$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: z+JMvUq7UMNGCsj+r7C4eYb71/8vC19kaoFE0pqhKH8= Subject key identifier: 13:82:1A:BD:AC:B8:18:92:D7:9D:F6:F3:44:F8:D8:3B:0A:19:9C:E4 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 7E0E139A4FA1ACE081CD40FC2E2A317DDBA35366 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: E1 Signing time: Tue 21 Apr 2026 11:11:44 +0000 Manifest this update: Tue 21 Apr 2026 11:06:44 +0000 Manifest next update: Fri 24 Apr 2026 14:28:44 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: caebI57w/u6sl2rG1sskHkeyEQ8oCN7QMdZ7GqXJWQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0e:13:9a:4f:a1:ac:e0:81:cd:40:fc:2e:2a:31:7d:db:a3:53:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Apr 21 11:06:44 2026 GMT Not After : Apr 24 14:28:44 2026 GMT Subject: CN=13821ABDACB81892D79DF6F344F8D83B0A199CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:05:60:7f:2b:b7:6a:9f:46:c9:5a:13:7e: 4e:e2:6d:70:bd:f5:c7:7a:20:56:e5:21:3d:05:14: 45:79:71:e4:be:8d:95:ad:e8:8c:b8:4c:cd:63:0c: 02:91:b3:e7:80:42:8a:2a:81:d6:51:6c:c9:a9:18: 9b:d0:e2:38:18:ac:bd:95:bf:79:b3:e7:b7:70:50: f2:0a:0a:0a:6c:04:d8:77:15:3f:b0:a4:7c:95:e4: 1b:42:dc:ae:01:02:8d:ab:73:8a:f1:2f:77:cf:19: 19:36:c6:3d:8f:c7:ae:05:5b:f6:de:3d:09:2b:85: 1f:97:c2:6d:b4:97:70:90:07:b3:2f:ab:f6:93:76: 66:d7:01:ea:85:e9:9b:e8:22:77:a0:00:50:b5:e2: 55:4d:34:10:9d:b7:3c:d7:23:4e:65:7d:bb:64:9f: 03:21:54:de:8b:9b:4c:6a:af:6c:f7:c7:1a:26:9a: 7a:5c:12:b4:4a:cf:93:3c:ec:66:79:a1:ca:05:e3: 0e:9f:ed:78:95:79:4a:1e:b6:f6:e2:07:3e:16:da: 60:34:39:29:da:f3:3d:6c:41:ea:cb:23:ca:2b:50: 61:f0:2f:53:93:b3:4a:3d:ab:4e:b2:9b:c9:b8:e5: 30:34:78:16:b2:a6:7b:2c:ff:c4:ec:11:95:17:7e: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:82:1A:BD:AC:B8:18:92:D7:9D:F6:F3:44:F8:D8:3B:0A:19:9C:E4 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:b4:1a:8b:ed:2b:a7:8e:8b:53:c7:a1:77:34:4b:27:52:f2: 08:68:48:c8:6b:79:a9:b9:bc:29:99:45:95:ec:53:18:83:19: e4:4a:5b:0e:a9:55:01:99:30:62:52:43:28:3a:95:a5:ed:a6: 98:22:f2:ec:14:9f:db:ee:f9:6e:99:c8:53:9a:06:3e:76:6d: 44:88:b8:1e:1a:49:65:ce:db:68:29:9f:18:cf:df:4c:c1:f2: 3a:73:e0:fd:cc:7c:a7:1a:66:3f:e2:6e:65:12:d2:f0:27:6f: c2:88:67:07:7a:34:19:92:25:d4:bb:13:97:c0:46:f5:6f:f5: b1:83:52:fe:99:5a:d9:15:8a:18:7c:86:ef:79:50:eb:4b:2d: 3f:9e:f1:57:28:98:65:d5:fc:6e:b4:b9:ae:30:07:67:ff:42: e7:9d:3b:29:d9:9d:aa:be:f8:b0:e6:e0:a1:c6:98:89:00:d4: cb:93:be:21:72:a4:3a:45:71:9c:70:7f:58:be:c1:62:27:36: 7e:ec:e8:3a:f4:fe:8b:c0:c7:16:98:0b:74:c1:ab:89:aa:90: f0:bf:29:31:9e:7e:1d:1f:eb:f2:13:95:e4:c2:b5:51:c3:f4: ee:68:6c:0d:f5:37:fd:68:2e:db:88:37:c7:0c:85:a5:47:68: 30:be:e0:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfg4Tmk+hrOCBzUD8LioxfdujU2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNjA0MjExMTA2NDRaFw0yNjA0MjQxNDI4NDRaMDMxMTAvBgNV BAMTKDEzODIxQUJEQUNCODE4OTJENzlERjZGMzQ0RjhEODNCMEExOTlDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFwVgfyu3ap9GyVoTfk7ibXC9 9cd6IFblIT0FFEV5ceS+jZWt6Iy4TM1jDAKRs+eAQooqgdZRbMmpGJvQ4jgYrL2V v3mz57dwUPIKCgpsBNh3FT+wpHyV5BtC3K4BAo2rc4rxL3fPGRk2xj2Px64FW/be PQkrhR+Xwm20l3CQB7Mvq/aTdmbXAeqF6ZvoInegAFC14lVNNBCdtzzXI05lfbtk nwMhVN6Lm0xqr2z3xxommnpcErRKz5M87GZ5ocoF4w6f7XiVeUoetvbiBz4W2mA0 OSna8z1sQerLI8orUGHwL1OTs0o9q06ym8m45TA0eBaypnss/8TsEZUXfmw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE4Iavay4GJLXnfbzRPjYOwoZnOQwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOK0GovtK6eOi1PHoXc0SydS8ghoSMhream5 vCmZRZXsUxiDGeRKWw6pVQGZMGJSQyg6laXtppgi8uwUn9vu+W6ZyFOaBj52bUSI uB4aSWXO22gpnxjP30zB8jpz4P3MfKcaZj/ibmUS0vAnb8KIZwd6NBmSJdS7E5fA RvVv9bGDUv6ZWtkVihh8hu95UOtLLT+e8VcomGXV/G60ua4wB2f/QuedOynZnaq+ +LDm4KHGmIkA1MuTviFypDpFcZxwf1i+wWInNn7s6Dr0/ovAxxaYC3TBq4mqkPC/ KTGefh0f6/ITleTCtVHD9O5obA31N/1oLtuIN8cMhaVHaDC+4Hw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:38 2026 by rpki-client