$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: 4FkfLw1xZOTHUMwH0a1txIru02rw1BnFe/k59WJaeIQ= Subject key identifier: C8:45:B0:69:B5:4A:3A:E4:C8:65:64:F2:42:9D:90:6C:5F:14:73:DA Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 0EC59CB3962605E482F9E0A9D326EDEB75211833 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 025E Signing time: Fri 17 Apr 2026 02:52:41 +0000 Manifest this update: Fri 17 Apr 2026 02:47:41 +0000 Manifest next update: Mon 20 Apr 2026 11:47:41 +0000 Files and hashes: 1: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: 3YG6hBxvK481Kkyc0E3/zcEQyxF51QpvG5BYO8Dx708=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: qi5yGhx2gcMV2n4PC1XlOBAz5PectwZ4F0Y4ir4K3zg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c5:9c:b3:96:26:05:e4:82:f9:e0:a9:d3:26:ed:eb:75:21:18:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Apr 17 02:47:41 2026 GMT Not After : Apr 20 11:47:41 2026 GMT Subject: CN=C845B069B54A3AE4C86564F2429D906C5F1473DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:30:63:1c:71:0b:43:d0:b2:fe:82:a1:48: 4e:4d:8d:02:a8:dd:9d:d6:15:f3:40:b6:f0:6e:b9: 73:3e:48:19:6a:c2:ae:56:47:41:a0:98:e6:c8:ca: df:2d:0b:ae:02:d1:2f:c3:c5:49:5d:72:69:e9:58: b4:f4:14:dd:ff:98:dc:1e:b2:3a:fe:eb:e7:4f:93: 91:2d:e9:6e:2e:e5:91:2e:a6:1f:56:56:ef:26:c8: 8a:c6:46:40:29:00:65:45:7b:97:fc:97:7a:7a:70: 91:7a:a7:89:3a:1f:96:30:45:ab:8a:2a:fa:67:70: e4:87:d5:b0:59:82:f0:9e:64:b2:25:8e:2d:d6:03: 5b:e9:4b:b1:42:6a:30:0b:30:38:1d:bb:3b:fa:f3: ad:42:3b:be:01:62:4e:eb:85:97:38:1f:f8:8a:44: 17:e7:e2:2f:b4:26:fa:86:9c:ee:6d:88:3a:07:4a: 2a:e3:2a:c9:59:32:35:3c:e0:de:e5:bd:40:d4:5d: b2:75:f3:94:d8:18:52:73:2c:a4:7f:fa:14:0c:26: c8:48:40:1c:7b:3f:1f:1c:cf:21:8a:80:d9:bf:00: 02:20:f0:03:d0:9e:b9:ad:d2:24:60:bc:2d:34:fb: b5:2d:44:31:72:17:d5:10:ea:7a:21:02:c5:d0:51: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:B0:69:B5:4A:3A:E4:C8:65:64:F2:42:9D:90:6C:5F:14:73:DA X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:34:2e:f5:b6:50:8e:30:29:49:62:ad:85:64:76:9f:ba:b3: 3b:e1:72:8c:17:05:5d:64:66:c8:9d:6c:18:b4:2a:d3:c4:89: dd:6a:98:81:bf:19:6a:3f:05:0b:d0:b3:96:66:c7:ed:1b:84: 7b:80:16:bb:72:48:e7:19:a9:36:b0:a6:14:b3:3f:6b:01:44: d1:a2:36:69:82:1c:35:b0:20:9f:fe:e0:87:7f:2e:39:b8:18: 9b:f4:02:5d:2a:35:9d:67:07:0b:90:80:1d:22:ea:30:27:dd: 53:8e:46:4f:5a:e8:8b:8d:13:8c:ef:9c:41:46:67:c0:89:90: a4:ca:ae:10:5d:c9:5c:78:10:9a:7a:d0:23:45:a0:9a:fb:3a: f1:5c:41:ff:9c:8a:83:02:e9:e2:ba:4b:fd:30:fc:d1:d8:1d: dd:9d:23:e9:f9:c5:ef:bb:b1:79:41:2a:c9:74:35:15:c1:83: 9a:ea:70:d7:c8:a2:2b:a4:d3:73:67:d9:65:ce:d2:ab:b0:f1: 9d:74:46:26:7c:07:e9:68:3f:c1:91:a3:c3:4a:ba:0a:c9:dc: d4:b1:8a:54:ad:59:5c:7d:57:e7:28:75:c0:76:61:fe:07:51: c8:0c:2e:77:79:82:6d:7e:34:fe:da:4c:16:64:f2:81:5c:72: 31:04:8a:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsWcs5YmBeSC+eCp0ybt63UhGDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNjA0MTcwMjQ3NDFaFw0yNjA0MjAxMTQ3NDFaMDMxMTAvBgNV BAMTKEM4NDVCMDY5QjU0QTNBRTRDODY1NjRGMjQyOUQ5MDZDNUYxNDczREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61DBjHHELQ9Cy/oKhSE5NjQKo 3Z3WFfNAtvBuuXM+SBlqwq5WR0GgmObIyt8tC64C0S/DxUldcmnpWLT0FN3/mNwe sjr+6+dPk5Et6W4u5ZEuph9WVu8myIrGRkApAGVFe5f8l3p6cJF6p4k6H5YwRauK KvpncOSH1bBZgvCeZLIlji3WA1vpS7FCajALMDgduzv6861CO74BYk7rhZc4H/iK RBfn4i+0JvqGnO5tiDoHSirjKslZMjU84N7lvUDUXbJ185TYGFJzLKR/+hQMJshI QBx7Px8czyGKgNm/AAIg8APQnrmt0iRgvC00+7UtRDFyF9UQ6nohAsXQURZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEWwabVKOuTIZWTyQp2QbF8Uc9owHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG40LvW2UI4wKUlirYVkdp+6szvhcowXBV1k ZsidbBi0KtPEid1qmIG/GWo/BQvQs5Zmx+0bhHuAFrtySOcZqTawphSzP2sBRNGi NmmCHDWwIJ/+4Id/Ljm4GJv0Al0qNZ1nBwuQgB0i6jAn3VOORk9a6IuNE4zvnEFG Z8CJkKTKrhBdyVx4EJp60CNFoJr7OvFcQf+cioMC6eK6S/0w/NHYHd2dI+n5xe+7 sXlBKsl0NRXBg5rqcNfIoiuk03Nn2WXO0quw8Z10RiZ8B+loP8GRo8NKugrJ3NSx ilStWVx9V+codcB2Yf4HUcgMLnd5gm1+NP7aTBZk8oFccjEEiuA= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:32 2026 by rpki-client