$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: zg/X2w/iLH9I1Hi4977716Izg9XwhWpQDdKSoZH3cZU= Subject key identifier: 7A:FD:FA:E9:F7:E7:93:D0:79:2B:37:19:0F:FC:AA:48:3E:4E:D7:BD Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 302169B211D942709D2A32626CD10C40FA2E4D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0191 Signing time: Fri 17 Apr 2026 10:51:29 +0000 Manifest this update: Fri 17 Apr 2026 10:46:29 +0000 Manifest next update: Mon 20 Apr 2026 14:42:29 +0000 Files and hashes: 1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: qdE5iyIXovY53do5Q/t2wxXgGwTl5kDNNebCONFhA1A=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:21:69:b2:11:d9:42:70:9d:2a:32:62:6c:d1:0c:40:fa:2e:4d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Apr 17 10:46:29 2026 GMT Not After : Apr 20 14:42:29 2026 GMT Subject: CN=7AFDFAE9F7E793D0792B37190FFCAA483E4ED7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:7b:da:e5:ae:e9:9e:46:53:1b:d3:91:8e: b3:d9:50:19:eb:67:43:90:4d:56:db:7d:eb:9c:ff: 42:5c:49:3d:e4:6f:b1:80:ad:e2:ac:a5:5e:53:11: ec:5d:4b:06:2a:ed:25:66:96:7f:4b:7f:78:00:75: 47:49:47:3e:7b:39:ce:59:f6:8b:ea:2d:7b:68:8e: e5:d6:9e:e5:c2:43:c4:ab:8f:7e:72:12:82:2d:34: dc:e8:85:6d:6c:12:7e:7c:86:af:c1:58:6f:2b:49: aa:81:6f:68:16:93:95:2e:6e:65:38:4b:09:7a:5e: 42:bc:95:5c:16:ca:c5:1e:e8:81:fd:64:7d:fa:33: ce:ef:ab:c6:fe:e3:86:49:c2:50:8d:7b:b0:cf:74: 8a:7c:b6:f5:41:c8:e3:24:eb:e5:9a:f3:0b:31:69: 20:66:42:2a:7d:1b:54:47:e7:bb:be:56:80:c9:89: fa:ed:66:20:63:9f:8c:f7:3e:bd:71:9d:52:39:19: d7:c3:21:d0:15:6d:52:11:b5:ee:4e:bc:80:9e:3d: 25:7f:2c:e8:02:3c:48:a1:15:b6:8d:d3:62:d7:ee: cb:67:93:bb:5c:d0:6e:78:3a:3b:b2:a4:a0:41:34: 36:49:3d:1a:dc:b8:a9:d0:6e:73:fb:59:e2:c2:13: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FD:FA:E9:F7:E7:93:D0:79:2B:37:19:0F:FC:AA:48:3E:4E:D7:BD X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:3d:be:04:a0:9e:43:7a:36:7c:34:c9:8c:d4:57:97:94: 8e:98:11:e2:4b:76:b9:2c:a2:d6:1e:61:43:59:71:d3:e9:14: 3f:20:1e:25:4e:b8:e4:a0:6c:e1:4a:27:d5:5a:cd:67:d0:4a: cb:df:30:8a:e7:96:e5:a9:54:79:4d:9e:8f:fb:80:7b:c9:eb: 72:b6:d8:98:10:68:5c:58:43:4f:7e:92:35:d0:2d:fb:2c:03: ac:f8:cd:59:88:e4:f4:db:1f:5b:c0:9b:f9:bc:e7:5b:2d:6b: 8f:35:2e:0e:f3:3d:33:01:c6:7c:e9:05:83:a9:1f:3a:e0:15: ba:c1:9f:a1:32:ba:95:f5:e2:8a:fc:84:e2:8a:b7:ea:08:f8: 0a:93:5e:af:5a:53:14:a4:a2:1c:37:72:43:fb:73:74:6a:7b: 02:35:70:f2:e0:10:63:90:c2:60:7e:50:21:57:ad:b1:01:ca: cf:5c:eb:69:e6:76:2e:8d:26:c5:56:13:8e:6b:84:b5:fd:aa: ff:3c:1b:3e:50:ab:c3:67:9b:54:b9:58:53:a7:9d:c0:85:75: ac:8b:ba:a7:1e:4d:fa:fd:20:18:33:c6:8c:2e:64:26:a5:90: 19:b2:c4:ff:f5:19:43:7a:d3:e4:29:b7:9d:f2:5d:f2:6f:91: fb:87:88:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCFpshHZQnCdKjJibNEMQPouTU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNjA0MTcxMDQ2MjlaFw0yNjA0MjAxNDQyMjlaMDMxMTAvBgNV BAMTKDdBRkRGQUU5RjdFNzkzRDA3OTJCMzcxOTBGRkNBQTQ4M0U0RUQ3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zXva5a7pnkZTG9ORjrPZUBnr Z0OQTVbbfeuc/0JcST3kb7GAreKspV5TEexdSwYq7SVmln9Lf3gAdUdJRz57Oc5Z 9ovqLXtojuXWnuXCQ8Srj35yEoItNNzohW1sEn58hq/BWG8rSaqBb2gWk5UubmU4 Swl6XkK8lVwWysUe6IH9ZH36M87vq8b+44ZJwlCNe7DPdIp8tvVByOMk6+Wa8wsx aSBmQip9G1RH57u+VoDJifrtZiBjn4z3Pr1xnVI5GdfDIdAVbVIRte5OvICePSV/ LOgCPEihFbaN02LX7stnk7tc0G54OjuypKBBNDZJPRrcuKnQbnP7WeLCEwVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUev366ffnk9B5KzcZD/yqSD5O170wHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpKPb4EoJ5DejZ8NMmM1FeXlI6YEeJLdrks otYeYUNZcdPpFD8gHiVOuOSgbOFKJ9VazWfQSsvfMIrnluWpVHlNno/7gHvJ63K2 2JgQaFxYQ09+kjXQLfssA6z4zVmI5PTbH1vAm/m851sta481Lg7zPTMBxnzpBYOp HzrgFbrBn6EyupX14or8hOKKt+oI+AqTXq9aUxSkohw3ckP7c3RqewI1cPLgEGOQ wmB+UCFXrbEBys9c62nmdi6NJsVWE45rhLX9qv88Gz5Qq8Nnm1S5WFOnncCFdayL uqceTfr9IBgzxowuZCalkBmyxP/1GUN60+Qpt53yXfJvkfuHiHU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:22 2026 by rpki-client