$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: vpJDzGKA3sFBY6bK7LsqaesYlDU42gvU5engZb/aZKY= Subject key identifier: EC:D5:F3:90:E8:4C:AF:07:6C:19:12:69:ED:47:4F:9C:9C:27:E8:42 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 29411D8B323CC36A9E8136F884600C86E366096C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 0224 Signing time: Thu 16 Apr 2026 07:02:48 +0000 Manifest this update: Thu 16 Apr 2026 06:57:48 +0000 Manifest next update: Sun 19 Apr 2026 08:47:48 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: jf7DEtodT84FA9Ek2Y8ucWeXjnrqbFXFscyAdX/S9OM=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) 4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:41:1d:8b:32:3c:c3:6a:9e:81:36:f8:84:60:0c:86:e3:66:09:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Apr 16 06:57:48 2026 GMT Not After : Apr 19 08:47:48 2026 GMT Subject: CN=ECD5F390E84CAF076C191269ED474F9C9C27E842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:f8:46:1f:df:e9:2c:30:11:1d:a9:d4:2d: 51:34:ae:97:07:24:d9:04:64:5b:9b:4a:44:b0:91: b2:db:ac:9f:37:6d:ad:69:85:ad:a2:c2:a0:3f:32: 37:cb:9d:c7:da:31:21:4e:9b:24:10:f0:da:b1:57: bd:3f:25:6d:93:30:d0:aa:de:be:1c:1f:57:a9:0c: c5:01:1d:64:97:a8:cb:36:dc:cb:9e:66:66:46:bc: 8e:cd:a9:52:71:3e:fc:ce:22:24:59:7c:75:59:4a: a0:56:6f:aa:a2:fd:05:40:d5:94:15:14:eb:29:dc: 4c:f9:76:a7:d2:ae:d1:5b:15:ee:de:18:4f:c1:a9: d1:72:c5:6b:1d:4e:46:d2:3a:76:25:a6:fe:6c:6b: 29:d0:08:85:ee:39:5c:d1:c8:ae:c7:05:c1:25:60: 83:a2:25:d2:22:6a:c5:07:9a:d0:b3:51:ff:d9:8f: cd:de:3c:d3:5e:92:c3:d7:ed:1b:0c:95:33:8e:aa: e8:4a:aa:54:2b:17:f6:2f:50:18:11:d1:21:7a:a8: 93:bf:13:21:b7:ee:bb:29:d1:5f:03:16:56:b4:bc: 16:38:c1:53:ee:67:0f:13:9c:99:26:22:4e:3f:d7: c4:12:0a:09:60:18:8d:df:d4:10:04:47:bd:e9:79: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:F3:90:E8:4C:AF:07:6C:19:12:69:ED:47:4F:9C:9C:27:E8:42 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bb:72:99:06:e0:46:53:50:bf:ae:d8:9c:39:86:5e:b7:29: 10:31:f4:c9:11:e4:97:0e:f7:04:af:66:54:06:33:ed:40:67: de:07:7b:cd:68:64:9b:47:f8:23:f9:9f:36:a0:ee:32:cf:35: 78:29:3f:0b:69:74:68:f3:4d:03:e5:0d:4b:86:8a:ec:40:60: d4:ee:c1:36:f6:95:2b:26:84:5b:b7:8e:ea:b4:99:52:b2:6b: a7:49:94:bd:26:7b:7e:25:18:1c:c4:72:ff:25:ee:b3:17:cc: 31:01:47:bd:4f:2c:4c:45:7e:36:24:8a:ef:5b:d2:58:12:36: 02:cf:91:4a:bd:e9:a3:7f:b9:05:15:67:55:03:d2:57:b9:31: 9b:4a:6c:96:34:5f:20:ec:25:01:07:40:53:88:1f:6f:4f:c5: ae:55:eb:2b:c5:1d:45:10:a1:2e:33:23:c5:9a:a4:fe:97:72: 89:f6:0f:33:e9:1a:0d:4a:fc:47:06:da:7c:8c:89:de:59:c2: 11:c4:e5:40:70:b2:c8:79:b9:22:ff:64:6f:96:cd:cc:0c:d2: 44:29:ee:5d:4a:21:51:66:4c:ad:d6:23:ed:f3:6e:36:fa:4b: 33:c7:65:ca:69:a1:37:8c:46:74:6e:08:64:f0:04:b0:60:94: 74:37:23:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUEdizI8w2qegTb4hGAMhuNmCWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNjA0MTYwNjU3NDhaFw0yNjA0MTkwODQ3NDhaMDMxMTAvBgNV BAMTKEVDRDVGMzkwRTg0Q0FGMDc2QzE5MTI2OUVENDc0RjlDOUMyN0U4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHPhGH9/pLDARHanULVE0rpcH JNkEZFubSkSwkbLbrJ83ba1pha2iwqA/MjfLncfaMSFOmyQQ8NqxV70/JW2TMNCq 3r4cH1epDMUBHWSXqMs23MueZmZGvI7NqVJxPvzOIiRZfHVZSqBWb6qi/QVA1ZQV FOsp3Ez5dqfSrtFbFe7eGE/BqdFyxWsdTkbSOnYlpv5saynQCIXuOVzRyK7HBcEl YIOiJdIiasUHmtCzUf/Zj83ePNNeksPX7RsMlTOOquhKqlQrF/YvUBgR0SF6qJO/ EyG37rsp0V8DFla0vBY4wVPuZw8TnJkmIk4/18QSCglgGI3f1BAER73peccDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7NXzkOhMrwdsGRJp7UdPnJwn6EIwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy7cpkG4EZTUL+u2Jw5hl63KRAx9MkR5JcO 9wSvZlQGM+1AZ94He81oZJtH+CP5nzag7jLPNXgpPwtpdGjzTQPlDUuGiuxAYNTu wTb2lSsmhFu3juq0mVKya6dJlL0me34lGBzEcv8l7rMXzDEBR71PLExFfjYkiu9b 0lgSNgLPkUq96aN/uQUVZ1UD0le5MZtKbJY0XyDsJQEHQFOIH29Pxa5V6yvFHUUQ oS4zI8WapP6Xcon2DzPpGg1K/EcG2nyMid5ZwhHE5UBwssh5uSL/ZG+WzcwM0kQp 7l1KIVFmTK3WI+3zbjb6SzPHZcppoTeMRnRuCGTwBLBglHQ3Ix8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:36 2026 by rpki-client