$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: qkVGVgH/EmOqMo/CDJhDno8Rk3sR3+x8flguTxUPA6I= Subject key identifier: DD:68:C8:28:FB:28:00:DB:92:2E:29:50:A2:DA:B3:BA:5A:5C:31:A1 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 2C3CC808B31E01C8B3FBBC854D9F16C633562156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 04B9 Signing time: Thu 16 Apr 2026 03:01:58 +0000 Manifest this update: Thu 16 Apr 2026 02:56:58 +0000 Manifest next update: Sun 19 Apr 2026 14:16:58 +0000 Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: HTUmi9PKF3bXW8+hzkMCAvJVqEuGNdGX60rcZCcQMPw=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: fHqvbSw+kBSfkBDzTpDrPMpXwZgb+p5OG9oIzvIH1tQ=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: ZvdBHasSWp+14DxIxCana4epct5/VA5n9aPStreGvsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3c:c8:08:b3:1e:01:c8:b3:fb:bc:85:4d:9f:16:c6:33:56:21:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Apr 16 02:56:58 2026 GMT Not After : Apr 19 14:16:58 2026 GMT Subject: CN=DD68C828FB2800DB922E2950A2DAB3BA5A5C31A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:5b:79:28:35:96:2f:db:a7:d5:80:ab:0c: ec:2f:e7:55:02:ce:88:23:5a:97:37:a1:be:3e:a4: 2a:af:36:fc:9c:46:7f:61:e6:66:da:bf:12:28:bd: 06:44:d9:e1:29:47:4b:50:d0:46:56:57:72:bd:0f: bf:f7:9c:84:19:27:1e:4e:d3:9e:58:70:50:96:91: b1:99:6e:51:95:40:cd:ae:7e:90:3d:23:02:c7:8d: 50:9b:9a:df:9d:b4:95:cb:2a:f8:a9:08:31:03:e3: 8d:6a:be:f4:48:8b:f5:29:71:8b:fc:08:8f:12:b4: e0:40:db:ad:ae:2e:07:38:4c:17:c4:1e:e5:df:7d: b4:7c:09:1f:0c:bf:f6:6d:ae:ea:8e:df:08:cf:78: e1:db:32:9c:4a:d7:33:c7:86:ac:c4:5a:95:dd:d2: ce:a2:43:f3:83:7f:c5:cd:81:ec:cb:10:bc:55:16: 53:25:41:c6:c5:5f:54:a5:e2:fa:3b:7a:a3:73:82: 94:14:a0:3e:7a:f0:8c:2b:27:62:f4:cb:9d:42:bd: 04:b9:1b:0e:5d:b7:1c:40:b4:44:28:29:76:a1:b4: 46:a1:a7:49:d3:93:56:f0:4c:42:23:b8:3d:5e:d6: 52:d6:4a:89:36:94:11:b7:a9:94:7a:6c:24:e5:25: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:68:C8:28:FB:28:00:DB:92:2E:29:50:A2:DA:B3:BA:5A:5C:31:A1 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:dc:92:84:61:9c:d7:65:14:93:51:23:5f:1a:db:ba:5f:49: 10:d3:ec:99:cf:02:b5:35:8b:af:29:fc:2d:31:c3:72:1f:0a: c2:f8:a6:fb:8e:b7:ca:57:53:1f:fb:5f:6f:a1:40:83:f2:31: 81:30:03:b0:4e:f2:b6:13:fb:d2:9e:1f:8f:8d:3c:db:bc:62: d9:fd:77:95:81:f9:66:eb:a4:b4:54:a7:a8:cf:55:6b:c9:62: 4c:0a:28:bf:f0:97:a7:22:63:5e:fa:af:3f:2b:02:5c:3a:f0: 3d:f3:42:a2:d8:bb:7a:89:ce:1a:6e:20:15:5a:2f:26:6d:5f: a2:70:21:78:f9:11:f5:f8:a3:27:65:8c:13:34:53:74:58:a1: 24:3a:b6:c2:ea:5d:50:45:a8:22:39:00:e0:cb:f7:db:bd:d6: e9:72:5b:c9:4d:16:fa:51:e6:ea:06:25:4b:1c:4b:ba:a0:67: 4a:4d:22:6f:df:a0:43:f4:c6:2e:91:56:45:dc:22:dc:78:66: c4:1a:de:68:34:d9:1f:e2:01:f6:29:42:f9:c6:12:05:88:f0: 91:3e:a9:80:85:01:7b:bc:a4:b6:01:62:a0:14:c8:d6:80:eb: b9:a5:70:08:f9:04:29:29:a6:63:0f:d4:ed:0d:82:69:c3:02: 0d:71:4f:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDzICLMeAciz+7yFTZ8WxjNWIVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNjA0MTYwMjU2NThaFw0yNjA0MTkxNDE2NThaMDMxMTAvBgNV BAMTKERENjhDODI4RkIyODAwREI5MjJFMjk1MEEyREFCM0JBNUE1QzMxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzElt5KDWWL9un1YCrDOwv51UC zogjWpc3ob4+pCqvNvycRn9h5mbavxIovQZE2eEpR0tQ0EZWV3K9D7/3nIQZJx5O 055YcFCWkbGZblGVQM2ufpA9IwLHjVCbmt+dtJXLKvipCDED441qvvRIi/UpcYv8 CI8StOBA262uLgc4TBfEHuXffbR8CR8Mv/ZtruqO3wjPeOHbMpxK1zPHhqzEWpXd 0s6iQ/ODf8XNgezLELxVFlMlQcbFX1Sl4vo7eqNzgpQUoD568IwrJ2L0y51CvQS5 Gw5dtxxAtEQoKXahtEahp0nTk1bwTEIjuD1e1lLWSok2lBG3qZR6bCTlJQDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WjIKPsoANuSLilQotqzulpcMaEwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjckoRhnNdlFJNRI18a27pfSRDT7JnPArU1 i68p/C0xw3IfCsL4pvuOt8pXUx/7X2+hQIPyMYEwA7BO8rYT+9KeH4+NPNu8Ytn9 d5WB+WbrpLRUp6jPVWvJYkwKKL/wl6ciY176rz8rAlw68D3zQqLYu3qJzhpuIBVa LyZtX6JwIXj5EfX4oydljBM0U3RYoSQ6tsLqXVBFqCI5AODL99u91ulyW8lNFvpR 5uoGJUscS7qgZ0pNIm/foEP0xi6RVkXcItx4ZsQa3mg02R/iAfYpQvnGEgWI8JE+ qYCFAXu8pLYBYqAUyNaA67mlcAj5BCkppmMP1O0NgmnDAg1xT5M= -----END CERTIFICATE-----Generated at Fri Apr 17 23:48:59 2026 by rpki-client