$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: B9lAA2m53tFTLp5Fenl5WE54wBDtdzfcNKpnlYT9DzE= Subject key identifier: B0:F8:85:A8:B4:BE:E9:DA:ED:3B:D4:3D:12:B4:43:3C:74:D5:92:8A Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 0F84F79B0346E9FEFBBB2CD5A9981A90D9CD1F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 011D Signing time: Wed 15 Apr 2026 09:51:38 +0000 Manifest this update: Wed 15 Apr 2026 09:46:38 +0000 Manifest next update: Sat 18 Apr 2026 11:45:38 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 2: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: ZMQzDtsDwtb9Qp87lf/7JlfB1yrJBYaYNQyxWawgNQw=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 4: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:84:f7:9b:03:46:e9:fe:fb:bb:2c:d5:a9:98:1a:90:d9:cd:1f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Apr 15 09:46:38 2026 GMT Not After : Apr 18 11:45:38 2026 GMT Subject: CN=B0F885A8B4BEE9DAED3BD43D12B4433C74D5928A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:53:b2:b6:83:9c:64:b3:d1:90:2d:86:3b: c6:15:63:71:13:4a:08:2d:e3:c8:5a:d5:09:e4:ee: 57:cf:b7:1a:ab:05:b4:5f:b2:6a:c0:60:8b:f2:d5: 24:1a:4e:08:ac:c0:a5:53:f0:66:4a:17:d5:0d:14: ac:8b:50:c3:02:ab:99:a4:3f:b3:56:cc:02:49:f1: 16:b2:d5:a3:ab:16:b0:2f:ed:31:de:ad:e5:5c:d8: 10:3a:61:e5:60:97:38:55:02:c5:9f:04:01:05:54: 8d:cf:81:d5:c3:5f:39:3d:90:6d:a8:91:fc:09:1b: c7:fe:5b:f9:87:22:72:41:d5:32:e3:49:3c:58:89: c8:83:78:84:08:70:b2:2e:72:35:04:26:57:40:91: 39:c9:c8:2f:8d:15:3a:96:77:20:e4:a7:a3:62:6c: 7c:43:6a:d2:a6:b5:52:01:ea:b3:e8:27:cb:f7:72: ab:14:17:fe:b4:8b:18:a6:26:6f:28:cf:86:22:1b: c6:20:9d:b5:cc:95:8f:5f:ff:17:90:ec:10:b4:61: 70:40:5f:4a:6c:2d:ee:e9:9f:da:53:b2:0a:e4:79: 94:b5:ec:12:f8:b8:03:24:aa:95:de:b2:ae:1e:1d: b8:a8:33:75:28:16:39:1c:59:ca:c3:ce:f5:ee:a1: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F8:85:A8:B4:BE:E9:DA:ED:3B:D4:3D:12:B4:43:3C:74:D5:92:8A X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:49:7a:66:9b:28:58:4b:a7:ed:fe:49:29:fb:67:13:e6:25: d8:99:e8:b7:3b:c1:8c:34:b6:fd:d7:10:0f:63:e0:17:84:34: 6d:7f:14:37:e4:ab:9b:55:8b:8b:76:a2:7f:9c:e3:3c:0a:15: 25:b5:36:82:9c:cc:17:37:6c:8c:7c:07:97:66:0b:86:7f:c3: ac:2a:93:12:3f:59:9a:96:f5:8e:7e:bf:4a:ca:0d:27:b3:af: 8f:51:17:3c:e8:cd:e3:0c:75:18:db:c1:9b:a5:08:82:04:c9: f3:84:f2:37:c8:11:71:53:88:53:05:c8:a1:d4:5b:e9:b6:17: 78:e7:e2:5a:ff:be:5f:e3:6f:18:15:e6:18:c4:2a:ce:6f:9f: af:8d:b1:7b:89:61:81:8c:3f:87:86:53:95:41:3e:f9:e3:6d: 17:1e:88:32:0c:89:09:7b:77:19:63:f9:b1:71:49:31:53:bc: 57:b7:ef:6e:80:0a:46:5e:47:3d:05:35:f1:c3:e2:48:39:09: e5:84:14:06:6b:61:ac:b9:14:c7:fb:f9:e6:23:97:25:91:bb: b2:6a:47:dd:ea:76:5a:94:05:93:85:48:bd:de:40:7b:af:40: 3d:75:53:c0:df:a0:e0:7e:da:16:8f:4d:ba:f1:0a:df:fd:7f: 22:a7:b6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4T3mwNG6f77uyzVqZgakNnNHy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNjA0MTUwOTQ2MzhaFw0yNjA0MTgxMTQ1MzhaMDMxMTAvBgNV BAMTKEIwRjg4NUE4QjRCRUU5REFFRDNCRDQzRDEyQjQ0MzNDNzRENTkyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sVOytoOcZLPRkC2GO8YVY3ET Sggt48ha1Qnk7lfPtxqrBbRfsmrAYIvy1SQaTgiswKVT8GZKF9UNFKyLUMMCq5mk P7NWzAJJ8Ray1aOrFrAv7THereVc2BA6YeVglzhVAsWfBAEFVI3PgdXDXzk9kG2o kfwJG8f+W/mHInJB1TLjSTxYiciDeIQIcLIucjUEJldAkTnJyC+NFTqWdyDkp6Ni bHxDatKmtVIB6rPoJ8v3cqsUF/60iximJm8oz4YiG8YgnbXMlY9f/xeQ7BC0YXBA X0psLe7pn9pTsgrkeZS17BL4uAMkqpXesq4eHbioM3UoFjkcWcrDzvXuoQY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPiFqLS+6drtO9Q9ErRDPHTVkoowHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFJemabKFhLp+3+SSn7ZxPmJdiZ6Lc7wYw0 tv3XEA9j4BeENG1/FDfkq5tVi4t2on+c4zwKFSW1NoKczBc3bIx8B5dmC4Z/w6wq kxI/WZqW9Y5+v0rKDSezr49RFzzozeMMdRjbwZulCIIEyfOE8jfIEXFTiFMFyKHU W+m2F3jn4lr/vl/jbxgV5hjEKs5vn6+NsXuJYYGMP4eGU5VBPvnjbRceiDIMiQl7 dxlj+bFxSTFTvFe3726ACkZeRz0FNfHD4kg5CeWEFAZrYay5FMf7+eYjlyWRu7Jq R93qdlqUBZOFSL3eQHuvQD11U8DfoOB+2haPTbrxCt/9fyKntvk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:16 2026 by rpki-client