$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: Z1uVMXOLNWZCzoKezFdFVeRUXV10SiU0mLgDNzu9XcI= Subject key identifier: 30:92:05:83:95:D3:95:47:70:1E:03:B4:C5:C9:64:DA:1D:AF:06:6A Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 28C8B8E76DBBAF49BBBD2BEFA75DD323162034C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 031D Signing time: Thu 16 Apr 2026 08:22:22 +0000 Manifest this update: Thu 16 Apr 2026 08:17:22 +0000 Manifest next update: Sun 19 Apr 2026 09:54:22 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) 3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: V0lqgJpIwlHJFEraQTxjKcoXHt6SjJcSU1xvlsLJHy4=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c8:b8:e7:6d:bb:af:49:bb:bd:2b:ef:a7:5d:d3:23:16:20:34:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Apr 16 08:17:22 2026 GMT Not After : Apr 19 09:54:22 2026 GMT Subject: CN=3092058395D39547701E03B4C5C964DA1DAF066A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:b7:3f:ef:5d:8b:46:a9:8a:53:7b:26:e2: da:d4:4e:fe:85:93:75:bb:cd:dd:d0:ea:bf:25:19: 06:1f:12:ec:68:75:25:f8:11:56:55:d6:7c:2e:b8: df:28:96:cb:69:62:32:2c:6e:3a:f0:bf:6c:5b:c7: 3d:7e:d4:d4:c7:56:16:10:24:e5:83:90:c6:2c:5f: b0:36:6a:ff:71:14:86:65:06:ef:a9:4e:4f:9e:bd: 8f:3a:3f:8b:28:75:e8:05:b6:af:3e:33:95:d4:d1: 9e:28:91:c6:57:72:17:62:90:35:bb:e6:d9:b6:6c: e3:d1:88:c5:9c:f3:b5:0e:b4:53:d9:20:4b:47:67: 9d:a8:2b:e7:5c:57:25:2e:b2:c9:6c:00:60:e8:24: 3c:a9:0a:98:95:5f:c9:79:78:6e:0a:a2:47:43:06: f3:83:0e:63:65:e1:57:8f:a0:b2:b5:df:c0:ae:a1: 76:0a:aa:d3:9a:fb:33:22:22:07:be:91:a8:6d:3c: d3:26:1a:69:73:5c:7a:52:46:e9:e3:75:09:8f:d0: 80:23:08:3b:75:e2:99:ba:02:8d:b4:62:64:d9:5d: 09:1c:47:e7:03:09:77:92:6c:7b:40:b0:9d:8a:dc: 75:ba:db:be:67:0f:f6:fe:e1:2b:77:e2:b4:9d:d5: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:05:83:95:D3:95:47:70:1E:03:B4:C5:C9:64:DA:1D:AF:06:6A X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:69:aa:ac:96:f3:4c:19:49:a0:98:0f:6f:e0:90:b0:a6:c5: a9:48:e0:51:23:d1:05:a9:3d:61:6b:f1:c9:72:36:87:07:58: a5:09:9d:69:cd:ac:ca:48:5a:29:58:c3:9c:73:77:52:2f:ef: 64:c2:e3:09:0a:49:e8:63:22:1b:24:11:63:aa:81:a1:fa:15: 52:58:ad:17:20:c0:8d:7a:a5:33:ea:d2:3f:fe:b2:bc:0f:5d: 0e:80:ca:67:c8:cc:fa:d5:5a:00:75:9c:54:82:2e:e4:0e:e0: b2:17:56:44:69:6f:59:e1:82:4e:1c:e4:76:a0:82:8f:03:2d: c5:ad:7c:71:69:8c:0a:1b:77:a1:9a:b4:68:23:ca:5c:b2:79: d4:6e:0a:fc:c5:b2:3d:57:da:5a:3b:7a:f1:67:fb:6c:e4:bb: 98:f4:ca:69:73:cd:6f:59:bc:b9:2f:f1:f2:53:7b:51:89:0e: 6b:03:ed:13:e5:d0:72:9c:93:eb:f7:73:16:ce:d9:db:a4:57: 3d:a6:bc:cf:d0:60:e1:ce:a5:1d:74:17:eb:b7:b4:01:64:68: 1b:74:60:1e:f8:26:0b:77:d8:73:78:6a:bf:20:e5:0b:08:39: 6c:eb:83:85:f6:b1:bf:b2:cb:db:30:96:32:82:d8:87:fc:f3: a5:87:96:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMi45227r0m7vSvvp13TIxYgNMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNjA0MTYwODE3MjJaFw0yNjA0MTkwOTU0MjJaMDMxMTAvBgNV BAMTKDMwOTIwNTgzOTVEMzk1NDc3MDFFMDNCNEM1Qzk2NERBMURBRjA2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhJrc/712LRqmKU3sm4trUTv6F k3W7zd3Q6r8lGQYfEuxodSX4EVZV1nwuuN8olstpYjIsbjrwv2xbxz1+1NTHVhYQ JOWDkMYsX7A2av9xFIZlBu+pTk+evY86P4sodegFtq8+M5XU0Z4okcZXchdikDW7 5tm2bOPRiMWc87UOtFPZIEtHZ52oK+dcVyUusslsAGDoJDypCpiVX8l5eG4KokdD BvODDmNl4VePoLK138CuoXYKqtOa+zMiIge+kahtPNMmGmlzXHpSRunjdQmP0IAj CDt14pm6Ao20YmTZXQkcR+cDCXeSbHtAsJ2K3HW6275nD/b+4St34rSd1TO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJIFg5XTlUdwHgO0xclk2h2vBmowHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHppqqyW80wZSaCYD2/gkLCmxalI4FEj0QWp PWFr8clyNocHWKUJnWnNrMpIWilYw5xzd1Iv72TC4wkKSehjIhskEWOqgaH6FVJY rRcgwI16pTPq0j/+srwPXQ6AymfIzPrVWgB1nFSCLuQO4LIXVkRpb1nhgk4c5Hag go8DLcWtfHFpjAobd6GatGgjylyyedRuCvzFsj1X2lo7evFn+2zku5j0ymlzzW9Z vLkv8fJTe1GJDmsD7RPl0HKck+v3cxbO2dukVz2mvM/QYOHOpR10F+u3tAFkaBt0 YB74Jgt32HN4ar8g5QsIOWzrg4X2sb+yy9swljKC2If886WHlg4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:08:24 2026 by rpki-client