$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: oNZVdgnZFq1MtrriqKyMHXk1kqS017il30+bJF7fqTM= Subject key identifier: 5B:23:CA:5E:71:91:A3:01:CB:A0:AD:15:1B:F5:25:3A:7F:53:38:17 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 19DD38762BF529FF812B00A497FD5ED2A26435D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 013A Signing time: Wed 22 Apr 2026 00:21:21 +0000 Manifest this update: Wed 22 Apr 2026 00:16:21 +0000 Manifest next update: Sat 25 Apr 2026 02:15:21 +0000 Files and hashes: 1: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: q9toowJOz16uhrBCtofU3traOAjII8kFB2udCQItBiM=) 2: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: yq8CPkIz8YJcxziT9z+X9qUuRmte33qr6s3u8tc0w1s=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Uw+aclh2qxCETkaiurOCAIwByyRhtpJmoX60PZbRrk0=) 4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: dzVwDfvwn6dt955PrwcJUO1vUOBgoedqKYbnGtvlqDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:dd:38:76:2b:f5:29:ff:81:2b:00:a4:97:fd:5e:d2:a2:64:35:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Apr 22 00:16:21 2026 GMT Not After : Apr 25 02:15:21 2026 GMT Subject: CN=5B23CA5E7191A301CBA0AD151BF5253A7F533817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:ab:df:9f:c6:5a:96:f0:0b:18:a9:7b:0b: 52:d4:7a:b7:d9:a5:b1:84:d9:de:b3:01:97:61:fc: 00:d6:b1:f5:2c:34:0a:ca:5c:85:1a:68:7e:69:fd: eb:04:0f:48:ac:6c:32:e7:bf:62:1f:a1:5b:64:95: 55:4e:39:42:e6:a9:71:09:b4:8b:56:1e:a8:64:5e: ae:16:ba:46:78:96:e9:bd:a0:72:77:92:d1:3d:b6: 9f:ae:32:dc:b1:c3:4b:c1:0d:62:5d:60:f0:c7:55: a5:fb:92:36:1f:33:35:4d:ae:b9:6e:bc:d6:6d:9a: cf:1a:69:2a:db:59:55:e5:90:7e:e5:0d:99:df:de: 0e:61:10:bb:dc:5a:15:a5:cf:7f:0d:3b:5f:8d:bb: bf:b7:7f:35:02:29:a7:67:65:1f:46:2e:ab:a2:d8: ff:90:e0:6a:d1:84:e0:07:e2:91:ab:e8:3d:d5:c7: 3f:f9:dc:7d:76:62:d8:6e:ac:4c:e8:5c:4b:7e:10: b6:7a:bd:12:f1:2e:f1:b1:52:e5:47:48:9d:23:b3: f3:99:c6:16:2e:86:b6:55:bc:69:11:16:aa:0f:4a: fd:9f:e3:9f:5f:6f:5a:6e:52:69:71:e2:61:85:63: 28:fa:79:ea:10:fa:a8:36:8b:a9:3e:bb:0b:26:aa: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:CA:5E:71:91:A3:01:CB:A0:AD:15:1B:F5:25:3A:7F:53:38:17 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c0:ff:af:34:0c:30:63:1f:58:d9:17:a2:d8:24:4c:a0:6e: ff:09:10:ff:43:bc:ec:c5:20:66:86:68:a7:ac:bf:c2:af:26: 9b:b5:56:2a:be:c5:c1:2e:f9:66:13:df:99:a3:c0:cf:ee:5a: e8:f1:c3:f0:72:87:7d:c0:ae:4f:85:b3:ef:71:56:c0:a7:f9: 85:27:c8:c0:80:af:7e:f4:ec:24:d5:5f:06:ae:9d:38:96:3c: 19:40:23:91:69:bd:96:a6:85:1a:23:e2:72:83:22:b4:ff:13: cc:7f:f0:cc:71:3e:b7:3c:d5:20:1b:2e:18:27:0f:47:39:79: 50:4b:b3:d2:77:de:75:21:7d:4d:d5:8b:32:b9:c6:50:66:f2: 4d:2f:03:dc:80:e7:b9:ab:cb:fe:9e:ba:d0:de:d3:2c:c4:e4: 6c:a3:3a:29:27:7f:e3:35:dd:1c:ee:e4:a1:f1:78:55:c4:1a: b5:ce:c3:0a:e3:38:5f:d2:11:58:01:53:f6:ea:47:72:5d:66: 7b:3f:06:8d:64:80:ac:c9:c2:a6:81:60:bd:d3:cd:f8:e9:26: 7a:a3:ab:59:cd:ca:b7:7c:1e:01:1a:a3:cf:76:4e:61:d5:27: cd:98:17:a9:70:3b:ae:f7:de:e9:d5:bf:3f:d6:ec:7d:75:8e: e9:ac:3f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGd04div1Kf+BKwCkl/1e0qJkNdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNjA0MjIwMDE2MjFaFw0yNjA0MjUwMjE1MjFaMDMxMTAvBgNV BAMTKDVCMjNDQTVFNzE5MUEzMDFDQkEwQUQxNTFCRjUyNTNBN0Y1MzM4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvKvfn8ZalvALGKl7C1LUerfZ pbGE2d6zAZdh/ADWsfUsNArKXIUaaH5p/esED0isbDLnv2IfoVtklVVOOULmqXEJ tItWHqhkXq4WukZ4lum9oHJ3ktE9tp+uMtyxw0vBDWJdYPDHVaX7kjYfMzVNrrlu vNZtms8aaSrbWVXlkH7lDZnf3g5hELvcWhWlz38NO1+Nu7+3fzUCKadnZR9GLqui 2P+Q4GrRhOAH4pGr6D3Vxz/53H12YthurEzoXEt+ELZ6vRLxLvGxUuVHSJ0js/OZ xhYuhrZVvGkRFqoPSv2f459fb1puUmlx4mGFYyj6eeoQ+qg2i6k+uwsmqibzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyPKXnGRowHLoK0VG/UlOn9TOBcwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnA/680DDBjH1jZF6LYJEygbv8JEP9DvOzF IGaGaKesv8KvJpu1Viq+xcEu+WYT35mjwM/uWujxw/Byh33Ark+Fs+9xVsCn+YUn yMCAr3707CTVXwaunTiWPBlAI5FpvZamhRoj4nKDIrT/E8x/8MxxPrc81SAbLhgn D0c5eVBLs9J33nUhfU3VizK5xlBm8k0vA9yA57mry/6eutDe0yzE5GyjOiknf+M1 3Rzu5KHxeFXEGrXOwwrjOF/SEVgBU/bqR3JdZns/Bo1kgKzJwqaBYL3TzfjpJnqj q1nNyrd8HgEao892TmHVJ82YF6lwO6733unVvz/W7H11jumsPz8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client