$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: SLaKn1lmReH/0V69p7k0OVETxwJSafhXNZW6jwNT3Mc= Subject key identifier: 04:67:97:49:75:70:9E:49:84:72:7C:A6:62:53:7A:41:4A:2C:65:D0 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 09037107AA16891E29891FD5E0FEB4D7CE5116C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 0275 Signing time: Sun 19 Apr 2026 05:10:00 +0000 Manifest this update: Sun 19 Apr 2026 05:05:00 +0000 Manifest next update: Wed 22 Apr 2026 07:02:00 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: TPlCTJVN2QTeHOB4M6IswSb2r9ncPe2iiueXE2eapqQ=) 2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: n4tXDOQtKUWGVvtlqwvcL8dqtZt7ZB5O/6Is0NvfYmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:03:71:07:aa:16:89:1e:29:89:1f:d5:e0:fe:b4:d7:ce:51:16:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Apr 19 05:05:00 2026 GMT Not After : Apr 22 07:02:00 2026 GMT Subject: CN=0467974975709E4984727CA662537A414A2C65D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:5d:3f:3f:29:2b:45:14:42:ee:2c:08:cd: 13:e6:8f:65:d7:45:a7:cd:15:52:1b:af:cd:47:eb: 2c:9e:a2:a0:76:f1:d0:b7:79:88:bf:bc:18:0f:28: cb:62:b3:a5:75:21:ce:6a:00:25:52:ae:e3:85:3c: 65:86:23:e5:ed:54:c1:22:38:c2:14:14:fa:4d:5f: 76:68:fc:1c:02:6d:6e:22:b6:cb:ac:5d:dd:69:ad: 89:95:d9:ab:ad:0f:74:f5:f4:21:3f:f6:42:ae:fb: ee:64:61:04:07:30:0d:92:32:fc:1a:a3:0a:15:c3: 63:b6:5f:7d:55:f8:c3:5a:dc:0c:5d:b2:78:d9:4a: 27:42:3b:89:63:6b:86:47:c2:fd:e3:82:9f:16:1f: d6:ae:27:79:2b:cb:02:fb:1e:2c:b5:9f:9f:80:21: 05:c3:3f:59:7c:de:65:9a:d2:1b:87:7e:9b:98:aa: d7:d6:18:a6:43:52:90:87:1d:58:9a:1a:30:82:d7: a8:55:ca:6b:75:ff:1a:0a:bc:a1:be:cd:67:82:ad: 36:4e:43:9f:fd:69:dd:7c:13:27:1e:d2:87:4f:86: 1e:4d:cb:38:e0:84:fd:6d:e8:5b:8d:72:75:56:7a: 92:ac:72:5e:1b:46:03:d7:42:53:8c:e0:8f:fc:a1: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:67:97:49:75:70:9E:49:84:72:7C:A6:62:53:7A:41:4A:2C:65:D0 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bd:52:fe:eb:69:25:05:4f:16:6f:b7:e2:fb:11:13:a7:9b: 92:fa:96:b1:ad:90:a8:4a:ff:fb:6d:49:03:fa:cf:e7:1e:9c: 6f:c3:9b:3f:b5:e6:6f:c3:4e:65:e1:06:9c:5d:32:5b:e6:22: 84:dc:bb:36:dd:a8:2d:27:4c:41:c6:73:75:15:58:88:61:1f: 99:60:eb:8c:4a:71:0c:78:3a:51:6f:91:f6:5d:19:a3:0e:80: 5b:83:02:b6:79:ba:38:a5:a6:85:68:d8:fc:88:f9:67:60:a4: 7e:d8:e3:92:ba:34:55:eb:58:39:52:7b:02:31:44:38:0e:a9: 75:30:08:21:8f:87:f6:78:c3:87:e5:ff:ca:c9:cf:98:00:d2: a8:16:fb:91:57:aa:f5:11:96:f4:de:82:81:5e:b2:0c:7d:1e: a3:e6:58:3f:f7:80:31:19:db:35:1f:1c:a9:98:80:d5:4b:57: b3:02:01:a4:c8:d7:ff:12:ef:0d:23:58:03:9a:cf:f3:f7:3e: b9:a5:69:47:a6:3c:9f:8b:de:12:6b:dc:c7:7a:22:ab:01:af: d4:36:79:58:ae:7a:5f:3d:55:57:14:9e:2a:70:79:8a:e0:88: 71:f4:41:65:e5:d5:79:d9:17:34:6e:d6:2e:e3:37:0e:e3:17: d8:f6:04:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQNxB6oWiR4piR/V4P60185RFsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNjA0MTkwNTA1MDBaFw0yNjA0MjIwNzAyMDBaMDMxMTAvBgNV BAMTKDA0Njc5NzQ5NzU3MDlFNDk4NDcyN0NBNjYyNTM3QTQxNEEyQzY1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCps10/PykrRRRC7iwIzRPmj2XX RafNFVIbr81H6yyeoqB28dC3eYi/vBgPKMtis6V1Ic5qACVSruOFPGWGI+XtVMEi OMIUFPpNX3Zo/BwCbW4itsusXd1prYmV2autD3T19CE/9kKu++5kYQQHMA2SMvwa owoVw2O2X31V+MNa3AxdsnjZSidCO4lja4ZHwv3jgp8WH9auJ3krywL7Hiy1n5+A IQXDP1l83mWa0huHfpuYqtfWGKZDUpCHHViaGjCC16hVymt1/xoKvKG+zWeCrTZO Q5/9ad18Eyce0odPhh5NyzjghP1t6FuNcnVWepKscl4bRgPXQlOM4I/8oSVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGeXSXVwnkmEcnymYlN6QUosZdAwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG9Uv7raSUFTxZvt+L7EROnm5L6lrGtkKhK //ttSQP6z+cenG/Dmz+15m/DTmXhBpxdMlvmIoTcuzbdqC0nTEHGc3UVWIhhH5lg 64xKcQx4OlFvkfZdGaMOgFuDArZ5ujilpoVo2PyI+WdgpH7Y45K6NFXrWDlSewIx RDgOqXUwCCGPh/Z4w4fl/8rJz5gA0qgW+5FXqvURlvTegoFesgx9HqPmWD/3gDEZ 2zUfHKmYgNVLV7MCAaTI1/8S7w0jWAOaz/P3PrmlaUemPJ+L3hJr3Md6IqsBr9Q2 eViuel89VVcUnipweYrgiHH0QWXl1XnZFzRu1i7jNw7jF9j2BP0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:18 2026 by rpki-client