$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: 0sP6m+L5Or/FksuwvUWFf6GqR+FYsiNMDyygdQGHdtQ= Subject key identifier: A1:4F:38:CF:8E:15:C8:BC:D9:8F:3C:86:C1:1F:F7:35:EF:45:93:22 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 17EDE7DFF0727EA29923AFE10F5500B864770717 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 01A1 Signing time: Tue 21 Apr 2026 15:01:27 +0000 Manifest this update: Tue 21 Apr 2026 14:56:27 +0000 Manifest next update: Fri 24 Apr 2026 15:32:27 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: UN6CTZZ6nRhH7YgpJ8auftMyCFzZqn2OCPeOydS2aTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 15:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ed:e7:df:f0:72:7e:a2:99:23:af:e1:0f:55:00:b8:64:77:07:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Apr 21 14:56:27 2026 GMT Not After : Apr 24 15:32:27 2026 GMT Subject: CN=A14F38CF8E15C8BCD98F3C86C11FF735EF459322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:3c:dc:74:67:9d:d6:93:c5:6b:4e:9b:83: 04:89:c0:e9:cd:ac:e8:6b:6f:bf:65:44:4d:5d:cd: 69:9b:b3:be:a4:08:2b:25:2e:48:e7:18:99:fa:9d: 0f:2e:61:85:fa:7e:f3:22:30:6d:5e:9f:9e:d6:f3: e5:09:bb:ad:78:5d:d6:6f:ce:ac:48:07:c9:6f:f3: bd:89:82:bb:c2:c5:8d:cc:7a:61:c4:81:7a:f6:d5: ae:89:6d:68:93:2c:32:61:c0:19:af:3a:c2:f3:ba: c7:89:94:35:bf:95:6d:33:4a:23:80:0b:cf:cd:42: d0:91:b9:cb:8e:3d:4a:6f:70:34:8b:59:b0:fa:d4: d4:00:0e:6c:b3:16:68:b5:9d:4f:b7:8a:79:49:14: 13:e0:8b:89:9d:0c:8b:58:f5:2e:97:06:f5:18:c4: 94:ec:15:b8:2a:94:28:c3:e1:5b:82:ba:7e:cd:4e: e3:7f:af:b7:fa:7a:9e:7c:2b:1f:ec:90:4c:53:09: 13:06:20:a5:60:74:b9:26:94:21:14:f3:8c:91:89: ee:89:60:bf:51:8e:e2:8d:59:83:cf:0e:73:79:97: 75:d1:e9:1b:20:7b:93:ae:3b:83:db:78:21:07:32: 8d:3e:a3:44:f5:c9:d9:2b:c4:8c:7f:e2:7f:3c:05: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4F:38:CF:8E:15:C8:BC:D9:8F:3C:86:C1:1F:F7:35:EF:45:93:22 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ee:75:71:f7:58:d5:ac:da:03:1e:44:10:2c:74:33:a0:11: 32:1b:e2:f8:93:f1:86:ed:02:33:69:7a:94:84:a7:d2:f4:fd: df:33:9d:db:ff:3e:a6:db:73:43:fb:fc:76:a8:e1:07:04:f7: 80:01:fc:91:e9:e3:a3:f7:d4:cd:26:d2:f4:8d:c3:4a:81:11: 22:9e:d2:51:68:b9:39:49:48:95:9c:6f:41:ff:5f:a0:e3:9b: 53:5a:96:72:2b:ed:81:d1:83:08:c8:93:7d:be:52:31:07:28: 75:ad:08:af:a8:09:b5:27:4d:b8:cb:c7:81:46:4a:dc:2e:d9: 5b:b4:78:a4:53:0a:0c:27:c7:d4:66:a9:23:51:ff:ea:8f:1b: 6f:a3:88:e1:78:55:d3:e5:07:ee:35:c6:6a:4c:11:a6:0a:ec: f8:69:31:31:f3:d7:52:87:32:f4:85:93:c7:08:60:d7:40:85: 81:26:8f:92:49:8d:14:b1:e2:da:2c:b5:a8:9f:38:0e:31:d2: b7:66:94:a1:e5:03:4a:2e:96:ef:a9:89:59:c1:6a:7a:36:6b: c0:d0:a7:17:44:67:11:e2:81:0c:c4:ad:c2:57:77:63:03:61: 76:65:11:f5:82:28:f3:b5:c6:9c:8b:e4:60:68:43:db:70:ab: 01:91:39:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+3n3/ByfqKZI6/hD1UAuGR3BxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNjA0MjExNDU2MjdaFw0yNjA0MjQxNTMyMjdaMDMxMTAvBgNV BAMTKEExNEYzOENGOEUxNUM4QkNEOThGM0M4NkMxMUZGNzM1RUY0NTkzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfDzcdGed1pPFa06bgwSJwOnN rOhrb79lRE1dzWmbs76kCCslLkjnGJn6nQ8uYYX6fvMiMG1en57W8+UJu614XdZv zqxIB8lv872JgrvCxY3MemHEgXr21a6JbWiTLDJhwBmvOsLzuseJlDW/lW0zSiOA C8/NQtCRucuOPUpvcDSLWbD61NQADmyzFmi1nU+3inlJFBPgi4mdDItY9S6XBvUY xJTsFbgqlCjD4VuCun7NTuN/r7f6ep58Kx/skExTCRMGIKVgdLkmlCEU84yRie6J YL9RjuKNWYPPDnN5l3XR6Rsge5OuO4PbeCEHMo0+o0T1ydkrxIx/4n88BZ9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoU84z44VyLzZjzyGwR/3Ne9FkyIwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3udXH3WNWs2gMeRBAsdDOgETIb4viT8Ybt AjNpepSEp9L0/d8zndv/Pqbbc0P7/Hao4QcE94AB/JHp46P31M0m0vSNw0qBESKe 0lFouTlJSJWcb0H/X6Djm1NalnIr7YHRgwjIk32+UjEHKHWtCK+oCbUnTbjLx4FG Stwu2Vu0eKRTCgwnx9RmqSNR/+qPG2+jiOF4VdPlB+41xmpMEaYK7PhpMTHz11KH MvSFk8cIYNdAhYEmj5JJjRSx4tostaifOA4x0rdmlKHlA0oulu+piVnBano2a8DQ pxdEZxHigQzErcJXd2MDYXZlEfWCKPO1xpyL5GBoQ9twqwGROcM= -----END CERTIFICATE-----Generated at Wed Apr 22 10:01:09 2026 by rpki-client