$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: U5JLVrUTDpzsFyhlTUB50t/Nit8iHT8PZxnI6sJI4aE= Subject key identifier: B8:F1:4E:30:44:F6:DE:FB:6F:09:29:78:3B:7A:0E:94:5D:7B:32:1D Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 57A20983E33B18B7C20F15FFA98CE1E5D65D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 020D Signing time: Sat 18 Apr 2026 04:11:01 +0000 Manifest this update: Sat 18 Apr 2026 04:06:00 +0000 Manifest next update: Tue 21 Apr 2026 15:30:00 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: VTKxy5du2EY1Waik9fQi+bIwjZS8GlRfF1xfox2Ro0A=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: qMJCzEp1kB255KL4Lpk1hf3Sg7O/3XdgYccTkdZ5jPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a2:09:83:e3:3b:18:b7:c2:0f:15:ff:a9:8c:e1:e5:d6:5d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Apr 18 04:06:00 2026 GMT Not After : Apr 21 15:30:00 2026 GMT Subject: CN=B8F14E3044F6DEFB6F0929783B7A0E945D7B321D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:20:b3:63:04:60:ea:77:85:43:97:e0:da: 68:54:30:16:c1:02:26:25:0c:75:07:6c:c8:37:7c: b4:4d:0c:ab:3d:f9:47:be:36:d1:d0:c8:5e:55:c4: 1c:8f:0d:a1:29:d3:cf:1c:bf:d9:19:99:e6:17:56: 0b:ab:da:b1:9a:eb:99:f6:28:1a:2a:9c:64:cb:c5: 4d:0d:31:26:92:06:b7:f7:62:6f:44:9b:d4:93:7c: 5f:c3:e3:44:9c:f4:da:ef:ce:5d:be:51:4e:b6:c2: 62:fb:4e:c4:11:b6:77:f9:90:e1:fa:94:ba:6e:56: 7f:14:08:e8:79:9a:24:7d:5b:53:4b:7f:8f:85:13: 34:9e:1c:47:f8:ee:ae:59:a9:f2:f6:69:de:92:7f: 81:b7:9f:f6:b1:84:b0:45:9b:51:00:0c:fc:e5:21: 02:81:e2:f8:fa:6d:50:58:97:ff:cb:62:87:72:c8: e7:61:e2:6c:cf:dc:a9:f7:80:49:01:ff:2c:24:1e: d0:82:41:5e:cd:cd:36:32:5e:1b:51:82:5c:03:45: 0c:03:ca:c7:16:75:b0:7c:b2:a4:25:ca:e6:ae:de: e8:d1:10:32:ba:c7:65:ff:50:74:9f:b0:ce:60:d9: ff:89:f4:83:06:32:d6:fc:10:75:e9:ac:e4:1a:f2: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:4E:30:44:F6:DE:FB:6F:09:29:78:3B:7A:0E:94:5D:7B:32:1D X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:82:d3:cc:68:c1:ff:1d:93:8a:c3:ef:be:da:04:c6:d1:52: 1e:24:70:7d:dd:6c:09:cd:13:30:21:d2:78:17:ee:23:59:e1: fb:5f:ff:a1:c0:cb:38:7a:bc:6e:b7:4b:2f:fa:7e:64:3d:e0: 8e:33:34:fe:ab:0a:e4:06:90:74:91:a4:bb:80:8e:dd:52:f6: ae:30:c9:73:66:96:6a:b9:2d:29:ae:90:2a:f5:de:46:5c:92: ba:54:e8:b9:85:82:77:f2:27:d8:5e:b5:2f:60:db:83:9c:11: 73:4b:7d:d8:91:49:07:70:33:0e:dd:22:6f:29:0f:89:69:1c: 9e:57:94:b7:8e:30:64:47:f4:01:bf:49:e5:b6:b4:56:62:3f: 3d:e4:a1:5f:a1:4d:ca:a3:19:96:24:a0:bf:2f:02:44:64:4b: 70:55:65:ab:d2:1b:72:0a:00:9c:ce:0c:c8:23:d0:fd:1f:74: e9:3a:93:44:e6:84:80:b9:47:7c:b5:42:6b:f6:0a:72:58:ba: b9:26:83:a9:35:7b:33:68:e0:74:45:34:68:b9:7f:79:58:38: ec:47:24:09:bd:b6:c6:fb:fb:d0:84:60:70:c8:26:ad:c4:29: c2:ab:46:fd:15:fe:8b:4c:e1:7e:6a:c2:5f:df:6f:f3:2f:46: 85:7f:93:29 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITV6IJg+M7GLfCDxX/qYzh5dZdIjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5Q0Q1REVDQThFMTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1 Nzg0MTE0MB4XDTI2MDQxODA0MDYwMFoXDTI2MDQyMTE1MzAwMFowMzExMC8GA1UE AxMoQjhGMTRFMzA0NEY2REVGQjZGMDkyOTc4M0I3QTBFOTQ1RDdCMzIxRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL1zILNjBGDqd4VDl+DaaFQwFsEC JiUMdQdsyDd8tE0Mqz35R7420dDIXlXEHI8NoSnTzxy/2RmZ5hdWC6vasZrrmfYo GiqcZMvFTQ0xJpIGt/dib0Sb1JN8X8PjRJz02u/OXb5RTrbCYvtOxBG2d/mQ4fqU um5WfxQI6HmaJH1bU0t/j4UTNJ4cR/jurlmp8vZp3pJ/gbef9rGEsEWbUQAM/OUh AoHi+PptUFiX/8tih3LI52HibM/cqfeASQH/LCQe0IJBXs3NNjJeG1GCXANFDAPK xxZ1sHyypCXK5q7e6NEQMrrHZf9QdJ+wzmDZ/4n0gwYy1vwQdems5BryAasCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS48U4wRPbe+28JKXg7eg6UXXsyHTAfBgNVHSME GDAWgBSc1d7KjhRqAjGuhyKD6g+TtXhBFDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Zk MmI0Zjc3LTc0ZDAtNDc5Ny1hZWUwLTllYTkwNzY1NDczMC8wLzlDRDVERUNBOEUx NDZBMDIzMUFFODcyMjgzRUEwRjkzQjU3ODQxMTQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85Q0Q1REVDQThFMTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0 MTE0LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9mZDJiNGY3Ny03NGQwLTQ3OTctYWVl MC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThFMTQ2QTAyMzFBRTg3MjI4M0VBMEY5 M0I1Nzg0MTE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAR4LTzGjB/x2TisPvvtoExtFSHiRwfd1sCc0T MCHSeBfuI1nh+1//ocDLOHq8brdLL/p+ZD3gjjM0/qsK5AaQdJGku4CO3VL2rjDJ c2aWarktKa6QKvXeRlySulTouYWCd/In2F61L2Dbg5wRc0t92JFJB3AzDt0ibykP iWkcnleUt44wZEf0Ab9J5ba0VmI/PeShX6FNyqMZliSgvy8CRGRLcFVlq9IbcgoA nM4MyCPQ/R906TqTROaEgLlHfLVCa/YKcli6uSaDqTV7M2jgdEU0aLl/eVg47Eck Cb22xvv70IRgcMgmrcQpwqtG/RX+i0zhfmrCX99v8y9GhX+TKQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:13 2026 by rpki-client