$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: sB+PZu0ZYKOLrb9F1lsPQjW5sefH1ssE9ZkTWjK91/s= Subject key identifier: 0E:11:AD:B7:E8:A8:74:F9:E2:D3:52:C6:A7:83:BD:97:F5:5E:06:02 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 5EEABCBA5872A1626B65479863A7521D67929603 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 0206 Signing time: Sat 18 Apr 2026 19:51:08 +0000 Manifest this update: Sat 18 Apr 2026 19:46:08 +0000 Manifest next update: Wed 22 Apr 2026 06:10:08 +0000 Files and hashes: 1: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: eMOPnO+XpmCDCoWsuzWUfXEpfLrjtmyTZeiwHRBTTMc=) 2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=) 3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ea:bc:ba:58:72:a1:62:6b:65:47:98:63:a7:52:1d:67:92:96:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Apr 18 19:46:08 2026 GMT Not After : Apr 22 06:10:08 2026 GMT Subject: CN=0E11ADB7E8A874F9E2D352C6A783BD97F55E0602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:77:4b:61:e2:00:44:ad:03:87:bb:c3:b9: b6:cc:8b:15:22:ab:99:7a:63:38:8c:58:19:7d:c7: 34:12:7c:d5:8e:dd:1f:d8:03:ec:19:85:ae:ea:f2: e7:02:14:95:73:f1:64:cb:47:31:60:32:71:72:cc: 1a:87:d2:3d:5b:c8:c3:39:9d:55:b4:82:c6:14:a6: ac:27:b6:c1:d1:b3:52:9d:e0:0e:aa:fa:8d:44:d4: 14:f2:ea:8d:ce:23:58:e4:d5:45:d3:38:bd:83:66: 40:7a:b8:f8:87:2f:ad:27:4f:77:dc:fa:51:27:e1: 52:cb:ee:40:29:9f:42:f2:8e:40:50:99:cd:49:95: e4:fd:b3:9c:57:0f:52:90:6c:a2:98:15:17:1b:f2: 3d:bf:fe:af:f7:7c:76:30:46:03:9e:b2:f2:ea:71: c6:d6:ec:e2:6d:0b:c1:6c:ac:d0:43:b6:0f:4f:50: e1:2f:43:b0:64:df:a6:5f:83:7f:ee:cc:dd:3d:db: 17:4e:75:c0:1f:2b:c8:73:ff:58:fd:fd:05:88:0f: 40:81:b2:f1:79:67:eb:ac:19:c6:1e:5d:bb:54:42: 26:c9:2a:21:e8:09:19:da:51:bc:d1:f0:cf:a2:57: f2:30:0b:b5:07:41:0d:8c:c6:65:fb:92:24:fc:dc: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:AD:B7:E8:A8:74:F9:E2:D3:52:C6:A7:83:BD:97:F5:5E:06:02 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:68:b2:25:55:9a:fc:d7:2d:10:10:66:e4:98:fd:db:9d:50: ef:3b:d7:38:db:2f:c3:81:25:4f:b2:e2:0a:73:e3:4a:7e:e9: be:42:0c:c4:f9:92:e9:dc:b6:d4:d8:ef:4a:c7:15:47:65:30: 27:52:bd:96:c5:29:5a:dd:ce:b7:33:28:10:35:98:26:35:43: b7:74:f4:1b:cb:c6:36:49:b5:19:75:13:19:f6:a5:3e:c4:cd: fe:18:73:24:15:03:84:88:6a:6e:cd:f4:80:16:c5:f3:9c:93: 09:f8:7a:bc:6d:90:dd:da:10:d7:8c:ad:7b:a5:cd:06:11:13: c6:e1:b2:8a:55:5a:18:0a:d0:69:0f:4f:8b:87:c6:eb:ce:a9: 9b:0d:18:6c:c0:2e:0b:f2:64:59:50:b4:09:05:7a:65:34:e4: 2f:8f:8f:e6:3d:82:ca:09:e5:c4:08:bb:37:e3:b1:71:12:e0: d6:ee:f3:f5:24:fe:42:80:95:9f:8b:2e:48:94:c0:2b:ee:3e: a5:bf:92:6d:fa:ad:1d:f3:e5:16:d6:32:6d:7a:64:93:cc:dc: ba:8c:20:96:bf:3a:24:4c:89:b3:a3:78:4f:01:a6:7a:e2:52: 9c:bc:e6:88:c7:c4:cc:31:b9:39:4e:d6:ba:41:0b:87:a5:08: ff:56:a6:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuq8ulhyoWJrZUeYY6dSHWeSlgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNjA0MTgxOTQ2MDhaFw0yNjA0MjIwNjEwMDhaMDMxMTAvBgNV BAMTKDBFMTFBREI3RThBODc0RjlFMkQzNTJDNkE3ODNCRDk3RjU1RTA2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5z3dLYeIARK0Dh7vDubbMixUi q5l6YziMWBl9xzQSfNWO3R/YA+wZha7q8ucCFJVz8WTLRzFgMnFyzBqH0j1byMM5 nVW0gsYUpqwntsHRs1Kd4A6q+o1E1BTy6o3OI1jk1UXTOL2DZkB6uPiHL60nT3fc +lEn4VLL7kApn0LyjkBQmc1JleT9s5xXD1KQbKKYFRcb8j2//q/3fHYwRgOesvLq ccbW7OJtC8FsrNBDtg9PUOEvQ7Bk36Zfg3/uzN092xdOdcAfK8hz/1j9/QWID0CB svF5Z+usGcYeXbtUQibJKiHoCRnaUbzR8M+iV/IwC7UHQQ2MxmX7kiT83KnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhGtt+iodPni01LGp4O9l/VeBgIwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtosiVVmvzXLRAQZuSY/dudUO871zjbL8OB JU+y4gpz40p+6b5CDMT5kuncttTY70rHFUdlMCdSvZbFKVrdzrczKBA1mCY1Q7d0 9BvLxjZJtRl1Exn2pT7Ezf4YcyQVA4SIam7N9IAWxfOckwn4erxtkN3aENeMrXul zQYRE8bhsopVWhgK0GkPT4uHxuvOqZsNGGzALgvyZFlQtAkFemU05C+Pj+Y9gsoJ 5cQIuzfjsXES4Nbu8/Uk/kKAlZ+LLkiUwCvuPqW/km36rR3z5RbWMm16ZJPM3LqM IJa/OiRMibOjeE8BpnriUpy85ojHxMwxuTlO1rpBC4elCP9WpmI= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:18 2026 by rpki-client