$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: UZKawgkEl2cSXf9JAUlw4O2PyU0md4ZHnXWf/r9Mxb0= Subject key identifier: F6:76:EB:8A:1C:E2:2D:CA:10:35:4E:19:48:FD:69:B3:77:2F:0C:79 Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 172578D825E6EDAC0EE3615628D148A4D7DB8DEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 0414 Signing time: Fri 17 Apr 2026 10:12:08 +0000 Manifest this update: Fri 17 Apr 2026 10:07:08 +0000 Manifest next update: Mon 20 Apr 2026 13:11:08 +0000 Files and hashes: 1: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: c7K/kJi/sdHC40eB5yKboQSZpT9ath8KafCzibQS9r0=) 2: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: pGG2Bi36SLJ3ZRv3lx6++uoX962j1RY60TxoCjCPGXI=) 3: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: cT6y+JxeYrWbyUS6gcVvN0yHf5kU9x3G+Rcpu/0JjXM=) 4: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: IgSDzMHI3dSppPCf14soQgaWSO7iUukjBimhBkSaH7U=) 5: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: CyUa8cUnppeeXFA8fzhGE48owkMTBLn/7bLT/UPIoOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:78:d8:25:e6:ed:ac:0e:e3:61:56:28:d1:48:a4:d7:db:8d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: Apr 17 10:07:08 2026 GMT Not After : Apr 20 13:11:08 2026 GMT Subject: CN=F676EB8A1CE22DCA10354E1948FD69B3772F0C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:52:88:a0:dc:7b:82:77:65:97:b0:87:bf: ab:af:9e:1f:34:3c:57:9a:a3:b7:bd:73:8a:a6:e8: cb:28:8b:77:83:bb:0a:76:2d:44:fb:52:42:a9:4d: e9:54:4a:e8:4c:f3:d2:99:4a:ff:6e:56:c2:31:70: 80:a6:2f:90:be:42:c5:2c:0c:cc:f4:df:8f:40:2b: 65:04:33:5a:ff:43:0f:59:5b:a0:a1:4b:d3:8f:20: 7e:f9:ba:48:0b:b3:8e:ab:16:57:e5:8b:10:67:6b: 6b:5b:07:8a:b9:ce:de:87:e5:16:30:7c:4c:42:f8: d2:66:f3:d0:5f:b9:bd:57:a6:71:cd:f0:b6:eb:a5: 5c:26:be:d8:7b:dd:b5:2f:18:17:2c:90:80:18:be: 45:01:e7:de:a8:d7:d4:96:15:41:a4:5c:17:69:50: d9:7b:af:37:bd:08:45:72:90:bf:7d:64:ed:3a:68: 34:94:34:23:fb:81:56:fb:0a:34:aa:48:a6:48:87: 45:4e:a3:14:04:6e:db:ed:3d:c5:4c:65:ac:44:38: b0:d0:68:44:97:46:68:69:e6:f3:8f:51:a8:44:cf: 9b:8d:7d:66:cd:00:22:5e:b0:9c:be:00:5c:a2:eb: 6c:7b:fe:17:05:3d:ce:35:4b:58:9d:c8:1b:41:b8: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:EB:8A:1C:E2:2D:CA:10:35:4E:19:48:FD:69:B3:77:2F:0C:79 X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:00:57:ab:60:31:a8:3d:17:12:91:4a:6b:fb:1a:e2:12:dc: 1d:3a:92:4b:3c:dd:00:54:11:56:00:26:a7:d5:a5:23:76:88: e4:5a:10:95:d2:0c:e2:66:90:87:c8:4e:f0:28:ff:a9:56:2d: 22:5f:ec:ac:d5:c9:58:56:bb:44:ca:0b:ae:4a:a0:2f:0e:53: fd:12:84:d1:c7:e2:19:fd:ca:3f:7c:97:b5:42:63:85:6a:c7: d6:32:72:ee:2e:c3:70:d0:8a:8e:27:2c:a0:85:6d:c1:4d:f0: bd:d1:ec:9e:f4:70:79:78:f4:e9:7e:75:95:31:ba:23:e7:36: 3b:b7:5f:fd:07:0b:a8:7f:8a:6b:ea:38:7f:b8:45:b0:3e:33: f6:d2:de:a0:91:d8:de:53:75:6f:e1:a1:48:ae:a8:78:ce:f9: 59:34:81:f7:fe:ea:d9:c0:88:fd:c1:a3:85:1e:c0:20:31:25: 46:3e:69:3a:27:ae:52:9c:8e:67:6b:cf:7c:75:5c:fd:23:92: ac:ee:db:55:48:8f:23:a4:ef:2e:76:b7:40:9a:53:49:b2:1e: 6b:d0:5b:1a:0e:63:80:2b:7c:8e:24:b0:c6:7c:48:b4:b7:74: 98:ac:71:20:9c:0c:52:5a:3d:a7:28:e1:21:79:ee:30:ff:ee: be:d7:4e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyV42CXm7awO42FWKNFIpNfbjewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNjA0MTcxMDA3MDhaFw0yNjA0MjAxMzExMDhaMDMxMTAvBgNV BAMTKEY2NzZFQjhBMUNFMjJEQ0ExMDM1NEUxOTQ4RkQ2OUIzNzcyRjBDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg1KIoNx7gndll7CHv6uvnh80 PFeao7e9c4qm6Msoi3eDuwp2LUT7UkKpTelUSuhM89KZSv9uVsIxcICmL5C+QsUs DMz0349AK2UEM1r/Qw9ZW6ChS9OPIH75ukgLs46rFlflixBna2tbB4q5zt6H5RYw fExC+NJm89Bfub1XpnHN8LbrpVwmvth73bUvGBcskIAYvkUB596o19SWFUGkXBdp UNl7rze9CEVykL99ZO06aDSUNCP7gVb7CjSqSKZIh0VOoxQEbtvtPcVMZaxEOLDQ aESXRmhp5vOPUahEz5uNfWbNACJesJy+AFyi62x7/hcFPc41S1idyBtBuLLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nbrihziLcoQNU4ZSP1ps3cvDHkwHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoAV6tgMag9FxKRSmv7GuIS3B06kks83QBU EVYAJqfVpSN2iORaEJXSDOJmkIfITvAo/6lWLSJf7KzVyVhWu0TKC65KoC8OU/0S hNHH4hn9yj98l7VCY4Vqx9Yycu4uw3DQio4nLKCFbcFN8L3R7J70cHl49Ol+dZUx uiPnNju3X/0HC6h/imvqOH+4RbA+M/bS3qCR2N5TdW/hoUiuqHjO+Vk0gff+6tnA iP3Bo4UewCAxJUY+aTonrlKcjmdrz3x1XP0jkqzu21VIjyOk7y52t0CaU0myHmvQ WxoOY4ArfI4ksMZ8SLS3dJiscSCcDFJaPaco4SF57jD/7r7XTvA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:33:03 2026 by rpki-client