$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: Q++BdMIb0+tV1getbW6mZbBmmZexXpPb5oS7/ZSev70= Subject key identifier: CA:EC:32:88:01:99:49:D6:84:74:17:B7:DD:E2:03:4A:2D:8D:7A:BB Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 25A89F1B6A5511D071F7AE8EDD0D870176DFD1E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 0241 Signing time: Sun 19 Apr 2026 04:21:14 +0000 Manifest this update: Sun 19 Apr 2026 04:16:14 +0000 Manifest next update: Wed 22 Apr 2026 10:16:14 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: 0KMBbiejqNlJPD3n3xpv2lAAT2yCwFfR6nxs0rq5q3g=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a8:9f:1b:6a:55:11:d0:71:f7:ae:8e:dd:0d:87:01:76:df:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Apr 19 04:16:14 2026 GMT Not After : Apr 22 10:16:14 2026 GMT Subject: CN=CAEC3288019949D6847417B7DDE2034A2D8D7ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:3d:84:99:01:ae:e8:05:41:15:41:a9:2e: 7e:22:a4:82:17:67:51:41:df:45:2d:60:16:a7:04: 72:c0:7c:68:ce:db:0d:0c:6a:af:ff:c0:37:9f:99: f4:70:e4:81:c9:8f:3c:73:35:1b:ae:97:b0:33:59: 76:43:df:c0:f6:3b:d3:43:8d:7c:85:93:1c:ac:f2: a7:bd:a6:f1:1e:24:62:4d:41:32:76:0f:e7:cb:cb: 06:13:4d:68:87:91:e3:89:d8:5d:97:52:d4:e9:0a: 96:5f:61:cc:ed:ae:db:a6:53:9a:9b:8d:8f:ba:99: 85:aa:17:1a:c5:49:b9:24:4b:92:f1:5b:56:9a:3a: c2:b0:8d:92:78:a4:dd:0c:d6:96:b5:c8:3b:cd:62: d9:2c:8e:f3:2d:55:a1:86:c7:4d:8b:66:d5:ef:50: fb:93:17:4f:d3:46:0a:89:22:94:df:ed:f7:ff:a7: 03:ae:85:56:a9:3b:22:a1:6f:0e:5c:d4:a6:db:4d: ac:0b:f7:1b:7f:f2:26:a6:a0:92:13:cc:d0:6d:f4: c7:01:88:e1:78:22:1a:d9:06:90:a2:7e:09:21:6c: 59:a6:1e:0f:cf:f6:9e:6c:0a:b8:64:94:65:60:d5: 1a:52:9d:f8:e7:62:c2:73:82:ec:be:bf:55:e7:cd: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:32:88:01:99:49:D6:84:74:17:B7:DD:E2:03:4A:2D:8D:7A:BB X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:8e:cf:98:96:59:37:14:85:bf:73:a6:76:cf:35:31:02: a6:bb:16:f3:dd:c7:5a:d0:ea:d1:df:92:83:03:80:f0:ad:9b: f3:1c:7f:8e:55:fa:b5:68:37:53:7b:c5:52:57:6d:33:6b:e0: c3:23:23:ed:68:11:4f:3b:ad:36:6c:32:0c:3a:ca:58:ef:03: 45:21:9f:22:ec:f5:ed:77:9a:24:6e:a7:1b:f2:67:25:bb:c0: 5e:15:e8:5c:b4:50:d5:e5:93:05:09:e5:e5:44:9a:0d:d5:47: d4:92:c7:4d:ca:b7:6c:8d:0d:11:6b:c6:1c:eb:5b:80:b9:57: e9:c4:e9:87:dc:69:b7:70:f6:eb:0e:a0:84:7f:86:8d:c2:a7: 4f:ae:31:61:65:f1:ed:bd:50:c4:98:50:99:6d:22:b1:ef:62: dd:19:d1:11:8b:3e:0c:4d:42:b5:71:d6:1c:cc:0d:b9:e4:9a: 43:e5:e2:40:ab:32:ee:8c:c4:05:44:47:b9:1f:73:b1:24:e9: 36:9a:67:82:ba:fd:67:58:3c:74:26:df:5a:4d:5e:70:f9:eb: eb:d4:bf:09:6f:99:f4:ab:a1:08:a1:0f:b9:61:7e:0a:ba:f2: fb:f1:09:c8:2b:9f:f2:19:48:41:99:32:ae:4a:07:52:26:e0: e0:af:b6:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaifG2pVEdBx966O3Q2HAXbf0eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNjA0MTkwNDE2MTRaFw0yNjA0MjIxMDE2MTRaMDMxMTAvBgNV BAMTKENBRUMzMjg4MDE5OTQ5RDY4NDc0MTdCN0RERTIwMzRBMkQ4RDdBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYD2EmQGu6AVBFUGpLn4ipIIX Z1FB30UtYBanBHLAfGjO2w0Maq//wDefmfRw5IHJjzxzNRuul7AzWXZD38D2O9ND jXyFkxys8qe9pvEeJGJNQTJ2D+fLywYTTWiHkeOJ2F2XUtTpCpZfYcztrtumU5qb jY+6mYWqFxrFSbkkS5LxW1aaOsKwjZJ4pN0M1pa1yDvNYtksjvMtVaGGx02LZtXv UPuTF0/TRgqJIpTf7ff/pwOuhVapOyKhbw5c1KbbTawL9xt/8iamoJITzNBt9McB iOF4IhrZBpCifgkhbFmmHg/P9p5sCrhklGVg1RpSnfjnYsJzguy+v1XnzdGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuwyiAGZSdaEdBe33eIDSi2NerswHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED1js+Yllk3FIW/c6Z2zzUxAqa7FvPdx1rQ 6tHfkoMDgPCtm/Mcf45V+rVoN1N7xVJXbTNr4MMjI+1oEU87rTZsMgw6yljvA0Uh nyLs9e13miRupxvyZyW7wF4V6Fy0UNXlkwUJ5eVEmg3VR9SSx03Kt2yNDRFrxhzr W4C5V+nE6Yfcabdw9usOoIR/ho3Cp0+uMWFl8e29UMSYUJltIrHvYt0Z0RGLPgxN QrVx1hzMDbnkmkPl4kCrMu6MxAVER7kfc7Ek6TaaZ4K6/WdYPHQm31pNXnD56+vU vwlvmfSroQihD7lhfgq68vvxCcgrn/IZSEGZMq5KB1Im4OCvtsM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:16 2026 by rpki-client