$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: KwBBUte3EOaUPaQ1xcAy5fPqk/lJpBBSWbzdU7df86Q= Subject key identifier: 97:55:F1:55:95:C5:D0:60:F1:A5:EF:61:62:4F:5A:C2:CA:27:96:C4 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 0B8B167AA28F5C3C23BD14951A3F48ACE80DFEFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01EE Signing time: Thu 16 Apr 2026 19:10:41 +0000 Manifest this update: Thu 16 Apr 2026 19:05:41 +0000 Manifest next update: Mon 20 Apr 2026 03:16:41 +0000 Files and hashes: 1: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: FatrKKhfA042s6DgZ8kCeytY541FJY9/7S8dYlZQC7M=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8b:16:7a:a2:8f:5c:3c:23:bd:14:95:1a:3f:48:ac:e8:0d:fe:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Apr 16 19:05:41 2026 GMT Not After : Apr 20 03:16:41 2026 GMT Subject: CN=9755F15595C5D060F1A5EF61624F5AC2CA2796C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:62:39:a2:d7:72:d1:35:b8:c4:a9:24:f3: 5c:65:df:c3:92:03:0e:62:28:2f:ce:e7:0b:ba:78: 32:a1:93:da:ee:d8:1a:10:49:69:b4:28:aa:b4:83: e8:96:50:91:d3:04:46:8a:78:96:2c:ce:39:40:03: 9b:b0:eb:32:e0:de:11:06:d2:2b:dd:a2:02:ad:eb: 47:5b:5a:7a:5c:16:0f:47:27:e2:2a:f8:03:24:67: 45:8f:25:ba:c9:c2:34:35:3c:69:c8:35:bf:20:bc: 8c:b9:a3:dd:3a:b7:63:37:a4:fd:6d:43:5e:cd:66: f9:19:fd:33:8b:16:87:c2:74:28:c7:66:7d:11:99: fc:26:41:4f:e6:f7:0e:0b:22:22:60:b3:7d:c7:52: 2a:a8:8b:56:1b:79:95:9a:91:04:e2:20:ef:f9:23: 3f:ba:6c:11:59:20:9b:bd:5e:5d:db:7d:da:43:98: 5f:37:97:a5:2d:50:a1:39:ec:e9:14:0e:5a:da:3c: ed:ea:65:c9:f3:22:e0:2a:48:5a:72:bf:fc:ef:2f: c8:d7:a6:2c:f0:35:ae:1d:d6:75:0e:0c:e3:a4:f4: 04:0b:21:73:0b:b6:87:85:f4:02:93:22:cd:9d:42: c8:a6:09:57:33:b8:7a:5c:72:aa:18:ae:58:47:5e: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:55:F1:55:95:C5:D0:60:F1:A5:EF:61:62:4F:5A:C2:CA:27:96:C4 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:32:98:46:14:1e:82:1c:52:85:44:07:e5:f4:9a:6a:13:c5: 8c:99:11:de:4d:92:89:6c:c4:db:a5:55:bc:f6:d6:33:08:4f: 8d:71:44:86:97:a0:77:b1:89:af:78:6b:6e:cb:b5:c7:fb:d8: 8b:ef:7c:4e:a9:80:83:20:e6:fd:d7:09:ee:fb:dc:58:45:92: d7:3c:b1:89:58:59:ef:ab:d3:ff:44:87:19:a0:d3:3d:08:97: 0a:6a:bf:32:36:fa:e7:04:d9:0e:8a:44:2f:1e:a6:ab:3d:77: 49:b4:07:b2:d1:7f:cf:ca:7a:11:9e:dc:22:2c:a9:c9:0b:d5: 82:fe:e0:dc:a7:da:80:cf:81:7b:cb:92:be:35:77:12:38:51: a4:13:b4:48:44:87:c6:ee:4e:e8:a6:0f:38:e0:21:eb:c6:7d: 22:d4:eb:78:71:0d:5b:75:65:e3:be:03:8d:6d:f7:d0:68:2c: a6:ae:8b:ae:0a:de:13:1a:7c:c7:d3:0e:45:b8:1e:44:48:fa: 10:2a:87:0b:03:13:0d:e5:e4:0d:98:b1:6a:4b:e7:37:d3:68: 7b:3d:e8:b8:76:c8:ff:89:22:a0:78:5d:20:ac:60:94:c3:84: 5f:2f:ff:b9:9e:ee:6d:1b:65:10:02:80:11:3f:73:82:5c:7d: ec:86:31:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4sWeqKPXDwjvRSVGj9IrOgN/v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjA0MTYxOTA1NDFaFw0yNjA0MjAwMzE2NDFaMDMxMTAvBgNV BAMTKDk3NTVGMTU1OTVDNUQwNjBGMUE1RUY2MTYyNEY1QUMyQ0EyNzk2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQz2I5otdy0TW4xKkk81xl38OS Aw5iKC/O5wu6eDKhk9ru2BoQSWm0KKq0g+iWUJHTBEaKeJYszjlAA5uw6zLg3hEG 0ivdogKt60dbWnpcFg9HJ+Iq+AMkZ0WPJbrJwjQ1PGnINb8gvIy5o906t2M3pP1t Q17NZvkZ/TOLFofCdCjHZn0RmfwmQU/m9w4LIiJgs33HUiqoi1YbeZWakQTiIO/5 Iz+6bBFZIJu9Xl3bfdpDmF83l6UtUKE57OkUDlraPO3qZcnzIuAqSFpyv/zvL8jX pizwNa4d1nUODOOk9AQLIXMLtoeF9AKTIs2dQsimCVczuHpccqoYrlhHXjyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1XxVZXF0GDxpe9hYk9awsonlsQwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYymEYUHoIcUoVEB+X0mmoTxYyZEd5Nkols xNulVbz21jMIT41xRIaXoHexia94a27Ltcf72IvvfE6pgIMg5v3XCe773FhFktc8 sYlYWe+r0/9Ehxmg0z0IlwpqvzI2+ucE2Q6KRC8epqs9d0m0B7LRf8/KehGe3CIs qckL1YL+4Nyn2oDPgXvLkr41dxI4UaQTtEhEh8buTuimDzjgIevGfSLU63hxDVt1 ZeO+A41t99BoLKaui64K3hMafMfTDkW4HkRI+hAqhwsDEw3l5A2YsWpL5zfTaHs9 6Lh2yP+JIqB4XSCsYJTDhF8v/7me7m0bZRACgBE/c4JcfeyGMbU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:38:12 2026 by rpki-client