$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: IYhuc3RfL+fPKePd8U7himAtqjNQzPuLx1Fbps5tl5I= Subject key identifier: DE:89:75:88:D2:0F:63:4C:E7:33:57:F1:6A:11:FA:4B:2A:4D:0C:57 Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 750BAACCCD5CB4E1A8AABD5E256DD7B40C951AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 056C Signing time: Sat 25 Apr 2026 03:21:51 +0000 Manifest this update: Sat 25 Apr 2026 03:16:51 +0000 Manifest next update: Tue 28 Apr 2026 09:09:51 +0000 Files and hashes: 1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: Jr2iFdTQkSkhHUPX6PcAXHfXYvDobsBX9SW/k9S++Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:aa:cc:cd:5c:b4:e1:a8:aa:bd:5e:25:6d:d7:b4:0c:95:1a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Apr 25 03:16:51 2026 GMT Not After : Apr 28 09:09:51 2026 GMT Subject: CN=DE897588D20F634CE73357F16A11FA4B2A4D0C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:b6:0d:76:89:dd:3d:13:ae:df:7e:9c:56: 8d:18:ad:b4:16:dd:fb:f5:75:0d:a2:6a:f0:9d:28: 88:6b:6d:5d:59:b1:e4:74:5f:53:75:83:f1:da:43: 8d:c0:a4:cb:34:c0:16:17:58:c6:89:c4:c1:78:67: 2c:80:fb:2b:de:d9:0d:0d:3e:54:d9:d2:bd:1f:cc: c8:45:07:b0:b1:28:e1:10:c3:2e:5a:e7:c6:7a:75: 80:33:f1:57:49:de:7a:56:ab:71:8d:eb:3f:72:86: 68:45:e3:d5:c6:0a:10:2e:68:0f:e4:53:24:02:77: 37:e4:5a:2e:cb:f1:7d:e1:35:da:9f:18:5d:e7:89: 3e:c3:22:c0:17:b8:ec:d2:34:cf:62:a0:67:d2:ec: 6e:15:86:7f:53:5f:34:1a:c8:2d:b0:e6:f4:f1:c0: c7:09:34:8b:c5:94:18:0e:fe:90:52:59:8d:db:3c: 48:ed:5b:d4:fe:7a:58:a1:e5:5f:46:68:cb:35:6e: a1:4b:29:b1:41:e8:0c:9f:38:db:a4:5d:98:9b:df: f0:0b:49:cf:9c:cc:9f:db:26:65:b0:97:db:6c:cb: ed:a4:7b:fa:23:f6:3c:7d:4e:48:ad:be:36:14:57: c7:f7:ff:40:ac:c9:f7:1e:46:74:41:1d:28:ce:53: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:89:75:88:D2:0F:63:4C:E7:33:57:F1:6A:11:FA:4B:2A:4D:0C:57 X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:68:36:4b:70:96:03:83:04:d8:e2:39:3d:f5:4d:f2:03:1f: 0f:f3:f7:17:32:3e:77:cf:21:5b:5c:02:0e:c7:4e:61:a8:84: 88:6a:dc:15:c8:94:7d:ed:63:5d:7b:05:c3:da:c8:5b:25:9b: 11:81:8f:89:16:a0:aa:e4:94:aa:91:78:00:a3:a0:1c:5a:2b: 84:06:8f:bf:2f:be:57:7b:8d:7d:74:ab:39:0a:ea:f4:73:37: 77:0a:54:61:b8:55:72:da:10:ab:83:b9:38:2e:db:bb:53:20: d6:d9:e3:5a:92:fb:68:66:d7:ff:3e:7f:0f:40:88:bd:da:cc: 91:c3:5d:0a:bf:54:44:79:55:c3:ff:b7:70:7b:68:7f:56:71: 9a:a7:10:4c:a8:15:d7:df:b5:49:9b:ec:3e:33:eb:3b:cb:66: 82:ae:13:62:c2:7c:b2:24:a7:10:c7:ff:3f:cc:02:70:33:84: 1e:aa:04:41:28:e0:f5:e1:49:53:45:3c:ea:90:6a:65:62:74: ef:37:79:c2:a6:78:08:1f:61:7d:8a:0d:9e:aa:33:93:cb:a8: e8:90:72:eb:9b:d2:fd:b9:18:f7:47:d7:6d:b4:46:3c:e6:28: 2b:35:7a:60:01:6c:75:4c:99:7a:48:0f:5a:3a:fd:a4:f2:e0: 5b:c4:bb:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQuqzM1ctOGoqr1eJW3XtAyVGu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNjA0MjUwMzE2NTFaFw0yNjA0MjgwOTA5NTFaMDMxMTAvBgNV BAMTKERFODk3NTg4RDIwRjYzNENFNzMzNTdGMTZBMTFGQTRCMkE0RDBDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3LYNdondPROu336cVo0YrbQW 3fv1dQ2iavCdKIhrbV1ZseR0X1N1g/HaQ43ApMs0wBYXWMaJxMF4ZyyA+yve2Q0N PlTZ0r0fzMhFB7CxKOEQwy5a58Z6dYAz8VdJ3npWq3GN6z9yhmhF49XGChAuaA/k UyQCdzfkWi7L8X3hNdqfGF3niT7DIsAXuOzSNM9ioGfS7G4Vhn9TXzQayC2w5vTx wMcJNIvFlBgO/pBSWY3bPEjtW9T+elih5V9GaMs1bqFLKbFB6AyfONukXZib3/AL Sc+czJ/bJmWwl9tsy+2ke/oj9jx9TkitvjYUV8f3/0CsyfceRnRBHSjOU6WnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ol1iNIPY0znM1fxahH6SypNDFcwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpoNktwlgODBNjiOT31TfIDHw/z9xcyPnfP IVtcAg7HTmGohIhq3BXIlH3tY117BcPayFslmxGBj4kWoKrklKqReACjoBxaK4QG j78vvld7jX10qzkK6vRzN3cKVGG4VXLaEKuDuTgu27tTINbZ41qS+2hm1/8+fw9A iL3azJHDXQq/VER5VcP/t3B7aH9WcZqnEEyoFdfftUmb7D4z6zvLZoKuE2LCfLIk pxDH/z/MAnAzhB6qBEEo4PXhSVNFPOqQamVidO83ecKmeAgfYX2KDZ6qM5PLqOiQ cuub0v25GPdH1220RjzmKCs1emABbHVMmXpID1o6/aTy4FvEu/o= -----END CERTIFICATE-----Generated at Mon Apr 27 07:17:57 2026 by rpki-client