$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: Xs/YZjNe0o3ljDRFBLZPUPyDBa+4C/SfbxdHmtsGSx8= Subject key identifier: C8:CA:76:98:70:8D:E6:EA:4A:60:E1:9A:92:7A:EA:E3:93:C0:A7:64 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 691DF052349A6895E90A3B73FFA95D0A6B463080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 010E Signing time: Sun 19 Apr 2026 04:01:21 +0000 Manifest this update: Sun 19 Apr 2026 03:56:21 +0000 Manifest next update: Wed 22 Apr 2026 14:46:21 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: h1IigMk8C34rcGnA7DwPYBs1PGlwb6PQCU5EX2JEcWA=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1d:f0:52:34:9a:68:95:e9:0a:3b:73:ff:a9:5d:0a:6b:46:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Apr 19 03:56:21 2026 GMT Not After : Apr 22 14:46:21 2026 GMT Subject: CN=C8CA7698708DE6EA4A60E19A927AEAE393C0A764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:18:f3:66:d6:22:56:4d:41:49:9e:5b:35:03: 9d:17:fd:5f:37:56:be:e4:b9:84:0d:00:dd:1c:ea: b3:7e:45:ba:73:96:4b:a9:f0:12:1b:c2:92:07:af: b4:22:27:31:d0:24:57:9e:68:ed:73:7d:90:c9:60: f8:0a:72:31:94:d4:73:49:3d:4d:d0:b3:74:e7:2c: 19:29:5f:ca:52:2a:57:0c:b7:a5:ec:9e:e6:23:f4: 36:d2:b1:67:48:4e:16:05:b8:38:86:45:76:7d:ab: 2a:81:24:c6:95:2e:1d:d6:b0:c3:7c:9b:7d:d4:17: 84:c4:f2:d7:63:b5:9d:41:66:df:ee:41:74:bc:58: c7:0a:f8:99:0c:b9:70:c7:d4:a0:af:66:9e:e4:7b: 23:f9:eb:54:a4:73:7b:8a:5a:b7:6c:92:ad:b0:ea: ab:8a:11:f5:2e:bb:d5:16:01:21:d1:b4:54:56:ac: 8c:26:c7:d2:39:86:e9:91:be:ec:34:b1:2f:21:3f: f3:00:f8:09:dc:a0:96:d3:d4:58:b3:a4:51:b9:47: 02:00:dc:13:92:a2:5f:50:aa:54:c8:85:37:bb:f9: c7:a1:f2:16:e6:17:61:6d:2b:47:7d:28:ba:db:05: 1a:4b:56:91:d9:46:62:99:d1:94:b8:1a:b3:02:a9: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:76:98:70:8D:E6:EA:4A:60:E1:9A:92:7A:EA:E3:93:C0:A7:64 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:58:d9:2a:5b:75:c4:a5:40:08:23:7e:45:0b:de:da:58:86: a0:1e:14:e3:1b:22:21:7b:bf:03:a0:c9:31:35:6d:b4:e2:8d: 4c:0a:b1:3b:b4:81:b7:b3:ab:d5:04:29:f8:70:d7:56:a7:44: ae:1f:f8:d9:3e:f9:c2:27:0b:55:67:d4:9c:18:cf:05:c5:1c: 8b:7e:2d:06:2f:dd:b8:b1:37:5f:df:9d:84:73:80:f1:6e:d5: ff:96:11:49:f9:f8:cd:90:bf:7d:8c:4d:d8:dd:b7:fc:d5:ca: ef:9b:c2:15:2c:7e:76:af:1a:8b:56:54:6d:40:8c:10:fc:bb: e2:2e:70:03:6b:a0:6e:3b:f8:45:3b:27:7e:7c:6e:f4:12:81: 1e:d2:be:e9:eb:29:fd:76:9b:71:42:47:21:e7:63:6f:45:d1: ed:7a:b0:3f:a3:17:62:ab:34:f4:03:bb:50:ee:e9:e3:8a:c3: 5c:4c:ac:0d:ee:55:33:de:03:88:7e:2e:3a:4e:6d:43:0c:9e: 23:f0:13:49:a0:d0:45:ae:68:4e:e1:ff:f3:e1:71:db:3d:c4: a9:10:a1:74:1f:45:37:d0:24:fc:5c:58:00:28:ba:b7:21:a0: 75:59:e9:d9:ed:78:c1:08:3e:fc:85:a9:14:12:49:fd:29:26: ec:b5:14:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaR3wUjSaaJXpCjtz/6ldCmtGMIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNjA0MTkwMzU2MjFaFw0yNjA0MjIxNDQ2MjFaMDMxMTAvBgNV BAMTKEM4Q0E3Njk4NzA4REU2RUE0QTYwRTE5QTkyN0FFQUUzOTNDMEE3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzGPNm1iJWTUFJnls1A50X/V83 Vr7kuYQNAN0c6rN+Rbpzlkup8BIbwpIHr7QiJzHQJFeeaO1zfZDJYPgKcjGU1HNJ PU3Qs3TnLBkpX8pSKlcMt6XsnuYj9DbSsWdIThYFuDiGRXZ9qyqBJMaVLh3WsMN8 m33UF4TE8tdjtZ1BZt/uQXS8WMcK+JkMuXDH1KCvZp7keyP561Skc3uKWrdskq2w 6quKEfUuu9UWASHRtFRWrIwmx9I5humRvuw0sS8hP/MA+AncoJbT1FizpFG5RwIA 3BOSol9QqlTIhTe7+ceh8hbmF2FtK0d9KLrbBRpLVpHZRmKZ0ZS4GrMCqZmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMp2mHCN5upKYOGaknrq45PAp2QwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1Y2SpbdcSlQAgjfkUL3tpYhqAeFOMbIiF7 vwOgyTE1bbTijUwKsTu0gbezq9UEKfhw11anRK4f+Nk++cInC1Vn1JwYzwXFHIt+ LQYv3bixN1/fnYRzgPFu1f+WEUn5+M2Qv32MTdjdt/zVyu+bwhUsfnavGotWVG1A jBD8u+IucANroG47+EU7J358bvQSgR7SvunrKf12m3FCRyHnY29F0e16sD+jF2Kr NPQDu1Du6eOKw1xMrA3uVTPeA4h+LjpObUMMniPwE0mg0EWuaE7h//Phcds9xKkQ oXQfRTfQJPxcWAAourchoHVZ6dnteMEIPvyFqRQSSf0pJuy1FOs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:09 2026 by rpki-client