$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: 2IIZjkQkY6dSxdIDIxJ66OTCaGlVWaWcCZIQODJDTSk= Subject key identifier: C6:71:61:03:05:8D:63:29:96:DA:76:58:36:28:83:0B:03:97:2A:F8 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 2E51321C615252AF5F4FE8130D95678379D807A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 0128 Signing time: Mon 20 Apr 2026 05:52:31 +0000 Manifest this update: Mon 20 Apr 2026 05:47:31 +0000 Manifest next update: Thu 23 Apr 2026 15:31:31 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 2: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: 5nS8gBi9tvvrZALj4KZPebgAooiVgqOy0U0hCPQISUw=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:51:32:1c:61:52:52:af:5f:4f:e8:13:0d:95:67:83:79:d8:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Apr 20 05:47:31 2026 GMT Not After : Apr 23 15:31:31 2026 GMT Subject: CN=C6716103058D632996DA76583628830B03972AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:36:34:9b:04:a7:d8:81:44:a4:58:31:9e: 33:f2:fc:db:d8:ee:05:8e:9c:c5:83:d6:fd:5c:f6: 74:b6:2a:00:d8:5b:43:21:9c:e8:a5:ce:77:22:2d: 6f:c8:15:8f:ec:65:0d:27:4d:4d:11:02:d7:37:57: aa:ac:66:67:9d:b7:fe:01:9d:34:f0:0d:3c:73:64: a3:aa:5c:27:cb:f6:c6:87:6d:d5:d8:85:0c:24:5a: 20:9a:00:52:c2:fc:de:48:ec:0a:a0:0a:59:e1:61: 16:e1:ef:97:3f:5e:d5:38:83:11:00:b5:9d:ed:65: 17:17:34:73:5b:b4:6d:28:65:cf:5d:bd:6e:1d:f9: 66:95:2e:6c:e7:fa:1c:a9:f6:8d:e5:00:24:64:74: cd:fa:7b:c2:2e:9e:86:79:73:2a:73:cd:6c:43:db: c9:96:da:0c:01:18:89:e2:d4:bc:c1:0d:8b:42:8d: 17:ff:2e:fc:21:1b:8d:fd:27:3a:55:46:a2:8e:d1: 2e:54:3a:94:c0:bf:0e:17:35:05:59:74:b7:42:e7: 9f:22:b9:d2:dd:99:10:da:9d:7e:c4:4c:c7:70:56: d8:bd:d5:49:fc:cb:43:03:f0:29:f5:08:92:1f:ba: 2f:27:2b:f4:3c:15:18:58:e3:8a:fc:38:8b:e9:7a: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:61:03:05:8D:63:29:96:DA:76:58:36:28:83:0B:03:97:2A:F8 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c0:a4:33:23:70:e9:f0:24:68:44:f1:e5:52:2c:41:62:cd: 45:16:71:ac:b8:86:ad:63:e3:77:a0:ac:cf:5e:be:ce:e0:43: 30:af:be:18:1a:7f:78:11:bb:96:f4:1c:8f:e7:1f:dd:37:6b: d6:37:1e:74:d8:75:b1:fc:1b:1b:12:63:39:01:bf:21:11:fd: df:f1:0b:36:83:15:7c:ac:5d:30:31:02:00:27:6a:80:05:63: b9:9b:6a:cf:1c:aa:d7:cb:e9:e1:95:e0:87:4f:e5:7a:91:46: ac:ea:2e:ae:fa:3f:d3:7f:ab:22:28:e7:d9:2e:47:35:3e:96: e1:f8:25:0c:9e:2d:26:67:34:1c:89:39:c8:45:a4:71:3f:57: ce:5f:22:52:aa:29:10:36:49:2f:32:b1:32:d0:99:8e:5e:32: 78:82:f7:99:41:9e:18:2a:e4:67:11:2a:cf:45:9e:80:b1:54: cf:48:cb:b2:5d:01:d0:6a:a4:5b:0d:88:a2:79:08:ba:52:41: 79:0d:2b:22:74:3b:f7:34:79:7e:9a:b5:50:37:12:d4:77:34: 1a:d2:b6:13:f8:3c:bd:e3:f6:df:1a:c5:46:d2:b0:17:05:54: fa:3b:f2:e0:50:99:1e:0f:33:2d:43:cd:12:27:57:83:dd:9d: 12:99:e8:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlEyHGFSUq9fT+gTDZVng3nYB6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNjA0MjAwNTQ3MzFaFw0yNjA0MjMxNTMxMzFaMDMxMTAvBgNV BAMTKEM2NzE2MTAzMDU4RDYzMjk5NkRBNzY1ODM2Mjg4MzBCMDM5NzJBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErDY0mwSn2IFEpFgxnjPy/NvY 7gWOnMWD1v1c9nS2KgDYW0MhnOilznciLW/IFY/sZQ0nTU0RAtc3V6qsZmedt/4B nTTwDTxzZKOqXCfL9saHbdXYhQwkWiCaAFLC/N5I7AqgClnhYRbh75c/XtU4gxEA tZ3tZRcXNHNbtG0oZc9dvW4d+WaVLmzn+hyp9o3lACRkdM36e8IunoZ5cypzzWxD 28mW2gwBGIni1LzBDYtCjRf/LvwhG439JzpVRqKO0S5UOpTAvw4XNQVZdLdC558i udLdmRDanX7ETMdwVti91Un8y0MD8Cn1CJIfui8nK/Q8FRhY44r8OIvpeoUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnFhAwWNYymW2nZYNiiDCwOXKvgwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvApDMjcOnwJGhE8eVSLEFizUUWcay4hq1j 43egrM9evs7gQzCvvhgaf3gRu5b0HI/nH903a9Y3HnTYdbH8GxsSYzkBvyER/d/x CzaDFXysXTAxAgAnaoAFY7mbas8cqtfL6eGV4IdP5XqRRqzqLq76P9N/qyIo59ku RzU+luH4JQyeLSZnNByJOchFpHE/V85fIlKqKRA2SS8ysTLQmY5eMniC95lBnhgq 5GcRKs9FnoCxVM9Iy7JdAdBqpFsNiKJ5CLpSQXkNKyJ0O/c0eX6atVA3EtR3NBrS thP4PL3j9t8axUbSsBcFVPo78uBQmR4PMy1DzRInV4PdnRKZ6BE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:04 2026 by rpki-client