$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft File: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft (raw, json) Hash identifier: QnWxmVBl9hPwywjlkX3goJEjoQlzYPrA3mQOesyRnP4= Subject key identifier: 79:7E:9A:48:A5:FF:C1:5E:EF:1C:02:0B:58:7E:3C:C1:77:1C:77:94 Authority key identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 Certificate issuer: /CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31 Certificate serial: 0A8CD0CAED4DA9BDC820A371C749BFD25559E29F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft Manifest number: 1A Signing time: Wed 15 Apr 2026 04:01:48 +0000 Manifest this update: Wed 15 Apr 2026 03:56:48 +0000 Manifest next update: Sat 18 Apr 2026 14:20:48 +0000 Files and hashes: 1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: uQHIImYmptjCUQ/bftz22qTLuZl56mNDlhYd4jLzdhA=) 2: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl (hash: NpTfw9DR866oxYk1UI/dvIMx/NPjvm8Nk2kufnEcHn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8c:d0:ca:ed:4d:a9:bd:c8:20:a3:71:c7:49:bf:d2:55:59:e2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31 Validity Not Before: Apr 15 03:56:48 2026 GMT Not After : Apr 18 14:20:48 2026 GMT Subject: CN=797E9A48A5FFC15EEF1C020B587E3CC1771C7794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:4e:bc:e9:2e:42:33:52:cb:d2:97:c1:a5: dd:c1:44:e2:db:f2:02:ef:12:f3:77:7e:32:38:b0: 28:29:54:e1:d3:80:ef:0e:c2:92:60:c1:36:e4:cc: b9:7b:83:01:dd:3e:3d:ba:b0:05:47:77:07:83:84: 24:ee:91:05:50:b1:a1:a5:86:62:04:84:2b:02:19: 33:a5:9b:7f:d5:27:3c:bd:c7:44:9a:73:18:da:35: 6d:f1:c5:cd:53:46:00:5f:5b:66:07:02:90:8b:52: 98:2f:7a:dd:f4:fb:74:d8:66:d4:36:b3:a6:a1:27: 41:fc:eb:89:59:71:2c:9b:9d:f1:5e:ee:c6:97:25: a4:3f:f8:3f:92:d4:b1:63:af:e1:2b:4b:c5:7d:b2: 10:ef:16:25:53:0c:eb:aa:ac:77:e6:07:de:19:e0: 3d:c3:a7:50:3c:bd:f8:4d:56:e4:16:b4:bb:cc:b7: dc:bf:4e:68:e5:60:4f:f8:36:7e:09:53:e7:5b:72: 26:c6:52:91:59:2e:58:c1:4f:39:fe:96:07:bd:c5: 03:30:bd:de:85:b2:b7:07:e2:d6:f7:9d:b6:e7:89: 64:04:ac:2d:cf:16:d8:d3:f8:e4:c9:61:6a:a2:1c: 85:5c:ca:bb:2e:1c:53:29:ea:1b:86:34:6a:ec:bd: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7E:9A:48:A5:FF:C1:5E:EF:1C:02:0B:58:7E:3C:C1:77:1C:77:94 X509v3 Authority Key Identifier: keyid:C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:da:76:af:70:f4:eb:ea:b9:1d:c6:0f:0e:b5:50:43:92:18: 99:87:47:12:dd:49:c3:e9:89:6f:01:16:28:e5:60:16:66:9f: 7c:39:84:f7:c1:d9:ae:d9:9c:8b:f0:df:a9:00:07:68:59:5e: a3:dc:c1:f8:42:9a:c9:57:70:21:0f:52:42:36:7f:a9:7b:65: 56:d1:35:87:22:dc:ab:8d:99:a4:60:51:79:66:67:dc:af:3e: 33:76:37:3a:6f:3d:5e:e1:70:91:63:11:49:8a:d0:12:dc:51: 7e:0c:07:b0:6c:a0:e3:47:be:8a:d1:a8:59:ac:3c:14:d5:4e: 6a:bb:92:a9:73:c6:5b:e6:41:94:4d:32:b9:4e:43:ca:af:c4: 79:a4:5f:27:4c:02:22:71:68:50:c7:ff:79:c2:de:b4:02:1d: 8a:91:09:33:ba:94:42:ab:b5:0e:ee:5d:d1:cb:9b:7d:63:3d: f7:1b:1f:c1:77:f2:f8:ea:60:cd:9c:ae:30:0e:39:00:ac:92: 74:22:d1:d8:f5:62:f1:3c:0b:52:fa:72:68:b2:cf:05:55:a2: 12:ee:ce:dd:15:a7:94:93:a1:39:8d:76:f3:dc:f3:6a:a5:2f: 49:6d:15:13:f7:93:cb:2a:5c:83:8f:f4:bf:8b:d4:47:62:8f: c2:88:27:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCozQyu1Nqb3IIKNxx0m/0lVZ4p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0QjE5 RjhFRUUzMTAeFw0yNjA0MTUwMzU2NDhaFw0yNjA0MTgxNDIwNDhaMDMxMTAvBgNV BAMTKDc5N0U5QTQ4QTVGRkMxNUVFRjFDMDIwQjU4N0UzQ0MxNzcxQzc3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbU686S5CM1LL0pfBpd3BROLb 8gLvEvN3fjI4sCgpVOHTgO8OwpJgwTbkzLl7gwHdPj26sAVHdweDhCTukQVQsaGl hmIEhCsCGTOlm3/VJzy9x0SacxjaNW3xxc1TRgBfW2YHApCLUpgvet30+3TYZtQ2 s6ahJ0H864lZcSybnfFe7saXJaQ/+D+S1LFjr+ErS8V9shDvFiVTDOuqrHfmB94Z 4D3Dp1A8vfhNVuQWtLvMt9y/TmjlYE/4Nn4JU+dbcibGUpFZLljBTzn+lge9xQMw vd6FsrcH4tb3nbbniWQErC3PFtjT+OTJYWqiHIVcyrsuHFMp6huGNGrsvR0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeX6aSKX/wV7vHAILWH48wXccd5QwHwYDVR0j BBgwFoAUyc4/gAezeRcn+qO08gDksZ+O7jEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMS9DOUNFM0Y4MDA3 QjM3OTE3MjdGQUEzQjRGMjAwRTRCMTlGOEVFRTMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0QjE5RjhF RUUzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzEvQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0 QjE5RjhFRUUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzadq9w9OvquR3GDw61UEOSGJmHRxLdScPp iW8BFijlYBZmn3w5hPfB2a7ZnIvw36kAB2hZXqPcwfhCmslXcCEPUkI2f6l7ZVbR NYci3KuNmaRgUXlmZ9yvPjN2NzpvPV7hcJFjEUmK0BLcUX4MB7BsoONHvorRqFms PBTVTmq7kqlzxlvmQZRNMrlOQ8qvxHmkXydMAiJxaFDH/3nC3rQCHYqRCTO6lEKr tQ7uXdHLm31jPfcbH8F38vjqYM2crjAOOQCsknQi0dj1YvE8C1L6cmiyzwVVohLu zt0Vp5SToTmNdvPc82qlL0ltFRP3k8sqXIOP9L+L1Edij8KIJ10= -----END CERTIFICATE-----Generated at Fri Apr 17 13:51:51 2026 by rpki-client