$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: MRddVqRGdEw+Pph41D5ICBUfbuq9G0SUcEa8Ll/WVqY= Subject key identifier: D7:08:28:F8:DE:3E:6B:51:A3:28:38:DC:CD:31:64:F9:DF:59:D0:B7 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 3820FB5E28788709245735F1DD95716BEC4D281C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 03D4 Signing time: Thu 16 Apr 2026 11:20:01 +0000 Manifest this update: Thu 16 Apr 2026 11:15:01 +0000 Manifest next update: Sun 19 Apr 2026 16:46:01 +0000 Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: VC593Cs/cLK37Y65raPKe4El4PGI0Yr3mzjDSbZO0QM=) 2: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: NxcYlLW+ZkGtzpqXd2yoeS5VdB40v+IZaaf0YTRRXYQ=) 3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: C2QFcfs/YhAogD6WV5sZt+GhgdgTDt0K+flb9n7TxLw=) 4: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: P+t5NJW8W/ibmzETEVF31Sskl5vuoHri3J8jgRaJPc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:20:fb:5e:28:78:87:09:24:57:35:f1:dd:95:71:6b:ec:4d:28:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Apr 16 11:15:01 2026 GMT Not After : Apr 19 16:46:01 2026 GMT Subject: CN=D70828F8DE3E6B51A32838DCCD3164F9DF59D0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:de:ed:8e:0e:58:8b:e2:44:06:a2:61:3b: 25:01:e7:2d:0a:58:20:4b:cc:62:18:b6:2c:71:6d: 89:ed:93:58:4a:cb:b2:4e:56:76:a1:c4:5e:7f:90: 8a:d1:6b:b0:74:5f:26:c4:2d:16:21:7d:56:e4:2a: 3b:65:16:74:37:2d:f2:87:0e:37:e4:10:29:a4:be: 45:bf:fa:d9:97:b9:13:89:30:f0:48:a5:08:e7:e8: 3d:d1:78:53:0f:12:a2:77:b3:29:e6:5d:4c:65:3e: 40:db:65:b7:28:a2:6a:bb:69:b6:95:30:f7:25:2d: b8:a1:01:6f:94:ae:6e:ca:b2:88:2d:fe:62:5a:f1: 67:42:dc:15:1a:e8:56:39:e0:99:f3:b7:23:ff:89: 26:61:b7:d1:23:6b:2c:79:ba:49:96:cb:d9:83:92: e9:aa:51:26:e4:2c:77:c1:43:b2:c1:2a:32:80:df: e1:71:c1:f5:6c:99:6e:3b:9c:8a:bd:f6:88:c5:47: 0a:81:52:b4:86:6d:77:4f:32:20:9f:cc:3f:08:51: e3:95:b9:ec:52:f8:ff:1f:4d:37:0b:b8:f5:24:10: f3:91:6f:6f:f9:18:93:f0:72:da:1a:72:c3:0e:6d: 38:5d:cc:fd:67:9e:a6:0f:15:4e:5c:b8:af:5f:d8: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:08:28:F8:DE:3E:6B:51:A3:28:38:DC:CD:31:64:F9:DF:59:D0:B7 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b2:30:b4:48:33:c0:0f:ab:a1:07:9e:b1:b5:0e:79:17:3a: 48:2b:3d:e3:6d:b6:2e:c2:ce:82:fb:53:a8:83:51:95:9e:5b: 56:14:1e:47:bf:c3:47:8b:d9:ff:a6:d0:dd:76:2b:01:c1:fa: af:ab:3d:6d:5c:57:0d:29:22:15:d0:05:58:15:ca:3f:95:7b: 55:92:95:0f:70:2e:48:da:46:5d:6b:01:25:b3:45:aa:37:26: 3e:56:7f:54:9b:ac:c3:aa:98:7f:d6:c7:0e:ad:cc:ab:d9:c4: 05:4c:57:36:99:37:bf:70:4d:cd:b2:0f:76:dc:0c:24:0a:8f: 54:70:91:60:7a:16:22:4c:8b:63:89:d3:c6:1e:d2:61:db:d2: 64:22:06:59:62:d5:ae:34:a1:53:2c:71:e3:7e:15:23:4f:46: 7e:1a:08:d3:94:bc:bb:cf:f6:9f:d8:44:81:de:ee:1b:19:bc: 6f:fd:92:86:e4:5f:bb:76:b8:a3:03:2d:d5:f8:db:21:f8:71: 9f:a6:81:f4:74:2e:cd:ab:24:af:e5:f8:ed:69:8c:21:e7:cc: 4f:ee:05:ba:94:90:16:30:b2:5c:a1:e5:da:48:15:d0:0c:54: d9:49:9a:61:ce:da:64:c5:12:b3:50:6f:8d:e6:c9:77:07:f0: 75:c6:e3:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCD7Xih4hwkkVzXx3ZVxa+xNKBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNjA0MTYxMTE1MDFaFw0yNjA0MTkxNjQ2MDFaMDMxMTAvBgNV BAMTKEQ3MDgyOEY4REUzRTZCNTFBMzI4MzhEQ0NEMzE2NEY5REY1OUQwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIt7tjg5Yi+JEBqJhOyUB5y0K WCBLzGIYtixxbYntk1hKy7JOVnahxF5/kIrRa7B0XybELRYhfVbkKjtlFnQ3LfKH DjfkECmkvkW/+tmXuROJMPBIpQjn6D3ReFMPEqJ3synmXUxlPkDbZbcoomq7abaV MPclLbihAW+Urm7Ksogt/mJa8WdC3BUa6FY54JnztyP/iSZht9Ejayx5ukmWy9mD kumqUSbkLHfBQ7LBKjKA3+FxwfVsmW47nIq99ojFRwqBUrSGbXdPMiCfzD8IUeOV uexS+P8fTTcLuPUkEPORb2/5GJPwctoacsMObThdzP1nnqYPFU5cuK9f2Ip5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wgo+N4+a1GjKDjczTFk+d9Z0LcwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWyMLRIM8APq6EHnrG1DnkXOkgrPeNtti7C zoL7U6iDUZWeW1YUHke/w0eL2f+m0N12KwHB+q+rPW1cVw0pIhXQBVgVyj+Ve1WS lQ9wLkjaRl1rASWzRao3Jj5Wf1SbrMOqmH/Wxw6tzKvZxAVMVzaZN79wTc2yD3bc DCQKj1RwkWB6FiJMi2OJ08Ye0mHb0mQiBlli1a40oVMsceN+FSNPRn4aCNOUvLvP 9p/YRIHe7hsZvG/9kobkX7t2uKMDLdX42yH4cZ+mgfR0Ls2rJK/l+O1pjCHnzE/u BbqUkBYwslyh5dpIFdAMVNlJmmHO2mTFErNQb43myXcH8HXG49A= -----END CERTIFICATE-----Generated at Sat Apr 18 00:30:55 2026 by rpki-client