$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: 48JZhh1d2FS8cWNi8wpgHDCwv+G9kGWoWfI+m9jstnE= Subject key identifier: 7D:A4:1D:2E:3C:12:66:D6:1A:47:31:1F:CC:42:1A:E9:49:24:1B:C2 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 4C36783561FAFB1B483190FC3638C4BA51CB16F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 13:01:54 +0000 Manifest this update: Fri 17 Apr 2026 12:56:54 +0000 Manifest next update: Mon 20 Apr 2026 20:09:54 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: FvZAXksVWEQf22AOnSXxRxyDH3ovQR9j53nrCb6k888=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:36:78:35:61:fa:fb:1b:48:31:90:fc:36:38:c4:ba:51:cb:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Apr 17 12:56:54 2026 GMT Not After : Apr 20 20:09:54 2026 GMT Subject: CN=7DA41D2E3C1266D61A47311FCC421AE949241BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:40:db:b1:57:9b:b2:27:2d:51:32:8f:63:ba: 36:9d:60:8e:12:8c:42:4b:f1:85:f4:3a:8e:4e:6d: de:7c:af:e6:47:61:99:fa:95:01:87:00:95:0d:60: a0:f2:91:d6:7f:f7:b2:5a:e6:6c:78:6e:f8:25:43: 63:f1:94:70:08:83:d7:08:55:9a:12:7f:af:45:8b: ad:4a:ac:27:9a:21:b9:17:fe:e6:e0:27:6c:f2:41: 56:dc:b7:1b:b6:60:26:3d:36:69:9d:14:ce:ee:72: a9:0e:d3:1a:24:eb:86:8c:29:24:a2:63:02:b0:8c: 34:b2:d1:f3:3c:ab:48:40:3e:4d:dd:83:8f:fc:79: d8:25:e5:4b:29:db:5b:58:42:1e:f8:8e:be:d9:10: bb:1a:76:a9:a1:dc:39:61:a6:e6:ae:cf:47:86:84: ab:46:60:98:82:35:35:b1:24:ab:dc:de:1a:d2:7c: 95:3b:d0:7d:4b:06:81:f1:57:71:9d:c3:51:d1:83: ea:06:a7:7e:c7:3e:1e:fe:9b:38:47:16:24:25:dc: 19:9c:a8:c8:fd:b8:99:27:a3:cf:7d:b3:b0:1b:14: 00:84:59:a0:50:0a:6c:61:2c:63:db:51:2e:6e:3c: 9a:08:d2:60:f3:01:a0:25:92:30:cc:68:7d:2d:c6: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:1D:2E:3C:12:66:D6:1A:47:31:1F:CC:42:1A:E9:49:24:1B:C2 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:ce:b6:ef:fb:c4:f8:91:10:d9:59:52:5e:07:61:57:cc: fc:5c:5e:e9:50:c4:29:ad:f5:d0:f9:62:48:e2:eb:b2:a2:07: 17:5e:5a:b8:4b:9a:15:66:53:2c:8f:5d:93:ee:77:72:5e:62: 3f:57:7e:2b:14:db:d8:aa:e4:10:24:28:7e:78:62:78:a6:eb: 73:ad:cb:ff:71:8b:7f:6f:77:54:2e:dc:d1:d6:05:65:00:0e: 5f:99:ec:e9:5e:1b:7d:89:b6:45:0a:e2:db:e4:24:1a:8b:b5: 0b:a6:63:c2:f5:0e:f0:51:e9:e6:ab:4d:f6:bc:e7:af:c8:f1: 2f:91:b1:8c:dc:f4:cd:b1:5a:7e:d8:05:36:a2:b4:ce:ac:31: 53:0d:2c:19:6a:fc:e8:fb:69:2a:d9:dd:5b:c4:d8:d2:4f:3b: 52:bc:22:d9:91:14:11:5a:fd:c2:17:7f:95:a7:7f:8e:56:32: 29:84:fb:ab:8c:d5:c5:1e:c2:7f:b1:c4:31:b7:82:14:c2:64: 72:1e:45:b3:14:61:2e:5b:27:f9:dd:01:95:f0:6d:a0:06:d9: 62:16:c0:6a:d5:d6:75:b9:a3:84:fb:6e:1f:dc:92:05:3e:f7: c3:0a:f7:49:dd:58:80:95:9e:bd:eb:f9:fe:53:01:74:7e:58: c2:33:3c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDZ4NWH6+xtIMZD8NjjEulHLFvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNjA0MTcxMjU2NTRaFw0yNjA0MjAyMDA5NTRaMDMxMTAvBgNV BAMTKDdEQTQxRDJFM0MxMjY2RDYxQTQ3MzExRkNDNDIxQUU5NDkyNDFCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiQNuxV5uyJy1RMo9jujadYI4S jEJL8YX0Oo5Obd58r+ZHYZn6lQGHAJUNYKDykdZ/97Ja5mx4bvglQ2PxlHAIg9cI VZoSf69Fi61KrCeaIbkX/ubgJ2zyQVbctxu2YCY9NmmdFM7ucqkO0xok64aMKSSi YwKwjDSy0fM8q0hAPk3dg4/8edgl5Usp21tYQh74jr7ZELsadqmh3Dlhpuauz0eG hKtGYJiCNTWxJKvc3hrSfJU70H1LBoHxV3Gdw1HRg+oGp37HPh7+mzhHFiQl3Bmc qMj9uJkno899s7AbFACEWaBQCmxhLGPbUS5uPJoI0mDzAaAlkjDMaH0txtwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaQdLjwSZtYaRzEfzEIa6UkkG8IwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4dzrbv+8T4kRDZWVJeB2FXzPxcXulQxCmt 9dD5Ykji67KiBxdeWrhLmhVmUyyPXZPud3JeYj9XfisU29iq5BAkKH54Ynim63Ot y/9xi39vd1Qu3NHWBWUADl+Z7OleG32JtkUK4tvkJBqLtQumY8L1DvBR6earTfa8 56/I8S+RsYzc9M2xWn7YBTaitM6sMVMNLBlq/Oj7aSrZ3VvE2NJPO1K8ItmRFBFa /cIXf5Wnf45WMimE+6uM1cUewn+xxDG3ghTCZHIeRbMUYS5bJ/ndAZXwbaAG2WIW wGrV1nW5o4T7bh/ckgU+98MK90ndWICVnr3r+f5TAXR+WMIzPPE= -----END CERTIFICATE-----Generated at Fri Apr 17 21:35:58 2026 by rpki-client