$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: CqRCz64q63LvzWzF33eOk+4GtcY8xEYid4oaR11bIjg= Subject key identifier: CF:FC:95:D3:C7:D2:C9:49:24:8B:B2:71:2B:97:6F:6E:6F:8F:D8:FD Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 348FA06098B3FDF23B29F0B4D05020A487114A92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 0128 Signing time: Tue 21 Apr 2026 01:01:32 +0000 Manifest this update: Tue 21 Apr 2026 00:56:32 +0000 Manifest next update: Fri 24 Apr 2026 04:37:32 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: lGRjN2ma9Loya2QlkXB8GhgfmW8EVZ+laCGHi/GaXmY=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8f:a0:60:98:b3:fd:f2:3b:29:f0:b4:d0:50:20:a4:87:11:4a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Apr 21 00:56:32 2026 GMT Not After : Apr 24 04:37:32 2026 GMT Subject: CN=CFFC95D3C7D2C949248BB2712B976F6E6F8FD8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:43:bc:ac:f7:20:28:99:a8:ec:23:af:4f: 46:4b:bd:1a:c9:69:e9:da:2b:d7:ad:0a:96:80:5c: ff:16:5d:dd:95:6e:4d:d7:7c:0b:10:20:d2:5b:12: 5c:e0:9b:a4:56:1b:77:bf:6a:d7:7e:ef:1b:7e:fb: 58:23:00:a0:1d:02:27:30:50:25:cb:18:55:52:58: a1:42:41:0c:28:a6:9b:ab:09:59:d8:27:51:64:38: aa:00:bc:30:7d:50:12:7c:83:6a:8b:ea:d5:7f:6f: fa:25:83:07:90:89:33:cf:4c:5e:4c:db:b4:9a:59: 15:a1:62:fc:ae:bc:f2:78:22:90:ef:0c:44:b0:5f: 3d:68:92:2d:70:f3:e6:22:2a:29:fe:b5:00:51:c9: a4:5d:9c:41:2c:3f:13:c5:67:55:35:5c:a7:3c:c4: a6:49:b1:d2:c1:dd:21:d9:fe:ce:0e:19:73:2f:06: 77:9d:0b:23:c5:e9:66:e9:37:e4:b3:01:95:0d:83: 79:e2:03:79:25:a5:e7:e3:2a:89:98:90:c7:e2:e0: 93:77:e3:aa:bd:ee:81:68:fd:fc:0b:27:16:9c:0d: b0:fa:f4:3b:f9:31:7b:21:77:de:1a:33:59:77:2a: 78:c6:ad:5c:2d:6c:68:23:71:ac:f7:ee:7b:50:44: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:95:D3:C7:D2:C9:49:24:8B:B2:71:2B:97:6F:6E:6F:8F:D8:FD X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:70:24:60:ce:3b:7f:5d:15:5e:24:15:d4:16:d3:44:6f: 34:22:fd:28:6f:9a:9c:0e:4e:74:08:9f:e5:1d:6a:85:1e:ff: 17:41:64:b6:c4:fa:fe:8f:80:a4:e1:f7:d8:90:5d:b0:1c:09: ea:f7:cd:4a:86:2a:69:9c:98:3a:3c:a2:00:39:a1:ba:4b:0c: e1:69:97:73:ec:8e:b1:44:a1:3b:02:39:1a:20:1d:ab:2f:ba: 5e:1e:ec:55:4b:0f:48:27:70:bd:91:e9:b3:67:d3:f8:89:11: 50:7f:39:87:8f:d5:ca:37:a6:41:58:08:a2:f4:a5:0e:29:c0: 2a:15:82:36:c9:17:e1:6a:84:e4:ff:e3:a1:e5:a0:c8:16:c6: 1e:25:6b:9e:95:4c:23:ae:40:e1:27:7e:e4:9c:26:1e:9e:b9: ca:b0:60:00:49:22:16:90:9f:ae:ff:d5:4c:fc:20:4e:06:8f: 52:ae:6b:8e:a0:00:6c:d5:57:a9:4e:dc:7d:23:d1:33:06:66: f6:f3:10:b5:0e:92:40:15:3b:45:dd:04:d1:a3:c3:97:48:be: 4d:da:ca:02:82:9b:0b:9a:64:3a:13:25:91:7b:94:81:08:1c: b7:d2:bb:b5:19:14:c7:88:6d:0e:fa:6e:ec:27:d4:9d:f2:fc: f8:4a:58:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNI+gYJiz/fI7KfC00FAgpIcRSpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNjA0MjEwMDU2MzJaFw0yNjA0MjQwNDM3MzJaMDMxMTAvBgNV BAMTKENGRkM5NUQzQzdEMkM5NDkyNDhCQjI3MTJCOTc2RjZFNkY4RkQ4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGUO8rPcgKJmo7COvT0ZLvRrJ aenaK9etCpaAXP8WXd2Vbk3XfAsQINJbElzgm6RWG3e/atd+7xt++1gjAKAdAicw UCXLGFVSWKFCQQwoppurCVnYJ1FkOKoAvDB9UBJ8g2qL6tV/b/olgweQiTPPTF5M 27SaWRWhYvyuvPJ4IpDvDESwXz1oki1w8+YiKin+tQBRyaRdnEEsPxPFZ1U1XKc8 xKZJsdLB3SHZ/s4OGXMvBnedCyPF6WbpN+SzAZUNg3niA3klpefjKomYkMfi4JN3 46q97oFo/fwLJxacDbD69Dv5MXshd94aM1l3KnjGrVwtbGgjcaz37ntQRKwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/yV08fSyUkki7JxK5dvbm+P2P0wHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGRcCRgzjt/XRVeJBXUFtNEbzQi/ShvmpwO TnQIn+UdaoUe/xdBZLbE+v6PgKTh99iQXbAcCer3zUqGKmmcmDo8ogA5obpLDOFp l3PsjrFEoTsCORogHasvul4e7FVLD0gncL2R6bNn0/iJEVB/OYeP1co3pkFYCKL0 pQ4pwCoVgjbJF+FqhOT/46HloMgWxh4la56VTCOuQOEnfuScJh6eucqwYABJIhaQ n67/1Uz8IE4Gj1Kua46gAGzVV6lO3H0j0TMGZvbzELUOkkAVO0XdBNGjw5dIvk3a ygKCmwuaZDoTJZF7lIEIHLfSu7UZFMeIbQ76buwn1J3y/PhKWO0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:04 2026 by rpki-client