$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: o/Bbj/iZlima2AFdh/rv9s4jjmC6Uz9zLfNLnz8KBkI= Subject key identifier: E0:3A:12:7B:CC:B4:4B:05:1B:72:6D:8E:B6:6E:9A:0E:67:24:FB:03 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 310D5F8315A2ADFC46CD775A92B42C35B8DC9407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0136 Signing time: Fri 17 Apr 2026 15:02:53 +0000 Manifest this update: Fri 17 Apr 2026 14:57:53 +0000 Manifest next update: Tue 21 Apr 2026 01:21:53 +0000 Files and hashes: 1: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: tjCEDGhTf9wmSOKlBozB/Eo2tA4qOdCJKD0rSKbbsgo=) 2: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: dFBiC5PLpflhQEGVsjIUr1c1EbZdmTROkJjryCx88TU=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: JLWE6h6NXLY9WSoLd4bmAbVPL3LIXrW+e/qj82i23rA=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: aBnBiM/MEhKqQ7n4gX23Mkjy/VKocVmrbAAfq1Psf+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0d:5f:83:15:a2:ad:fc:46:cd:77:5a:92:b4:2c:35:b8:dc:94:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Apr 17 14:57:53 2026 GMT Not After : Apr 21 01:21:53 2026 GMT Subject: CN=E03A127BCCB44B051B726D8EB66E9A0E6724FB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:98:d3:2c:b0:bb:74:42:c7:fa:f1:f2:55: 7b:0f:4b:98:25:33:40:fa:78:c6:6f:d0:05:cc:b1: dc:d6:27:b5:c9:93:42:b8:14:d6:3b:8a:65:f3:8f: c7:0a:77:64:83:00:96:83:16:fa:17:d2:2a:ef:b3: fe:cd:a4:cc:e1:e9:5d:5c:72:77:85:ac:45:1b:17: 6d:8f:03:81:3e:2e:8f:e8:16:ab:7c:0d:ea:93:8e: 8a:d1:03:89:6e:81:92:ed:90:96:48:dc:20:47:24: 6a:04:21:53:64:d8:ae:16:29:44:59:f7:15:80:0a: c7:44:a6:88:de:5f:1e:e4:32:54:c9:37:07:26:16: 9f:78:6b:48:fb:46:1c:0f:94:ca:e1:2f:fc:fa:ee: 8c:1d:12:57:59:5d:fa:ec:29:88:da:c7:a6:6f:68: b5:59:d6:1d:65:02:86:b6:61:c1:d7:90:ed:6b:3c: a4:2d:c0:81:90:6a:95:1a:8b:c8:2a:85:bc:ca:00: f1:d4:a3:ea:7f:db:44:3d:3b:ac:2c:65:b4:05:83: 75:45:5e:a2:30:fa:d0:5a:f5:6e:a1:9f:14:11:e7: 0b:23:17:31:57:14:92:b6:7e:6e:96:55:43:05:2e: 02:da:f7:20:58:2e:c2:92:5e:2c:66:40:43:ac:bd: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3A:12:7B:CC:B4:4B:05:1B:72:6D:8E:B6:6E:9A:0E:67:24:FB:03 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:87:89:db:c9:73:06:be:b1:ad:da:3d:14:39:9d:b0:6f: 66:59:55:65:aa:77:c1:a5:03:00:00:c3:ca:0d:f7:ae:3e:2e: d3:a5:78:a4:74:da:25:1b:40:eb:be:10:1e:db:67:e4:0e:bb: dd:86:8f:6a:78:60:1f:40:49:bb:54:a9:ec:a4:5c:b5:9b:00: 35:aa:42:84:3a:c0:cc:47:a5:f2:b0:b5:5a:6e:5d:5b:1a:62: bc:07:00:1a:73:14:93:9f:61:ed:2f:72:da:56:7f:e4:1d:ba: e0:b6:e6:5c:f4:7b:9a:cb:12:e9:f7:58:f4:38:62:2a:35:65: cc:4d:6b:bc:49:bb:66:e9:bd:82:4d:5a:22:cd:66:09:15:5d: 21:1a:54:80:40:7d:81:cf:df:43:fb:34:83:f1:d9:15:be:ed: af:1e:4e:43:54:9b:86:23:16:83:81:eb:b4:75:7d:c1:43:51: b9:f2:a1:a7:52:5a:20:bd:07:c8:32:60:72:a4:8c:68:7f:59: fb:8c:55:15:09:5f:71:c8:6a:b0:70:42:44:48:5d:94:90:1f: 54:e4:83:f6:0d:c0:d7:13:6b:ba:25:20:50:1e:3f:bb:4d:3f: 35:70:fb:dc:6a:23:3a:6f:cd:b9:05:08:91:41:8d:51:95:21: f7:ec:fc:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQ1fgxWirfxGzXdakrQsNbjclAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjA0MTcxNDU3NTNaFw0yNjA0MjEwMTIxNTNaMDMxMTAvBgNV BAMTKEUwM0ExMjdCQ0NCNDRCMDUxQjcyNkQ4RUI2NkU5QTBFNjcyNEZCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXy5jTLLC7dELH+vHyVXsPS5gl M0D6eMZv0AXMsdzWJ7XJk0K4FNY7imXzj8cKd2SDAJaDFvoX0irvs/7NpMzh6V1c cneFrEUbF22PA4E+Lo/oFqt8DeqTjorRA4lugZLtkJZI3CBHJGoEIVNk2K4WKURZ 9xWACsdEpojeXx7kMlTJNwcmFp94a0j7RhwPlMrhL/z67owdEldZXfrsKYjax6Zv aLVZ1h1lAoa2YcHXkO1rPKQtwIGQapUai8gqhbzKAPHUo+p/20Q9O6wsZbQFg3VF XqIw+tBa9W6hnxQR5wsjFzFXFJK2fm6WVUMFLgLa9yBYLsKSXixmQEOsvTfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DoSe8y0SwUbcm2Otm6aDmck+wMwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmnh4nbyXMGvrGt2j0UOZ2wb2ZZVWWqd8Gl AwAAw8oN964+LtOleKR02iUbQOu+EB7bZ+QOu92Gj2p4YB9ASbtUqeykXLWbADWq QoQ6wMxHpfKwtVpuXVsaYrwHABpzFJOfYe0vctpWf+QduuC25lz0e5rLEun3WPQ4 Yio1ZcxNa7xJu2bpvYJNWiLNZgkVXSEaVIBAfYHP30P7NIPx2RW+7a8eTkNUm4Yj FoOB67R1fcFDUbnyoadSWiC9B8gyYHKkjGh/WfuMVRUJX3HIarBwQkRIXZSQH1Tk g/YNwNcTa7olIFAeP7tNPzVw+9xqIzpvzbkFCJFBjVGVIffs/NY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:57 2026 by rpki-client