$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: FWnORZM7wzT7dL1m1j21AGaGB2nlJ4MiqK8gpA29DLU= Subject key identifier: 36:84:6E:8D:2F:1B:A8:15:E9:87:1B:63:18:87:30:C9:A8:CF:48:85 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 51B9799563EE2E427EF00E567058D4D750234D28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01FD Signing time: Thu 16 Apr 2026 17:42:31 +0000 Manifest this update: Thu 16 Apr 2026 17:37:31 +0000 Manifest next update: Mon 20 Apr 2026 03:19:31 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: jFmRL+dCpd0kFI3TLrdd6Vye2pz1s7pyUJZ/qcVvWVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b9:79:95:63:ee:2e:42:7e:f0:0e:56:70:58:d4:d7:50:23:4d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Apr 16 17:37:31 2026 GMT Not After : Apr 20 03:19:31 2026 GMT Subject: CN=36846E8D2F1BA815E9871B63188730C9A8CF4885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8b:36:a2:ff:fe:b3:a0:d2:2c:20:1f:d8:89: c7:12:c8:0c:21:cc:23:d1:ef:a7:67:a5:84:72:b6: de:cd:9a:4d:d4:f3:cc:1c:42:91:82:2a:0f:17:3d: a6:8e:41:9e:40:a8:95:cd:ac:d1:5d:0e:3e:42:98: 9c:c3:03:4d:aa:5b:ca:75:a5:4b:b1:e0:2e:fc:d6: ec:1f:03:95:06:04:e5:b6:f6:ad:e0:fc:d9:a3:99: ad:18:84:03:54:06:18:19:3d:9a:e8:dc:17:ae:a8: ab:85:38:85:f8:ed:b1:a1:2e:f1:76:03:3c:fd:ec: ee:dd:3e:97:9b:35:de:c2:73:f5:08:74:15:24:46: 5f:7a:2f:53:6c:2b:5f:7c:8c:08:5f:97:1d:b5:54: 07:ae:a4:1d:15:59:00:8d:72:84:76:b8:95:55:79: a6:37:b8:ce:e9:d2:c6:d5:bf:8a:d2:98:ad:7e:b4: c9:c4:f8:52:c8:4a:7f:2d:7b:20:57:e7:05:59:62: c1:89:4d:45:74:8a:28:d9:27:5f:32:25:f1:aa:6b: 29:ef:29:40:ca:dd:79:21:ea:d9:24:2e:d5:ca:92: be:06:64:86:07:25:ca:5f:fd:e0:12:f4:ee:8b:27: 12:11:b7:8a:26:34:a6:6e:19:a1:16:93:f8:f6:30: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:84:6E:8D:2F:1B:A8:15:E9:87:1B:63:18:87:30:C9:A8:CF:48:85 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:46:3e:95:e9:4b:21:ce:02:25:ec:79:be:fc:37:7f:43:c9: f2:78:77:5b:c7:66:38:13:37:d3:7d:fa:5c:d9:4e:8f:77:a0: e1:4c:3c:aa:4b:7f:d6:e1:d5:f9:bd:66:53:17:7c:53:2c:dd: ba:83:03:29:71:a0:68:75:2c:37:d0:1e:54:61:ef:c6:bc:57: fa:88:3d:a1:ba:99:9f:52:2b:10:e9:dd:50:90:aa:db:12:10: d0:22:89:84:67:c1:b1:d5:9a:be:df:63:e8:fc:34:f3:ef:77: a6:77:1d:ed:97:8b:bd:0d:7c:55:62:84:b8:2c:33:e5:0c:88: d3:e3:af:10:42:99:cf:f3:b2:5d:1e:61:ce:1b:27:48:f2:b1: f4:ec:6c:ff:15:4d:74:00:f4:1e:25:70:3d:7d:d2:54:a8:fe: 6c:84:ff:17:7e:4b:e9:30:28:59:6b:f8:4b:46:ba:68:e3:66: 1f:c1:e7:7a:cf:e2:f7:c2:da:ca:c1:0d:85:7f:1f:98:bd:be: 14:67:bc:0e:74:8f:4a:f7:2e:2f:5f:58:20:c5:56:80:45:84: 23:73:32:f4:be:73:72:57:0b:de:4b:c0:7f:27:fd:11:af:9c: dd:1d:5e:d7:c3:91:4c:0d:4e:1d:b5:27:26:76:c7:50:aa:4e: fe:76:bc:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbl5lWPuLkJ+8A5WcFjU11AjTSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNjA0MTYxNzM3MzFaFw0yNjA0MjAwMzE5MzFaMDMxMTAvBgNV BAMTKDM2ODQ2RThEMkYxQkE4MTVFOTg3MUI2MzE4ODczMEM5QThDRjQ4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkizai//6zoNIsIB/YiccSyAwh zCPR76dnpYRytt7Nmk3U88wcQpGCKg8XPaaOQZ5AqJXNrNFdDj5CmJzDA02qW8p1 pUux4C781uwfA5UGBOW29q3g/Nmjma0YhANUBhgZPZro3BeuqKuFOIX47bGhLvF2 Azz97O7dPpebNd7Cc/UIdBUkRl96L1NsK198jAhflx21VAeupB0VWQCNcoR2uJVV eaY3uM7p0sbVv4rSmK1+tMnE+FLISn8teyBX5wVZYsGJTUV0iijZJ18yJfGqaynv KUDK3Xkh6tkkLtXKkr4GZIYHJcpf/eAS9O6LJxIRt4omNKZuGaEWk/j2MBYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNoRujS8bqBXphxtjGIcwyajPSIUwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdGPpXpSyHOAiXseb78N39DyfJ4d1vHZjgT N9N9+lzZTo93oOFMPKpLf9bh1fm9ZlMXfFMs3bqDAylxoGh1LDfQHlRh78a8V/qI PaG6mZ9SKxDp3VCQqtsSENAiiYRnwbHVmr7fY+j8NPPvd6Z3He2Xi70NfFVihLgs M+UMiNPjrxBCmc/zsl0eYc4bJ0jysfTsbP8VTXQA9B4lcD190lSo/myE/xd+S+kw KFlr+EtGumjjZh/B53rP4vfC2srBDYV/H5i9vhRnvA50j0r3Li9fWCDFVoBFhCNz MvS+c3JXC95LwH8n/RGvnN0dXtfDkUwNTh21JyZ2x1CqTv52vGs= -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:41 2026 by rpki-client