$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: 1xndLc3hj+MoExX2n6pGkinBsDfiq04FdGKbWwpe6LY= Subject key identifier: F6:8D:89:09:7E:A9:8C:E4:01:51:37:12:B5:24:75:68:04:2D:B2:6D Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 4A809F13CBDDAE6E68F4BD63C039E06E87042699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: 0121 Signing time: Thu 16 Apr 2026 06:00:06 +0000 Manifest this update: Thu 16 Apr 2026 05:55:05 +0000 Manifest next update: Sun 19 Apr 2026 09:39:05 +0000 Files and hashes: 1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: 9SfU2r3yA8fDe2PYBzhC3QieQTQHd8yEj1RFQ9oedWs=) 2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:80:9f:13:cb:dd:ae:6e:68:f4:bd:63:c0:39:e0:6e:87:04:26:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Apr 16 05:55:05 2026 GMT Not After : Apr 19 09:39:05 2026 GMT Subject: CN=F68D89097EA98CE401513712B5247568042DB26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:1b:b5:85:d6:c0:6e:b1:d5:37:b8:a7:ea: c6:45:6b:67:0f:a8:c7:83:2e:37:d2:f4:2e:cf:7e: 7a:e0:b0:76:0c:92:89:35:72:07:6c:a9:07:77:89: 32:6c:5d:d5:79:fc:4f:19:b3:91:75:4b:03:9b:71: d1:05:98:68:e9:e9:05:db:69:b2:87:7b:86:b9:0a: b6:26:0e:2e:bf:7c:5a:26:38:c9:9e:ba:8b:51:bf: 98:d1:db:63:d7:37:4a:45:e8:36:4c:72:59:5f:43: b6:a0:da:a6:87:b2:91:35:2d:79:ac:39:de:08:98: 91:41:3d:8f:f2:7c:fc:18:c0:c7:39:38:8d:99:4a: a4:b2:d5:3a:71:d0:1e:9e:05:a8:ae:9d:da:5b:81: be:32:7e:2d:c0:cc:95:a0:13:5b:d9:95:55:10:2c: 17:83:f7:bc:6e:92:92:2a:e2:99:c4:ee:d6:0f:7a: f4:f8:65:a9:f7:18:1b:d0:5b:24:af:7a:5c:93:1a: 3e:8e:04:3e:26:7d:e0:af:95:b8:d5:ce:41:d3:30: f8:82:f2:7e:79:fc:fd:0e:d9:5d:f2:55:7e:f1:5a: ed:e4:62:62:bc:d5:32:3c:31:af:46:82:80:4e:79: 8a:41:cc:c7:64:e0:ec:8b:80:9f:0a:57:0e:c5:6a: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8D:89:09:7E:A9:8C:E4:01:51:37:12:B5:24:75:68:04:2D:B2:6D X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ea:48:4f:c2:88:6f:c1:f8:75:e3:b4:24:90:61:6f:b1:26: 78:d3:d7:d5:2d:16:b5:63:b4:6a:7d:93:b2:c0:5c:cc:e4:69: de:15:48:59:ac:f0:c0:5d:79:6f:ee:5e:93:f0:89:51:dd:22: 57:84:18:35:f7:2f:eb:a3:99:89:b8:0b:da:17:19:a6:23:c6: 6e:3e:09:68:de:e0:a3:42:67:ce:84:56:93:c5:e7:e6:10:3d: 0b:92:c1:8e:86:c9:1d:76:df:77:e1:4c:70:3c:12:8a:e2:1d: a4:8c:b9:54:5a:5d:4a:20:7f:5c:4c:2f:56:e1:48:8d:39:c4: 79:73:1d:01:b3:63:ed:bb:2f:be:81:fb:b4:3b:6a:6f:d5:ca: 66:da:79:1b:93:81:d9:c0:d3:e7:5a:18:9c:ae:ad:86:a7:33: 8c:dd:1b:76:3c:0d:9f:a9:16:b4:4d:a3:7f:02:f2:02:d6:8f: 58:94:4e:92:e5:bc:8c:4e:24:bb:f3:7d:ce:06:13:4b:16:2a: 1e:89:d6:af:ff:b5:ce:08:84:b5:3c:75:17:45:7f:56:13:bb: 90:8c:03:2f:dc:99:17:b0:d8:7d:15:b2:1d:68:7e:5f:d9:fc: 57:43:ec:8d:ef:dd:e4:65:b8:65:77:77:8c:ef:38:d9:1a:e7: d9:a2:57:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoCfE8vdrm5o9L1jwDngbocEJpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNjA0MTYwNTU1MDVaFw0yNjA0MTkwOTM5MDVaMDMxMTAvBgNV BAMTKEY2OEQ4OTA5N0VBOThDRTQwMTUxMzcxMkI1MjQ3NTY4MDQyREIyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Hhu1hdbAbrHVN7in6sZFa2cP qMeDLjfS9C7PfnrgsHYMkok1cgdsqQd3iTJsXdV5/E8Zs5F1SwObcdEFmGjp6QXb abKHe4a5CrYmDi6/fFomOMmeuotRv5jR22PXN0pF6DZMcllfQ7ag2qaHspE1LXms Od4ImJFBPY/yfPwYwMc5OI2ZSqSy1Tpx0B6eBaiundpbgb4yfi3AzJWgE1vZlVUQ LBeD97xukpIq4pnE7tYPevT4Zan3GBvQWySvelyTGj6OBD4mfeCvlbjVzkHTMPiC 8n55/P0O2V3yVX7xWu3kYmK81TI8Ma9GgoBOeYpBzMdk4OyLgJ8KVw7FajgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9o2JCX6pjOQBUTcStSR1aAQtsm0wHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTqSE/CiG/B+HXjtCSQYW+xJnjT19UtFrVj tGp9k7LAXMzkad4VSFms8MBdeW/uXpPwiVHdIleEGDX3L+ujmYm4C9oXGaYjxm4+ CWje4KNCZ86EVpPF5+YQPQuSwY6GyR1233fhTHA8EoriHaSMuVRaXUogf1xML1bh SI05xHlzHQGzY+27L76B+7Q7am/VymbaeRuTgdnA0+daGJyurYanM4zdG3Y8DZ+p FrRNo38C8gLWj1iUTpLlvIxOJLvzfc4GE0sWKh6J1q//tc4IhLU8dRdFf1YTu5CM Ay/cmRew2H0Vsh1ofl/Z/FdD7I3v3eRluGV3d4zvONka59miV2k= -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:13 2026 by rpki-client