$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: gFzag295gvD2FyzVAqMkY79NOJEQAUcT9Jbk/LOW+2g= Subject key identifier: C5:9C:FF:1D:B8:E4:7A:26:6F:B5:C9:9A:56:2B:2B:BA:E7:A5:77:7F Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 6B24C8650D8797ECF3FD328B4CABE482FEDFA3AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 0257 Signing time: Fri 17 Apr 2026 14:21:49 +0000 Manifest this update: Fri 17 Apr 2026 14:16:49 +0000 Manifest next update: Mon 20 Apr 2026 15:52:49 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: CS7zFXkJbERxj52qRZ+OVpjrkmwV2qDFdLGcNzGxg90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:24:c8:65:0d:87:97:ec:f3:fd:32:8b:4c:ab:e4:82:fe:df:a3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Apr 17 14:16:49 2026 GMT Not After : Apr 20 15:52:49 2026 GMT Subject: CN=C59CFF1DB8E47A266FB5C99A562B2BBAE7A5777F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:f4:e9:b0:75:cc:e5:a6:1c:b1:f3:be:a1: 52:8f:55:cd:88:da:26:c5:df:a2:31:46:2a:e9:c2: 01:6f:be:db:0a:bf:9f:b7:6d:50:96:0e:29:d7:9d: 1b:88:23:94:31:93:04:25:86:b8:f3:ca:0d:39:da: c3:07:a1:21:cb:f7:d0:cd:bb:c6:91:bd:76:39:fb: 18:22:98:6e:f9:49:b3:9f:95:66:c7:a9:9d:96:b4: 18:a5:eb:fe:d8:00:ef:57:9e:73:0e:4a:a3:85:04: 49:90:06:70:12:bc:19:dd:49:32:f6:e6:c4:f5:ae: 82:ac:72:44:9f:2c:a8:71:ec:b5:7d:3a:5e:43:e7: 2e:91:9e:aa:ff:db:4f:f8:3e:97:6d:0c:f4:ce:04: 69:46:71:38:d2:e9:56:b2:c2:b6:c8:8c:47:8a:22: ff:fd:9c:5c:c5:5d:dd:c5:1d:19:48:8d:23:f3:82: a2:d3:17:48:4d:cf:4f:67:9b:3d:e2:a8:0f:22:38: 1b:fa:c1:62:3c:b3:ed:87:f9:11:63:a3:b9:58:be: fa:aa:6c:41:59:ae:3e:e8:2e:a9:07:88:20:e8:c4: b4:cf:d7:e0:5c:97:43:fc:3a:ce:e1:e8:7f:af:b2: 1b:20:89:6d:a1:e4:ef:c0:ae:b9:7b:22:60:51:8a: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:FF:1D:B8:E4:7A:26:6F:B5:C9:9A:56:2B:2B:BA:E7:A5:77:7F X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:de:9c:f1:78:bc:b1:c6:b8:3d:7c:b2:3d:2d:4a:ce:04:3d: 66:a7:49:ab:94:d9:21:36:e6:aa:34:c9:ed:5a:5f:97:c4:70: 37:ee:52:13:47:af:40:46:da:94:cc:a7:93:c8:e6:a9:94:c0: 12:0e:46:1f:00:92:94:2c:f7:73:76:56:99:1f:18:ce:27:96: 7b:1a:cd:8b:ab:63:65:16:9d:6f:b7:be:31:e7:ce:78:7b:e1: 93:dd:96:26:c0:47:a8:1e:84:14:50:e2:68:22:26:18:d2:f7: 5b:e3:6c:2e:9c:77:3d:d5:5b:08:4c:f1:41:14:34:10:1b:83: cc:aa:26:ec:7c:87:d6:c8:47:dd:f3:85:e6:02:73:8b:e0:ab: 76:aa:c3:bf:71:7a:e9:d8:37:56:ea:1b:17:1b:9c:de:f7:e0: ff:1b:1b:aa:be:70:e8:ba:a7:41:68:c5:6b:d5:6a:dc:5f:be: f0:b3:18:1f:94:96:7b:de:b6:b4:a1:a0:ff:b5:b1:db:54:d8: 7a:dc:a9:42:8e:8b:28:98:34:88:97:52:00:9c:7c:16:84:53: 7c:64:35:04:8e:92:49:4d:2b:c7:bc:b7:db:31:fd:66:0b:85: 02:49:15:0d:4b:92:11:8d:ba:1a:b6:85:14:6e:37:59:07:42: 52:3f:fd:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayTIZQ2Hl+zz/TKLTKvkgv7fo68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNjA0MTcxNDE2NDlaFw0yNjA0MjAxNTUyNDlaMDMxMTAvBgNV BAMTKEM1OUNGRjFEQjhFNDdBMjY2RkI1Qzk5QTU2MkIyQkJBRTdBNTc3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmC/TpsHXM5aYcsfO+oVKPVc2I 2ibF36IxRirpwgFvvtsKv5+3bVCWDinXnRuII5QxkwQlhrjzyg052sMHoSHL99DN u8aRvXY5+xgimG75SbOflWbHqZ2WtBil6/7YAO9XnnMOSqOFBEmQBnASvBndSTL2 5sT1roKsckSfLKhx7LV9Ol5D5y6Rnqr/20/4PpdtDPTOBGlGcTjS6VaywrbIjEeK Iv/9nFzFXd3FHRlIjSPzgqLTF0hNz09nmz3iqA8iOBv6wWI8s+2H+RFjo7lYvvqq bEFZrj7oLqkHiCDoxLTP1+Bcl0P8Os7h6H+vshsgiW2h5O/Arrl7ImBRikcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZz/HbjkeiZvtcmaVisruueld38wHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjenPF4vLHGuD18sj0tSs4EPWanSauU2SE2 5qo0ye1aX5fEcDfuUhNHr0BG2pTMp5PI5qmUwBIORh8AkpQs93N2VpkfGM4nlnsa zYurY2UWnW+3vjHnznh74ZPdlibAR6gehBRQ4mgiJhjS91vjbC6cdz3VWwhM8UEU NBAbg8yqJux8h9bIR93zheYCc4vgq3aqw79xeunYN1bqGxcbnN734P8bG6q+cOi6 p0FoxWvVatxfvvCzGB+UlnvetrShoP+1sdtU2HrcqUKOiyiYNIiXUgCcfBaEU3xk NQSOkklNK8e8t9sx/WYLhQJJFQ1LkhGNuhq2hRRuN1kHQlI//f4= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:40 2026 by rpki-client