$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: rN4+Qf+u19iXp0ZGRmI0Nhuo19j9LOTlpNJUCpdf8c8= Subject key identifier: 88:61:E1:D5:5C:E8:AF:84:CA:AF:97:87:3E:9C:4B:88:ED:6C:D9:4A Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 7A6C02FFF259A03C0EEB91C350479668F52ACCDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 0186 Signing time: Thu 16 Apr 2026 16:50:51 +0000 Manifest this update: Thu 16 Apr 2026 16:45:51 +0000 Manifest next update: Sun 19 Apr 2026 19:50:51 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: l833kvY4ubZPs306t49oLvoXqB1AKgfUrfVYLrdOyd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:02:ff:f2:59:a0:3c:0e:eb:91:c3:50:47:96:68:f5:2a:cc:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Apr 16 16:45:51 2026 GMT Not After : Apr 19 19:50:51 2026 GMT Subject: CN=8861E1D55CE8AF84CAAF97873E9C4B88ED6CD94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:f2:10:d1:07:b7:d0:5e:fb:e7:db:25:57: bf:6b:6d:dd:9d:62:6d:a1:d4:eb:8a:2f:2c:9d:d4: 1a:48:35:65:8b:1e:30:2e:93:6c:83:73:42:b3:4a: 56:13:27:b0:01:b8:3c:aa:24:a3:98:e6:17:c3:a7: 6e:81:c3:69:48:62:b0:1a:76:fa:73:ea:f1:30:3d: 34:81:d6:58:c9:42:83:07:77:b1:8f:33:91:42:26: 19:04:26:a8:a2:19:f3:8f:e5:81:1a:e1:b1:0c:c7: a0:95:56:62:a0:30:10:27:a3:0b:6c:0c:9f:c1:d6: 91:50:7a:ac:23:57:53:1c:4b:03:df:1f:aa:5c:03: 7d:8a:c4:54:f7:b0:ba:84:5a:d9:98:fa:0c:4c:fa: 2d:3c:17:89:1f:05:30:a8:bd:93:0d:a0:09:38:d7: aa:27:66:3d:27:5f:ab:ab:e1:d8:dd:09:2e:5d:9c: 39:f5:8f:09:54:f0:c9:37:e2:62:5c:2d:49:a7:6b: e7:a4:9a:42:52:56:07:b6:54:43:a7:ff:34:e3:f6: 49:22:81:70:6b:db:3e:e9:a7:e3:d1:2b:2b:c7:bb: e3:44:39:47:0d:28:da:31:f0:88:50:f0:1e:91:2c: 71:83:e7:18:c3:db:0c:90:f9:52:4d:e8:94:61:eb: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:61:E1:D5:5C:E8:AF:84:CA:AF:97:87:3E:9C:4B:88:ED:6C:D9:4A X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2c:44:0b:66:39:da:1c:e8:c0:15:3b:63:1a:0f:a1:78:c0: f9:67:9d:a4:9d:e7:64:24:31:20:f4:ad:59:11:fd:39:77:24: fc:a5:fd:aa:51:4d:c8:f8:7b:ed:d2:fa:10:50:4b:24:2f:c6: 41:ec:8c:20:ae:d3:01:51:94:96:08:20:a0:e5:74:6f:08:94: 4d:1f:cb:19:6b:4b:0c:32:71:48:60:dd:19:bb:9c:c6:39:1d: 8e:ad:2e:4e:28:36:20:08:ef:47:1b:77:3a:e8:bb:a7:3a:a9: 69:f6:6b:47:b8:c6:84:fa:e8:01:97:42:3c:87:03:ef:04:c0: 94:b9:f8:1d:ad:f9:d3:0d:6d:c4:14:99:e3:46:d1:af:94:55: 95:b2:33:8f:f1:3e:92:73:37:e3:7a:b0:d8:da:d7:fe:12:b6: d6:29:f0:ac:95:90:cd:d3:32:45:fb:7c:78:7b:ff:71:1d:26: 79:1f:3b:21:73:2a:59:68:16:12:21:d2:10:aa:21:33:b5:cd: 47:66:78:e5:b5:44:e6:81:aa:40:33:fa:5e:57:92:d1:43:0d: 21:62:5b:30:09:a3:be:19:20:03:2d:ab:5a:85:b4:58:6f:d4: 9b:ff:55:13:65:73:65:16:31:3a:d0:33:de:50:3a:94:6c:2d: f5:b4:ff:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemwC//JZoDwO65HDUEeWaPUqzN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNjA0MTYxNjQ1NTFaFw0yNjA0MTkxOTUwNTFaMDMxMTAvBgNV BAMTKDg4NjFFMUQ1NUNFOEFGODRDQUFGOTc4NzNFOUM0Qjg4RUQ2Q0Q5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO/IQ0Qe30F7759slV79rbd2d Ym2h1OuKLyyd1BpINWWLHjAuk2yDc0KzSlYTJ7ABuDyqJKOY5hfDp26Bw2lIYrAa dvpz6vEwPTSB1ljJQoMHd7GPM5FCJhkEJqiiGfOP5YEa4bEMx6CVVmKgMBAnowts DJ/B1pFQeqwjV1McSwPfH6pcA32KxFT3sLqEWtmY+gxM+i08F4kfBTCovZMNoAk4 16onZj0nX6ur4djdCS5dnDn1jwlU8Mk34mJcLUmna+ekmkJSVge2VEOn/zTj9kki gXBr2z7pp+PRKyvHu+NEOUcNKNox8IhQ8B6RLHGD5xjD2wyQ+VJN6JRh61hhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiGHh1Vzor4TKr5eHPpxLiO1s2UowHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKksRAtmOdoc6MAVO2MaD6F4wPlnnaSd52Qk MSD0rVkR/Tl3JPyl/apRTcj4e+3S+hBQSyQvxkHsjCCu0wFRlJYIIKDldG8IlE0f yxlrSwwycUhg3Rm7nMY5HY6tLk4oNiAI70cbdzrou6c6qWn2a0e4xoT66AGXQjyH A+8EwJS5+B2t+dMNbcQUmeNG0a+UVZWyM4/xPpJzN+N6sNja1/4SttYp8KyVkM3T MkX7fHh7/3EdJnkfOyFzKlloFhIh0hCqITO1zUdmeOW1ROaBqkAz+l5XktFDDSFi WzAJo74ZIAMtq1qFtFhv1Jv/VRNlc2UWMTrQM95QOpRsLfW0/+Q= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:49 2026 by rpki-client