$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: XIBqhvVAaxQHd0uJ2tiDJeKa/QFW8SjQeMlinGlcnt4= Subject key identifier: F6:4B:32:A5:3C:5A:07:E5:A1:F2:80:D4:FF:7C:B0:A7:8D:27:D8:34 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 049FBC2EEEFB7598BCB0C70BB02230AE45C1D0C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 023D Signing time: Fri 17 Apr 2026 20:42:03 +0000 Manifest this update: Fri 17 Apr 2026 20:37:03 +0000 Manifest next update: Tue 21 Apr 2026 05:24:03 +0000 Files and hashes: 1: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: 3pVckq4sgr4NCS975jf86xUn5SMBSPZ1uVu4dByJktM=) 2: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) 3: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) 4: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9f:bc:2e:ee:fb:75:98:bc:b0:c7:0b:b0:22:30:ae:45:c1:d0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Apr 17 20:37:03 2026 GMT Not After : Apr 21 05:24:03 2026 GMT Subject: CN=F64B32A53C5A07E5A1F280D4FF7CB0A78D27D834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:08:95:62:fe:53:7f:6d:2e:a6:02:e9:99: 42:a7:44:bb:88:71:7c:07:5e:e9:aa:1f:b6:fc:52: 0e:3a:fe:65:1d:8c:45:cf:1e:56:f7:75:c2:c3:d7: e5:e4:b7:a1:53:bf:f8:67:da:37:a0:83:3d:2a:3c: 0f:3f:f0:1c:e9:61:3c:a6:50:e6:e1:c0:bb:e3:47: f9:b5:0b:26:4a:e0:b1:1c:04:e5:b8:7a:4b:76:74: 4b:eb:b3:8a:02:77:b4:5f:6c:22:e6:d6:fe:8b:67: f5:ca:41:0e:f6:71:9d:c9:bb:69:64:4e:ad:98:02: 0f:2b:7e:a6:f6:fe:e5:37:58:63:e0:cc:16:38:5b: 2d:47:11:c4:03:87:25:93:f5:88:cf:27:ee:e9:38: a0:bf:61:68:b1:c0:88:6d:19:ef:bf:c9:1c:2e:89: bb:92:14:9b:02:b6:70:b6:c5:2b:5d:3c:84:43:49: c4:26:fd:ed:1f:4b:c0:ee:c8:8f:ef:1b:c8:88:44: c8:34:12:10:02:67:64:ec:60:69:f8:68:97:5b:5d: 67:ee:ce:ba:ef:11:21:0c:20:5f:14:fc:71:71:ee: e7:b7:92:d5:fc:ad:b3:2b:1a:21:ff:e9:a9:16:c3: e9:9f:ed:05:2d:74:ad:b1:05:20:54:5e:21:90:15: 01:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:32:A5:3C:5A:07:E5:A1:F2:80:D4:FF:7C:B0:A7:8D:27:D8:34 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6f:ab:a5:7d:85:b8:b1:9b:e7:92:b4:fd:4f:5a:8a:eb:fe: 9f:21:2e:74:a5:86:59:c7:10:50:c1:51:36:90:ca:d0:d6:90: b8:7b:43:59:94:8b:15:c9:d1:cc:2c:9a:39:c2:c3:09:2f:94: bc:9c:7e:91:26:a1:f2:60:86:3d:a1:74:ad:11:8f:2b:eb:d8: 06:86:38:02:40:1f:c3:ab:fa:ca:4f:3a:20:45:05:1f:5d:61: d5:76:6e:23:6d:96:06:23:08:31:5d:53:40:44:61:97:3b:52: fd:f9:11:e2:69:f1:6a:32:b5:a4:40:83:e1:0a:e3:b0:bd:a7: ec:ae:dd:26:48:1d:67:10:9d:d4:fa:f3:56:10:45:db:cb:4b: 21:37:8e:61:5a:bf:df:72:ff:f1:73:94:2e:b3:03:4c:c9:d2: 64:15:15:2f:c1:fa:b8:1f:f0:e8:a5:10:1e:4f:66:3d:88:fc: 89:e9:92:6f:14:32:23:1c:49:74:4c:69:4d:6b:9a:ea:05:70: 90:85:64:2a:19:4e:07:3e:9e:ba:1a:eb:54:4f:c5:f3:66:cb: 9c:01:9c:d8:46:8d:89:76:84:18:92:1b:21:91:6e:38:d2:9e: 21:92:9c:06:4f:83:1c:10:0a:0a:aa:3f:f4:20:16:d3:de:a3: 2e:26:e9:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJ+8Lu77dZi8sMcLsCIwrkXB0McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNjA0MTcyMDM3MDNaFw0yNjA0MjEwNTI0MDNaMDMxMTAvBgNV BAMTKEY2NEIzMkE1M0M1QTA3RTVBMUYyODBENEZGN0NCMEE3OEQyN0Q4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKAiVYv5Tf20upgLpmUKnRLuI cXwHXumqH7b8Ug46/mUdjEXPHlb3dcLD1+Xkt6FTv/hn2jeggz0qPA8/8BzpYTym UObhwLvjR/m1CyZK4LEcBOW4ekt2dEvrs4oCd7RfbCLm1v6LZ/XKQQ72cZ3Ju2lk Tq2YAg8rfqb2/uU3WGPgzBY4Wy1HEcQDhyWT9YjPJ+7pOKC/YWixwIhtGe+/yRwu ibuSFJsCtnC2xStdPIRDScQm/e0fS8DuyI/vG8iIRMg0EhACZ2TsYGn4aJdbXWfu zrrvESEMIF8U/HFx7ue3ktX8rbMrGiH/6akWw+mf7QUtdK2xBSBUXiGQFQEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ksypTxaB+Wh8oDU/3ywp40n2DQwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJvq6V9hbixm+eStP1PWorr/p8hLnSlhlnH EFDBUTaQytDWkLh7Q1mUixXJ0cwsmjnCwwkvlLycfpEmofJghj2hdK0Rjyvr2AaG OAJAH8Or+spPOiBFBR9dYdV2biNtlgYjCDFdU0BEYZc7Uv35EeJp8WoytaRAg+EK 47C9p+yu3SZIHWcQndT681YQRdvLSyE3jmFav99y//FzlC6zA0zJ0mQVFS/B+rgf 8OilEB5PZj2I/Inpkm8UMiMcSXRMaU1rmuoFcJCFZCoZTgc+nroa61RPxfNmy5wB nNhGjYl2hBiSGyGRbjjSniGSnAZPgxwQCgqqP/QgFtPeoy4m6Qg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:20 2026 by rpki-client