$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: bI1X65JvyqM4jpDG/XEMUSJxPQnn6ine0l/aGVBLmbA= Subject key identifier: A7:EE:A5:CE:97:10:6F:73:D4:5C:2C:EE:04:46:1F:8D:09:EA:C7:10 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 30749824645DEE2DFF9C0E93E12DC26F2C49113B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 0106 Signing time: Thu 16 Apr 2026 01:44:12 +0000 Manifest this update: Thu 16 Apr 2026 01:39:12 +0000 Manifest next update: Sun 19 Apr 2026 13:17:12 +0000 Files and hashes: 1: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) 2: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: QOIluQXNtf4UgLC+oQq37UFy6T2xs/Z7MFcLUYXXC+4=) 3: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) 4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 5: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:74:98:24:64:5d:ee:2d:ff:9c:0e:93:e1:2d:c2:6f:2c:49:11:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Apr 16 01:39:12 2026 GMT Not After : Apr 19 13:17:12 2026 GMT Subject: CN=A7EEA5CE97106F73D45C2CEE04461F8D09EAC710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:4f:29:d3:a1:f3:bf:48:4e:6d:3a:7f:9a: 45:92:76:57:0c:4f:0c:e7:75:d4:81:cc:54:20:ac: 43:07:51:65:f1:2b:80:f9:b2:9e:58:8d:35:4b:d7: 61:3b:5b:01:01:e7:ec:9c:5d:6a:07:03:00:63:06: 32:bc:7f:f4:7c:fa:02:55:87:28:e7:3f:7a:4c:91: 65:2c:c6:a8:89:52:a0:d3:f6:65:13:00:33:91:61: 76:08:c6:58:82:10:fb:38:1c:09:0e:e3:94:a2:30: 04:b8:53:fd:43:b7:25:2b:6a:8a:f9:f8:9c:90:39: bb:57:ae:05:a2:4c:9d:7d:15:c3:95:4b:bd:ba:39: b1:1e:78:5b:a5:7b:b7:ae:db:22:5c:80:5b:d2:d2: d8:d1:81:65:9d:e0:64:7f:16:90:31:03:54:6e:86: d9:cf:ac:27:5b:58:74:45:7a:2c:7e:06:fa:aa:db: 5e:a0:56:35:bd:30:a8:86:4d:f5:79:6d:14:26:65: e6:11:03:04:cf:e9:5e:6c:28:fe:5d:e1:88:19:8e: 4e:ab:cb:72:10:95:f5:42:b9:3e:06:f7:17:ad:59: 0d:09:5b:78:db:14:0c:06:35:6d:48:96:3d:3d:5a: 6f:e9:e6:5e:1c:18:b6:5e:4b:7b:f0:b3:76:0b:b2: 06:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:A5:CE:97:10:6F:73:D4:5C:2C:EE:04:46:1F:8D:09:EA:C7:10 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:42:7a:6c:63:93:1b:2b:bb:6a:f2:00:12:84:55:81:2b:fd: fc:e3:09:e9:dc:8e:97:5b:ae:97:ad:2f:82:90:98:ec:15:09: a7:e5:d3:a6:c1:d1:39:c4:df:57:cc:6b:3a:82:09:03:92:6d: 7b:b5:fb:b0:e8:82:f8:7d:81:96:80:5f:fe:93:bd:f5:99:19: 96:d3:f7:5f:45:42:a1:6b:d9:95:88:fe:e5:3f:66:3e:57:a4: 1e:38:0e:1a:5d:23:57:fa:3b:b3:67:72:9b:a3:13:f9:2e:1f: a0:d5:8b:64:b0:fe:35:b7:56:7b:7b:96:83:8d:ab:19:75:9d: 7f:43:1d:77:c0:a6:8a:99:39:06:49:8a:f4:ce:2d:c6:23:3f: 62:76:de:8e:8b:ee:b2:e7:fc:a8:8f:34:07:41:e5:b6:78:87: 8f:58:22:fc:5d:98:d8:73:47:6d:ae:cd:a8:f2:3a:a0:ea:00: 88:87:71:1c:a1:2c:3c:81:ed:48:03:07:1b:b2:60:f3:ce:40: e3:71:b8:24:1a:3d:ef:20:ef:2b:4e:0f:78:76:65:f7:3e:cc: a6:1a:a5:ed:d0:36:6f:7d:c5:72:63:46:f6:ab:3f:ba:75:3d: 56:73:83:e1:52:79:ee:69:3a:97:bb:2a:6f:3d:a4:ba:3c:32: 88:a4:cd:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHSYJGRd7i3/nA6T4S3CbyxJETswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNjA0MTYwMTM5MTJaFw0yNjA0MTkxMzE3MTJaMDMxMTAvBgNV BAMTKEE3RUVBNUNFOTcxMDZGNzNENDVDMkNFRTA0NDYxRjhEMDlFQUM3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w08p06Hzv0hObTp/mkWSdlcM TwznddSBzFQgrEMHUWXxK4D5sp5YjTVL12E7WwEB5+ycXWoHAwBjBjK8f/R8+gJV hyjnP3pMkWUsxqiJUqDT9mUTADORYXYIxliCEPs4HAkO45SiMAS4U/1DtyUraor5 +JyQObtXrgWiTJ19FcOVS726ObEeeFule7eu2yJcgFvS0tjRgWWd4GR/FpAxA1Ru htnPrCdbWHRFeix+Bvqq216gVjW9MKiGTfV5bRQmZeYRAwTP6V5sKP5d4YgZjk6r y3IQlfVCuT4G9xetWQ0JW3jbFAwGNW1Ilj09Wm/p5l4cGLZeS3vws3YLsganAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+6lzpcQb3PUXCzuBEYfjQnqxxAwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhCemxjkxsru2ryABKEVYEr/fzjCencjpdb rpetL4KQmOwVCafl06bB0TnE31fMazqCCQOSbXu1+7Dogvh9gZaAX/6TvfWZGZbT 919FQqFr2ZWI/uU/Zj5XpB44DhpdI1f6O7NncpujE/kuH6DVi2Sw/jW3Vnt7loON qxl1nX9DHXfApoqZOQZJivTOLcYjP2J23o6L7rLn/KiPNAdB5bZ4h49YIvxdmNhz R22uzajyOqDqAIiHcRyhLDyB7UgDBxuyYPPOQONxuCQaPe8g7ytOD3h2Zfc+zKYa pe3QNm99xXJjRvarP7p1PVZzg+FSee5pOpe7Km89pLo8MoikzTc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:08:40 2026 by rpki-client