$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: nNI0FJbx5N4Ulz+ZzXqP8MZVEjgTRqbzjkxVAdqBiok= Subject key identifier: 89:EB:75:F3:BF:A9:FB:EA:67:3E:96:20:C0:2B:8C:77:4B:E9:88:3D Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 6D2CADB3C440365BC113C9834717C702E111826F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0286 Signing time: Thu 16 Apr 2026 13:01:19 +0000 Manifest this update: Thu 16 Apr 2026 12:56:19 +0000 Manifest next update: Sun 19 Apr 2026 19:00:19 +0000 Files and hashes: 1: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: BgFgmH5jU+LRrTrgwlopaW2g0oi0zIzrx7nTuzaPyLk=) 2: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: 88H5C7RHOSXXicMg9LLX2fLDrChGSHt3hguKEqW6Tyw=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: kaLOnVcH2eiN/bRpUUdlc2RBWfunbSbF+3c/cmkKp/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2c:ad:b3:c4:40:36:5b:c1:13:c9:83:47:17:c7:02:e1:11:82:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Apr 16 12:56:19 2026 GMT Not After : Apr 19 19:00:19 2026 GMT Subject: CN=89EB75F3BFA9FBEA673E9620C02B8C774BE9883D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:70:ff:f8:2d:4d:d3:23:09:d0:a7:f4:a5: 74:64:69:0b:51:2e:53:51:cf:98:93:9b:cb:a3:30: ac:63:62:d1:2b:ce:fe:c9:68:c7:f7:dd:9f:18:44: d2:c7:01:f6:46:59:a5:6c:c6:e0:28:c0:dd:e2:bd: 99:ab:ef:5d:86:14:bb:cb:b8:42:15:a2:6b:b7:81: 93:b2:59:61:7c:ba:55:93:a7:01:b2:dd:d5:0b:00: b1:4c:59:7a:26:7c:67:ae:a4:4b:96:41:a5:65:d7: 63:ba:41:84:5d:81:91:40:94:f5:e9:0b:2a:61:ed: 01:18:e9:30:ca:f1:de:46:fd:83:d9:76:c5:e7:2d: e5:a8:ce:97:61:4f:61:57:7b:05:5e:df:c6:96:5d: f4:9c:ca:1d:65:48:bb:16:53:e3:95:b2:d3:9e:e8: 20:9f:4b:86:04:b8:72:61:38:e3:04:48:a3:c3:36: d1:60:04:4a:89:a3:cc:d5:b6:f4:f3:77:af:bf:d2: 88:ab:58:93:94:db:5d:f2:85:0f:e9:fc:5f:12:65: 7b:19:50:8f:b0:06:94:92:c0:0b:a7:aa:83:ad:91: 3d:f6:80:ff:67:2e:66:b0:f4:5c:cd:dd:4b:67:ec: e3:8a:f1:28:3b:65:de:24:a9:7d:19:f3:76:f9:c8: fa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:75:F3:BF:A9:FB:EA:67:3E:96:20:C0:2B:8C:77:4B:E9:88:3D X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0d:70:3f:6c:b8:3f:88:7f:80:b3:ab:55:7f:3b:81:dc:05: 5c:85:ad:a2:0f:bd:db:2e:43:9c:f9:86:cb:a1:bd:a6:42:7f: df:f6:d3:6b:45:b0:4d:3d:fd:58:02:c4:6e:f9:75:74:eb:65: 2e:8c:01:66:6c:de:9e:8a:fb:4e:9c:30:80:e8:f2:b9:59:ef: c5:89:36:15:d2:9a:a0:8e:1b:53:8c:4c:16:28:b5:25:2a:59: e1:71:b9:76:07:8e:2e:e5:13:92:72:38:15:25:68:85:71:15: de:94:f4:71:2f:63:02:aa:e5:90:3a:7f:26:9e:98:17:fe:7d: 0c:46:cf:26:9c:de:db:32:e8:9f:1d:82:b1:b3:21:5f:b6:ea: 7e:23:b7:ec:ba:34:6c:ed:95:c0:88:00:92:f6:af:4f:77:29: 80:d8:ec:a6:dd:46:e1:44:24:99:00:a0:a4:31:2c:33:3f:41: 02:12:98:74:0a:37:10:6f:cc:3f:3d:c4:27:d5:85:1e:8a:ce: 95:84:2d:78:cb:be:26:1c:1c:63:3e:32:e4:6e:74:41:e1:60: 99:61:7d:64:88:19:78:c9:14:54:d8:cb:06:89:fa:ff:4b:4e: b6:ac:2c:11:12:16:35:bc:da:08:62:68:86:23:6a:71:dc:f8: b6:3d:be:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSyts8RANlvBE8mDRxfHAuERgm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNjA0MTYxMjU2MTlaFw0yNjA0MTkxOTAwMTlaMDMxMTAvBgNV BAMTKDg5RUI3NUYzQkZBOUZCRUE2NzNFOTYyMEMwMkI4Qzc3NEJFOTg4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOHD/+C1N0yMJ0Kf0pXRkaQtR LlNRz5iTm8ujMKxjYtErzv7JaMf33Z8YRNLHAfZGWaVsxuAowN3ivZmr712GFLvL uEIVomu3gZOyWWF8ulWTpwGy3dULALFMWXomfGeupEuWQaVl12O6QYRdgZFAlPXp Cyph7QEY6TDK8d5G/YPZdsXnLeWozpdhT2FXewVe38aWXfScyh1lSLsWU+OVstOe 6CCfS4YEuHJhOOMESKPDNtFgBEqJo8zVtvTzd6+/0oirWJOU213yhQ/p/F8SZXsZ UI+wBpSSwAunqoOtkT32gP9nLmaw9FzN3Utn7OOK8Sg7Zd4kqX0Z83b5yPp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiet187+p++pnPpYgwCuMd0vpiD0wHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkNcD9suD+If4Czq1V/O4HcBVyFraIPvdsu Q5z5hsuhvaZCf9/202tFsE09/VgCxG75dXTrZS6MAWZs3p6K+06cMIDo8rlZ78WJ NhXSmqCOG1OMTBYotSUqWeFxuXYHji7lE5JyOBUlaIVxFd6U9HEvYwKq5ZA6fyae mBf+fQxGzyac3tsy6J8dgrGzIV+26n4jt+y6NGztlcCIAJL2r093KYDY7KbdRuFE JJkAoKQxLDM/QQISmHQKNxBvzD89xCfVhR6KzpWELXjLviYcHGM+MuRudEHhYJlh fWSIGXjJFFTYywaJ+v9LTrasLBESFjW82ghiaIYjanHc+LY9voU= -----END CERTIFICATE-----Generated at Sat Apr 18 00:40:34 2026 by rpki-client