$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: 5ctQY9kv47+BT1UiuNIWACN+8Zvhagg0YYyRIXhiv/s= Subject key identifier: 91:4E:3F:5E:8A:64:0A:89:47:42:2A:12:2F:0E:86:8D:45:BB:77:5A Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 75E6849FDE1A4E32C92ED322B57F06D9E856E76C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 0586 Signing time: Fri 17 Apr 2026 11:00:48 +0000 Manifest this update: Fri 17 Apr 2026 10:55:48 +0000 Manifest next update: Mon 20 Apr 2026 21:41:48 +0000 Files and hashes: 1: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: jkvgfadawQat77RX1lpubs3fDcRK4f8WUohAn2tzzAU=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: /esJ4QHuGYNozWN9Hvfv3B2ZqpQ1+3oi2eA/pMpl2no=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 4: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e6:84:9f:de:1a:4e:32:c9:2e:d3:22:b5:7f:06:d9:e8:56:e7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Apr 17 10:55:48 2026 GMT Not After : Apr 20 21:41:48 2026 GMT Subject: CN=914E3F5E8A640A8947422A122F0E868D45BB775A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:0f:39:4c:69:cf:d2:14:17:1e:25:80:2e: 8e:4c:e3:72:db:d0:b6:e3:3c:72:9e:b5:e0:76:b9: f9:1d:b8:cf:31:b1:79:68:fa:48:64:f1:0d:8f:4b: 10:28:99:c9:ae:53:0a:57:eb:54:04:b6:4d:5c:4a: 9c:84:c2:2e:3d:ec:e9:a4:53:b6:89:43:b5:59:ac: aa:77:92:90:35:77:d4:49:d2:2a:1a:ce:ef:1c:dd: 48:22:98:80:50:e9:33:d8:ce:8f:22:fc:52:45:79: 21:13:5e:4c:19:35:46:30:99:5a:46:fb:6d:d1:8a: 57:1d:30:40:f8:ac:6e:b6:21:2e:4e:67:25:fb:83: 4e:de:de:5b:d2:be:e7:07:3b:a8:72:21:f3:d7:7e: 8d:34:42:a1:83:48:8e:05:3c:bd:c7:ba:2f:c8:6e: c3:8a:4e:10:51:72:37:ec:28:91:39:07:4b:a6:63: ae:b1:45:80:d1:9a:55:75:ee:f7:92:53:4f:d8:85: 54:d8:cd:32:dc:1b:58:13:84:05:29:6f:2a:c8:fb: 7e:f7:6c:50:1b:b6:31:2e:0a:0f:6c:c9:ef:df:76: 3e:27:7a:2b:5e:dd:00:7c:30:75:fe:51:f5:81:fd: 2f:d3:d5:9c:89:de:95:1f:e0:34:a5:7a:9f:0d:f2: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4E:3F:5E:8A:64:0A:89:47:42:2A:12:2F:0E:86:8D:45:BB:77:5A X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c9:75:13:5b:e1:2f:04:fd:d5:d9:09:0c:fa:4b:5e:aa:01: 5c:d7:d8:0f:9c:22:f4:c0:51:57:89:58:c5:ca:80:05:b7:46: e3:18:ea:56:60:c9:29:aa:4b:64:13:15:ee:81:a5:7c:26:bc: 9f:e3:18:5e:f1:c4:c4:7a:1d:19:35:47:2f:7c:bd:c0:1b:ee: e8:ba:c0:d0:16:32:af:da:c4:7a:4a:b2:9f:7a:e9:00:b2:bd: 25:2b:4b:91:2c:e1:fb:5b:2c:16:74:4c:42:f1:ca:65:f4:9e: b4:d2:da:13:a0:4e:8b:d5:ad:1f:47:18:52:ca:7e:8c:fb:99: f1:10:70:5a:66:f0:e3:fb:fa:e0:1d:53:72:69:85:1d:ff:57: 5d:8b:41:b5:02:46:3a:ac:e4:e5:73:ba:8a:c9:d8:81:30:62: a5:1f:d3:ca:37:d4:16:51:32:7b:f6:dd:0a:b7:32:00:53:0f: 53:ba:7a:a8:49:ab:ed:44:b0:00:fd:9c:5d:84:40:81:d9:62: ae:47:19:ea:d5:4a:64:88:3b:22:20:e9:1c:00:1a:94:2a:4a: d8:9e:96:54:93:86:10:d3:a8:04:a6:af:9f:57:09:fd:18:a0: e5:a0:ae:65:95:83:ae:2f:cb:bd:92:6a:7c:55:e9:2f:00:78: a8:e6:8a:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeaEn94aTjLJLtMitX8G2ehW52wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNjA0MTcxMDU1NDhaFw0yNjA0MjAyMTQxNDhaMDMxMTAvBgNV BAMTKDkxNEUzRjVFOEE2NDBBODk0NzQyMkExMjJGMEU4NjhENDVCQjc3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZQ85TGnP0hQXHiWALo5M43Lb 0LbjPHKeteB2ufkduM8xsXlo+khk8Q2PSxAomcmuUwpX61QEtk1cSpyEwi497Omk U7aJQ7VZrKp3kpA1d9RJ0ioazu8c3UgimIBQ6TPYzo8i/FJFeSETXkwZNUYwmVpG +23RilcdMED4rG62IS5OZyX7g07e3lvSvucHO6hyIfPXfo00QqGDSI4FPL3Hui/I bsOKThBRcjfsKJE5B0umY66xRYDRmlV17veSU0/YhVTYzTLcG1gThAUpbyrI+373 bFAbtjEuCg9sye/fdj4neite3QB8MHX+UfWB/S/T1ZyJ3pUf4DSlep8N8vAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkU4/XopkColHQioSLw6GjUW7d1owHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPJdRNb4S8E/dXZCQz6S16qAVzX2A+cIvTA UVeJWMXKgAW3RuMY6lZgySmqS2QTFe6BpXwmvJ/jGF7xxMR6HRk1Ry98vcAb7ui6 wNAWMq/axHpKsp966QCyvSUrS5Es4ftbLBZ0TELxymX0nrTS2hOgTovVrR9HGFLK foz7mfEQcFpm8OP7+uAdU3JphR3/V12LQbUCRjqs5OVzuorJ2IEwYqUf08o31BZR Mnv23Qq3MgBTD1O6eqhJq+1EsAD9nF2EQIHZYq5HGerVSmSIOyIg6RwAGpQqStie llSThhDTqASmr59XCf0YoOWgrmWVg64vy72SanxV6S8AeKjmirk= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:57 2026 by rpki-client