$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: G6f436SvY8uRlZdLWQiNw54AEI+Ocgyl/bx9q2AQ1A4= Subject key identifier: 13:74:A0:43:2F:EE:B5:BC:EF:08:8A:89:0A:C1:87:14:6D:8B:04:F3 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 5D0C2BF09E09C94D4D1B26A18AEA39997FA4D83E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 029F Signing time: Sat 18 Apr 2026 12:12:38 +0000 Manifest this update: Sat 18 Apr 2026 12:07:38 +0000 Manifest next update: Tue 21 Apr 2026 15:56:38 +0000 Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: Tr9Xm455VVFwcMWVKgFVkQjW4pXUazCaoGIyqlMivog=) 2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: HROg//+qLl5Z/Tv6g3MOBXXUryHRHyp7mS6b5M8SUYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0c:2b:f0:9e:09:c9:4d:4d:1b:26:a1:8a:ea:39:99:7f:a4:d8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Apr 18 12:07:38 2026 GMT Not After : Apr 21 15:56:38 2026 GMT Subject: CN=1374A0432FEEB5BCEF088A890AC187146D8B04F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:63:02:b9:e7:a3:ae:12:08:e4:10:f4:9b: ca:2b:00:f7:16:e8:24:1c:17:68:42:d4:33:1e:d1: 64:87:76:7d:c7:98:fa:9c:94:4b:40:f7:bd:05:bd: 8e:06:51:2e:b3:44:f2:c3:8a:6a:04:cd:68:9b:4e: 3c:5f:20:f3:dd:0d:d9:a6:28:a2:72:8a:11:0d:cc: 87:67:15:41:c5:65:16:29:1c:85:37:f3:ee:1c:80: 7a:fa:07:40:58:95:ba:8c:f4:72:a8:92:c2:52:a8: 2d:7e:23:f4:51:10:86:a8:94:48:22:20:9c:ea:51: 66:b1:a3:07:ac:69:a2:fe:77:6b:d9:96:6b:3e:8a: da:6e:b0:2d:29:cb:35:49:38:52:2f:e5:56:c1:8d: 5f:7f:71:9f:4a:df:f3:c8:13:3e:65:f8:82:08:bb: c2:dd:46:1a:5f:59:e5:c7:f7:66:cb:4b:a3:69:7d: 31:c8:27:03:28:c6:b5:9c:2e:13:10:da:24:9d:f6: 73:69:25:31:79:4f:90:6a:cd:37:29:c1:a1:bd:3d: a8:0a:bc:05:ce:07:6a:81:c6:1e:f3:a3:f2:7b:44: 61:12:6a:0c:aa:30:93:5d:69:2e:4a:48:4e:d2:17: c7:91:46:81:92:bd:c6:d2:b4:3f:00:fc:fa:0b:89: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:74:A0:43:2F:EE:B5:BC:EF:08:8A:89:0A:C1:87:14:6D:8B:04:F3 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0b:2e:8e:81:3a:59:1f:66:51:ab:a4:21:ec:be:59:c4:51: f5:61:72:bb:87:09:ad:fc:39:18:a0:47:bf:3d:de:7d:c0:50: ab:da:4d:e9:cf:3a:31:7c:de:1f:98:73:55:78:06:70:b1:5f: 23:11:d1:3b:93:c2:46:f3:c9:07:1b:1a:f3:2d:e7:b3:d4:81: eb:cb:a9:13:89:77:a6:59:a2:da:eb:94:0d:85:54:07:50:38: 90:87:70:62:7f:cb:4c:f3:7f:fe:75:b4:b5:6c:4a:4a:ce:e2: 84:e5:59:24:8e:79:1f:e0:e7:97:8a:6f:b2:65:1c:29:fe:ae: b2:25:27:43:e7:1d:1a:e0:7b:e4:9c:d5:63:17:8e:3a:39:95: 85:6c:a1:15:25:78:4c:e0:8b:9b:58:c1:44:bf:32:81:ae:6b: fa:f5:9b:c2:e7:e5:87:4f:fb:7a:61:f1:b9:6b:ca:7b:e6:1d: ee:40:da:d8:5b:18:f7:c3:c9:0d:70:21:77:5c:c5:38:36:2b: 6f:98:9b:d5:5e:b8:a9:d6:cb:22:2d:ad:6c:c8:82:e5:82:e4: f8:f4:26:ea:f2:fd:8e:99:b3:a0:dd:00:59:52:d2:a9:5c:3b: 82:21:5e:61:20:a3:64:4a:8b:53:ea:d7:af:24:1f:c2:39:0c: cc:87:3a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQwr8J4JyU1NGyahiuo5mX+k2D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNjA0MTgxMjA3MzhaFw0yNjA0MjExNTU2MzhaMDMxMTAvBgNV BAMTKDEzNzRBMDQzMkZFRUI1QkNFRjA4OEE4OTBBQzE4NzE0NkQ4QjA0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE12MCueejrhII5BD0m8orAPcW 6CQcF2hC1DMe0WSHdn3HmPqclEtA970FvY4GUS6zRPLDimoEzWibTjxfIPPdDdmm KKJyihENzIdnFUHFZRYpHIU38+4cgHr6B0BYlbqM9HKoksJSqC1+I/RREIaolEgi IJzqUWaxowesaaL+d2vZlms+itpusC0pyzVJOFIv5VbBjV9/cZ9K3/PIEz5l+III u8LdRhpfWeXH92bLS6NpfTHIJwMoxrWcLhMQ2iSd9nNpJTF5T5BqzTcpwaG9PagK vAXOB2qBxh7zo/J7RGESagyqMJNdaS5KSE7SF8eRRoGSvcbStD8A/PoLiWDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3SgQy/utbzvCIqJCsGHFG2LBPMwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYLLo6BOlkfZlGrpCHsvlnEUfVhcruHCa38 ORigR7893n3AUKvaTenPOjF83h+Yc1V4BnCxXyMR0TuTwkbzyQcbGvMt57PUgevL qROJd6ZZotrrlA2FVAdQOJCHcGJ/y0zzf/51tLVsSkrO4oTlWSSOeR/g55eKb7Jl HCn+rrIlJ0PnHRrge+Sc1WMXjjo5lYVsoRUleEzgi5tYwUS/MoGua/r1m8Ln5YdP +3ph8blrynvmHe5A2thbGPfDyQ1wIXdcxTg2K2+Ym9VeuKnWyyItrWzIguWC5Pj0 Jury/Y6Zs6DdAFlS0qlcO4IhXmEgo2RKi1Pq168kH8I5DMyHOls= -----END CERTIFICATE-----Generated at Sun Apr 19 11:19:44 2026 by rpki-client