$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: bei7Fyl+RW8986E31JIxNYOdsE5dzTpEDX2gg7+5ZJQ= Subject key identifier: 40:7D:18:D3:0A:32:17:BC:05:82:B5:BD:E5:84:33:41:42:0A:B2:A5 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 2004E9D01B7A68256F205DCE4D5E783530288838 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: E9 Signing time: Thu 16 Apr 2026 10:00:55 +0000 Manifest this update: Thu 16 Apr 2026 09:55:55 +0000 Manifest next update: Sun 19 Apr 2026 16:48:55 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 2: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 3: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: p29BxGtBTJTey2hqDxBTiot8htFrLDC8o1zPNWIdXSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:04:e9:d0:1b:7a:68:25:6f:20:5d:ce:4d:5e:78:35:30:28:88:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Apr 16 09:55:55 2026 GMT Not After : Apr 19 16:48:55 2026 GMT Subject: CN=407D18D30A3217BC0582B5BDE5843341420AB2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:f6:e9:9d:31:46:07:2a:33:8c:8d:05:b6: 03:15:e7:29:9e:84:fe:ca:05:20:78:e8:e2:f6:17: d6:fd:9f:16:9a:ba:3c:69:f3:81:a8:8c:8d:46:31: 2a:b8:06:b1:c9:e8:9b:ea:7c:c5:4e:cd:cb:51:4a: 57:70:95:55:53:38:21:e3:ac:c3:41:05:81:df:e3: fa:33:6e:2c:49:10:b6:a6:07:23:90:6b:0a:36:e1: e4:ff:80:6a:74:33:bb:a1:24:f8:82:4b:09:4e:c2: ed:fa:a3:c3:26:b4:3b:3f:9f:32:84:60:2c:2f:9f: 28:45:a4:e5:77:e4:d9:56:fd:58:0c:58:1b:c0:3c: 65:13:61:37:e1:e7:df:f3:55:1b:94:d8:36:34:e1: 7d:ee:71:ce:30:7f:39:dc:70:c2:74:26:4f:4b:a8: 91:6f:7a:1c:b5:fb:d6:98:69:30:d9:8b:53:74:c0: 1d:9e:1e:37:c0:90:e9:5c:ab:c7:d0:f7:ed:ec:6d: eb:b2:db:35:58:05:34:00:7b:a7:82:36:1b:33:56: d6:c9:5c:ed:9e:ce:4e:53:e1:ac:11:1b:a9:a9:65: 2c:c2:60:d6:ff:26:5b:87:d8:e7:98:36:8b:08:d5: 86:48:d9:8c:80:0b:a5:76:74:e3:f7:ac:37:72:e0: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:18:D3:0A:32:17:BC:05:82:B5:BD:E5:84:33:41:42:0A:B2:A5 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a7:9b:da:a2:4a:86:4f:58:7a:79:10:ef:75:e6:48:66:d1: 1d:9b:db:7b:ef:8c:ba:49:36:23:6a:67:05:06:88:c2:f7:b0: d0:f4:aa:46:93:8f:86:1a:59:06:f7:5c:45:ae:42:06:06:1b: f5:5b:a7:f6:92:e2:2c:c8:e0:9f:87:aa:90:87:f2:ed:4d:6d: 87:1f:d0:62:43:51:03:0d:b1:d2:0c:70:f0:0e:a6:2f:a6:a6: c9:12:34:16:5e:66:33:a8:21:ee:10:df:d0:62:3a:77:aa:6b: 1c:5a:e8:a2:37:42:21:93:f9:a9:5a:eb:d4:42:e2:08:7b:fd: 94:85:21:e1:5e:fa:2a:8c:13:93:85:65:57:5b:e4:e4:c5:1a: a7:3e:bd:9d:ef:d7:c7:a7:6e:4e:89:09:4d:ce:ca:21:f8:e9: bd:a8:9a:cb:76:11:2a:88:0d:e3:da:ef:7c:27:81:3e:74:39: f6:11:db:f6:75:71:34:30:4f:db:4e:15:b8:b7:b7:19:bd:a1: 87:b5:0c:35:43:8c:44:c0:64:b4:e7:eb:23:f7:80:3b:bc:3b: 71:20:7c:bb:6e:33:35:44:99:bd:5e:9d:2d:77:d7:bb:f2:fd: 44:b5:fb:72:f7:ab:54:e7:4c:85:70:00:ea:78:1a:1d:0c:5f: 01:92:b2:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIATp0Bt6aCVvIF3OTV54NTAoiDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjA0MTYwOTU1NTVaFw0yNjA0MTkxNjQ4NTVaMDMxMTAvBgNV BAMTKDQwN0QxOEQzMEEzMjE3QkMwNTgyQjVCREU1ODQzMzQxNDIwQUIyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AfbpnTFGByozjI0FtgMV5yme hP7KBSB46OL2F9b9nxaaujxp84GojI1GMSq4BrHJ6JvqfMVOzctRSldwlVVTOCHj rMNBBYHf4/ozbixJELamByOQawo24eT/gGp0M7uhJPiCSwlOwu36o8MmtDs/nzKE YCwvnyhFpOV35NlW/VgMWBvAPGUTYTfh59/zVRuU2DY04X3ucc4wfznccMJ0Jk9L qJFvehy1+9aYaTDZi1N0wB2eHjfAkOlcq8fQ9+3sbeuy2zVYBTQAe6eCNhszVtbJ XO2ezk5T4awRG6mpZSzCYNb/JluH2OeYNosI1YZI2YyAC6V2dOP3rDdy4OoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQH0Y0woyF7wFgrW95YQzQUIKsqUwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqnm9qiSoZPWHp5EO915khm0R2b23vvjLpJ NiNqZwUGiML3sND0qkaTj4YaWQb3XEWuQgYGG/Vbp/aS4izI4J+HqpCH8u1NbYcf 0GJDUQMNsdIMcPAOpi+mpskSNBZeZjOoIe4Q39BiOneqaxxa6KI3QiGT+ala69RC 4gh7/ZSFIeFe+iqME5OFZVdb5OTFGqc+vZ3v18enbk6JCU3OyiH46b2omst2ESqI DePa73wngT50OfYR2/Z1cTQwT9tOFbi3txm9oYe1DDVDjETAZLTn6yP3gDu8O3Eg fLtuMzVEmb1enS1317vy/US1+3L3q1TnTIVwAOp4Gh0MXwGSsjw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:31:03 2026 by rpki-client