$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: n0WXxwgiPInrNHBeLyyU4D08Wl3M0unJeQf2NyNGsZ4= Subject key identifier: 2B:FD:A0:4A:46:C0:85:5F:FB:A7:32:DB:D7:FF:87:59:C7:28:04:35 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 558F9DBA270E9BEB1741CE8313F53A189A17A79F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0569 Signing time: Fri 17 Apr 2026 14:01:18 +0000 Manifest this update: Fri 17 Apr 2026 13:56:18 +0000 Manifest next update: Mon 20 Apr 2026 18:57:18 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: BNnKvvCVYuhYuPiWLtu0g7CENyoqMhejtTMBFTTfKsk=) 2: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: qa4jmb5ahrgaWykFuuPUEqb+LLRVZNv//W5pCz+d1Po=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 4: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 5: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: T7pT3m50bD1TtJQnSE7uRmUGoMQoMkMp3Yiyl2FWmEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8f:9d:ba:27:0e:9b:eb:17:41:ce:83:13:f5:3a:18:9a:17:a7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Apr 17 13:56:18 2026 GMT Not After : Apr 20 18:57:18 2026 GMT Subject: CN=2BFDA04A46C0855FFBA732DBD7FF8759C7280435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:41:23:3e:3d:e5:68:cf:e2:32:ce:af:3b: e2:48:8c:7f:a0:21:eb:3f:16:80:05:ee:6c:00:95: bc:24:10:8c:b5:ce:80:c8:38:21:b7:6a:cc:66:3b: 90:b1:8b:94:2f:bc:54:89:64:31:6a:c5:4b:ce:d5: a2:63:bc:ca:f4:97:40:a7:9b:b0:1e:5d:85:a2:1e: ed:5b:21:7d:ad:cb:fa:73:00:e7:18:e5:a9:cb:3d: 83:5c:51:c3:dd:67:36:c7:82:70:24:3a:d6:d4:11: f4:73:9f:c9:b8:58:d4:9f:22:73:28:2f:db:61:80: a3:93:30:2e:d6:95:54:61:e3:8e:5a:8b:13:e5:81: 99:96:5e:1e:4c:96:1c:70:70:a5:c3:e2:8d:49:d5: 33:be:c7:95:31:81:a5:82:b0:a0:e7:9a:6f:a7:f7: e0:17:d7:e9:93:d1:81:a7:28:9d:d0:b8:f1:df:9c: e6:5a:2c:4c:49:a0:06:78:a5:06:eb:d3:63:5b:df: 6a:6f:04:3d:66:d6:5f:e5:6f:7c:bf:9b:1c:40:fe: 42:1b:86:2e:b9:ea:5a:6b:c6:b0:ca:6d:d1:3a:62: 20:2e:4c:23:2a:89:cb:bf:f1:14:3f:de:78:19:7a: 18:93:a0:9a:cf:8e:da:e1:43:1e:e0:3e:a4:58:13: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FD:A0:4A:46:C0:85:5F:FB:A7:32:DB:D7:FF:87:59:C7:28:04:35 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:06:f3:8e:d2:1d:89:1c:e2:d0:6a:c3:5f:72:50:2c:f1:bd: ac:95:96:38:56:7e:26:06:12:c3:76:be:cb:fb:a6:c8:7c:ba: 2c:5e:bc:a7:88:cc:3d:7f:ad:d9:c5:b3:c7:a0:16:08:a2:54: 5d:81:ec:5e:92:b5:48:59:aa:9d:84:38:53:ad:78:ae:9b:8a: d6:32:31:eb:8b:7b:2c:73:10:84:5c:33:93:cc:f8:d5:71:17: ae:e0:60:4d:65:b9:7f:aa:ad:51:b0:39:b6:89:79:a1:c2:78: 8e:cb:5d:8d:e8:9f:6f:ea:3c:a4:66:2f:64:77:4b:77:6a:c1: 3d:59:59:84:14:66:e7:6a:fe:f9:64:e0:28:2e:e0:cf:b9:ad: 41:76:70:63:f7:d4:51:5e:81:98:18:6c:29:b1:c7:32:56:bb: ed:d6:9c:5e:52:04:fa:9f:d2:71:26:84:22:70:ab:fc:0b:60: 65:bf:77:57:38:4e:4c:e6:09:ec:08:2a:4a:f0:43:8e:86:63: dc:77:0b:28:8f:5a:5b:95:4c:0d:d0:96:b8:44:de:1a:af:5e: 0d:12:c4:4b:8c:f3:b0:3d:c4:bc:03:ea:41:a2:41:0c:93:19: e8:c5:81:ea:a1:53:80:f2:d8:79:04:20:4c:dd:ea:b4:31:69: 2f:04:8c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVY+duicOm+sXQc6DE/U6GJoXp58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNjA0MTcxMzU2MThaFw0yNjA0MjAxODU3MThaMDMxMTAvBgNV BAMTKDJCRkRBMDRBNDZDMDg1NUZGQkE3MzJEQkQ3RkY4NzU5QzcyODA0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobUEjPj3laM/iMs6vO+JIjH+g Ies/FoAF7mwAlbwkEIy1zoDIOCG3asxmO5Cxi5QvvFSJZDFqxUvO1aJjvMr0l0Cn m7AeXYWiHu1bIX2ty/pzAOcY5anLPYNcUcPdZzbHgnAkOtbUEfRzn8m4WNSfInMo L9thgKOTMC7WlVRh445aixPlgZmWXh5MlhxwcKXD4o1J1TO+x5UxgaWCsKDnmm+n 9+AX1+mT0YGnKJ3QuPHfnOZaLExJoAZ4pQbr02Nb32pvBD1m1l/lb3y/mxxA/kIb hi656lprxrDKbdE6YiAuTCMqicu/8RQ/3ngZehiToJrPjtrhQx7gPqRYE/ONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/2gSkbAhV/7pzLb1/+HWccoBDUwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4G847SHYkc4tBqw19yUCzxvayVljhWfiYG EsN2vsv7psh8uixevKeIzD1/rdnFs8egFgiiVF2B7F6StUhZqp2EOFOteK6bitYy MeuLeyxzEIRcM5PM+NVxF67gYE1luX+qrVGwObaJeaHCeI7LXY3on2/qPKRmL2R3 S3dqwT1ZWYQUZudq/vlk4Cgu4M+5rUF2cGP31FFegZgYbCmxxzJWu+3WnF5SBPqf 0nEmhCJwq/wLYGW/d1c4TkzmCewIKkrwQ46GY9x3CyiPWluVTA3QlrhE3hqvXg0S xEuM87A9xLwD6kGiQQyTGejFgeqhU4Dy2HkEIEzd6rQxaS8EjPE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:40 2026 by rpki-client