$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: JDU7qGGfVCr178n7yzOIpD35OViZbh3Jvd5xqbLs4e0= Subject key identifier: F2:58:CD:63:4D:46:0A:59:6D:59:1F:D9:17:C0:B4:8B:26:F8:A7:EF Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 6EA251E6520C0A7BCC6F81457E03D6E27DF0AE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: D4 Signing time: Thu 16 Apr 2026 05:20:03 +0000 Manifest this update: Thu 16 Apr 2026 05:15:03 +0000 Manifest next update: Sun 19 Apr 2026 05:47:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: LbFTplu5c8rPbQe4wUBrF8irck+SjYevD4g0EX9w2V8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a2:51:e6:52:0c:0a:7b:cc:6f:81:45:7e:03:d6:e2:7d:f0:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Apr 16 05:15:03 2026 GMT Not After : Apr 19 05:47:03 2026 GMT Subject: CN=F258CD634D460A596D591FD917C0B48B26F8A7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:74:c8:f1:3e:bc:01:04:61:7a:01:1b:b7: 79:8c:85:67:06:46:7f:67:9c:18:d8:c1:2f:1e:cd: c0:b7:35:29:06:0c:52:61:6c:40:2a:37:16:12:bb: 46:1d:7c:7f:09:44:d4:3f:de:e8:0b:12:9c:3c:03: 42:a3:87:0a:c7:82:41:f0:ef:c9:7b:e4:a4:8d:eb: a4:61:c1:e2:09:d9:1a:95:76:7c:3a:2b:56:39:6f: 37:c2:99:c7:85:97:3f:2d:e7:c5:e2:5e:e5:bb:f5: c0:b6:80:ae:aa:65:0f:f2:64:04:95:04:81:44:b3: 4d:1b:a5:d0:d6:5c:bb:bd:71:47:ba:ca:07:a2:5d: 37:aa:f0:68:f3:59:6a:79:fb:e5:df:5f:a3:b3:f0: 38:9c:6d:76:77:af:e6:58:ba:6c:df:90:c4:e4:4e: 06:cf:6f:4e:bb:6d:d1:1c:3c:f3:e2:d9:15:1e:5c: 4f:ee:55:12:61:ec:76:ce:78:e7:f4:d9:98:bb:e8: 86:39:dd:f6:e0:9b:84:30:6e:7c:fc:82:28:81:ed: 70:0f:a2:e1:83:62:cd:61:85:5d:cc:25:d0:0b:71: d0:aa:0f:88:c3:4d:19:57:81:49:69:fc:6b:22:46: 1b:76:fc:bd:13:d0:d3:73:20:40:fb:58:27:8f:7e: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:CD:63:4D:46:0A:59:6D:59:1F:D9:17:C0:B4:8B:26:F8:A7:EF X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:59:79:32:89:8e:da:fa:ab:ba:da:3d:37:cf:ef:40:e0: 4b:c2:e0:98:a6:c5:b3:ed:34:2f:a1:bd:5b:74:49:b6:dd:51: 7f:96:6c:a1:1c:1f:c1:c3:02:50:22:d2:60:8a:bc:49:72:d0: 30:0d:5e:51:44:65:fb:04:67:8c:2d:5f:c6:0a:c8:58:72:47: 27:38:d6:73:f1:5c:f8:f7:27:70:e4:8b:48:dc:ca:ce:98:d1: 7d:bc:9b:24:03:d4:f8:e9:ef:d1:a9:b6:67:3f:99:ac:de:08: b6:d6:2a:17:07:89:a9:30:3b:95:a5:5c:6c:34:0a:12:5c:77: b8:e9:c7:2a:cf:76:81:91:ab:b6:93:9c:bb:f2:8f:dc:af:3a: 96:6f:41:2c:a5:1c:7d:05:10:56:5d:a5:61:be:59:7e:37:37: 07:67:50:26:d3:ba:b6:31:9a:9f:27:b0:85:77:50:5c:38:43: d7:8a:ef:ee:6d:23:3e:c0:99:f5:62:be:b1:96:8a:78:49:cd: a4:e0:3e:31:fe:43:52:79:6a:3d:f4:2d:aa:bf:58:96:ce:e7: 7a:fd:24:02:11:7b:13:77:a6:4f:97:1f:60:01:b2:15:07:7f: e2:d7:ea:54:25:09:03:7d:0c:a8:62:5c:07:9d:11:71:25:9c: b3:3d:0a:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqJR5lIMCnvMb4FFfgPW4n3wrhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNjA0MTYwNTE1MDNaFw0yNjA0MTkwNTQ3MDNaMDMxMTAvBgNV BAMTKEYyNThDRDYzNEQ0NjBBNTk2RDU5MUZEOTE3QzBCNDhCMjZGOEE3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt53TI8T68AQRhegEbt3mMhWcG Rn9nnBjYwS8ezcC3NSkGDFJhbEAqNxYSu0YdfH8JRNQ/3ugLEpw8A0KjhwrHgkHw 78l75KSN66RhweIJ2RqVdnw6K1Y5bzfCmceFlz8t58XiXuW79cC2gK6qZQ/yZASV BIFEs00bpdDWXLu9cUe6ygeiXTeq8GjzWWp5++XfX6Oz8DicbXZ3r+ZYumzfkMTk TgbPb067bdEcPPPi2RUeXE/uVRJh7HbOeOf02Zi76IY53fbgm4Qwbnz8giiB7XAP ouGDYs1hhV3MJdALcdCqD4jDTRlXgUlp/GsiRht2/L0T0NNzIED7WCePfh4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ljNY01GClltWR/ZF8C0iyb4p+8wHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyYWXkyiY7a+qu62j03z+9A4EvC4JimxbPt NC+hvVt0SbbdUX+WbKEcH8HDAlAi0mCKvEly0DANXlFEZfsEZ4wtX8YKyFhyRyc4 1nPxXPj3J3Dki0jcys6Y0X28myQD1Pjp79Gptmc/mazeCLbWKhcHiakwO5WlXGw0 ChJcd7jpxyrPdoGRq7aTnLvyj9yvOpZvQSylHH0FEFZdpWG+WX43NwdnUCbTurYx mp8nsIV3UFw4Q9eK7+5tIz7AmfVivrGWinhJzaTgPjH+Q1J5aj30Laq/WJbO53r9 JAIRexN3pk+XH2ABshUHf+LX6lQlCQN9DKhiXAedEXElnLM9Cs4= -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:36 2026 by rpki-client