$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: 0Ltyy8J+D5rWRg6Bo+so9qeex713XV1dkjECm0NhPq0= Subject key identifier: 0E:56:58:C0:79:C9:FA:52:4C:64:F1:28:11:6A:25:9E:14:B7:0E:65 Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 132C917252B0A94FF13773F657C0D86DEFEB5EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 04BC Signing time: Fri 17 Apr 2026 03:21:14 +0000 Manifest this update: Fri 17 Apr 2026 03:16:14 +0000 Manifest next update: Mon 20 Apr 2026 06:56:14 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: xjNgDeRMgF2rvQrnjQijkWjQJOO6HqOFcQsiUsDKJMg=) 2: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: AVL+dQA9MipPaxVIeJbGk8qimnAmyuom1Scld/9M2rM=) 3: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: NaVKyvc2wzd/N9Ms8HPTUnFHJ8Zz1X+IKuX0Tzbvqhw=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Kqdd8Wmr9jwjNlcY6AEQYUpNe2FDPNKZ6aXCyRLddjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2c:91:72:52:b0:a9:4f:f1:37:73:f6:57:c0:d8:6d:ef:eb:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Apr 17 03:16:14 2026 GMT Not After : Apr 20 06:56:14 2026 GMT Subject: CN=0E5658C079C9FA524C64F128116A259E14B70E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:7a:96:a9:e0:ef:3e:bf:fb:77:e5:3d:a2: b0:34:04:b9:a5:90:6b:97:4c:47:bc:00:d1:35:6c: 5b:89:34:48:a0:2b:d2:1d:82:a4:df:f3:c4:a4:ce: ff:3b:5a:e4:ca:02:e2:05:4e:6c:4f:70:bd:d3:06: cc:cc:51:62:ee:c1:c0:49:03:e7:27:1b:9a:93:ec: 04:24:29:59:b4:ed:69:42:a1:6e:34:27:b1:29:9a: 9e:78:9d:09:ff:d1:f9:57:45:43:3e:51:9f:00:53: 2f:cf:6d:04:e2:54:b7:d7:b0:02:ab:27:29:c3:41: e9:00:79:5d:e4:bd:af:cc:01:3b:f1:93:db:91:84: df:36:79:b2:1a:70:b6:2a:eb:e4:96:8c:79:95:59: 81:6c:88:76:b5:81:1a:00:f9:7c:bb:51:d1:ad:50: 9d:27:7f:c4:fb:74:99:86:a5:35:fc:10:46:42:41: c0:6f:35:2e:02:e0:c2:98:59:96:66:79:79:c9:2f: 27:5b:83:94:6a:40:ca:a3:e9:74:1c:a9:85:44:55: a6:84:ed:60:87:d9:be:53:09:1b:37:33:e7:df:c6: 40:fc:8b:07:0f:1e:9e:52:e7:73:fa:70:12:4e:38: 83:3c:f5:c6:0f:36:aa:dd:ed:fd:56:f2:44:4d:61: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:58:C0:79:C9:FA:52:4C:64:F1:28:11:6A:25:9E:14:B7:0E:65 X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b0:f3:64:34:72:0d:6d:ff:5e:f3:32:0b:3f:d1:04:42:62: d6:23:cc:4c:34:de:77:24:84:e8:18:66:21:92:8d:80:5d:c9: 26:8c:fa:5a:4d:fc:ea:e2:10:7c:a6:40:cd:0a:a6:36:93:2a: 8b:c9:61:40:c8:da:1a:87:72:7c:27:7b:bf:1b:1a:67:10:de: 77:b5:fb:40:84:11:ee:84:95:1f:0b:af:51:ae:54:05:3e:5a: 5f:2a:89:ee:c9:c5:e8:5c:59:31:ff:44:e0:58:09:d1:c2:cc: f3:5d:75:7c:41:ab:54:73:c8:2a:e9:ff:8a:f4:a2:00:49:00: be:68:a4:1f:41:69:f6:2e:b7:14:93:75:c4:12:d2:19:03:7d: f1:e8:c7:8b:72:45:07:9a:e9:da:7d:3f:e8:c7:48:07:6d:9c: dd:e4:ce:a9:20:c4:5a:db:cc:9c:9f:7e:51:48:13:41:d1:54: 44:c9:61:27:d0:76:bb:73:ea:ef:24:c8:07:84:16:a2:d7:5e: 52:2d:d2:1b:c2:5d:06:5b:ba:6c:97:03:9d:a2:e7:15:d1:ed: f4:6b:e0:9e:15:3d:38:97:41:b9:44:cb:67:9d:cf:c9:e0:88: 57:b0:ff:ea:ec:35:25:01:fb:f4:6b:88:6f:a4:1f:13:44:c4: c9:a6:71:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyyRclKwqU/xN3P2V8DYbe/rXqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNjA0MTcwMzE2MTRaFw0yNjA0MjAwNjU2MTRaMDMxMTAvBgNV BAMTKDBFNTY1OEMwNzlDOUZBNTI0QzY0RjEyODExNkEyNTlFMTRCNzBFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnHqWqeDvPr/7d+U9orA0BLml kGuXTEe8ANE1bFuJNEigK9IdgqTf88Skzv87WuTKAuIFTmxPcL3TBszMUWLuwcBJ A+cnG5qT7AQkKVm07WlCoW40J7Epmp54nQn/0flXRUM+UZ8AUy/PbQTiVLfXsAKr JynDQekAeV3kva/MATvxk9uRhN82ebIacLYq6+SWjHmVWYFsiHa1gRoA+Xy7UdGt UJ0nf8T7dJmGpTX8EEZCQcBvNS4C4MKYWZZmeXnJLydbg5RqQMqj6XQcqYVEVaaE 7WCH2b5TCRs3M+ffxkD8iwcPHp5S53P6cBJOOIM89cYPNqrd7f1W8kRNYTajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlZYwHnJ+lJMZPEoEWolnhS3DmUwHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICw82Q0cg1t/17zMgs/0QRCYtYjzEw03nck hOgYZiGSjYBdySaM+lpN/OriEHymQM0KpjaTKovJYUDI2hqHcnwne78bGmcQ3ne1 +0CEEe6ElR8Lr1GuVAU+Wl8qie7JxehcWTH/ROBYCdHCzPNddXxBq1RzyCrp/4r0 ogBJAL5opB9BafYutxSTdcQS0hkDffHox4tyRQea6dp9P+jHSAdtnN3kzqkgxFrb zJyfflFIE0HRVETJYSfQdrtz6u8kyAeEFqLXXlIt0hvCXQZbumyXA52i5xXR7fRr 4J4VPTiXQblEy2edz8ngiFew/+rsNSUB+/RriG+kHxNExMmmcTM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:34 2026 by rpki-client