$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: SZcWKDOO17SFJ/jBJAOFrZ5vLzWBf6C976QsWHltEGw= Subject key identifier: E0:F6:37:F1:F6:1C:D2:37:24:BE:6D:73:19:F2:94:F9:93:59:27:F4 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 4269A00EC9D72047D225AA9566A5DC9234449E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: DF Signing time: Fri 17 Apr 2026 06:01:44 +0000 Manifest this update: Fri 17 Apr 2026 05:56:44 +0000 Manifest next update: Mon 20 Apr 2026 10:17:44 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: E9NbuMKE5nHb25vefodLRlashdStG8VvQPJ2RdhnyvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:69:a0:0e:c9:d7:20:47:d2:25:aa:95:66:a5:dc:92:34:44:9e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Apr 17 05:56:44 2026 GMT Not After : Apr 20 10:17:44 2026 GMT Subject: CN=E0F637F1F61CD23724BE6D7319F294F9935927F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:b5:a6:46:ba:7d:b0:92:f5:09:f1:b1:ab: eb:f7:0c:da:dd:8a:cf:66:54:1f:88:4d:7c:4b:44: 71:1b:c3:61:e0:2f:4b:10:e9:32:52:15:14:43:f9: d4:24:c4:7a:4a:a0:e9:6c:16:a4:cd:2b:79:8e:4a: 80:43:18:ed:ce:bf:13:e1:d1:ab:21:7c:f5:4b:5f: 82:20:dd:0d:5c:cd:1c:91:78:61:bf:ce:ac:42:e4: bd:44:68:8b:b0:c6:9e:cb:7c:b1:99:0f:0f:8b:35: e8:a0:da:0d:82:51:bf:87:76:9a:09:14:9a:80:06: 4b:07:fe:f5:c4:67:62:30:eb:25:f9:17:33:5d:ba: 81:df:e8:2c:05:67:a7:46:0c:24:7f:41:a9:1b:33: 08:2f:b1:54:75:50:3b:9b:32:ee:3d:6d:76:03:3d: 8d:69:52:02:5a:00:44:9b:40:e8:63:53:ca:e9:1a: b5:b3:6b:4e:1f:f5:85:2d:8c:1a:cb:d9:2b:eb:63: 28:b8:73:7c:be:23:6e:5c:f0:f3:dc:f4:a9:06:3e: 1e:bf:05:63:42:83:a6:39:f6:12:cb:68:c8:d4:4c: 79:07:a6:a4:d5:2a:c4:8a:52:fa:ae:4b:59:0e:d2: da:65:c7:7d:3a:88:02:3a:9d:af:eb:0a:da:b8:cc: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:37:F1:F6:1C:D2:37:24:BE:6D:73:19:F2:94:F9:93:59:27:F4 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:62:8c:a0:49:3c:9d:9e:5a:77:4d:dd:f2:f2:91:f0:6f:d8: 4d:f1:6e:dc:cb:6c:a8:64:1d:40:d3:3a:43:38:6b:7b:92:86: ca:88:f0:d6:6c:19:97:da:bd:e8:db:34:b3:68:5a:ba:b7:60: c0:ca:24:f0:8f:8a:3c:14:70:35:1c:c7:fd:25:b0:b0:f5:30: 92:51:66:7e:95:1d:4b:f9:38:37:e9:9c:17:03:aa:a2:7e:e5: e6:a2:c2:a7:b2:a5:22:6e:32:71:a2:50:34:51:97:2c:8f:1b: bf:61:4e:71:26:ed:ce:42:54:e4:6d:ef:92:70:62:c8:c0:b5: 4d:a0:af:be:59:1f:f1:e1:65:2c:f9:aa:2f:71:88:44:fc:11: 6a:4f:74:83:ca:7a:52:74:02:46:fb:b1:4e:a9:4c:ed:09:c9: 9d:de:c3:1f:4c:83:1a:a2:e0:79:a4:1c:e2:be:7d:c5:cd:68: bf:50:e7:37:d6:8a:8f:7c:a7:45:4c:b1:b2:bb:46:a2:44:5a: e9:b7:0c:3b:9c:72:7b:12:9e:f4:09:22:7b:be:bf:cb:5d:00: ae:21:f0:30:7f:c9:7f:dc:60:fb:1e:4d:76:26:48:14:c5:36: 29:b4:e6:08:fd:b6:ba:fa:2b:ce:07:ab:c4:13:5c:fd:68:69: 58:dc:02:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmmgDsnXIEfSJaqVZqXckjREnoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNjA0MTcwNTU2NDRaFw0yNjA0MjAxMDE3NDRaMDMxMTAvBgNV BAMTKEUwRjYzN0YxRjYxQ0QyMzcyNEJFNkQ3MzE5RjI5NEY5OTM1OTI3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+rWmRrp9sJL1CfGxq+v3DNrd is9mVB+ITXxLRHEbw2HgL0sQ6TJSFRRD+dQkxHpKoOlsFqTNK3mOSoBDGO3OvxPh 0ashfPVLX4Ig3Q1czRyReGG/zqxC5L1EaIuwxp7LfLGZDw+LNeig2g2CUb+HdpoJ FJqABksH/vXEZ2Iw6yX5FzNduoHf6CwFZ6dGDCR/QakbMwgvsVR1UDubMu49bXYD PY1pUgJaAESbQOhjU8rpGrWza04f9YUtjBrL2SvrYyi4c3y+I25c8PPc9KkGPh6/ BWNCg6Y59hLLaMjUTHkHpqTVKsSKUvquS1kO0tplx306iAI6na/rCtq4zFXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4PY38fYc0jckvm1zGfKU+ZNZJ/QwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZijKBJPJ2eWndN3fLykfBv2E3xbtzLbKhk HUDTOkM4a3uShsqI8NZsGZfavejbNLNoWrq3YMDKJPCPijwUcDUcx/0lsLD1MJJR Zn6VHUv5ODfpnBcDqqJ+5eaiwqeypSJuMnGiUDRRlyyPG79hTnEm7c5CVORt75Jw YsjAtU2gr75ZH/HhZSz5qi9xiET8EWpPdIPKelJ0Akb7sU6pTO0JyZ3ewx9Mgxqi 4HmkHOK+fcXNaL9Q5zfWio98p0VMsbK7RqJEWum3DDuccnsSnvQJInu+v8tdAK4h 8DB/yX/cYPseTXYmSBTFNim05gj9trr6K84Hq8QTXP1oaVjcAkQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:07 2026 by rpki-client