$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: 3DFbEs+d6Y38FZfX0IHHV24EKnIXdcwKGL173odaWJM= Subject key identifier: 0E:ED:6D:76:22:86:99:9C:31:D3:E6:CD:76:AD:1D:05:7A:86:1B:3A Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 74C8C41C0919F942100DD6ACDAE3D78E87075287 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 0440 Signing time: Fri 17 Apr 2026 20:22:18 +0000 Manifest this update: Fri 17 Apr 2026 20:17:18 +0000 Manifest next update: Tue 21 Apr 2026 02:15:18 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: Ufb1HWHlEmMZgFGv+QAbJkmN5G5Dim3Tcd8Zddg4vyw=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: YYshjWJChQ7GjjLm5x5OoEwBOuUfUWvc0tdshb8NzOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c8:c4:1c:09:19:f9:42:10:0d:d6:ac:da:e3:d7:8e:87:07:52:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Apr 17 20:17:18 2026 GMT Not After : Apr 21 02:15:18 2026 GMT Subject: CN=0EED6D762286999C31D3E6CD76AD1D057A861B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:7b:6b:84:65:64:89:60:68:b3:2a:b8:a5: 82:35:01:88:c1:26:37:b4:8e:65:9d:9d:e5:a4:32: 05:e5:85:99:77:12:ba:fb:fd:d8:7f:65:88:a5:12: b7:77:0a:3e:b4:64:ff:0b:a3:cf:53:ce:42:f9:56: 64:8f:47:7f:b6:f7:df:28:09:d5:c0:e1:6e:eb:d0: 30:27:87:16:50:2a:2c:96:a0:99:c7:22:f5:04:d0: 2c:5b:d2:59:6c:3c:ff:fa:48:58:f9:13:a9:ad:1d: 1f:4c:a5:9b:8a:db:55:0e:9d:db:4b:11:3a:12:0f: 90:5c:39:02:71:83:b4:e9:2e:43:75:3d:2e:be:74: 01:e1:7a:9a:0a:f8:27:94:83:66:5a:4a:86:0d:e0: 24:8c:e2:e9:ac:ff:a0:55:fd:da:21:54:fd:0f:d5: ed:0e:fd:13:1c:6e:e8:ef:34:c1:c9:af:f1:ab:6a: 69:a2:92:0e:da:31:58:fe:b6:1e:f9:16:64:d5:22: 28:06:5f:cf:94:62:4b:64:86:74:e0:a7:58:8d:e6: 7c:d2:5d:8e:9b:a3:6f:f7:af:41:06:aa:27:6a:1c: aa:01:b9:ba:d8:53:07:fc:04:25:8c:ca:cf:ff:a0: c3:6e:5c:8a:ca:9a:f3:e8:a2:e2:70:08:d1:8b:30: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:6D:76:22:86:99:9C:31:D3:E6:CD:76:AD:1D:05:7A:86:1B:3A X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ce:ba:cb:ac:0e:88:d0:13:70:f1:ae:f0:9d:16:41:d9:c8: ec:15:72:19:62:0b:e1:fa:3a:28:d2:b2:96:6b:4c:fd:2a:57: 0f:83:ed:36:f8:d4:78:b1:43:c8:08:45:57:83:4d:54:95:4a: 55:ce:4e:44:ac:fe:e5:35:e6:de:91:5a:b9:35:bc:55:ab:e0: 49:ec:00:e2:e4:41:b3:bb:be:c3:09:ef:68:19:cc:c5:e7:e6: f9:38:98:2d:51:ee:f2:d2:1f:48:c5:3c:b2:d1:90:02:b8:ad: 70:93:a7:3b:42:1d:a4:7a:54:50:6b:5b:85:b9:42:e5:77:18: 5f:9f:d6:b0:3a:be:b7:d8:fa:19:2c:cd:af:3b:76:aa:67:78: 08:58:d7:c5:7c:8e:f0:8e:5d:bc:04:b1:de:57:cc:5b:ed:03: bc:4a:e4:f7:52:b2:84:ae:9f:4a:79:42:9e:10:12:6a:95:d6: 67:4c:cb:bd:f5:b3:ff:99:30:08:71:95:6a:95:00:b3:d8:16: 3c:cc:6e:ed:87:28:58:27:a7:7a:69:20:c4:71:4d:26:82:09: 0e:f9:7b:9a:09:67:36:93:69:77:6d:c3:4c:55:8e:de:e2:d7: 59:b5:7f:57:6f:47:71:b9:ef:ed:11:bb:8b:ca:92:ba:75:b3: 3e:dd:d8:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMjEHAkZ+UIQDdas2uPXjocHUocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNjA0MTcyMDE3MThaFw0yNjA0MjEwMjE1MThaMDMxMTAvBgNV BAMTKDBFRUQ2RDc2MjI4Njk5OUMzMUQzRTZDRDc2QUQxRDA1N0E4NjFCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOe3trhGVkiWBosyq4pYI1AYjB Jje0jmWdneWkMgXlhZl3Err7/dh/ZYilErd3Cj60ZP8Lo89TzkL5VmSPR3+2998o CdXA4W7r0DAnhxZQKiyWoJnHIvUE0Cxb0llsPP/6SFj5E6mtHR9MpZuK21UOndtL EToSD5BcOQJxg7TpLkN1PS6+dAHhepoK+CeUg2ZaSoYN4CSM4ums/6BV/dohVP0P 1e0O/RMcbujvNMHJr/Grammikg7aMVj+th75FmTVIigGX8+UYktkhnTgp1iN5nzS XY6bo2/3r0EGqidqHKoBubrYUwf8BCWMys//oMNuXIrKmvPoouJwCNGLMA5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDu1tdiKGmZwx0+bNdq0dBXqGGzowHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDOususDojQE3DxrvCdFkHZyOwVchliC+H6 OijSspZrTP0qVw+D7Tb41HixQ8gIRVeDTVSVSlXOTkSs/uU15t6RWrk1vFWr4Ens AOLkQbO7vsMJ72gZzMXn5vk4mC1R7vLSH0jFPLLRkAK4rXCTpztCHaR6VFBrW4W5 QuV3GF+f1rA6vrfY+hksza87dqpneAhY18V8jvCOXbwEsd5XzFvtA7xK5PdSsoSu n0p5Qp4QEmqV1mdMy731s/+ZMAhxlWqVALPYFjzMbu2HKFgnp3ppIMRxTSaCCQ75 e5oJZzaTaXdtw0xVjt7i11m1f1dvR3G57+0Ru4vKkrp1sz7d2Ig= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:13 2026 by rpki-client