$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: D+oCLP57j9hJnkBXs7DrPcQn08FKeTE0tI+gpDWQepQ= Subject key identifier: 3A:2F:17:48:F3:0F:93:1C:09:09:14:7A:22:63:2E:D6:3C:EF:46:C6 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 1C705303EA09B04EAAD2C63D33DB8AB309481575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: 013C Signing time: Mon 20 Apr 2026 14:31:25 +0000 Manifest this update: Mon 20 Apr 2026 14:26:25 +0000 Manifest next update: Thu 23 Apr 2026 20:48:25 +0000 Files and hashes: 1: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: prJ+lcZxToCqaQoRwIjdOz6CMOa7GT0LwhX4kgy71+o=) 2: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: AE1XhBx7e3VWZVTwKTd7Am2QNgqcrN5/LWEu0klX8Q0=) 3: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: 6eYAOMbQkRytvhAJ1qtbrGdJUNbgmnwuzPeqMlV7dek=) 4: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: dtHpP/m8KLbGnRe3ljBhKMMLzWqW+st7m3ZDgM49VKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:70:53:03:ea:09:b0:4e:aa:d2:c6:3d:33:db:8a:b3:09:48:15:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Apr 20 14:26:25 2026 GMT Not After : Apr 23 20:48:25 2026 GMT Subject: CN=3A2F1748F30F931C0909147A22632ED63CEF46C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:14:5a:1b:17:f2:2e:8a:06:90:a2:01:48: 89:ce:29:02:5d:6d:ca:69:ac:ba:aa:f5:64:e1:28: 6f:c0:7d:f1:e8:21:58:4d:f7:49:12:73:80:aa:85: c4:a3:c4:c9:f4:b9:0f:38:18:1f:c0:d1:ed:5e:4e: e3:c5:49:cf:53:67:37:41:6f:1e:6e:32:db:62:32: 6e:23:f2:dd:a3:3c:5a:e9:7a:70:64:4a:fe:31:fe: c5:93:3c:a4:a2:9b:49:fb:a7:3b:45:0e:dd:6c:9f: 73:26:03:f5:6f:e4:de:6c:10:d2:b6:68:42:eb:a2: 51:ff:8d:59:8f:b2:96:7f:c8:a7:93:58:1b:0d:57: 35:1a:e4:4e:24:12:0b:e0:78:3a:e6:26:65:06:cf: d0:25:87:6a:fd:16:ec:7c:8d:56:4e:b5:46:d1:67: 24:d8:25:2e:74:cb:3f:d6:78:b2:79:d5:c5:f3:a1: 66:72:67:f5:41:c0:1b:a4:ec:7d:9a:52:89:7b:fc: f5:69:e1:ed:1b:7f:57:ea:ac:61:3a:38:5c:25:54: aa:16:5e:6e:13:51:47:0d:78:0c:85:03:f1:66:fc: 79:99:23:91:85:7a:fc:b2:07:b6:98:7b:7c:01:09: 3f:42:5a:d8:a2:da:36:99:77:df:fc:19:81:cb:4c: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:17:48:F3:0F:93:1C:09:09:14:7A:22:63:2E:D6:3C:EF:46:C6 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:71:b1:5c:a4:51:c9:0a:9b:8d:14:e8:1d:5e:a3:fb:ba: 18:52:a1:1a:74:a7:ba:27:cf:29:03:55:ee:85:82:d1:de:0c: 96:ec:3e:ba:3a:d5:28:dc:c8:5c:01:b4:d5:a9:7b:26:ca:25: 60:0d:14:87:33:d3:c8:50:f4:69:48:71:2d:5f:dc:63:c6:79: 7f:bd:6e:79:54:28:da:52:e2:e8:4f:0a:0c:05:0d:86:60:a0: ff:cb:2e:06:46:04:e0:d8:23:34:be:7e:d7:6e:eb:a9:c7:5d: f8:2e:24:f5:d3:88:d2:f6:95:e3:c6:14:ba:e7:bb:49:b9:f8: 0b:e0:ab:c8:e3:3e:f2:e0:dc:03:ab:65:7d:bf:44:c8:44:76: 8e:28:de:6a:cc:5d:d5:19:92:8d:2b:df:32:ec:67:05:8e:16: 0e:22:b2:b6:23:26:0a:ba:b0:d1:ca:c3:e3:05:a4:3a:68:df: ef:55:e7:a0:b8:a7:03:11:fa:c7:2a:b2:7e:eb:ef:66:f9:6f: 70:6b:a1:7a:cb:14:cf:d2:d1:53:eb:db:ef:44:c6:02:8d:ec: 1b:64:8a:54:30:03:e1:84:d6:8a:fb:b1:37:3d:a5:1c:bb:3c: 70:f0:34:90:48:67:26:4f:7c:8b:25:ee:36:df:e9:9b:e7:4f: fd:85:72:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHBTA+oJsE6q0sY9M9uKswlIFXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNjA0MjAxNDI2MjVaFw0yNjA0MjMyMDQ4MjVaMDMxMTAvBgNV BAMTKDNBMkYxNzQ4RjMwRjkzMUMwOTA5MTQ3QTIyNjMyRUQ2M0NFRjQ2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRBRaGxfyLooGkKIBSInOKQJd bcpprLqq9WThKG/AffHoIVhN90kSc4CqhcSjxMn0uQ84GB/A0e1eTuPFSc9TZzdB bx5uMttiMm4j8t2jPFrpenBkSv4x/sWTPKSim0n7pztFDt1sn3MmA/Vv5N5sENK2 aELrolH/jVmPspZ/yKeTWBsNVzUa5E4kEgvgeDrmJmUGz9Alh2r9Fux8jVZOtUbR ZyTYJS50yz/WeLJ51cXzoWZyZ/VBwBuk7H2aUol7/PVp4e0bf1fqrGE6OFwlVKoW Xm4TUUcNeAyFA/Fm/HmZI5GFevyyB7aYe3wBCT9CWtii2jaZd9/8GYHLTNonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOi8XSPMPkxwJCRR6ImMu1jzvRsYwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNlcbFcpFHJCpuNFOgdXqP7uhhSoRp0p7on zykDVe6FgtHeDJbsPro61SjcyFwBtNWpeybKJWANFIcz08hQ9GlIcS1f3GPGeX+9 bnlUKNpS4uhPCgwFDYZgoP/LLgZGBODYIzS+ftdu66nHXfguJPXTiNL2lePGFLrn u0m5+Avgq8jjPvLg3AOrZX2/RMhEdo4o3mrMXdUZko0r3zLsZwWOFg4isrYjJgq6 sNHKw+MFpDpo3+9V56C4pwMR+scqsn7r72b5b3BroXrLFM/S0VPr2+9ExgKN7Btk ilQwA+GE1or7sTc9pRy7PHDwNJBIZyZPfIsl7jbf6ZvnT/2Fco4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:45 2026 by rpki-client