$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: QvhwZEB4Q/JkjY68f/69BVc9FA50JjCYPnn5X4fHiQg= Subject key identifier: B6:9D:9E:BF:DB:53:19:15:2B:3C:48:2F:24:30:BF:94:61:53:23:78 Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 0A0E18F3FBA1D3D23CEE6A62B0C809A38F5E7643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 0150 Signing time: Fri 17 Apr 2026 08:03:58 +0000 Manifest this update: Fri 17 Apr 2026 07:58:58 +0000 Manifest next update: Mon 20 Apr 2026 17:26:58 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: EGoAWeYOzKbfduhwyAgCeaaXls51T+6E5vcysGiLR90=) 2: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: LJEH2C4ylyT/JfvZAJoNcTZbYX22aNK+MUqMGnZXSF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0e:18:f3:fb:a1:d3:d2:3c:ee:6a:62:b0:c8:09:a3:8f:5e:76:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Apr 17 07:58:58 2026 GMT Not After : Apr 20 17:26:58 2026 GMT Subject: CN=B69D9EBFDB5319152B3C482F2430BF9461532378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:1e:a2:41:a4:2e:e3:ee:b5:a5:db:4a:7f: eb:78:7a:85:2d:66:a6:78:5e:bb:7e:f0:48:11:1b: ca:00:71:aa:07:1b:b7:f2:87:13:c7:c1:1f:74:e2: 87:54:ec:61:d4:c8:f6:25:87:f3:c5:90:b7:89:51: 62:1e:f1:20:aa:bb:87:0e:e5:1d:6d:69:a2:5b:5d: 22:4b:26:ed:44:45:38:34:f2:6a:0d:4e:d9:38:56: f9:e3:d7:a4:c0:16:7a:fd:72:18:e4:7d:9c:5e:39: 11:de:76:e3:ed:ff:33:82:d2:f1:08:35:3d:97:89: 4a:c3:b5:cb:18:65:af:59:49:c9:98:24:12:c4:f5: 68:18:e4:58:ab:5c:ee:e5:bc:23:bb:78:0c:c6:c4: ab:af:14:ce:72:2d:66:d1:99:b9:bd:f6:54:77:94: 85:23:d3:f4:b3:9f:de:68:86:de:68:cc:f5:bd:cf: f5:d4:3b:ec:93:50:7b:3a:34:f6:44:bc:e1:2e:b7: 94:9a:ed:80:b3:da:a2:20:3d:25:b9:a7:cf:63:e2: d6:bc:ae:03:71:14:d9:3d:ca:2b:af:34:1a:9f:2b: 50:b2:35:05:09:f2:99:62:32:44:8b:cd:d3:bd:59: a1:ec:b7:f5:82:98:fa:2c:da:83:c8:46:b6:9e:a1: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:9E:BF:DB:53:19:15:2B:3C:48:2F:24:30:BF:94:61:53:23:78 X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:47:f9:1e:be:37:a4:e9:5d:50:99:71:cf:27:f3:e7:a4: 56:35:56:b6:f8:d6:81:a4:f6:bc:d5:8f:24:29:b9:42:1e:78: 89:d8:c2:75:b8:5c:da:47:59:ef:7f:9c:62:de:41:e1:d3:b3: 33:5f:8a:2a:57:d1:c7:99:31:84:39:ba:b3:ee:dd:85:dc:06: 3b:05:1a:9e:10:88:a4:c4:f4:8b:20:3c:b0:e9:9c:ac:cb:09: bf:2c:dc:6b:c0:f3:8e:7a:22:d1:8a:d6:ae:3b:51:e8:75:49: 16:89:70:9f:3c:a2:14:bc:de:83:15:7f:c6:10:c7:6f:68:a4: e7:67:61:40:81:29:c4:b3:a6:de:8a:85:89:d3:26:f1:eb:8b: 45:04:36:b7:aa:0e:ec:a2:17:f4:38:f5:56:c2:ce:df:29:4e: 08:fb:bf:ee:36:aa:69:b0:d4:f3:46:2d:49:07:6a:86:7f:f1: 39:26:4c:78:66:49:74:70:18:4e:5b:17:05:c6:13:33:3a:19: 85:b6:26:88:70:55:60:0f:e6:2d:a4:be:52:d3:13:d5:dd:e4: b1:21:4d:34:3e:66:13:99:0b:10:ac:3e:4f:2a:f5:53:0f:1a: ef:54:9d:96:61:b3:33:29:39:ae:06:27:38:3c:94:6a:b5:6a: c8:1c:1c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCg4Y8/uh09I87mpisMgJo49edkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNjA0MTcwNzU4NThaFw0yNjA0MjAxNzI2NThaMDMxMTAvBgNV BAMTKEI2OUQ5RUJGREI1MzE5MTUyQjNDNDgyRjI0MzBCRjk0NjE1MzIzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3h6iQaQu4+61pdtKf+t4eoUt ZqZ4Xrt+8EgRG8oAcaoHG7fyhxPHwR904odU7GHUyPYlh/PFkLeJUWIe8SCqu4cO 5R1taaJbXSJLJu1ERTg08moNTtk4Vvnj16TAFnr9chjkfZxeORHeduPt/zOC0vEI NT2XiUrDtcsYZa9ZScmYJBLE9WgY5FirXO7lvCO7eAzGxKuvFM5yLWbRmbm99lR3 lIUj0/Szn95oht5ozPW9z/XUO+yTUHs6NPZEvOEut5Sa7YCz2qIgPSW5p89j4ta8 rgNxFNk9yiuvNBqfK1CyNQUJ8pliMkSLzdO9WaHst/WCmPos2oPIRraeodYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtp2ev9tTGRUrPEgvJDC/lGFTI3gwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF/R/kevjek6V1QmXHPJ/PnpFY1Vrb41oGk 9rzVjyQpuUIeeInYwnW4XNpHWe9/nGLeQeHTszNfiipX0ceZMYQ5urPu3YXcBjsF Gp4QiKTE9IsgPLDpnKzLCb8s3GvA8456ItGK1q47Ueh1SRaJcJ88ohS83oMVf8YQ x29opOdnYUCBKcSzpt6KhYnTJvHri0UENreqDuyiF/Q49VbCzt8pTgj7v+42qmmw 1PNGLUkHaoZ/8TkmTHhmSXRwGE5bFwXGEzM6GYW2JohwVWAP5i2kvlLTE9Xd5LEh TTQ+ZhOZCxCsPk8q9VMPGu9UnZZhszMpOa4GJzg8lGq1asgcHDI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:25 2026 by rpki-client