$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: ZGtlqifqj3v9iyXdHpI3y6cwTnygPutcnyc3egqzoEM= Subject key identifier: 11:B0:36:BE:62:32:16:D5:0C:F7:9D:F3:9C:F1:4B:D3:0C:6C:90:73 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 4DDFDA40B22336448FCA29B522F3608CCD76DE14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: F8 Signing time: Tue 21 Apr 2026 10:30:06 +0000 Manifest this update: Tue 21 Apr 2026 10:25:06 +0000 Manifest next update: Fri 24 Apr 2026 12:21:06 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 2: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: MwMMHMVBwCA7CoTyuAimPj0mubqOO58CjKoaYk+BRuA=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 12:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:df:da:40:b2:23:36:44:8f:ca:29:b5:22:f3:60:8c:cd:76:de:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Apr 21 10:25:06 2026 GMT Not After : Apr 24 12:21:06 2026 GMT Subject: CN=11B036BE623216D50CF79DF39CF14BD30C6C9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:d1:b6:85:12:b3:d8:a7:76:96:34:0a:7e: f0:c3:33:a4:a4:7b:58:e6:16:ef:3e:8d:d1:35:36: b2:5b:8b:99:06:88:3d:ef:65:f2:eb:17:3d:cc:e6: c3:70:84:34:15:bb:85:b8:04:31:45:24:bd:2b:fa: 57:9d:e3:45:9c:be:aa:16:00:63:4c:c1:a7:5d:88: 5f:39:66:a4:1e:98:a4:9f:b5:f9:19:a3:21:60:9e: f1:25:20:51:6b:de:1a:b3:14:ce:11:98:cd:6b:d3: d9:07:c1:19:e1:b3:37:e3:3b:b4:aa:a4:6b:6f:54: ab:56:7e:55:25:55:52:41:16:dd:54:c5:c1:ff:f9: 68:ae:e5:c1:bc:77:76:ca:c6:48:5c:62:b7:24:30: fb:c5:ef:e1:8a:14:9f:e0:4d:d7:df:d6:93:59:1e: cd:75:8e:fe:ec:ca:ef:21:d4:4a:49:23:03:5c:61: e4:ad:69:95:64:ae:1c:47:bc:61:e6:eb:97:02:14: 1a:f3:ec:96:34:c1:ce:8e:8b:27:ae:7a:66:35:d2: 95:53:8e:d1:3f:0a:74:b0:6f:d8:c9:cd:9a:a9:1b: 7c:83:f3:ee:87:f3:b4:0a:e2:c9:4c:56:b1:37:72: ce:74:5e:98:a0:8c:91:65:ce:7c:b7:99:0c:2c:f8: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:36:BE:62:32:16:D5:0C:F7:9D:F3:9C:F1:4B:D3:0C:6C:90:73 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:53:2f:45:51:94:1f:a1:26:00:3d:e8:a1:f9:dc:1e:bf:27: 38:a3:82:d8:bc:f8:12:ac:f4:d7:4f:22:89:bd:76:fa:87:eb: 85:50:df:1f:59:95:d2:c6:f0:46:e0:3d:11:29:ba:a3:53:e2: 38:85:26:02:81:8e:c9:e1:c5:9e:3d:00:e9:1e:9e:d0:c1:db: 64:c3:14:89:d4:12:08:ad:33:39:73:80:fc:43:35:7c:2f:d5: 0a:44:51:82:24:a7:c9:8a:3f:2b:6e:74:ea:aa:09:34:02:18: 89:9e:6d:de:23:8c:bb:ad:f9:38:45:15:12:e3:a5:e3:b0:c1: b7:ef:09:fa:ba:0e:86:1a:27:14:22:26:cf:b6:62:27:07:dc: 81:b8:75:a7:e3:44:c0:18:1e:7f:9a:f0:03:31:80:32:09:cd: da:cf:62:c3:50:4a:9c:9b:b4:53:20:14:8d:eb:b3:e8:db:aa: 1f:70:26:99:9a:1a:6c:a7:e8:5c:de:29:95:11:c1:00:85:66: 46:2f:42:60:5d:ff:63:5b:59:32:36:c0:da:79:00:56:79:47: 09:14:3d:aa:fa:48:95:53:f5:13:4a:dd:dc:ca:4e:b0:a1:1b: 0e:65:30:1d:0e:a4:87:57:f6:df:8c:86:62:24:95:ee:43:33: 13:9f:96:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTd/aQLIjNkSPyim1IvNgjM123hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNjA0MjExMDI1MDZaFw0yNjA0MjQxMjIxMDZaMDMxMTAvBgNV BAMTKDExQjAzNkJFNjIzMjE2RDUwQ0Y3OURGMzlDRjE0QkQzMEM2QzkwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtdG2hRKz2Kd2ljQKfvDDM6Sk e1jmFu8+jdE1NrJbi5kGiD3vZfLrFz3M5sNwhDQVu4W4BDFFJL0r+led40WcvqoW AGNMwaddiF85ZqQemKSftfkZoyFgnvElIFFr3hqzFM4RmM1r09kHwRnhszfjO7Sq pGtvVKtWflUlVVJBFt1UxcH/+Wiu5cG8d3bKxkhcYrckMPvF7+GKFJ/gTdff1pNZ Hs11jv7syu8h1EpJIwNcYeStaZVkrhxHvGHm65cCFBrz7JY0wc6OiyeuemY10pVT jtE/CnSwb9jJzZqpG3yD8+6H87QK4slMVrE3cs50XpigjJFlzny3mQws+FPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbA2vmIyFtUM953znPFL0wxskHMwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlTL0VRlB+hJgA96KH53B6/Jzijgti8+BKs 9NdPIom9dvqH64VQ3x9ZldLG8EbgPREpuqNT4jiFJgKBjsnhxZ49AOkentDB22TD FInUEgitMzlzgPxDNXwv1QpEUYIkp8mKPytudOqqCTQCGImebd4jjLut+ThFFRLj peOwwbfvCfq6DoYaJxQiJs+2YicH3IG4dafjRMAYHn+a8AMxgDIJzdrPYsNQSpyb tFMgFI3rs+jbqh9wJpmaGmyn6FzeKZURwQCFZkYvQmBd/2NbWTI2wNp5AFZ5RwkU Par6SJVT9RNK3dzKTrChGw5lMB0OpIdX9t+MhmIkle5DMxOflng= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:47 2026 by rpki-client