$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: vXOJCcuWL3DUmpq56JXjjOvf5GQzmEDGj25BsBzuUdY= Subject key identifier: 0B:9F:9A:BA:21:4A:F3:A6:95:D9:C9:93:95:33:40:D0:3D:66:EB:66 Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 3AEA936D6BD66D87ABCF9A6F1388B0262B9DAB3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 06:20:01 +0000 Manifest this update: Fri 17 Apr 2026 06:15:01 +0000 Manifest next update: Mon 20 Apr 2026 13:29:01 +0000 Files and hashes: 1: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 2: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) 3: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 4: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 5: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 6: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 7: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 8: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) 9: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: VrZRCdj9V515Y4qSaMNPe39o0SehxH3iEPbWi/oyzK0=) 10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ea:93:6d:6b:d6:6d:87:ab:cf:9a:6f:13:88:b0:26:2b:9d:ab:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Apr 17 06:15:01 2026 GMT Not After : Apr 20 13:29:01 2026 GMT Subject: CN=0B9F9ABA214AF3A695D9C993953340D03D66EB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:37:5f:95:82:d1:9e:55:1e:93:1b:78:00: b4:91:a1:6f:8d:e3:b6:0c:d7:91:42:ce:b6:4b:fa: 6f:ac:8e:01:c8:64:73:cd:5a:09:6a:4e:32:57:87: a8:5d:d0:f1:fd:bb:b5:b4:99:92:e9:3e:9f:44:be: f3:b8:08:f9:eb:89:10:0f:42:1e:d2:d9:c9:8a:a8: af:51:22:ee:be:5a:22:6a:67:a2:46:22:ed:73:32: 32:c5:2f:fa:61:d4:4b:56:b0:ec:45:ec:85:f2:c5: 1c:c3:14:01:0d:d0:66:91:0d:02:4f:85:08:8f:1b: 9a:53:49:a7:4d:33:c1:95:3b:19:46:03:72:09:93: 53:d4:5d:c3:b2:27:5e:1f:fa:9d:63:15:2d:27:43: 34:e9:ad:d1:a2:cf:4b:9d:5e:df:66:3e:72:28:f9: cc:46:da:fe:9f:49:5e:ee:05:6b:cf:8c:22:cc:4f: 98:8b:d6:9a:d5:e9:d9:f7:4f:5e:4d:9a:64:00:e5: 49:3b:76:32:1b:b8:4f:ac:2f:4f:21:7e:c2:cd:29: 62:f3:8c:00:37:d3:75:6d:55:65:18:ac:9c:8d:00: 9a:ce:f1:4d:75:36:11:49:63:6c:7d:94:e4:c6:46: 56:dd:db:20:0a:1b:bd:e1:bc:f7:a7:f0:38:a0:28: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9F:9A:BA:21:4A:F3:A6:95:D9:C9:93:95:33:40:D0:3D:66:EB:66 X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0d:46:25:3d:55:bf:04:24:0c:c9:69:74:9c:b8:68:af:23: 5c:60:2a:3e:ca:f7:80:72:55:ce:52:68:18:f2:8a:14:d8:46: 3d:34:68:de:4c:62:37:b1:6c:75:fb:89:87:a7:3a:0a:09:5e: 8e:6c:b2:fb:e7:c7:d8:09:f4:82:45:ae:ad:a1:b5:07:ad:c3: bf:60:8f:fa:57:e4:d4:a6:15:f1:37:81:a9:fc:7b:f6:9e:3c: 50:d4:3d:3e:69:f1:08:95:89:a2:92:84:69:76:98:c9:f1:f1: ec:6e:4e:b5:7b:ea:c8:55:0e:ca:cd:12:57:ed:55:9e:50:a1: 3d:27:50:f5:61:bb:ca:99:d9:2e:a4:5f:a3:77:c4:c9:d3:65: 62:7d:09:6f:e3:70:56:46:b8:62:fe:10:14:54:12:4c:0a:86: 16:01:c3:d2:f8:a6:41:45:93:96:95:cf:c2:e2:77:7d:b5:5a: 82:a2:47:cf:a9:41:17:dd:b0:fc:b5:13:74:41:1c:32:5e:6e: 1c:31:c2:9c:89:71:5f:ed:8c:87:6c:2c:65:7a:cf:74:0c:08: 53:a3:61:6f:67:ad:cc:48:ae:68:9e:f8:ba:00:0a:08:54:07: 79:d9:fc:96:73:24:39:3a:a3:e7:1d:61:f0:c9:bf:8c:89:6b: 31:0e:11:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuqTbWvWbYerz5pvE4iwJiudqzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNjA0MTcwNjE1MDFaFw0yNjA0MjAxMzI5MDFaMDMxMTAvBgNV BAMTKDBCOUY5QUJBMjE0QUYzQTY5NUQ5Qzk5Mzk1MzM0MEQwM0Q2NkVCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEDdflYLRnlUekxt4ALSRoW+N 47YM15FCzrZL+m+sjgHIZHPNWglqTjJXh6hd0PH9u7W0mZLpPp9EvvO4CPnriRAP Qh7S2cmKqK9RIu6+WiJqZ6JGIu1zMjLFL/ph1EtWsOxF7IXyxRzDFAEN0GaRDQJP hQiPG5pTSadNM8GVOxlGA3IJk1PUXcOyJ14f+p1jFS0nQzTprdGiz0udXt9mPnIo +cxG2v6fSV7uBWvPjCLMT5iL1prV6dn3T15NmmQA5Uk7djIbuE+sL08hfsLNKWLz jAA303VtVWUYrJyNAJrO8U11NhFJY2x9lOTGRlbd2yAKG73hvPen8DigKFNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5+auiFK86aV2cmTlTNA0D1m62YwHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoNRiU9Vb8EJAzJaXScuGivI1xgKj7K94By Vc5SaBjyihTYRj00aN5MYjexbHX7iYenOgoJXo5ssvvnx9gJ9IJFrq2htQetw79g j/pX5NSmFfE3gan8e/aePFDUPT5p8QiViaKShGl2mMnx8exuTrV76shVDsrNElft VZ5QoT0nUPVhu8qZ2S6kX6N3xMnTZWJ9CW/jcFZGuGL+EBRUEkwKhhYBw9L4pkFF k5aVz8Lid321WoKiR8+pQRfdsPy1E3RBHDJebhwxwpyJcV/tjIdsLGV6z3QMCFOj YW9nrcxIrmie+LoACghUB3nZ/JZzJDk6o+cdYfDJv4yJazEOEfw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:02:49 2026 by rpki-client