$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: /0cA6EjzHuDb1gwT4nAERvEVXUHwMaAFDIrUt+NyqOI= Subject key identifier: 5D:43:A6:2F:01:FD:E6:C2:B6:77:4C:97:37:B3:EE:17:9E:91:A8:CF Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 38401BCCFFC806CF2A684AC06FCBDD8A4904289B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02EB Signing time: Wed 15 Apr 2026 11:10:45 +0000 Manifest this update: Wed 15 Apr 2026 11:05:45 +0000 Manifest next update: Sat 18 Apr 2026 18:58:45 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) 2: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: vJuqfyyzOi8y4cZM+LMwOk9sNzIpJIMLZypBsF2mVL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:40:1b:cc:ff:c8:06:cf:2a:68:4a:c0:6f:cb:dd:8a:49:04:28:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Apr 15 11:05:45 2026 GMT Not After : Apr 18 18:58:45 2026 GMT Subject: CN=5D43A62F01FDE6C2B6774C9737B3EE179E91A8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:2a:d0:f4:d1:a0:b3:53:b1:a1:aa:79:27: 28:51:e7:15:99:34:09:a4:7c:3f:1e:32:0f:b0:55: 84:20:22:d8:06:15:ad:06:09:aa:8c:30:e8:24:2c: b5:f8:69:27:57:f8:36:2e:34:3b:65:28:38:cc:32: a5:97:93:59:2a:2e:bb:a5:99:6c:b5:f5:24:e7:58: 0f:de:6f:9b:3d:28:53:50:5c:af:8e:57:dd:d6:c5: 1e:89:4b:ce:dc:7a:22:46:51:3d:bf:2c:8c:f1:d2: b2:98:9a:d2:ea:81:80:b9:e3:fc:bb:9d:0c:99:37: ae:3d:ec:90:d6:73:4e:6d:d3:3f:f4:a3:67:50:e4: 59:09:aa:be:ce:01:b9:ce:57:70:ab:40:23:7b:04: 76:0a:0f:bc:c5:ef:1d:3f:46:ee:34:bf:dc:fb:3a: 0d:20:71:81:5b:62:27:44:05:4b:8b:71:4a:0a:56: fc:b3:e3:17:41:21:06:01:c4:43:c1:5a:0e:32:53: 99:25:c0:d6:f3:27:65:ad:6c:15:64:56:76:82:5b: ba:c5:16:29:2b:02:20:9e:9a:d4:c0:80:12:32:99: 09:1d:06:8a:79:90:f6:38:dd:97:da:15:a0:55:c2: a0:5a:ea:2a:d6:d4:43:a2:d5:3d:12:b7:a3:72:64: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:A6:2F:01:FD:E6:C2:B6:77:4C:97:37:B3:EE:17:9E:91:A8:CF X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:91:8a:5c:ac:ff:c1:8c:8b:1e:59:14:a4:4d:f6:1a:26: 47:1c:91:44:62:9c:56:b1:cc:32:1d:cf:cb:e4:e6:b3:60:2e: 08:0c:01:5d:f7:ac:9d:61:1c:68:ed:fe:57:d1:09:df:63:c6: d0:0d:0c:bf:7b:cb:8b:5c:c7:8d:4e:17:ff:2c:6a:2b:af:01: 6e:a4:4c:6f:5b:7a:50:5a:e7:bb:f4:dc:e7:89:d3:b2:c8:8a: 74:28:77:d8:17:52:cf:eb:b3:f5:17:2f:e1:65:9f:18:9e:2c: b9:0b:1f:f9:14:6b:96:7d:70:06:6b:61:70:00:25:a0:88:15: 7c:d4:7d:c0:a7:f0:81:76:0f:2d:5e:51:f8:98:13:f8:94:44: 86:84:42:43:52:47:d8:20:52:7a:24:03:6c:9e:0f:88:75:ba: 37:aa:79:96:cd:24:34:9e:e7:f6:d9:bf:16:93:88:27:8a:16: 7d:33:bb:22:40:d4:db:df:84:2d:ce:0b:3c:3c:f9:33:7f:2d: b5:17:6d:2c:cf:e3:29:9c:1b:41:97:6f:87:d7:b5:b9:30:d1: 53:93:42:b9:85:cc:41:ab:2a:82:74:f3:2d:82:cc:23:cb:c7: a1:32:6b:21:54:24:7a:ce:60:09:a8:c8:80:b1:bc:ef:95:0c: 33:50:86:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEAbzP/IBs8qaErAb8vdikkEKJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNjA0MTUxMTA1NDVaFw0yNjA0MTgxODU4NDVaMDMxMTAvBgNV BAMTKDVENDNBNjJGMDFGREU2QzJCNjc3NEM5NzM3QjNFRTE3OUU5MUE4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoECrQ9NGgs1Oxoap5JyhR5xWZ NAmkfD8eMg+wVYQgItgGFa0GCaqMMOgkLLX4aSdX+DYuNDtlKDjMMqWXk1kqLrul mWy19STnWA/eb5s9KFNQXK+OV93WxR6JS87ceiJGUT2/LIzx0rKYmtLqgYC54/y7 nQyZN6497JDWc05t0z/0o2dQ5FkJqr7OAbnOV3CrQCN7BHYKD7zF7x0/Ru40v9z7 Og0gcYFbYidEBUuLcUoKVvyz4xdBIQYBxEPBWg4yU5klwNbzJ2WtbBVkVnaCW7rF FikrAiCemtTAgBIymQkdBop5kPY43ZfaFaBVwqBa6irW1EOi1T0St6NyZPOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUOmLwH95sK2d0yXN7PuF56RqM8wHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvPkYpcrP/BjIseWRSkTfYaJkcckURinFax zDIdz8vk5rNgLggMAV33rJ1hHGjt/lfRCd9jxtANDL97y4tcx41OF/8saiuvAW6k TG9belBa57v03OeJ07LIinQod9gXUs/rs/UXL+FlnxieLLkLH/kUa5Z9cAZrYXAA JaCIFXzUfcCn8IF2Dy1eUfiYE/iURIaEQkNSR9ggUnokA2yeD4h1ujeqeZbNJDSe 5/bZvxaTiCeKFn0zuyJA1NvfhC3OCzw8+TN/LbUXbSzP4ymcG0GXb4fXtbkw0VOT QrmFzEGrKoJ08y2CzCPLx6EyayFUJHrOYAmoyICxvO+VDDNQhnk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:55 2026 by rpki-client