f2:59:c7:dc:e2:e3:f0:f4: 82:25:49:57:a7:72:0d:91:69:45:27:46:b1:be:fe: 6a:97:8d:07:0e:69:9a:22:7a:93:8d:22:2d:70:4a: 28:b5:e3:5c:d0:72:11:10:5f:f2:93:ad:27:7a:d0: 57:85:7f:be:90:d4:7d:46:bd:fe:84:bc:24:ce:a5: 7f:74:00:cd:ab:d4:ac:3b:94:2c:f6:1c:38:81:b0: 12:0a:05:0a:09:43:a3:17:e1:bf:ec:04:2c:e9:f5: 5f:7f:31:47:1d:f0:ab:d3:7a:c7:c8:74:b4:11:7e: bc:9d:4c:f7:6e:2d:69:80:b4:66:16:6a:b8:bf:43: 9e:d5:6f:a5:3d:87:69:0b:52:2f:17:17:3b:ba:d8: 0e:6d:e4:09:8f:0d:2e:b2:4a:99:9c:b8:2e:43:b6: 9e:c6:c3:da:f5:1c:f8:5a:61:ff:6b:77:00:0a:2d: 15:3a:64:92:64:79:95:81:08:44:22:4c:f5:60:21: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:50:3D:CC:42:C8:F0:D5:9B:90:66:08:E4:B0:28:21:23:18:F0 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:bc:21:91:ce:11:c3:7c:8e:8e:80:da:86:ed:69:57:96: ad:fc:5b:6b:16:5b:a0:53:fb:31:3b:7c:95:9c:bd:6a:6f:89: 11:c3:95:92:4f:33:96:d6:d5:9b:0e:96:4c:5a:3f:7e:b9:77: 4d:48:49:bb:02:31:3c:65:d3:e0:18:f6:b1:78:91:95:a6:09: a6:3d:aa:81:79:cf:c0:4b:63:9a:e1:f3:37:62:ac:ad:ca:fe: 4e:a5:0a:93:36:9e:fd:9f:da:bf:6b:ce:31:3a:a4:b0:a0:b3: dc:0c:b5:24:fe:f4:3b:4f:e4:ce:2c:3f:12:6c:ef:e7:a2:da: 58:ce:ea:3a:2b:43:52:1e:ed:df:71:0c:68:1e:18:bb:fe:21: de:c2:c3:51:fd:bc:5c:7f:ac:de:f1:11:5f:1a:14:15:30:3d: 1f:a1:95:07:41:4d:14:c8:8a:f6:7b:c6:a1:fe:81:66:4b:80: c8:8f:a3:13:f7:91:15:8d:0b:82:84:c3:d9:c4:ce:a4:a8:44: eb:05:25:e1:f0:a5:a1:b6:87:81:c5:4b:10:f3:8a:f5:0c:86: 7a:c9:77:6d:1e:ae:3b:51:f4:61:69:6b:bb:0f:5b:ae:56:02: 7f:ca:1a:43:7c:2e:3c:84:f4:c9:3a:6c:7c:cb:e1:8c:82:a5: d2:f3:a5:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWkAYmVMG4GGJdNLbaJMDrUZn4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNjA0MTcxOTU1NDRaFw0yNjA0MjAyMDA0NDRaMDMxMTAvBgNV BAMTKDVDQzM1MDNEQ0M0MkM4RjBENTlCOTA2NjA4RTRCMDI4MjEyMzE4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KLwSNsyfKEN5GlGcoWvw6zCR ia7cfqkdLUswsyZKyNpVu/TKdOo77bM6VprC6MotfSaZi9OxU8oxEUAMtIjvpUby Wcfc4uPw9IIlSVencg2RaUUnRrG+/mqXjQcOaZoiepONIi1wSii141zQchEQX/KT rSd60FeFf76Q1H1Gvf6EvCTOpX90AM2r1Kw7lCz2HDiBsBIKBQoJQ6MX4b/sBCzp 9V9/MUcd8KvTesfIdLQRfrydTPduLWmAtGYWari/Q57Vb6U9h2kLUi8XFzu62A5t 5AmPDS6ySpmcuC5Dtp7Gw9r1HPhaYf9rdwAKLRU6ZJJkeZWBCEQiTPVgIZXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXMNQPcxCyPDVm5BmCOSwKCEjGPAwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgGvCGRzhHDfI6OgNqG7WlXlq38W2sWW6BT +zE7fJWcvWpviRHDlZJPM5bW1ZsOlkxaP365d01ISbsCMTxl0+AY9rF4kZWmCaY9 qoF5z8BLY5rh8zdirK3K/k6lCpM2nv2f2r9rzjE6pLCgs9wMtST+9DtP5M4sPxJs 7+ei2ljO6jorQ1Ie7d9xDGgeGLv+Id7Cw1H9vFx/rN7xEV8aFBUwPR+hlQdBTRTI ivZ7xqH+gWZLgMiPoxP3kRWNC4KEw9nEzqSoROsFJeHwpaG2h4HFSxDzivUMhnrJ d20erjtR9GFpa7sPW65WAn/KGkN8LjyE9Mk6bHzL4YyCpdLzpUg= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:33 2026 by rpki-client