$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: A9/3sfvGU4E8yuBDlcGCxcyfVtFqdPmszN1zq7XKip0= Subject key identifier: 81:41:22:DE:4A:63:CB:1F:DB:BF:43:7B:85:76:EC:AA:6D:62:35:42 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 5AB936726572ABFBD5542B39CA0D7B45728CD956 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: DE Signing time: Tue 21 Apr 2026 01:11:34 +0000 Manifest this update: Tue 21 Apr 2026 01:06:34 +0000 Manifest next update: Fri 24 Apr 2026 04:04:34 +0000 Files and hashes: 1: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) 2: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: lBGHbRivuSovuDYNJ1HAjGm8v5vVtleVNuVuSz8t5Js=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b9:36:72:65:72:ab:fb:d5:54:2b:39:ca:0d:7b:45:72:8c:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Apr 21 01:06:34 2026 GMT Not After : Apr 24 04:04:34 2026 GMT Subject: CN=814122DE4A63CB1FDBBF437B8576ECAA6D623542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:b2:ca:fd:a3:c2:5b:25:37:8a:40:d1:31: 4d:2d:af:a2:a7:42:1b:a8:08:26:5f:0e:47:e7:96: 65:24:26:eb:8f:ee:75:8f:89:95:58:55:14:43:da: d7:98:3f:0e:8f:3a:06:22:a6:6b:7b:e6:0e:37:79: 11:b4:9a:86:b6:5f:28:b4:8f:1b:88:98:82:ce:ff: 09:5e:3e:f6:2b:2c:7b:bc:a4:a3:41:61:e5:89:5b: 30:09:5b:c5:1a:f5:94:85:82:e5:53:de:40:bf:80: 24:21:d1:67:dc:82:fa:f3:64:13:ff:89:5d:6a:20: 4f:74:b7:65:2b:23:44:82:95:41:74:3d:65:2a:a9: d5:34:e4:7f:26:e1:08:6b:d6:96:c5:a1:1c:cd:46: 78:2e:90:1c:88:5c:01:5e:4b:eb:26:c1:07:e5:04: fa:66:3e:83:6a:d7:05:58:e1:6c:ea:25:8d:f3:a5: 6e:0c:7d:f3:83:23:65:64:56:02:97:52:87:f2:4e: 9d:ba:f3:96:54:ae:6b:e9:77:b0:b7:a1:1f:32:78: 97:3f:18:91:07:6e:4c:cb:2c:ca:c7:95:58:cc:f0: d6:33:50:65:d7:49:f9:83:96:79:74:ea:a0:3b:a5: e7:21:29:0c:a8:69:46:d3:1b:e0:d5:38:c7:25:43: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:22:DE:4A:63:CB:1F:DB:BF:43:7B:85:76:EC:AA:6D:62:35:42 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b5:30:b1:ad:56:7d:da:43:8e:89:bc:74:42:01:fc:15:62: c9:84:76:7a:4b:69:e2:83:48:ae:77:bf:91:a5:dc:56:b7:c2: ca:6e:fc:e6:dc:a6:1e:4b:63:ef:d2:88:ce:fd:86:89:9a:69: 83:8c:0a:a6:8a:68:55:b6:11:69:38:63:09:5e:99:ff:12:d4: 89:b6:25:2f:a1:72:ab:b9:ae:1f:cb:37:2b:ee:04:16:94:1e: 16:a6:87:bc:e0:fb:33:a9:91:94:fa:0b:84:2b:e8:51:a0:aa: 81:39:27:f1:45:80:03:da:b4:d9:5e:75:6f:64:3d:88:c6:f0: 64:c2:0f:47:ed:2c:30:d6:ab:f6:bc:fc:54:5c:c0:ec:0d:cb: 71:99:1d:17:76:57:b5:da:f6:cd:2a:8d:d1:73:3d:6c:73:ee: 73:f4:8c:13:91:8f:88:f5:3f:89:d4:18:51:ac:a6:2b:ad:6b: 74:8b:33:6d:49:5a:f3:87:d2:51:ed:e6:8c:11:5b:3f:4f:59: b0:01:36:04:04:b6:8a:5d:44:1d:25:9b:8b:29:e5:d2:68:b8: 0b:b8:57:dd:47:4b:8a:86:b9:b1:4a:1d:cf:53:c0:94:d3:7b: 50:a5:76:f8:1d:92:47:0a:b4:a4:49:02:04:91:88:a0:f8:a6: 81:c0:5a:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrk2cmVyq/vVVCs5yg17RXKM2VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNjA0MjEwMTA2MzRaFw0yNjA0MjQwNDA0MzRaMDMxMTAvBgNV BAMTKDgxNDEyMkRFNEE2M0NCMUZEQkJGNDM3Qjg1NzZFQ0FBNkQ2MjM1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOLLK/aPCWyU3ikDRMU0tr6Kn QhuoCCZfDkfnlmUkJuuP7nWPiZVYVRRD2teYPw6POgYipmt75g43eRG0moa2Xyi0 jxuImILO/wlePvYrLHu8pKNBYeWJWzAJW8Ua9ZSFguVT3kC/gCQh0WfcgvrzZBP/ iV1qIE90t2UrI0SClUF0PWUqqdU05H8m4Qhr1pbFoRzNRngukByIXAFeS+smwQfl BPpmPoNq1wVY4WzqJY3zpW4MffODI2VkVgKXUofyTp2685ZUrmvpd7C3oR8yeJc/ GJEHbkzLLMrHlVjM8NYzUGXXSfmDlnl06qA7pechKQyoaUbTG+DVOMclQ8gnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUEi3kpjyx/bv0N7hXbsqm1iNUIwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJC1MLGtVn3aQ46JvHRCAfwVYsmEdnpLaeKD SK53v5Gl3Fa3wspu/Obcph5LY+/SiM79homaaYOMCqaKaFW2EWk4Ywlemf8S1Im2 JS+hcqu5rh/LNyvuBBaUHhamh7zg+zOpkZT6C4Qr6FGgqoE5J/FFgAPatNledW9k PYjG8GTCD0ftLDDWq/a8/FRcwOwNy3GZHRd2V7Xa9s0qjdFzPWxz7nP0jBORj4j1 P4nUGFGspiuta3SLM21JWvOH0lHt5owRWz9PWbABNgQEtopdRB0lm4sp5dJouAu4 V91HS4qGubFKHc9TwJTTe1CldvgdkkcKtKRJAgSRiKD4poHAWo8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client