$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: myOCJ8TqvlTwUvO9Bzn2D9pv5xyD9sFQwmleHcUz4P8= Subject key identifier: EB:DA:C0:3D:8D:F9:9A:3C:FF:3B:B6:DE:0A:7B:0F:98:A3:8E:E0:28 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 7688C90C274730157B9262022C3287803424E838 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 0114 Signing time: Mon 20 Apr 2026 15:40:00 +0000 Manifest this update: Mon 20 Apr 2026 15:35:00 +0000 Manifest next update: Thu 23 Apr 2026 18:52:00 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 2: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: z0TLkahIMfCFtEwo8nLXIV9VPgHiI83zZQi9UWJDBWM=) 3: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:88:c9:0c:27:47:30:15:7b:92:62:02:2c:32:87:80:34:24:e8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Apr 20 15:35:00 2026 GMT Not After : Apr 23 18:52:00 2026 GMT Subject: CN=EBDAC03D8DF99A3CFF3BB6DE0A7B0F98A38EE028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:69:f8:9f:4c:6a:46:89:f7:b6:67:af:cb: 95:fe:98:f9:6c:67:a5:a6:aa:6a:a5:9d:5c:9f:41: 12:7f:50:9d:6a:6c:91:1e:6f:3a:4f:ba:5e:19:95: bf:42:75:3a:04:da:0b:3d:b7:14:7e:91:0c:63:4f: 49:b6:2e:bd:d3:1e:e3:b0:7c:e9:7e:09:5e:9d:68: b6:b6:f9:46:ca:30:df:29:6b:ab:7e:87:bc:8f:53: 39:fc:19:e2:7e:8e:f5:8b:df:8e:55:52:9f:b9:ac: 04:dc:7f:0e:32:96:72:a8:da:16:6a:8f:d0:81:1f: 29:6f:85:2e:f5:0c:8a:5a:05:d5:46:cd:37:c7:23: 41:63:7e:23:09:e8:d3:f4:c3:ff:24:1d:57:62:99: 38:e6:ec:e3:b6:9e:f6:e5:12:80:21:eb:d3:de:44: 41:c3:97:33:e8:71:35:dd:c1:9f:47:75:e0:35:24: ba:33:16:76:2d:1a:18:5a:3e:68:22:a8:be:26:f6: cb:96:36:94:3a:42:59:3f:8d:0c:da:39:f1:64:00: 00:7d:b5:e9:ad:d5:65:05:ee:02:2f:2e:22:57:ff: 1c:8b:66:4a:94:3b:fb:60:e6:c8:e5:a6:6e:8d:04: 93:b6:a1:3c:12:ca:af:72:a8:03:33:eb:dc:17:88: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:C0:3D:8D:F9:9A:3C:FF:3B:B6:DE:0A:7B:0F:98:A3:8E:E0:28 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ce:0f:b6:64:7d:d5:9c:52:6a:fb:33:30:cf:b9:c2:cb:74: fc:a8:2a:21:0a:6c:ae:c3:ff:45:50:8b:63:a2:11:8e:f1:f9: b1:49:d8:44:02:84:f1:4b:6e:21:f2:df:d4:cb:3f:a7:c5:65: d2:35:22:b9:53:5b:a3:d9:ff:a3:fe:7b:e6:97:75:10:c8:17: f1:9c:a6:7f:75:0e:3e:6f:50:2d:08:e1:63:3c:c5:e1:32:5a: a5:b3:d8:2f:46:92:bd:a4:8c:23:e8:c2:78:d0:9f:7a:ed:91: b9:78:b5:e6:e8:00:13:fc:24:4a:99:3d:5c:65:c1:cb:cd:d0: 75:e7:b6:42:5a:eb:0f:db:89:14:27:a0:c3:aa:36:65:de:1a: 1a:03:1a:15:93:92:2a:f9:4b:51:49:00:f1:f1:58:51:09:41: d1:e4:a6:25:51:d9:db:69:bc:c9:56:37:bf:c0:28:a1:6f:4c: 0e:61:a1:5b:68:40:b2:bc:79:4c:8c:52:0c:30:a2:2b:6c:e7: 87:13:c8:e5:fa:98:38:32:93:61:fe:d9:91:75:94:7b:b9:d8: 67:29:e6:11:1b:67:70:25:ac:31:d8:4a:91:3b:fd:04:3f:49: dc:ae:b0:25:2b:61:4c:f3:31:6c:3f:ad:6f:c2:e5:2d:a2:c3: 28:04:ad:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdojJDCdHMBV7kmICLDKHgDQk6DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNjA0MjAxNTM1MDBaFw0yNjA0MjMxODUyMDBaMDMxMTAvBgNV BAMTKEVCREFDMDNEOERGOTlBM0NGRjNCQjZERTBBN0IwRjk4QTM4RUUwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk82n4n0xqRon3tmevy5X+mPls Z6WmqmqlnVyfQRJ/UJ1qbJEebzpPul4Zlb9CdToE2gs9txR+kQxjT0m2Lr3THuOw fOl+CV6daLa2+UbKMN8pa6t+h7yPUzn8GeJ+jvWL345VUp+5rATcfw4ylnKo2hZq j9CBHylvhS71DIpaBdVGzTfHI0FjfiMJ6NP0w/8kHVdimTjm7OO2nvblEoAh69Pe REHDlzPocTXdwZ9HdeA1JLozFnYtGhhaPmgiqL4m9suWNpQ6Qlk/jQzaOfFkAAB9 temt1WUF7gIvLiJX/xyLZkqUO/tg5sjlpm6NBJO2oTwSyq9yqAMz69wXiJzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69rAPY35mjz/O7beCnsPmKOO4CgwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfOD7ZkfdWcUmr7MzDPucLLdPyoKiEKbK7D /0VQi2OiEY7x+bFJ2EQChPFLbiHy39TLP6fFZdI1IrlTW6PZ/6P+e+aXdRDIF/Gc pn91Dj5vUC0I4WM8xeEyWqWz2C9Gkr2kjCPownjQn3rtkbl4teboABP8JEqZPVxl wcvN0HXntkJa6w/biRQnoMOqNmXeGhoDGhWTkir5S1FJAPHxWFEJQdHkpiVR2dtp vMlWN7/AKKFvTA5hoVtoQLK8eUyMUgwwoits54cTyOX6mDgyk2H+2ZF1lHu52Gcp 5hEbZ3AlrDHYSpE7/QQ/SdyusCUrYUzzMWw/rW/C5S2iwygEres= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client