$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: 7GoTOvYGO2zHO4pyZcjcvZLH8CAidA+TVETlmYe/nHs= Subject key identifier: F6:88:BD:1F:E9:03:80:36:DE:60:93:2F:62:B9:A4:B5:7A:C6:91:EB Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 685314DDCB3D4D0D2B5EDA62B9F68561A8219761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 024A Signing time: Fri 17 Apr 2026 06:32:14 +0000 Manifest this update: Fri 17 Apr 2026 06:27:14 +0000 Manifest next update: Mon 20 Apr 2026 08:31:14 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 2: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: m1I6NIH9TRa9Vqg+IgOB5wZTp7TzWJTYnGXyJN3DCcI=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:53:14:dd:cb:3d:4d:0d:2b:5e:da:62:b9:f6:85:61:a8:21:97:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Apr 17 06:27:14 2026 GMT Not After : Apr 20 08:31:14 2026 GMT Subject: CN=F688BD1FE9038036DE60932F62B9A4B57AC691EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:85:da:1c:c1:3a:30:fd:2b:19:16:7e:4c: 42:18:01:02:68:9a:c6:84:91:b9:cd:aa:f5:9b:bb: fb:c4:b4:77:61:b7:ba:f2:d7:7f:25:0b:05:e4:e6: f4:2a:42:3f:f7:48:d6:7a:a6:40:c6:fd:68:26:8d: 20:2b:a2:46:e4:9a:bc:41:d7:df:48:9c:0c:a7:01: 3e:08:55:94:0e:66:79:03:bf:42:cb:bf:7f:00:36: 43:cc:9c:1f:9d:a6:6c:5a:c2:40:a4:43:90:4b:73: 67:31:d4:45:93:64:09:4e:48:73:4e:00:9e:4f:7a: a4:94:e2:c2:5b:46:94:64:d2:8a:af:d1:d3:bf:bd: 66:ed:26:9d:fe:e4:a6:10:02:36:5a:ee:34:86:4e: 31:23:86:ae:48:97:81:3d:e5:09:ab:d6:53:38:b6: dd:dd:ad:12:63:7b:6a:e9:ea:63:1e:ca:81:72:2b: 0c:ee:13:60:59:e6:dc:45:49:b8:35:54:0e:5a:c4: e5:3c:ff:60:34:0d:6c:8d:3b:5b:d2:87:de:09:89: fa:10:c7:ec:04:af:76:df:6b:2c:cb:7f:c7:7c:cb: 35:00:ed:bc:6e:9a:6f:f9:d0:01:51:19:3f:2a:b1: 69:14:a3:ca:70:29:13:21:af:16:56:f7:b6:90:e4: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:BD:1F:E9:03:80:36:DE:60:93:2F:62:B9:A4:B5:7A:C6:91:EB X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:c3:5a:43:22:9d:89:be:f7:7c:e0:74:35:bb:60:4e:18: fb:76:b2:d1:39:1c:79:4d:15:3a:19:86:da:1b:cf:93:de:1d: ab:bf:e1:05:9a:fe:c5:c8:e4:b1:cb:d8:e0:61:bc:c0:55:fa: ac:3b:40:57:c5:12:69:60:81:8d:f9:01:a1:61:50:3b:07:44: 30:a7:04:52:2d:94:ef:f8:fa:12:c4:39:9c:9f:de:a6:d0:6a: 2f:67:c3:9d:68:40:a6:7f:f3:f2:73:8a:da:dd:b6:81:66:6b: 43:cd:88:d7:2a:63:ba:a1:bb:fd:11:da:57:73:27:ea:01:68: 0d:17:25:72:52:78:55:6e:05:c0:a3:da:da:cd:38:ea:c4:5b: be:b8:6b:32:41:cb:cc:27:8c:e5:ff:a2:01:f8:7c:e7:b1:88: 25:8a:ee:ad:b9:31:42:3c:1f:9c:5b:22:5d:36:18:7b:cb:86: 70:61:78:dd:cc:b0:d8:bf:b2:fc:82:16:0e:ec:10:25:42:0e: 19:b9:8a:86:4f:46:cb:5a:e7:0b:5d:c3:42:13:82:8d:95:ed: 0c:f3:73:e7:3d:a2:10:f5:fa:61:42:77:ad:44:48:11:f2:05: 45:ce:b3:e2:35:c2:9e:65:c4:27:f1:cc:55:b0:1a:9b:e0:05: b2:ac:ce:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFMU3cs9TQ0rXtpiufaFYaghl2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNjA0MTcwNjI3MTRaFw0yNjA0MjAwODMxMTRaMDMxMTAvBgNV BAMTKEY2ODhCRDFGRTkwMzgwMzZERTYwOTMyRjYyQjlBNEI1N0FDNjkxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPYXaHME6MP0rGRZ+TEIYAQJo msaEkbnNqvWbu/vEtHdht7ry138lCwXk5vQqQj/3SNZ6pkDG/WgmjSArokbkmrxB 199InAynAT4IVZQOZnkDv0LLv38ANkPMnB+dpmxawkCkQ5BLc2cx1EWTZAlOSHNO AJ5PeqSU4sJbRpRk0oqv0dO/vWbtJp3+5KYQAjZa7jSGTjEjhq5Il4E95Qmr1lM4 tt3drRJje2rp6mMeyoFyKwzuE2BZ5txFSbg1VA5axOU8/2A0DWyNO1vSh94JifoQ x+wEr3bfayzLf8d8yzUA7bxumm/50AFRGT8qsWkUo8pwKRMhrxZW97aQ5Bm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9oi9H+kDgDbeYJMvYrmktXrGkeswHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH1w1pDIp2Jvvd84HQ1u2BOGPt2stE5HHlN FToZhtobz5PeHau/4QWa/sXI5LHL2OBhvMBV+qw7QFfFEmlggY35AaFhUDsHRDCn BFItlO/4+hLEOZyf3qbQai9nw51oQKZ/8/JzitrdtoFma0PNiNcqY7qhu/0R2ldz J+oBaA0XJXJSeFVuBcCj2trNOOrEW764azJBy8wnjOX/ogH4fOexiCWK7q25MUI8 H5xbIl02GHvLhnBheN3MsNi/svyCFg7sECVCDhm5ioZPRsta5wtdw0ITgo2V7Qzz c+c9ohD1+mFCd61ESBHyBUXOs+I1wp5lxCfxzFWwGpvgBbKszoU= -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:16 2026 by rpki-client