$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: 87QQxCx+gqtMAK4SuUhTmDHWu5egk/MG2hIgaI1JI4A= Subject key identifier: A6:CF:70:8D:C7:2B:F7:4C:77:25:A1:99:A7:B2:1E:0E:86:6A:F7:FB Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 387A1A1CBB3E7FA64CFF767E55D3819975972C1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 02D7 Signing time: Fri 17 Apr 2026 00:50:04 +0000 Manifest this update: Fri 17 Apr 2026 00:45:04 +0000 Manifest next update: Mon 20 Apr 2026 04:24:04 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: hjShLC3ThPS5xNqpT6wBX7RP38jy0VCHlC/YM0Vp++8=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7a:1a:1c:bb:3e:7f:a6:4c:ff:76:7e:55:d3:81:99:75:97:2c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Apr 17 00:45:04 2026 GMT Not After : Apr 20 04:24:04 2026 GMT Subject: CN=A6CF708DC72BF74C7725A199A7B21E0E866AF7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:34:73:bf:a6:74:f5:c7:a9:9f:00:54:d0: f4:25:d8:e6:de:fb:38:40:cf:db:6d:ae:85:4a:df: 04:16:34:71:da:35:be:1f:41:78:e7:b2:1a:ef:3a: 34:c5:69:0d:18:8a:43:99:3d:15:ce:d8:82:0b:76: 86:33:74:36:cf:bd:39:39:2d:29:3d:3f:2a:53:28: 20:ea:5c:a5:a1:f1:73:26:8c:e2:63:cf:58:b1:d9: ed:1e:0f:71:78:da:a0:bf:26:89:8e:d5:a9:d9:a4: 60:dc:72:00:2d:88:a6:7d:46:6a:4c:0c:7e:7e:56: a6:3d:9f:f6:80:30:04:43:dd:7f:5f:ef:45:90:84: ae:42:af:5a:f9:48:b8:b7:69:91:64:9c:c8:6c:43: 9b:a5:cb:94:dc:30:2b:53:d8:76:68:db:42:f7:76: cd:31:3e:0f:c8:9f:e0:f6:08:68:cb:aa:89:09:53: ba:40:df:5d:2e:9c:d4:c6:3b:ac:b6:ee:f4:a1:24: 43:31:14:7c:44:2c:48:81:d6:89:ae:38:68:22:b2: 13:ea:a2:ac:6a:99:26:f0:cf:37:7f:e2:a0:2c:68: c3:fe:b3:97:a2:dd:50:27:02:a0:e8:d3:4d:01:c0: ca:e2:24:c6:bb:53:2e:c6:98:58:09:29:a4:d7:1f: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CF:70:8D:C7:2B:F7:4C:77:25:A1:99:A7:B2:1E:0E:86:6A:F7:FB X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ac:d0:a4:72:d0:09:59:33:7e:f6:e9:00:72:37:7e:d4:9b: be:50:c9:68:8c:19:c7:ca:da:7d:60:08:97:6f:2a:34:bb:f5: 20:23:7d:98:3a:01:aa:77:e7:31:cf:ca:e3:40:25:75:b9:bf: d2:66:a1:1b:21:0d:1f:07:10:58:7d:a6:15:56:24:54:63:34: a1:87:af:42:43:9c:42:cf:55:2a:1e:62:10:8d:7e:74:24:2c: 47:c4:fa:4c:57:64:dd:c2:ae:da:d5:93:fd:b5:00:93:43:a7: fd:dc:48:f1:85:4b:8c:3c:ec:a3:20:60:bd:95:8c:c3:4f:74: 01:a5:85:c6:f7:0d:9d:23:0d:10:78:89:f8:10:a4:e5:81:a3: cb:98:e4:02:cc:60:39:83:4b:7f:4f:80:48:98:99:fe:f6:b2: f7:61:51:6d:84:bd:42:16:9e:d8:d9:cd:f8:24:d2:f4:81:87: 1a:15:21:87:36:eb:3d:dd:f2:e2:82:c9:70:45:9d:97:92:ad: 01:e1:91:97:eb:7f:d1:f2:ed:2b:8a:0e:40:56:9a:77:cf:5e: 80:84:19:c4:7c:59:59:21:b4:14:fa:6d:3f:39:07:62:aa:ec: 89:bf:0e:ec:b4:98:fd:ff:7e:4f:1a:5d:e1:26:94:65:36:66: 51:7c:c8:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHoaHLs+f6ZM/3Z+VdOBmXWXLB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNjA0MTcwMDQ1MDRaFw0yNjA0MjAwNDI0MDRaMDMxMTAvBgNV BAMTKEE2Q0Y3MDhEQzcyQkY3NEM3NzI1QTE5OUE3QjIxRTBFODY2QUY3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNDRzv6Z09cepnwBU0PQl2Obe +zhAz9ttroVK3wQWNHHaNb4fQXjnshrvOjTFaQ0YikOZPRXO2IILdoYzdDbPvTk5 LSk9PypTKCDqXKWh8XMmjOJjz1ix2e0eD3F42qC/JomO1anZpGDccgAtiKZ9RmpM DH5+VqY9n/aAMARD3X9f70WQhK5Cr1r5SLi3aZFknMhsQ5uly5TcMCtT2HZo20L3 ds0xPg/In+D2CGjLqokJU7pA310unNTGO6y27vShJEMxFHxELEiB1omuOGgishPq oqxqmSbwzzd/4qAsaMP+s5ei3VAnAqDo000BwMriJMa7Uy7GmFgJKaTXHym5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUps9wjccr90x3JaGZp7IeDoZq9/swHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGs0KRy0AlZM3726QByN37Um75QyWiMGcfK 2n1gCJdvKjS79SAjfZg6Aap35zHPyuNAJXW5v9JmoRshDR8HEFh9phVWJFRjNKGH r0JDnELPVSoeYhCNfnQkLEfE+kxXZN3CrtrVk/21AJNDp/3cSPGFS4w87KMgYL2V jMNPdAGlhcb3DZ0jDRB4ifgQpOWBo8uY5ALMYDmDS39PgEiYmf72svdhUW2EvUIW ntjZzfgk0vSBhxoVIYc26z3d8uKCyXBFnZeSrQHhkZfrf9Hy7SuKDkBWmnfPXoCE GcR8WVkhtBT6bT85B2Kq7Im/Duy0mP3/fk8aXeEmlGU2ZlF8yLQ= -----END CERTIFICATE-----Generated at Fri Apr 17 23:34:54 2026 by rpki-client