$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: Qga1RrEmnSLhlDJYyJd6tbFZRIOmg7NI12qzgwxxSF8= Subject key identifier: 9E:34:A8:94:F3:AC:7F:22:32:B4:FF:5D:05:BA:45:84:8C:03:84:FC Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 7DC25ACF9C88E480EA173A44E58B2CDFCB590A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 027E Signing time: Sun 19 Apr 2026 08:10:01 +0000 Manifest this update: Sun 19 Apr 2026 08:05:01 +0000 Manifest next update: Wed 22 Apr 2026 19:26:01 +0000 Files and hashes: 1: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) 2: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: NVEj+/ncd5hB4zfl9eCdJfKUTZP+Zi9cXRr3RecGh5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c2:5a:cf:9c:88:e4:80:ea:17:3a:44:e5:8b:2c:df:cb:59:0a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Apr 19 08:05:01 2026 GMT Not After : Apr 22 19:26:01 2026 GMT Subject: CN=9E34A894F3AC7F2232B4FF5D05BA45848C0384FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:97:6b:44:ea:e4:48:bc:e9:4b:e1:b2:e3: 2e:1e:6c:f1:89:7e:63:13:f9:c1:b9:cf:bb:88:f1: 5d:67:f6:a0:9e:25:62:35:fa:64:d3:9e:c5:8f:f6: c6:b2:86:63:b1:24:ba:15:2f:ec:73:d5:3c:34:7b: 4d:a1:c5:51:98:35:fc:cf:e8:4b:19:51:71:63:6c: 50:51:b1:4a:14:ad:d6:9a:dc:d2:4a:1c:c5:d8:27: 2d:84:73:f0:39:f2:4c:75:e0:bd:3b:d0:d1:42:70: a6:64:30:3c:ee:f5:2b:f2:e0:d2:20:2b:91:9f:a5: 30:4e:5e:af:49:69:09:e3:dc:bb:70:af:68:bc:b0: 96:fa:b4:22:a4:69:f3:50:99:c0:8d:f4:f8:f3:94: 1c:f8:c8:12:13:f4:ad:05:fc:1f:f4:6c:e6:b9:ff: be:47:ac:49:98:5b:94:95:f5:fe:10:b5:7d:b2:09: e0:fb:70:4b:56:15:de:03:c1:93:c3:54:1c:1f:86: 3e:8a:0d:9b:73:c6:ee:a8:cb:4c:8c:45:bd:e6:19: fd:16:4f:ac:84:c5:7a:ae:9c:82:6d:b6:8e:c7:cd: 77:1b:39:39:d1:86:4c:2f:97:27:82:1b:21:f1:12: 29:2f:f6:ed:d4:07:cd:1d:b1:7e:0e:f5:d5:f1:6f: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:34:A8:94:F3:AC:7F:22:32:B4:FF:5D:05:BA:45:84:8C:03:84:FC X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0b:06:4e:ae:28:19:d2:e1:02:2e:d2:49:c1:04:70:6c:7e: 2c:40:6a:a3:a7:9e:10:ff:84:16:93:a8:4d:eb:69:aa:65:10: 56:bc:59:c9:4d:24:27:30:44:33:36:18:1d:f9:85:68:a4:08: 3a:f9:f8:a2:fd:33:d5:0b:99:6b:23:0f:6f:90:a9:79:68:8f: be:4a:38:12:6f:68:8a:50:38:41:2a:55:74:09:e4:a1:1d:76: a3:43:7a:d9:fe:ed:85:07:36:b4:39:5c:b3:7d:08:1a:9a:84: 3e:36:24:f4:21:a1:52:2a:31:07:6e:b3:cc:dc:a6:e9:7d:01: d3:2b:0d:69:29:a0:ae:1b:39:ca:bd:43:fe:05:a4:17:66:99: b4:cc:a9:c1:80:19:51:b0:5d:b2:a9:05:7d:1b:98:d7:18:96: ff:18:3e:59:7c:db:22:9b:f9:27:ee:93:33:f1:72:dc:3d:cc: 0f:47:9a:bd:9d:f3:84:1b:84:2e:7f:a5:da:c1:b8:4c:5a:90: 91:b9:a2:12:2a:f2:64:a8:73:63:e1:5f:12:4a:ff:49:0f:5c: 17:22:51:78:b4:aa:48:10:86:e0:28:b5:e1:cd:78:eb:ab:66: 2f:26:5c:dc:81:03:0c:bc:73:1d:ca:77:31:45:f3:24:95:7f: 17:ac:28:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcJaz5yI5IDqFzpE5Yss38tZCnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNjA0MTkwODA1MDFaFw0yNjA0MjIxOTI2MDFaMDMxMTAvBgNV BAMTKDlFMzRBODk0RjNBQzdGMjIzMkI0RkY1RDA1QkE0NTg0OEMwMzg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sJdrROrkSLzpS+Gy4y4ebPGJ fmMT+cG5z7uI8V1n9qCeJWI1+mTTnsWP9sayhmOxJLoVL+xz1Tw0e02hxVGYNfzP 6EsZUXFjbFBRsUoUrdaa3NJKHMXYJy2Ec/A58kx14L070NFCcKZkMDzu9Svy4NIg K5GfpTBOXq9JaQnj3Ltwr2i8sJb6tCKkafNQmcCN9PjzlBz4yBIT9K0F/B/0bOa5 /75HrEmYW5SV9f4QtX2yCeD7cEtWFd4DwZPDVBwfhj6KDZtzxu6oy0yMRb3mGf0W T6yExXqunIJtto7HzXcbOTnRhkwvlyeCGyHxEikv9u3UB80dsX4O9dXxbz3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjSolPOsfyIytP9dBbpFhIwDhPwwHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQLBk6uKBnS4QIu0knBBHBsfixAaqOnnhD/ hBaTqE3raaplEFa8WclNJCcwRDM2GB35hWikCDr5+KL9M9ULmWsjD2+QqXloj75K OBJvaIpQOEEqVXQJ5KEddqNDetn+7YUHNrQ5XLN9CBqahD42JPQhoVIqMQdus8zc pul9AdMrDWkpoK4bOcq9Q/4FpBdmmbTMqcGAGVGwXbKpBX0bmNcYlv8YPll82yKb +SfukzPxctw9zA9Hmr2d84QbhC5/pdrBuExakJG5ohIq8mSoc2PhXxJK/0kPXBci UXi0qkgQhuAoteHNeOurZi8mXNyBAwy8cx3KdzFF8ySVfxesKJI= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:14 2026 by rpki-client