$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: i4HV3lNNoJVzAY6IIU+yGcUDZZqGPmmT4a55rbvrEGM= Subject key identifier: A9:C2:84:7E:B1:C3:44:FE:09:35:57:55:58:59:FD:AE:3F:7D:43:FF Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 4C868E3A58F25015D88E9C5429B2B81E1C558092 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 03E6 Signing time: Wed 15 Apr 2026 16:51:29 +0000 Manifest this update: Wed 15 Apr 2026 16:46:29 +0000 Manifest next update: Sun 19 Apr 2026 01:18:29 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: vS20g0hPO14H/U6Hfi7W3JlMAAVd4ePw02behJV3Jks=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: HnPdBvCCg8avKOKqlY6FjH1UWq2tAli++1G3pShzD84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:8e:3a:58:f2:50:15:d8:8e:9c:54:29:b2:b8:1e:1c:55:80:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Apr 15 16:46:29 2026 GMT Not After : Apr 19 01:18:29 2026 GMT Subject: CN=A9C2847EB1C344FE093557555859FDAE3F7D43FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:da:b1:02:4f:1a:13:ec:db:98:2f:5f:8b: ba:95:30:e1:f9:f1:1e:78:ac:3c:cd:18:35:71:b4: 1b:96:3e:4e:be:5e:42:15:93:59:31:2d:49:d7:f4: b7:36:28:2f:a7:c0:32:4d:e1:c7:3f:5e:8d:66:bc: b8:18:69:64:62:df:6a:b0:2f:43:49:c7:55:4b:f1: 5e:0c:b7:fb:29:d8:ee:67:bd:5c:51:b1:73:c7:18: d8:b0:f1:93:f8:fc:1c:bb:3b:86:3e:f5:3f:a4:32: a7:60:13:66:43:6c:01:b9:b1:2a:2f:9b:9e:a7:70: 6b:3d:45:83:31:c5:1a:f1:df:2f:ca:c7:0d:55:62: d1:2e:5a:d9:b5:8b:d4:72:85:46:b0:82:b3:37:5f: 3e:26:12:44:fa:73:d6:a0:a1:11:22:30:9a:64:6c: b4:e9:58:0b:27:7e:57:85:b5:20:df:8d:e2:6d:51: 0a:7d:aa:b2:a6:c8:27:66:be:8a:8e:67:bb:ef:8d: 5a:ac:ed:c6:76:8e:27:85:1e:8a:9d:f3:c9:54:52: da:31:d7:8c:d1:73:3f:ba:c5:e2:00:71:2b:b2:4d: bc:09:ec:b6:13:fa:3d:69:6c:87:0c:86:1e:8c:f6: e5:16:7a:b1:25:5f:1c:59:26:07:94:28:08:a6:c4: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C2:84:7E:B1:C3:44:FE:09:35:57:55:58:59:FD:AE:3F:7D:43:FF X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:62:12:5b:02:df:6f:56:6b:2f:95:70:37:b2:3d:98:87:52: b8:62:d7:fd:57:19:84:d5:41:75:a5:be:45:f8:96:94:e3:7a: 26:16:db:c0:89:a9:41:28:05:5f:7c:d5:f5:f2:f1:57:4e:e8: 68:dd:4b:65:80:76:67:7b:72:c3:c3:f9:7a:11:67:30:21:77: bb:b2:a9:4b:b4:48:08:b4:a2:1d:0d:c5:95:b5:b6:ab:0d:30: 29:7b:e9:43:38:c0:02:c1:b0:7a:de:38:be:a9:48:b9:95:7d: df:16:aa:b2:24:3c:ec:26:86:ac:ab:a9:4f:c3:78:ac:84:01: 4f:23:83:e5:0d:b9:1d:4b:3f:3d:1e:e7:c4:19:12:5a:77:e2: 19:b9:e7:b0:da:fc:ad:c6:ea:6f:26:4f:7d:f8:19:93:67:de: 5a:41:9a:de:18:20:39:c9:c3:2c:08:c0:6b:9d:33:7d:69:a7: c2:7d:f4:72:3f:5e:e4:02:87:ab:8b:a5:31:a3:b1:3f:ea:f5: 6b:34:a3:5a:23:5d:79:bb:e8:62:3b:8c:57:a6:eb:ae:b2:ba: ff:2d:ec:20:ab:8d:91:2b:69:a0:8e:b8:5a:8f:3e:0c:ea:13: 0d:fc:d4:d4:80:61:41:ef:2f:89:3a:2a:0f:02:6b:70:65:72: 34:0b:82:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIaOOljyUBXYjpxUKbK4HhxVgJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNjA0MTUxNjQ2MjlaFw0yNjA0MTkwMTE4MjlaMDMxMTAvBgNV BAMTKEE5QzI4NDdFQjFDMzQ0RkUwOTM1NTc1NTU4NTlGREFFM0Y3RDQzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo69qxAk8aE+zbmC9fi7qVMOH5 8R54rDzNGDVxtBuWPk6+XkIVk1kxLUnX9Lc2KC+nwDJN4cc/Xo1mvLgYaWRi32qw L0NJx1VL8V4Mt/sp2O5nvVxRsXPHGNiw8ZP4/By7O4Y+9T+kMqdgE2ZDbAG5sSov m56ncGs9RYMxxRrx3y/Kxw1VYtEuWtm1i9RyhUawgrM3Xz4mEkT6c9agoREiMJpk bLTpWAsnfleFtSDfjeJtUQp9qrKmyCdmvoqOZ7vvjVqs7cZ2jieFHoqd88lUUtox 14zRcz+6xeIAcSuyTbwJ7LYT+j1pbIcMhh6M9uUWerElXxxZJgeUKAimxI9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcKEfrHDRP4JNVdVWFn9rj99Q/8wHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNiElsC329Way+VcDeyPZiHUrhi1/1XGYTV QXWlvkX4lpTjeiYW28CJqUEoBV981fXy8VdO6GjdS2WAdmd7csPD+XoRZzAhd7uy qUu0SAi0oh0NxZW1tqsNMCl76UM4wALBsHreOL6pSLmVfd8WqrIkPOwmhqyrqU/D eKyEAU8jg+UNuR1LPz0e58QZElp34hm557Da/K3G6m8mT334GZNn3lpBmt4YIDnJ wywIwGudM31pp8J99HI/XuQCh6uLpTGjsT/q9Ws0o1ojXXm76GI7jFem666yuv8t 7CCrjZEraaCOuFqPPgzqEw381NSAYUHvL4k6Kg8Ca3BlcjQLgsc= -----END CERTIFICATE-----Generated at Fri Apr 17 22:08:06 2026 by rpki-client