$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: wLPTgphjthP0pqiEtSqO1M0J7Wn9Ubc30aGonDruQPo= Subject key identifier: 37:CD:CC:5E:3E:51:32:F8:24:82:A0:D2:E7:0E:4C:02:BD:C4:7E:46 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 54A4CD52EE2AD121BEFB893D27C4B88F2B0358A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: 013A Signing time: Thu 16 Apr 2026 05:51:25 +0000 Manifest this update: Thu 16 Apr 2026 05:46:25 +0000 Manifest next update: Sun 19 Apr 2026 12:01:25 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: dtHpP/m8KLbGnRe3ljBhKMMLzWqW+st7m3ZDgM49VKg=) 2: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: 6eYAOMbQkRytvhAJ1qtbrGdJUNbgmnwuzPeqMlV7dek=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: AE1XhBx7e3VWZVTwKTd7Am2QNgqcrN5/LWEu0klX8Q0=) 4: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: L0VPaozKSDDCFlC9Q7pTNp1k6wrPHZtsZjVH/FzMjQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a4:cd:52:ee:2a:d1:21:be:fb:89:3d:27:c4:b8:8f:2b:03:58:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Apr 16 05:46:25 2026 GMT Not After : Apr 19 12:01:25 2026 GMT Subject: CN=37CDCC5E3E5132F82482A0D2E70E4C02BDC47E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:13:f2:2b:a9:6a:b4:e5:da:b5:36:78:95: 2c:94:3a:f4:3c:f4:f9:6b:b7:a9:b2:53:88:fc:f5: 24:75:37:59:06:9c:11:97:7e:1e:03:29:51:5d:7c: e3:4b:8e:e0:aa:58:7c:b6:f5:fc:99:24:d8:98:07: e8:32:03:09:aa:46:26:8f:39:eb:79:f1:36:a8:33: d2:30:e0:50:d8:78:f6:6c:0b:08:b5:1c:46:e8:cb: 34:42:57:b7:a4:bd:d2:e2:6e:bc:56:9f:ea:41:26: d3:a2:68:d5:8b:f8:16:45:00:81:82:3e:4b:fb:5c: e8:3c:4b:0b:f2:f3:a1:40:a7:ee:c9:af:2f:46:21: 13:d7:38:6a:d5:5a:7b:7f:99:20:26:d6:6a:9e:4b: 65:e8:85:08:cc:ec:09:21:b8:86:88:fb:5e:23:1d: 0a:f0:de:cc:c7:7f:f2:29:de:f1:d4:59:eb:b9:12: 2a:86:3d:59:29:af:0a:30:45:0c:f7:6e:59:e2:21: e3:27:95:8c:c3:d6:62:03:23:e0:00:a1:db:d3:33: 13:68:71:90:4b:44:d2:41:84:76:51:26:0e:e3:6f: 18:fb:93:9b:c7:94:3a:9c:74:5d:2b:8c:53:0b:08: 65:2f:f0:ad:f1:f9:8e:f7:ce:dd:9f:14:d6:db:1a: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:CC:5E:3E:51:32:F8:24:82:A0:D2:E7:0E:4C:02:BD:C4:7E:46 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e8:40:b5:1f:20:78:d6:7f:f2:db:7f:f9:af:55:62:17:bf: e2:69:0d:64:7f:03:31:95:2a:a1:78:38:51:95:f7:6c:1e:19: 24:b1:d8:f1:ee:81:8e:0b:20:f0:ce:47:8d:35:53:74:ed:cc: a2:cf:ea:4a:9b:1f:be:bc:09:5c:e2:29:2b:3e:b5:46:ad:fd: f3:67:8d:f3:af:01:30:f9:8f:0e:28:52:25:b8:97:7a:62:4a: ec:71:9f:e3:b1:6d:5d:1e:21:8f:3a:8e:b6:97:2a:7d:41:e8: 0e:f7:5e:48:7f:62:d4:54:e9:4b:c1:36:91:e9:59:b8:7a:ee: 61:c7:15:2e:36:30:af:c3:24:ed:eb:aa:1e:ea:20:8d:5c:fc: 30:4d:ca:36:96:74:0e:05:80:33:e5:44:aa:79:c9:49:64:54: 95:8a:62:d2:c5:a3:95:2e:58:4e:0a:84:30:a5:f5:06:2f:a0: 50:e9:6b:bb:af:57:53:a4:a3:d3:3c:58:b9:98:a6:81:d9:12: ab:15:9a:9f:f6:c6:67:fb:e2:65:dc:4b:f5:68:53:5b:42:78: 70:59:84:5e:47:01:ea:b6:8f:25:08:55:4f:bb:4f:9c:4c:0f: 9c:14:a1:00:06:6a:6f:d7:e5:88:df:a7:08:66:33:d5:e3:a1: 63:a1:ca:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKTNUu4q0SG++4k9J8S4jysDWKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNjA0MTYwNTQ2MjVaFw0yNjA0MTkxMjAxMjVaMDMxMTAvBgNV BAMTKDM3Q0RDQzVFM0U1MTMyRjgyNDgyQTBEMkU3MEU0QzAyQkRDNDdFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOhPyK6lqtOXatTZ4lSyUOvQ8 9Plrt6myU4j89SR1N1kGnBGXfh4DKVFdfONLjuCqWHy29fyZJNiYB+gyAwmqRiaP Oet58TaoM9Iw4FDYePZsCwi1HEboyzRCV7ekvdLibrxWn+pBJtOiaNWL+BZFAIGC Pkv7XOg8Swvy86FAp+7Jry9GIRPXOGrVWnt/mSAm1mqeS2XohQjM7AkhuIaI+14j HQrw3szHf/Ip3vHUWeu5EiqGPVkprwowRQz3blniIeMnlYzD1mIDI+AAodvTMxNo cZBLRNJBhHZRJg7jbxj7k5vHlDqcdF0rjFMLCGUv8K3x+Y73zt2fFNbbGv3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN83MXj5RMvgkgqDS5w5MAr3EfkYwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACboQLUfIHjWf/Lbf/mvVWIXv+JpDWR/AzGV KqF4OFGV92weGSSx2PHugY4LIPDOR401U3TtzKLP6kqbH768CVziKSs+tUat/fNn jfOvATD5jw4oUiW4l3piSuxxn+OxbV0eIY86jraXKn1B6A73Xkh/YtRU6UvBNpHp Wbh67mHHFS42MK/DJO3rqh7qII1c/DBNyjaWdA4FgDPlRKp5yUlkVJWKYtLFo5Uu WE4KhDCl9QYvoFDpa7uvV1Oko9M8WLmYpoHZEqsVmp/2xmf74mXcS/VoU1tCeHBZ hF5HAeq2jyUIVU+7T5xMD5wUoQAGam/X5YjfpwhmM9XjoWOhyt8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:35 2026 by rpki-client