$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: kTSoVucxsHFqopMiBMdL/90KPx8W0dbCK6vKFW+k14w= Subject key identifier: FD:E5:F4:17:09:4C:BF:4D:CF:EB:EB:D9:5E:1D:F9:D3:7F:52:B0:B2 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 235F64A4F46ED480A309B40BF3F40246B9DED421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: EB Signing time: Mon 20 Apr 2026 22:50:54 +0000 Manifest this update: Mon 20 Apr 2026 22:45:54 +0000 Manifest next update: Thu 23 Apr 2026 23:54:54 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: ed3Q5vWj6tsw45xa4f/alJuwO4y1QiVWX5ASiTJnSjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5f:64:a4:f4:6e:d4:80:a3:09:b4:0b:f3:f4:02:46:b9:de:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Apr 20 22:45:54 2026 GMT Not After : Apr 23 23:54:54 2026 GMT Subject: CN=FDE5F417094CBF4DCFEBEBD95E1DF9D37F52B0B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:d1:95:45:a5:30:70:8c:d6:bc:e5:bf:00: 5b:99:39:99:1c:ed:3c:45:14:2d:8b:d9:f3:b4:ae: 13:72:42:aa:47:3e:5d:d5:3e:3d:3b:ba:33:dc:91: b0:ad:2f:aa:8c:3c:79:d9:9f:b7:44:93:76:b4:fc: d3:28:b7:7e:cc:6a:2e:5c:07:45:84:35:d0:47:e4: d6:9d:f2:97:e8:d3:3f:b8:0c:d4:81:d2:4d:74:0e: b7:09:7a:56:25:ba:7a:64:3a:58:21:bf:41:d5:74: fc:04:2b:70:23:7b:35:d2:01:19:85:b8:9c:d1:f8: 1b:17:b9:0d:dc:f2:52:19:7e:3f:96:6a:6f:19:ac: 53:a5:29:e8:3d:4e:4f:de:b5:c9:d3:0f:af:ee:e4: 07:85:76:6d:a4:1c:24:0e:36:36:c4:8b:92:f1:0b: 57:b0:e3:e5:de:80:99:fa:f8:fa:64:88:5e:5c:0c: 32:1b:ea:15:e3:29:1f:90:e3:77:3a:28:bb:6a:7b: 6f:60:01:de:55:d4:a6:47:f9:cf:6a:d0:0d:4a:b6: 24:e6:35:1a:73:df:71:36:ea:00:09:7a:37:ac:2c: d5:d9:08:4f:7d:69:72:4f:30:bb:2a:c7:26:ae:f2: cc:2b:75:2a:dc:cc:f4:5e:06:50:23:0f:ee:be:5b: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E5:F4:17:09:4C:BF:4D:CF:EB:EB:D9:5E:1D:F9:D3:7F:52:B0:B2 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:79:ba:77:44:48:ab:f4:14:51:fc:d2:29:c2:ff:d4:d9:95: 98:4c:79:cc:a3:05:87:8b:91:ee:04:b8:15:a5:a5:ed:55:43: 94:a1:3e:c4:8d:a9:d4:7d:ad:ac:a7:8b:a9:57:03:68:fd:7f: d3:00:fa:0e:9a:56:ef:cd:6d:87:58:d5:f7:82:61:39:17:ef: fa:fd:a0:98:7a:0e:f9:05:f7:d8:32:ba:0d:91:5b:83:db:78: 29:23:c8:e2:6b:c7:d3:23:2f:95:fa:a5:5f:42:7b:38:11:ab: e5:1b:1d:b8:e9:37:40:5b:46:99:fe:1a:27:d5:97:8a:26:e4: 41:a5:5f:aa:57:55:b8:54:af:5b:83:2d:50:c2:cc:f4:66:e1: 4d:9f:6a:0b:fd:db:59:7f:7e:f7:1f:15:54:9d:c0:d0:7c:4d: b7:e3:f2:d1:c5:ac:ba:01:b4:99:96:6c:63:d5:18:e8:3a:0d: 27:c9:cd:0b:e2:2e:00:2f:8e:93:65:97:f3:0f:5e:e2:f8:31: 9e:6f:1f:1b:7a:c7:64:f3:66:4c:91:a7:10:5c:61:58:d7:10: e5:22:90:b5:cf:fc:f5:bf:0e:1f:2d:fb:7e:37:70:4c:7e:bc: 8b:63:75:c7:fe:34:b1:93:b0:4f:86:46:bb:a2:13:98:96:1d: de:93:96:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI19kpPRu1ICjCbQL8/QCRrne1CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjA0MjAyMjQ1NTRaFw0yNjA0MjMyMzU0NTRaMDMxMTAvBgNV BAMTKEZERTVGNDE3MDk0Q0JGNERDRkVCRUJEOTVFMURGOUQzN0Y1MkIwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCee9GVRaUwcIzWvOW/AFuZOZkc 7TxFFC2L2fO0rhNyQqpHPl3VPj07ujPckbCtL6qMPHnZn7dEk3a0/NMot37Mai5c B0WENdBH5Nad8pfo0z+4DNSB0k10DrcJelYlunpkOlghv0HVdPwEK3AjezXSARmF uJzR+BsXuQ3c8lIZfj+Wam8ZrFOlKeg9Tk/etcnTD6/u5AeFdm2kHCQONjbEi5Lx C1ew4+XegJn6+PpkiF5cDDIb6hXjKR+Q43c6KLtqe29gAd5V1KZH+c9q0A1KtiTm NRpz33E26gAJejesLNXZCE99aXJPMLsqxyau8swrdSrczPReBlAjD+6+W5RXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eX0FwlMv03P6+vZXh35039SsLIwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV5undESKv0FFH80inC/9TZlZhMecyjBYeL ke4EuBWlpe1VQ5ShPsSNqdR9rayni6lXA2j9f9MA+g6aVu/NbYdY1feCYTkX7/r9 oJh6DvkF99gyug2RW4PbeCkjyOJrx9MjL5X6pV9CezgRq+UbHbjpN0BbRpn+GifV l4om5EGlX6pXVbhUr1uDLVDCzPRm4U2fagv921l/fvcfFVSdwNB8Tbfj8tHFrLoB tJmWbGPVGOg6DSfJzQviLgAvjpNll/MPXuL4MZ5vHxt6x2TzZkyRpxBcYVjXEOUi kLXP/PW/Dh8t+343cEx+vItjdcf+NLGTsE+GRruiE5iWHd6Tlr0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client