$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: W3BI8uOIOpsyJs7h1xN8FSEDBPOo2fkhrDBUmHPXOn4= Subject key identifier: 97:DA:AB:B0:9F:1E:01:BB:FE:55:7E:69:FD:16:4E:5A:F6:FD:10:54 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 303603DE6973A5180913DBA4882BB5A7136D6E9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: 0127 Signing time: Tue 21 Apr 2026 22:57:00 +0000 Manifest this update: Tue 21 Apr 2026 22:52:00 +0000 Manifest next update: Sat 25 Apr 2026 08:49:00 +0000 Files and hashes: 1: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) 2: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: FgQjdqOwBrtT4gA5/v1L13HBoV0+lRBPZ5WGKGFdl5Y=) 3: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 4: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 5: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: Rtts8Rfc9o4ZfA3kki+Q7TY9U2pv+h6J/2goZMuzTnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:36:03:de:69:73:a5:18:09:13:db:a4:88:2b:b5:a7:13:6d:6e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Apr 21 22:52:00 2026 GMT Not After : Apr 25 08:49:00 2026 GMT Subject: CN=97DAABB09F1E01BBFE557E69FD164E5AF6FD1054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:f5:62:7a:5a:f4:2d:9f:95:be:9d:b9:28: 31:7b:5e:95:1f:10:29:c5:2a:02:17:31:fe:6a:2f: 2f:bc:7a:d3:fe:d1:f6:8f:c5:81:ee:15:11:f9:c9: c0:5d:28:73:00:a6:8f:8f:e9:2f:3c:f9:74:ae:1c: 36:6b:b5:b7:fd:29:5d:da:96:7a:8f:c9:c8:7d:42: 4a:1d:2e:48:53:82:7f:31:04:2c:64:63:e8:64:14: d4:44:2c:f6:23:23:98:11:1f:16:57:fd:62:08:76: c2:df:3c:6b:f6:d1:67:ef:02:df:81:6f:f0:0e:7d: 71:95:2a:f8:d4:29:d9:69:74:06:ca:2b:a5:aa:4a: df:8c:bf:f5:e2:91:f0:ba:13:37:ab:9b:b5:26:07: 47:3d:88:87:23:fb:1f:5a:26:81:c4:ca:40:fa:bc: 5c:ff:84:d7:57:90:aa:33:1d:df:28:6f:a1:6a:c5: ce:2d:15:d5:f1:84:b2:aa:1e:af:4c:d2:54:1c:55: 04:61:19:c4:1b:7f:30:c0:05:0f:78:ef:8e:2a:8e: 9b:2d:33:00:45:3b:f8:70:cb:be:04:fe:60:d1:bd: 64:cc:41:f0:94:f0:dd:86:13:5a:5b:7c:27:93:9a: 0a:9b:fd:fa:d7:50:2b:53:79:be:a1:19:80:9d:06: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:AB:B0:9F:1E:01:BB:FE:55:7E:69:FD:16:4E:5A:F6:FD:10:54 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:90:0d:14:1e:40:2b:98:02:c8:4a:13:73:42:ab:1d:eb:c2: 09:16:18:20:1b:77:0e:79:ef:73:e1:da:f5:8d:35:6b:23:32: 0a:0a:de:6d:52:f1:70:ae:b2:d5:c6:1d:54:bb:90:8f:92:2d: 19:cb:06:54:44:8f:b0:a4:31:47:6c:ec:4b:8b:b6:a9:5f:60: 78:c8:b6:08:54:df:3f:da:37:78:98:f0:22:5b:ce:4b:6f:7c: 5d:19:48:85:21:d9:08:36:eb:96:09:f6:d5:02:f0:b5:e4:e8: e7:f1:9b:01:49:53:b4:71:81:b1:98:aa:d3:58:eb:c0:aa:fe: 34:43:0e:96:32:43:26:96:fe:7b:32:43:b2:fd:c1:b3:18:bb: 0c:5f:6d:3a:b3:d1:df:df:e6:c7:6a:21:40:6a:72:49:47:18: 8f:14:f2:e7:d6:0f:3c:5c:53:34:9c:95:f6:f7:e9:c5:a7:21: f0:dd:86:9f:dc:90:7f:fc:89:60:56:89:b8:d9:44:33:c4:fe: 4e:f0:b6:b4:c1:7e:91:15:70:74:a1:22:46:79:a2:3a:8e:ac: d7:dc:e5:97:ac:f2:48:40:87:fe:8b:fa:05:eb:33:fe:8b:b6: a0:eb:ce:6c:a2:be:4e:40:e0:72:a2:91:4a:7f:e7:99:41:8a: 00:ae:3b:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDYD3mlzpRgJE9ukiCu1pxNtbpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNjA0MjEyMjUyMDBaFw0yNjA0MjUwODQ5MDBaMDMxMTAvBgNV BAMTKDk3REFBQkIwOUYxRTAxQkJGRTU1N0U2OUZEMTY0RTVBRjZGRDEwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxePVielr0LZ+Vvp25KDF7XpUf ECnFKgIXMf5qLy+8etP+0faPxYHuFRH5ycBdKHMApo+P6S88+XSuHDZrtbf9KV3a lnqPych9QkodLkhTgn8xBCxkY+hkFNRELPYjI5gRHxZX/WIIdsLfPGv20WfvAt+B b/AOfXGVKvjUKdlpdAbKK6WqSt+Mv/XikfC6Ezerm7UmB0c9iIcj+x9aJoHEykD6 vFz/hNdXkKozHd8ob6Fqxc4tFdXxhLKqHq9M0lQcVQRhGcQbfzDABQ94744qjpst MwBFO/hwy74E/mDRvWTMQfCU8N2GE1pbfCeTmgqb/frXUCtTeb6hGYCdBqwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9qrsJ8eAbv+VX5p/RZOWvb9EFQwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGQDRQeQCuYAshKE3NCqx3rwgkWGCAbdw55 73Ph2vWNNWsjMgoK3m1S8XCustXGHVS7kI+SLRnLBlREj7CkMUds7EuLtqlfYHjI tghU3z/aN3iY8CJbzktvfF0ZSIUh2Qg265YJ9tUC8LXk6OfxmwFJU7RxgbGYqtNY 68Cq/jRDDpYyQyaW/nsyQ7L9wbMYuwxfbTqz0d/f5sdqIUBqcklHGI8U8ufWDzxc UzSclfb36cWnIfDdhp/ckH/8iWBWibjZRDPE/k7wtrTBfpEVcHShIkZ5ojqOrNfc 5Zes8khAh/6L+gXrM/6LtqDrzmyivk5A4HKikUp/55lBigCuO3A= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client