$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: auWzvk6RFM/JWMnrBNPHsQ69BfWqucg4qbzuaLBOeEY= Subject key identifier: 0E:AC:90:4C:CB:45:EB:38:93:B3:13:5C:23:32:96:73:5E:E2:D4:87 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 67798275161E0B622F5BC5893C55BC6514DA99D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 012A Signing time: Tue 21 Apr 2026 20:20:46 +0000 Manifest this update: Tue 21 Apr 2026 20:15:46 +0000 Manifest next update: Sat 25 Apr 2026 02:39:46 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: R+Ju79OPKfa/1CPZ8ffZ0+0VLwZ/zs9MtwxY516SoRw=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:79:82:75:16:1e:0b:62:2f:5b:c5:89:3c:55:bc:65:14:da:99:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Apr 21 20:15:46 2026 GMT Not After : Apr 25 02:39:46 2026 GMT Subject: CN=0EAC904CCB45EB3893B3135C233296735EE2D487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:65:97:21:f9:27:73:45:8d:0b:aa:00:20: b5:22:1d:1c:a1:c0:8c:c2:4d:4f:1c:28:fd:e7:c7: 2d:c1:b6:4d:17:62:09:71:92:6f:d9:dd:07:07:37: d7:c8:2f:94:10:51:80:bf:a9:c4:0d:71:e1:53:15: 71:84:72:5c:fd:94:75:b6:d1:4a:38:67:3f:41:58: 5f:94:e1:bd:31:d7:a1:1d:81:8b:5a:9d:c4:99:63: dc:22:ca:19:65:28:2d:7d:63:d9:3d:de:55:85:7e: 4d:d5:a1:51:6c:ff:79:7f:c3:99:22:35:4d:2b:4a: 71:48:d0:4f:8e:cb:d7:2d:1d:71:47:08:a8:cb:a8: d3:81:12:e6:70:27:96:9d:5f:96:d7:12:6c:ec:14: 26:22:e7:75:f0:0f:b9:8c:41:92:ba:f3:6c:2f:08: 7e:61:a4:9e:0d:8a:ef:1e:4d:f4:a2:05:6b:fe:2e: 0b:0a:50:ca:8a:9f:d2:2e:25:8e:19:d2:b8:d7:66: 19:c4:6a:47:9a:e2:d7:c9:ac:c9:73:f4:0d:ff:94: 3f:50:87:d5:11:7e:6e:a8:f6:e8:87:56:ed:48:26: a0:d9:97:0d:a6:e9:04:aa:71:7b:24:43:7a:3d:3b: 38:d7:ee:0d:50:c4:b9:6a:47:ff:d8:ea:5a:ee:e3: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AC:90:4C:CB:45:EB:38:93:B3:13:5C:23:32:96:73:5E:E2:D4:87 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a1:8a:80:1e:6d:fa:2b:75:4e:8b:a1:24:b3:d1:35:c1:d0: 19:34:d5:f3:88:0b:26:cc:f2:c0:27:b1:bd:d4:69:46:f7:d6: 96:bf:bd:8d:b8:2f:ca:01:e8:08:ff:23:3b:c1:d8:6b:d0:44: e8:c9:12:db:0b:fa:ca:b8:f8:e5:f1:10:39:67:96:37:c6:d5: d0:38:82:43:e1:f8:89:b9:f1:b1:23:76:b6:22:c3:8a:13:de: 3a:df:7b:81:89:7e:de:30:86:e7:39:ec:eb:eb:6f:a1:8a:51: 6c:cc:cd:ad:22:3f:f0:cd:f3:06:46:0c:5c:b2:cf:dd:1e:62: 51:e1:dc:65:17:fe:ec:5d:9b:61:a5:e7:8e:7b:0a:11:79:db: ba:45:a7:e5:ef:f5:94:f6:8e:c3:3a:db:9a:7b:40:91:db:1f: e0:f6:e4:a1:60:cc:96:46:b0:db:c4:39:5a:b6:ba:ee:ed:ef: f8:92:fc:30:b1:95:52:15:a3:56:7c:a5:57:f9:19:25:27:1a: 78:bc:1f:9c:b6:26:e2:cd:92:79:58:6c:a0:21:8c:09:fb:16: 43:89:2a:5e:6b:f9:2a:52:11:7c:97:3e:70:47:e2:63:46:06: f1:0c:e1:be:33:40:d2:fe:12:47:48:d8:2a:a8:af:a7:f8:de: ad:b7:87:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3mCdRYeC2IvW8WJPFW8ZRTamdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNjA0MjEyMDE1NDZaFw0yNjA0MjUwMjM5NDZaMDMxMTAvBgNV BAMTKDBFQUM5MDRDQ0I0NUVCMzg5M0IzMTM1QzIzMzI5NjczNUVFMkQ0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG2WXIfknc0WNC6oAILUiHRyh wIzCTU8cKP3nxy3Btk0XYglxkm/Z3QcHN9fIL5QQUYC/qcQNceFTFXGEclz9lHW2 0Uo4Zz9BWF+U4b0x16EdgYtancSZY9wiyhllKC19Y9k93lWFfk3VoVFs/3l/w5ki NU0rSnFI0E+Oy9ctHXFHCKjLqNOBEuZwJ5adX5bXEmzsFCYi53XwD7mMQZK682wv CH5hpJ4Niu8eTfSiBWv+LgsKUMqKn9IuJY4Z0rjXZhnEakea4tfJrMlz9A3/lD9Q h9URfm6o9uiHVu1IJqDZlw2m6QSqcXskQ3o9OzjX7g1QxLlqR//Y6lru4xVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqyQTMtF6ziTsxNcIzKWc17i1IcwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOhioAebfordU6LoSSz0TXB0Bk01fOICybM 8sAnsb3UaUb31pa/vY24L8oB6Aj/IzvB2GvQROjJEtsL+sq4+OXxEDlnljfG1dA4 gkPh+Im58bEjdrYiw4oT3jrfe4GJft4whuc57Ovrb6GKUWzMza0iP/DN8wZGDFyy z90eYlHh3GUX/uxdm2Gl5457ChF527pFp+Xv9ZT2jsM625p7QJHbH+D25KFgzJZG sNvEOVq2uu7t7/iS/DCxlVIVo1Z8pVf5GSUnGni8H5y2JuLNknlYbKAhjAn7FkOJ Kl5r+SpSEXyXPnBH4mNGBvEM4b4zQNL+EkdI2Cqor6f43q23h4o= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client