$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: AyKktwg6zDy4KZAcNMzSC63P5tdqmxv2KhrA2QLq2P0= Subject key identifier: CF:46:18:B4:BE:62:35:C2:AC:D8:18:C2:66:9F:A5:30:F4:6A:9C:8D Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 2B00461D4365F7126BA115ED99113997731B0E40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 0329 Signing time: Fri 17 Apr 2026 01:42:47 +0000 Manifest this update: Fri 17 Apr 2026 01:37:47 +0000 Manifest next update: Mon 20 Apr 2026 08:15:47 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 2: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 3: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: 1i9KIOsTjTbUrOTCO6FR8QKtV6RwFsPk009cdach66I=) 4: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:00:46:1d:43:65:f7:12:6b:a1:15:ed:99:11:39:97:73:1b:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Apr 17 01:37:47 2026 GMT Not After : Apr 20 08:15:47 2026 GMT Subject: CN=CF4618B4BE6235C2ACD818C2669FA530F46A9C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:57:39:c8:5e:9e:99:25:c8:4b:07:24:0f: 69:70:77:d8:de:6d:82:9f:85:f0:54:dd:d1:54:a9: c8:27:f0:3c:84:43:61:46:68:e7:aa:c3:ec:93:da: 5c:06:11:13:b6:17:f5:9f:2e:e8:04:5b:10:22:94: 91:80:a1:cb:60:16:cc:d3:49:78:76:ee:ea:08:b8: 3c:38:e5:50:61:24:66:03:a2:8e:b5:a8:ed:88:7f: a6:2f:c6:45:ed:de:6d:03:fe:17:4e:e0:1d:46:8f: 04:05:13:4a:1d:e6:f6:3c:1d:67:44:f9:cb:69:7b: 2d:4f:5d:9c:85:03:55:a4:57:71:d4:67:1c:e8:12: 1c:69:a7:2b:8d:f1:92:ec:83:3c:e5:63:ed:62:a1: e4:8f:3e:8a:42:57:07:e3:bb:1c:1c:55:81:97:58: 58:d9:83:28:a2:e1:57:f0:01:d1:85:22:d5:7b:72: b0:06:e6:bd:0b:c2:41:2d:04:d7:ee:e1:49:3a:ca: 0a:4f:f7:59:c9:9a:84:36:31:c2:81:6a:52:d0:52: b9:fd:c8:80:86:44:f2:a1:58:fc:67:76:1d:30:13: 0e:d4:46:ee:36:fe:55:26:1e:7c:4e:ee:0b:5d:9c: 7b:b2:1f:1b:7b:6d:24:e2:54:cb:fa:81:3a:ca:b7: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:18:B4:BE:62:35:C2:AC:D8:18:C2:66:9F:A5:30:F4:6A:9C:8D X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6a:39:4b:90:04:56:ee:9a:ef:94:d3:4a:f9:f3:41:a1:71: f6:1e:33:eb:f6:43:48:98:9a:4c:40:34:75:17:49:56:50:6c: 1e:52:ac:9d:d3:e6:0e:b9:e6:24:7f:ef:c5:86:41:9e:18:9c: e8:23:7e:2f:f5:fc:15:3b:6c:ad:d1:22:9f:a1:29:b2:17:a5: 20:2c:8d:ca:30:ea:c7:0d:d2:43:f9:bf:5c:fb:0f:2f:2f:74: 96:e7:ad:7b:fb:9f:0c:38:04:e4:d5:09:46:ac:d7:39:7a:71: 08:ac:33:43:ae:94:e1:e2:91:b0:cc:04:23:53:75:01:d5:02: ea:2e:e0:ee:35:71:9b:a2:95:88:26:5e:e8:66:9f:be:a9:3a: 20:50:15:a0:78:1a:28:1d:8e:18:c7:e7:8a:ea:ca:89:9f:e8: ba:92:cf:a1:ca:85:29:13:23:27:58:10:ea:c4:8f:e8:0f:17: d9:ff:af:0c:20:ff:6b:9e:48:53:33:f9:8a:2f:cd:5f:08:40: f2:2d:62:e4:87:25:2a:58:3d:92:0d:be:c0:cf:78:60:03:3e: 41:a8:12:fe:c7:fe:74:e4:c9:61:75:eb:d5:1d:6a:b6:6d:7e: 26:2c:98:a8:ec:b7:2d:52:99:7c:28:5c:86:90:9a:41:f4:03: 97:88:ad:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwBGHUNl9xJroRXtmRE5l3MbDkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjA0MTcwMTM3NDdaFw0yNjA0MjAwODE1NDdaMDMxMTAvBgNV BAMTKENGNDYxOEI0QkU2MjM1QzJBQ0Q4MThDMjY2OUZBNTMwRjQ2QTlDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mVc5yF6emSXISwckD2lwd9je bYKfhfBU3dFUqcgn8DyEQ2FGaOeqw+yT2lwGERO2F/WfLugEWxAilJGAoctgFszT SXh27uoIuDw45VBhJGYDoo61qO2If6YvxkXt3m0D/hdO4B1GjwQFE0od5vY8HWdE +ctpey1PXZyFA1WkV3HUZxzoEhxppyuN8ZLsgzzlY+1ioeSPPopCVwfjuxwcVYGX WFjZgyii4VfwAdGFItV7crAG5r0LwkEtBNfu4Uk6ygpP91nJmoQ2McKBalLQUrn9 yICGRPKhWPxndh0wEw7URu42/lUmHnxO7gtdnHuyHxt7bSTiVMv6gTrKt0RjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz0YYtL5iNcKs2BjCZp+lMPRqnI0wHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVqOUuQBFbumu+U00r580GhcfYeM+v2Q0iY mkxANHUXSVZQbB5SrJ3T5g655iR/78WGQZ4YnOgjfi/1/BU7bK3RIp+hKbIXpSAs jcow6scN0kP5v1z7Dy8vdJbnrXv7nww4BOTVCUas1zl6cQisM0OulOHikbDMBCNT dQHVAuou4O41cZuilYgmXuhmn76pOiBQFaB4GigdjhjH54rqyomf6LqSz6HKhSkT IydYEOrEj+gPF9n/rwwg/2ueSFMz+YovzV8IQPItYuSHJSpYPZINvsDPeGADPkGo Ev7H/nTkyWF169UdarZtfiYsmKjsty1SmXwoXIaQmkH0A5eIrTQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:34 2026 by rpki-client