$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft File: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft (raw, json) Hash identifier: WPsdm0vZo/TNcee3ndLbDG6p7M9KWUqKdlBfuSryJ+8= Subject key identifier: D0:9B:94:B8:9D:E1:EA:E3:3D:0F:F3:12:80:AE:1D:D1:E7:46:0C:81 Authority key identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 Certificate issuer: /CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31 Certificate serial: 0BCB6AFA7B95C6BE76C1FB4166A59AB8D19D1FB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft Manifest number: 1C Signing time: Sun 19 Apr 2026 17:11:48 +0000 Manifest this update: Sun 19 Apr 2026 17:06:48 +0000 Manifest next update: Thu 23 Apr 2026 04:21:48 +0000 Files and hashes: 1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: uQHIImYmptjCUQ/bftz22qTLuZl56mNDlhYd4jLzdhA=) 2: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl (hash: 6g2uI13ZRm4TGCvesbDVCs4CBahFdO2SNJRB6AawtlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 04:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:6a:fa:7b:95:c6:be:76:c1:fb:41:66:a5:9a:b8:d1:9d:1f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31 Validity Not Before: Apr 19 17:06:48 2026 GMT Not After : Apr 23 04:21:48 2026 GMT Subject: CN=D09B94B89DE1EAE33D0FF31280AE1DD1E7460C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:12:0e:07:23:e5:f3:1c:24:93:72:09:c5: f5:74:eb:37:49:09:bd:c5:4d:02:3b:48:4c:54:28: 38:39:01:7b:fc:6f:47:01:11:4c:df:5b:68:84:18: 16:00:3c:38:b8:d8:5b:94:00:e5:9a:ad:5c:ea:a4: d9:02:88:ea:c7:eb:a1:9d:c3:1b:36:c2:f3:8f:a6: 09:8d:5b:00:fe:52:6d:ff:b5:ee:13:82:0f:46:d1: c4:69:0d:f0:ec:56:dd:62:b9:57:3e:7e:60:17:56: 8c:e1:9f:ae:db:ff:19:d2:19:f2:bf:9d:b4:9c:93: df:95:cb:d9:56:ba:e1:20:0c:4e:10:3b:84:59:16: e9:e6:32:1a:f9:ce:4e:05:ea:f0:65:5a:45:75:cb: 9a:31:ec:92:08:a6:57:35:4f:1e:2e:aa:9f:bd:5d: fd:c6:3e:08:8f:da:5a:57:0c:ba:f7:ce:39:06:d0: cd:df:01:ac:f1:92:90:d8:c3:46:b5:4b:92:1b:14: 22:5b:5d:ad:a1:c9:23:cd:97:07:cf:11:6a:5e:c6: 60:fb:81:67:84:bd:81:42:e7:25:6b:e9:17:c8:f8: 25:bc:13:88:bc:84:17:cd:dc:2e:c6:ac:8f:65:90: ca:33:b6:f5:6e:23:0d:5d:54:50:ef:a4:fd:de:4a: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:94:B8:9D:E1:EA:E3:3D:0F:F3:12:80:AE:1D:D1:E7:46:0C:81 X509v3 Authority Key Identifier: keyid:C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8a:32:90:7f:72:d3:47:00:86:b9:0a:4c:42:b4:94:d5:99: c8:0a:3a:8a:76:13:2a:0e:d1:0c:00:28:56:1e:a0:43:e8:c7: 32:0a:70:ef:af:ae:8f:e8:81:ad:55:6c:38:82:b3:81:b8:ea: 4c:31:5a:a9:dc:5c:4c:1c:22:a8:f4:df:46:fc:0c:2a:70:99: 99:00:58:01:78:46:52:3a:15:05:2e:88:97:63:8a:a1:73:02: 58:12:87:a1:d5:e0:9b:e7:38:41:54:8f:36:0a:45:38:db:b4: 28:41:39:98:b0:e4:4e:ee:76:4d:12:9b:17:14:41:a2:2e:f2: 6a:98:10:be:3d:c9:bd:de:b4:b3:9c:4c:5a:13:10:b9:95:76: b2:55:7b:e1:dc:b6:80:52:0e:c1:72:f2:9d:c1:30:a4:53:1e: d6:c5:fa:4b:c4:ef:81:9e:46:04:71:84:75:63:b2:df:46:dd: 61:b7:79:e6:42:d8:e2:75:95:37:1a:37:ba:46:e6:39:61:a9: 46:ba:87:a3:ab:a6:3f:8c:30:cd:8a:e2:e7:1e:2a:a1:38:e1: 84:00:b3:e8:47:95:81:b4:5c:0a:bd:3e:60:8d:70:53:a8:54: a1:10:1a:bb:8e:ac:e9:54:ac:9a:d5:90:47:fe:57:9c:fc:f4: 23:92:46:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8tq+nuVxr52wftBZqWauNGdH7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0QjE5 RjhFRUUzMTAeFw0yNjA0MTkxNzA2NDhaFw0yNjA0MjMwNDIxNDhaMDMxMTAvBgNV BAMTKEQwOUI5NEI4OURFMUVBRTMzRDBGRjMxMjgwQUUxREQxRTc0NjBDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWBIOByPl8xwkk3IJxfV06zdJ Cb3FTQI7SExUKDg5AXv8b0cBEUzfW2iEGBYAPDi42FuUAOWarVzqpNkCiOrH66Gd wxs2wvOPpgmNWwD+Um3/te4Tgg9G0cRpDfDsVt1iuVc+fmAXVozhn67b/xnSGfK/ nbSck9+Vy9lWuuEgDE4QO4RZFunmMhr5zk4F6vBlWkV1y5ox7JIIplc1Tx4uqp+9 Xf3GPgiP2lpXDLr3zjkG0M3fAazxkpDYw0a1S5IbFCJbXa2hySPNlwfPEWpexmD7 gWeEvYFC5yVr6RfI+CW8E4i8hBfN3C7GrI9lkMoztvVuIw1dVFDvpP3eSoJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JuUuJ3h6uM9D/MSgK4d0edGDIEwHwYDVR0j BBgwFoAUyc4/gAezeRcn+qO08gDksZ+O7jEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMS9DOUNFM0Y4MDA3 QjM3OTE3MjdGQUEzQjRGMjAwRTRCMTlGOEVFRTMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0QjE5RjhF RUUzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzEvQzlDRTNGODAwN0IzNzkxNzI3RkFBM0I0RjIwMEU0 QjE5RjhFRUUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqKMpB/ctNHAIa5CkxCtJTVmcgKOop2EyoO 0QwAKFYeoEPoxzIKcO+vro/oga1VbDiCs4G46kwxWqncXEwcIqj030b8DCpwmZkA WAF4RlI6FQUuiJdjiqFzAlgSh6HV4JvnOEFUjzYKRTjbtChBOZiw5E7udk0SmxcU QaIu8mqYEL49yb3etLOcTFoTELmVdrJVe+HctoBSDsFy8p3BMKRTHtbF+kvE74Ge RgRxhHVjst9G3WG3eeZC2OJ1lTcaN7pG5jlhqUa6h6Orpj+MMM2K4uceKqE44YQA s+hHlYG0XAq9PmCNcFOoVKEQGruOrOlUrJrVkEf+V5z89COSRjk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:38 2026 by rpki-client