$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: mrxh6RDDlgfN6HF6UkThNsYoPGDNs/ShJbgtayV5dXw= Subject key identifier: 77:2E:E0:C7:48:E2:01:EB:8E:7F:6D:0E:7D:6A:30:43:27:1E:77:AB Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 694D8155E321FB980C01324EC9AC08A5FBD2FD10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 0137 Signing time: Wed 15 Apr 2026 23:22:06 +0000 Manifest this update: Wed 15 Apr 2026 23:17:06 +0000 Manifest next update: Sat 18 Apr 2026 23:24:06 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: jbj75jtqpoCeilJlAd6O4JvJa2SoB/ujHiaTrX4MImE=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: lIUEbJC9CctoXZT3wQ14d0emV/Z5kJ9geBHJjSnZgGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4d:81:55:e3:21:fb:98:0c:01:32:4e:c9:ac:08:a5:fb:d2:fd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Apr 15 23:17:06 2026 GMT Not After : Apr 18 23:24:06 2026 GMT Subject: CN=772EE0C748E201EB8E7F6D0E7D6A3043271E77AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:ef:26:b5:ff:ba:41:c2:48:91:71:de:f4: f2:7a:bc:df:82:35:0e:35:eb:a1:9a:8f:c3:ca:d6: 9b:11:a8:62:27:9f:c5:f2:fd:ee:85:83:5f:1e:96: 94:89:5a:c0:e4:11:da:a6:64:bb:6a:a1:93:7a:34: 4a:ae:95:90:72:51:71:28:77:6a:95:94:43:33:40: df:67:7e:3f:ac:eb:7d:4f:13:f9:f9:63:3d:4f:1e: ae:2e:23:d0:48:77:25:53:8d:5a:09:61:71:a8:82: e2:84:9e:43:4f:27:7c:d2:d8:d5:d6:a5:0a:4a:ee: 12:ac:75:5d:62:82:8a:df:41:36:86:b1:9c:46:99: 4f:97:74:5d:6e:6b:42:0e:b2:8c:5b:d7:f5:05:dd: a6:d8:14:f9:f6:2f:14:c8:f0:60:12:76:75:4f:7e: fb:79:d2:75:bd:5c:05:36:f4:15:0b:44:c2:c8:06: 9c:7c:0f:1d:12:ac:8f:38:1b:9c:62:78:b3:e2:51: 16:a8:fb:aa:0a:f8:b0:b8:32:3e:46:5a:d0:4f:bf: 1c:29:85:9c:68:f0:6c:2c:8b:db:66:19:ef:40:59: 5e:06:4c:d6:e5:93:6f:c7:fd:6e:a1:5f:7a:98:e4: f8:c9:1f:73:88:7e:35:05:f2:80:51:95:5a:ed:0a: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2E:E0:C7:48:E2:01:EB:8E:7F:6D:0E:7D:6A:30:43:27:1E:77:AB X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:cc:24:9b:71:44:72:5e:dd:63:af:3e:dd:c4:e7:54:42: ee:84:9a:00:70:d8:0f:28:ee:61:6d:b6:65:a2:ed:da:dc:4e: 9e:45:85:c7:73:8f:95:34:ed:4f:e1:fe:8f:9d:ea:34:c5:2b: 7b:41:2d:3d:e7:d7:3f:e5:bc:0e:84:8d:ca:50:6c:50:0b:ab: a7:10:b4:7a:85:34:cf:0c:af:b5:ac:2a:e6:cf:25:38:be:f4: 2d:e9:fe:2d:5b:5a:90:02:b7:f5:92:5f:07:43:f2:9e:95:3d: b9:85:cd:6b:a7:12:42:79:66:16:23:b4:a8:54:ae:67:00:cf: 8c:70:4c:1d:08:41:de:60:db:c9:d8:b0:c9:2d:0c:07:67:2f: 8c:6d:ab:5e:5f:2b:05:31:65:cf:d0:00:bf:da:9b:c2:d6:56: 29:3f:bc:89:b8:04:26:72:45:3e:6d:c4:47:3d:18:3c:ad:53: 70:52:f4:4f:ed:07:ce:92:b5:2b:0c:61:b9:eb:26:50:aa:9d: 6d:11:cf:be:d0:81:f9:ff:42:b0:f3:93:7f:0b:e0:cd:8a:c5: 89:e1:fe:7b:83:63:e6:0f:9a:7a:a5:ac:f0:bf:a1:d6:65:63: 49:b7:65:7a:87:e3:c6:0a:d9:cf:74:40:15:a2:b8:90:ec:09: 8a:2a:9a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaU2BVeMh+5gMATJOyawIpfvS/RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjA0MTUyMzE3MDZaFw0yNjA0MTgyMzI0MDZaMDMxMTAvBgNV BAMTKDc3MkVFMEM3NDhFMjAxRUI4RTdGNkQwRTdENkEzMDQzMjcxRTc3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJu8mtf+6QcJIkXHe9PJ6vN+C NQ4166Gaj8PK1psRqGInn8Xy/e6Fg18elpSJWsDkEdqmZLtqoZN6NEqulZByUXEo d2qVlEMzQN9nfj+s631PE/n5Yz1PHq4uI9BIdyVTjVoJYXGoguKEnkNPJ3zS2NXW pQpK7hKsdV1igorfQTaGsZxGmU+XdF1ua0IOsoxb1/UF3abYFPn2LxTI8GASdnVP fvt50nW9XAU29BULRMLIBpx8Dx0SrI84G5xieLPiURao+6oK+LC4Mj5GWtBPvxwp hZxo8Gwsi9tmGe9AWV4GTNblk2/H/W6hX3qY5PjJH3OIfjUF8oBRlVrtCq49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdy7gx0jiAeuOf20OfWowQyced6swHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEemzCSbcURyXt1jrz7dxOdUQu6EmgBw2A8o 7mFttmWi7drcTp5Fhcdzj5U07U/h/o+d6jTFK3tBLT3n1z/lvA6EjcpQbFALq6cQ tHqFNM8Mr7WsKubPJTi+9C3p/i1bWpACt/WSXwdD8p6VPbmFzWunEkJ5ZhYjtKhU rmcAz4xwTB0IQd5g28nYsMktDAdnL4xtq15fKwUxZc/QAL/am8LWVik/vIm4BCZy RT5txEc9GDytU3BS9E/tB86StSsMYbnrJlCqnW0Rz77Qgfn/QrDzk38L4M2KxYnh /nuDY+YPmnqlrPC/odZlY0m3ZXqH48YK2c90QBWiuJDsCYoqmnE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:28:23 2026 by rpki-client