$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: scV1K0XjBNdn6cCuQgrkbnfac8fAV1g7mZYFloGcZXg= Subject key identifier: 3F:4C:7D:09:34:98:AE:70:50:C6:BD:AA:8E:75:47:37:D4:52:88:15 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 6E7BCFFF1BE0397D4E0BEB14446E82A4EB616FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 029F Signing time: Fri 17 Apr 2026 11:32:02 +0000 Manifest this update: Fri 17 Apr 2026 11:27:02 +0000 Manifest next update: Mon 20 Apr 2026 20:42:02 +0000 Files and hashes: 1: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: v2XBIxaOwf8pszUzhOcoBNpZ/t9O3QbZnyKbYoJ+l7k=) 2: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: 6+aOTOrAxzWsWipZ2VbdRwlhEyJYsC/PS67oMR2JaEk=) 3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: FU4m4uM0eOvuHrbeEWpDEWdnGc1mYzPxVGKE41GscXY=) 4: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: hUygR1F36BFXE6jZfKUn6z9xWtDxXwKMMrnfrGbDbrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7b:cf:ff:1b:e0:39:7d:4e:0b:eb:14:44:6e:82:a4:eb:61:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Apr 17 11:27:02 2026 GMT Not After : Apr 20 20:42:02 2026 GMT Subject: CN=3F4C7D093498AE7050C6BDAA8E754737D4528815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:e0:fd:26:fb:95:18:ed:08:29:ea:6b:e3: f9:56:2c:aa:b9:36:a9:3f:d6:68:ce:ab:7f:d3:10: 5c:4c:93:e4:5d:b9:39:5f:e3:c0:20:b8:1b:4f:10: dc:40:cb:18:85:9c:be:06:0b:ef:8e:20:90:c5:76: ca:b0:34:3f:d7:11:6c:45:da:9a:39:15:89:ee:77: 29:42:f4:b8:e2:0a:91:1b:e3:09:e4:00:c6:c7:9c: e7:14:e2:f4:63:bd:85:30:dc:ef:cf:0a:14:69:60: 5f:b1:9f:78:93:62:7f:46:67:94:10:65:72:9d:f7: df:7f:c7:1d:c6:49:7c:7b:5c:c2:20:ad:d6:14:b1: ff:8d:c2:9a:66:5b:bf:74:ae:08:7a:74:18:16:6e: 99:9c:67:3f:e1:99:f3:cf:bf:51:3f:23:64:2c:ba: 5f:18:61:74:45:09:ec:84:29:b9:9c:a0:26:c0:cc: 81:28:0c:87:38:5e:7a:89:85:96:52:bc:99:5c:8c: 7a:b6:ac:07:f0:6f:05:cd:14:3f:89:58:5d:fd:a3: 47:ea:32:12:9a:f8:25:cc:88:08:29:4f:30:4b:dc: 9c:9c:a4:4b:60:53:1d:e6:78:94:67:39:39:be:8f: c4:22:ec:7a:67:a5:03:09:ad:c1:e0:d6:0a:26:55: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:7D:09:34:98:AE:70:50:C6:BD:AA:8E:75:47:37:D4:52:88:15 X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b6:2f:f4:cd:61:0e:a8:ec:29:61:1f:ef:f1:58:95:06:13: 0f:70:13:89:5f:b2:d3:0e:0b:8e:81:0e:9a:b4:86:a0:f3:98: 6a:97:42:c5:db:98:9f:e9:9d:18:dc:9e:70:8c:7b:7c:9a:6e: 2a:6e:72:d9:84:72:84:05:21:99:1a:49:d1:5d:86:6b:b7:91: 68:e0:7e:1f:23:c2:84:5c:b9:8a:44:ac:e4:a4:b9:23:99:66: d7:a7:ee:40:7f:d5:02:b2:41:e2:0d:ff:24:a1:13:d1:73:1f: fe:72:ea:de:ca:c2:7f:8f:6a:75:5b:fc:d2:7e:4b:c2:3d:df: 42:09:ce:1d:49:67:13:b0:3c:f9:af:6f:da:9c:78:fe:12:af: c9:bf:f5:d2:93:ec:bc:00:bd:e5:b2:15:b1:37:0c:93:e4:94: 44:9b:fa:d6:48:04:2b:da:89:bd:8b:eb:00:eb:41:5c:cd:96: a7:10:ef:81:da:b4:9b:fa:6f:b1:10:3d:f6:27:f0:80:92:d3: c7:61:2d:a1:86:98:c5:3f:fa:51:eb:c0:67:31:f3:6d:4e:02: 5c:7b:91:51:ce:e2:5b:6e:e6:e9:e3:ae:24:b0:b6:2d:d3:4d: 87:24:aa:e2:80:d0:73:ff:2f:5e:a2:bf:69:4d:66:a1:06:29: e7:5c:15:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnvP/xvgOX1OC+sURG6CpOthb+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNjA0MTcxMTI3MDJaFw0yNjA0MjAyMDQyMDJaMDMxMTAvBgNV BAMTKDNGNEM3RDA5MzQ5OEFFNzA1MEM2QkRBQThFNzU0NzM3RDQ1Mjg4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJT+D9JvuVGO0IKepr4/lWLKq5 Nqk/1mjOq3/TEFxMk+RduTlf48AguBtPENxAyxiFnL4GC++OIJDFdsqwND/XEWxF 2po5FYnudylC9LjiCpEb4wnkAMbHnOcU4vRjvYUw3O/PChRpYF+xn3iTYn9GZ5QQ ZXKd999/xx3GSXx7XMIgrdYUsf+NwppmW790rgh6dBgWbpmcZz/hmfPPv1E/I2Qs ul8YYXRFCeyEKbmcoCbAzIEoDIc4XnqJhZZSvJlcjHq2rAfwbwXNFD+JWF39o0fq MhKa+CXMiAgpTzBL3JycpEtgUx3meJRnOTm+j8Qi7HpnpQMJrcHg1gomVV0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0x9CTSYrnBQxr2qjnVHN9RSiBUwHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+2L/TNYQ6o7ClhH+/xWJUGEw9wE4lfstMO C46BDpq0hqDzmGqXQsXbmJ/pnRjcnnCMe3yabipuctmEcoQFIZkaSdFdhmu3kWjg fh8jwoRcuYpErOSkuSOZZten7kB/1QKyQeIN/yShE9FzH/5y6t7Kwn+PanVb/NJ+ S8I930IJzh1JZxOwPPmvb9qceP4Sr8m/9dKT7LwAveWyFbE3DJPklESb+tZIBCva ib2L6wDrQVzNlqcQ74HatJv6b7EQPfYn8ICS08dhLaGGmMU/+lHrwGcx821OAlx7 kVHO4ltu5unjriSwti3TTYckquKA0HP/L16iv2lNZqEGKedcFQo= -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:33 2026 by rpki-client