$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: 1vgeZL1NcmXqUmbyIgqK0GU2G76B9C8U8e8H+YaWlio= Subject key identifier: 49:14:B4:95:5F:D2:43:B4:1C:1E:41:E7:DB:59:9C:3A:86:7E:EE:F1 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 0A079B93A12F2A9B6C0DAA7BAA5ED45826AC8A4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01E9 Signing time: Sat 18 Apr 2026 03:01:10 +0000 Manifest this update: Sat 18 Apr 2026 02:56:10 +0000 Manifest next update: Tue 21 Apr 2026 08:41:10 +0000 Files and hashes: 1: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: 9oxT5RDcr9Ek1xIr6QpdXnO6XUo20PqnOOCrdJPUbMk=) 2: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: gwbJnPHpSeHg+TMGbvaYpRRpr3Bq8iLm10t802UwTG4=) 3: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: xlxWynyg4hfKziS2fdPWIlDySNvIWbbHvXpQyS625Nc=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: wCS0nyyn34cApWcZ5FUBxPZYDFIlv5DQUxLaCfWoRF4=) 5: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: bByhaVCaeYJS8FxWovLUQoXCr4lzclJUwq5zNJhPC5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:07:9b:93:a1:2f:2a:9b:6c:0d:aa:7b:aa:5e:d4:58:26:ac:8a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Apr 18 02:56:10 2026 GMT Not After : Apr 21 08:41:10 2026 GMT Subject: CN=4914B4955FD243B41C1E41E7DB599C3A867EEEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:fd:cb:64:64:bd:d3:56:83:81:26:01:36: f4:ae:0b:93:7f:e7:e4:db:60:b5:e8:bb:ee:68:69: ca:46:c4:5a:77:f1:a1:1d:1a:a0:8f:59:a6:3c:8c: ad:c9:08:67:97:d2:0b:5f:25:1d:ef:05:59:cb:23: e9:f5:db:5a:12:0d:e3:22:97:ed:3d:09:b6:14:dd: 0a:81:62:ba:c2:b2:8a:7e:b4:b7:61:13:2d:76:f4: 10:be:dc:ba:bd:22:05:16:b5:35:ee:56:cb:ed:86: e4:ff:40:8b:51:13:92:7c:cf:6a:16:2e:c3:6e:14: f6:79:23:08:30:e4:97:8a:d1:20:a8:9b:42:5e:75: 3b:21:4b:06:e0:0b:4b:87:b8:cf:1e:3e:c9:39:5f: 62:23:f0:92:90:37:d5:b6:bc:85:87:df:3c:bc:4d: 19:38:6d:ed:2a:eb:81:3f:40:18:1f:8a:85:6c:c9: 63:81:fa:34:68:61:0e:6a:eb:53:aa:db:d4:fb:71: 83:41:22:ae:73:9d:d5:09:02:49:65:6a:5a:49:12: e4:78:7c:ea:75:7b:3f:a6:f6:84:6e:65:a9:b3:2d: 72:d5:fc:7e:5a:28:8d:6b:43:6e:74:c1:c6:ea:4b: f8:e7:bc:97:4e:66:ab:0a:54:f4:4d:a2:cc:1d:39: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:14:B4:95:5F:D2:43:B4:1C:1E:41:E7:DB:59:9C:3A:86:7E:EE:F1 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:25:da:10:ce:0e:06:37:40:7e:bf:d5:ae:10:68:11:58:aa: a1:aa:81:9d:f4:10:67:4c:a2:39:2a:fd:8e:a5:cb:15:e1:cd: a4:3c:fa:cb:09:07:59:b0:89:55:d4:e5:4f:a9:e9:ed:ed:e4: f4:34:70:78:0a:c7:52:b4:fb:63:17:15:b7:c8:83:e0:d2:9f: 33:dc:db:b0:82:f2:6f:1c:63:b1:de:7b:a1:69:b6:1b:ab:43: 82:34:39:0c:0f:fa:00:3e:a1:5f:c3:86:91:5c:cd:1a:6e:ca: 61:a7:c1:2f:64:95:a9:78:6c:5a:16:01:85:dc:35:1a:c2:bf: f3:2e:aa:d0:cd:46:83:09:72:96:df:67:22:b6:a2:70:0a:70: a8:28:7f:df:9a:da:df:78:cb:26:be:b6:03:84:27:49:c5:6b: 2c:39:9b:45:fc:b0:59:b9:6b:3f:85:64:dd:c8:32:9d:9f:d8: c3:c2:58:e9:ce:77:38:6d:f6:be:ac:20:c2:ee:e2:c6:11:6a: fc:95:05:45:91:85:db:38:85:a1:0d:03:17:d4:99:f6:da:1b: 63:8d:89:34:00:a7:c3:3a:7b:62:3f:08:fd:83:7d:0f:84:43: 11:17:7e:bd:d7:07:14:b6:8f:eb:13:72:6f:be:99:f5:54:7c: bf:d1:62:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgebk6EvKptsDap7ql7UWCasik0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNjA0MTgwMjU2MTBaFw0yNjA0MjEwODQxMTBaMDMxMTAvBgNV BAMTKDQ5MTRCNDk1NUZEMjQzQjQxQzFFNDFFN0RCNTk5QzNBODY3RUVFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS/3LZGS901aDgSYBNvSuC5N/ 5+TbYLXou+5oacpGxFp38aEdGqCPWaY8jK3JCGeX0gtfJR3vBVnLI+n121oSDeMi l+09CbYU3QqBYrrCsop+tLdhEy129BC+3Lq9IgUWtTXuVsvthuT/QItRE5J8z2oW LsNuFPZ5Iwgw5JeK0SCom0JedTshSwbgC0uHuM8ePsk5X2Ij8JKQN9W2vIWH3zy8 TRk4be0q64E/QBgfioVsyWOB+jRoYQ5q61Oq29T7cYNBIq5zndUJAkllalpJEuR4 fOp1ez+m9oRuZamzLXLV/H5aKI1rQ250wcbqS/jnvJdOZqsKVPRNoswdORY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRS0lV/SQ7QcHkHn21mcOoZ+7vEwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIl2hDODgY3QH6/1a4QaBFYqqGqgZ30EGdM ojkq/Y6lyxXhzaQ8+ssJB1mwiVXU5U+p6e3t5PQ0cHgKx1K0+2MXFbfIg+DSnzPc 27CC8m8cY7Hee6FpthurQ4I0OQwP+gA+oV/DhpFczRpuymGnwS9klal4bFoWAYXc NRrCv/MuqtDNRoMJcpbfZyK2onAKcKgof9+a2t94yya+tgOEJ0nFayw5m0X8sFm5 az+FZN3IMp2f2MPCWOnOdzht9r6sIMLu4sYRavyVBUWRhds4haENAxfUmfbaG2ON iTQAp8M6e2I/CP2DfQ+EQxEXfr3XBxS2j+sTcm++mfVUfL/RYvY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:35 2026 by rpki-client