$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: kH6qaJ9vQXYYIKZIKfUb81phgGusETmW30wfmiegnxQ= Subject key identifier: 1A:96:8F:15:34:06:2F:DF:11:78:21:40:22:F4:0B:89:5B:47:3A:75 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 0772A069670B7FDA210B41B1BFB7A34087B0180A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 011F Signing time: Sun 19 Apr 2026 22:11:36 +0000 Manifest this update: Sun 19 Apr 2026 22:06:36 +0000 Manifest next update: Thu 23 Apr 2026 05:47:36 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 2: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: qApf3vLsIFnnLX8+zptXbRIsjfZP8a5puaIVOdyKe3o=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 4: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:72:a0:69:67:0b:7f:da:21:0b:41:b1:bf:b7:a3:40:87:b0:18:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Apr 19 22:06:36 2026 GMT Not After : Apr 23 05:47:36 2026 GMT Subject: CN=1A968F1534062FDF1178214022F40B895B473A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fd:d1:5f:1f:ad:15:8a:02:26:47:69:e4:66: 15:79:b5:57:25:26:66:28:84:dc:52:0c:c4:e3:cc: fc:ed:b6:68:04:e2:11:47:49:1e:8f:e0:fc:21:aa: a2:8f:22:06:0b:9c:17:ac:49:ac:e1:78:41:f1:dc: 7d:b8:02:c0:10:db:33:88:24:64:df:ac:52:57:21: 77:6a:f4:6d:ca:a6:62:06:24:e7:b0:1c:e0:a7:14: f4:f7:1b:22:3e:4b:ae:f1:68:2b:64:a1:18:01:8f: 03:4b:c9:3e:fc:b8:4a:c1:a4:5c:37:17:c8:80:20: b5:53:bf:c8:80:bd:6f:9f:65:fe:b0:5b:e5:94:02: 50:b5:8b:1b:24:d5:79:bf:04:63:00:d6:06:f2:cb: 67:87:1c:96:8d:71:96:9a:57:00:13:23:87:ca:4e: 22:36:6e:08:7b:5e:f6:fb:8a:ae:08:58:76:5e:fd: 34:70:41:42:ca:9f:46:37:00:0e:a1:d1:e7:b2:34: a8:78:70:2a:89:25:de:ef:f7:60:2e:31:19:cc:a2: bf:48:9b:bc:f4:89:dd:16:8c:da:43:16:c5:3d:30: db:97:18:4b:65:f9:a6:21:69:55:61:e0:f9:ee:c6: 8c:46:3b:dd:70:6c:00:7e:c0:36:80:63:5c:e6:80: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:8F:15:34:06:2F:DF:11:78:21:40:22:F4:0B:89:5B:47:3A:75 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9d:31:d1:ec:98:d2:87:f0:37:b2:59:f6:2f:28:dd:64:14: 16:99:8d:59:f6:91:9a:e9:9f:cc:e3:62:cf:3b:88:ac:9c:d1: 2e:d0:fb:cd:32:d2:63:2a:b4:97:97:d5:30:ce:b3:6f:18:b2: 06:5e:1e:c3:98:48:28:a6:35:9c:75:f3:1d:38:ac:82:00:13: 02:05:ff:aa:88:0b:7f:15:b0:8a:b6:05:df:e4:9f:37:90:0f: 71:52:cc:10:b1:1f:c6:c2:6b:ec:fc:31:b1:85:1e:ab:ab:69: 3f:ea:ff:fd:3d:af:1c:7c:5c:3e:bf:bd:b5:5a:5b:07:db:19: cc:b6:a1:77:e1:04:ef:f9:95:dc:dd:6b:fe:74:8b:14:ad:ca: a8:d1:b1:8e:02:41:9e:67:92:60:7c:e4:8b:29:ed:0f:b6:2a: b9:b7:89:96:c8:3b:ac:35:7c:81:d3:37:9d:ff:e2:0c:1f:9d: 7b:bc:ab:a5:30:31:6f:78:e1:03:5b:82:86:14:cf:f6:cb:48: 7d:74:09:17:23:91:cd:fb:95:59:6b:0e:87:fb:58:c8:3d:51: 0b:f9:c8:3d:56:cf:6d:ad:e4:95:ae:6b:4f:0d:65:53:7f:4c: 25:b3:a8:bf:13:04:74:1c:b0:6e:cd:aa:a1:bd:8c:37:94:0f: 5b:b2:d5:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3KgaWcLf9ohC0Gxv7ejQIewGAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNjA0MTkyMjA2MzZaFw0yNjA0MjMwNTQ3MzZaMDMxMTAvBgNV BAMTKDFBOTY4RjE1MzQwNjJGREYxMTc4MjE0MDIyRjQwQjg5NUI0NzNBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7/dFfH60VigImR2nkZhV5tVcl JmYohNxSDMTjzPzttmgE4hFHSR6P4PwhqqKPIgYLnBesSazheEHx3H24AsAQ2zOI JGTfrFJXIXdq9G3KpmIGJOewHOCnFPT3GyI+S67xaCtkoRgBjwNLyT78uErBpFw3 F8iAILVTv8iAvW+fZf6wW+WUAlC1ixsk1Xm/BGMA1gbyy2eHHJaNcZaaVwATI4fK TiI2bgh7Xvb7iq4IWHZe/TRwQULKn0Y3AA6h0eeyNKh4cCqJJd7v92AuMRnMor9I m7z0id0WjNpDFsU9MNuXGEtl+aYhaVVh4PnuxoxGO91wbAB+wDaAY1zmgAphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGpaPFTQGL98ReCFAIvQLiVtHOnUwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWdMdHsmNKH8DeyWfYvKN1kFBaZjVn2kZrp n8zjYs87iKyc0S7Q+80y0mMqtJeX1TDOs28YsgZeHsOYSCimNZx18x04rIIAEwIF /6qIC38VsIq2Bd/knzeQD3FSzBCxH8bCa+z8MbGFHquraT/q//09rxx8XD6/vbVa WwfbGcy2oXfhBO/5ldzda/50ixStyqjRsY4CQZ5nkmB85Isp7Q+2Krm3iZbIO6w1 fIHTN53/4gwfnXu8q6UwMW944QNbgoYUz/bLSH10CRcjkc37lVlrDof7WMg9UQv5 yD1Wz22t5JWua08NZVN/TCWzqL8TBHQcsG7NqqG9jDeUD1uy1eI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:37 2026 by rpki-client