$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: fV6G5Gud/b7OF/KtkOiYdfDRYMIuZJW0qSpO4G0QZcQ= Subject key identifier: C5:96:13:33:EA:A8:D1:2C:14:75:1B:FC:0E:D7:96:19:2D:A0:60:DB Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 3F88565AD3A7827ADC0DC34FD8080DF7ABBF01A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 02FC Signing time: Fri 17 Apr 2026 18:20:42 +0000 Manifest this update: Fri 17 Apr 2026 18:15:42 +0000 Manifest next update: Tue 21 Apr 2026 04:10:42 +0000 Files and hashes: 1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=) 2: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=) 3: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: PL2Px+mvnL4tW/n25lbQY40QmC0HY7i+u3j+1Nndfuo=) 4: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:88:56:5a:d3:a7:82:7a:dc:0d:c3:4f:d8:08:0d:f7:ab:bf:01:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Apr 17 18:15:42 2026 GMT Not After : Apr 21 04:10:42 2026 GMT Subject: CN=C5961333EAA8D12C14751BFC0ED796192DA060DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:9e:0a:a1:59:b7:cd:ad:e7:af:3f:d0:c1: fe:2d:fc:a1:17:12:70:4f:cb:16:e4:16:c0:df:1c: 8a:a7:98:36:0c:51:d6:23:7a:2e:b4:cd:54:e4:71: bb:91:61:37:00:ff:44:03:4d:dd:e5:d3:ee:31:62: b5:ff:1c:f3:98:b4:80:c9:e7:b8:ff:ab:29:6c:bc: 44:88:fd:02:4d:9f:85:ce:11:c6:c1:82:22:9a:7b: 37:fa:30:77:5f:c3:09:32:e3:82:85:3d:84:a1:2e: 2f:c8:17:83:7f:1c:b6:54:fa:f2:1f:f4:f8:8f:41: ff:0c:4e:ac:ca:c7:9e:20:5e:79:bc:dc:6c:8b:e6: 36:d1:be:a5:48:64:79:2c:ea:27:15:ce:17:94:3f: ba:73:8a:a4:7c:0c:0a:32:a2:0b:82:c0:6f:c6:55: 93:61:16:70:3c:5f:41:f6:c4:78:06:4b:d2:1c:1c: 3e:18:55:bc:71:eb:fa:b3:49:5c:5a:a9:bf:0c:f3: 91:c6:8b:0d:ba:36:7f:d9:15:34:9e:c9:aa:8e:48: 78:ea:3f:8f:c1:8e:cb:45:b8:30:2a:a8:3b:a4:7d: 74:70:92:a4:23:6c:b5:64:a3:46:1b:e6:99:48:f5: 3b:b8:67:5d:fe:c6:c4:89:16:58:51:61:88:85:14: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:13:33:EA:A8:D1:2C:14:75:1B:FC:0E:D7:96:19:2D:A0:60:DB X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:fc:d3:3d:7e:c7:58:8f:bf:04:cb:1f:6a:3d:61:15:4c: 43:fc:a2:2f:e9:aa:cc:1d:16:dc:45:ba:be:69:29:66:61:c0: 73:d4:16:27:60:e3:31:86:5e:dd:c2:1b:c9:19:7a:b4:5e:62: 71:2d:0e:13:29:df:2c:8e:7b:97:3f:4e:4e:6a:50:e6:fb:04: 1d:b4:7c:a4:87:78:98:bd:32:c3:e2:7e:6d:aa:f2:6e:b3:01: ab:8c:b2:b1:cf:65:d8:cf:92:fd:7d:2e:bc:a4:ae:00:81:fd: bf:ec:8b:47:47:cc:ab:b3:99:60:e1:d8:c2:05:bc:53:8f:3e: e0:4b:2a:39:e3:49:59:56:3d:7a:1d:9a:1a:71:ef:e4:51:a4: bd:5e:8b:7f:8c:80:65:71:e1:3f:6e:aa:4e:6a:cb:fa:42:d0: 07:ee:e9:10:2a:d1:72:1a:9f:e6:77:55:2e:72:b4:1c:82:e1: b4:3f:40:24:fa:e6:c1:a0:2e:44:fc:69:41:8e:74:4d:f2:e3: 62:82:b4:74:7a:0c:9d:3f:cf:bb:c0:9e:cd:6c:62:25:4f:cf: 5f:5c:f7:a3:be:c5:78:10:9c:1f:91:3d:ac:c9:f4:91:63:85: c8:0c:95:ac:0e:1c:c8:e1:10:5a:12:cb:b3:e7:c6:65:0c:57: 26:14:d2:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4hWWtOngnrcDcNP2AgN96u/AaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNjA0MTcxODE1NDJaFw0yNjA0MjEwNDEwNDJaMDMxMTAvBgNV BAMTKEM1OTYxMzMzRUFBOEQxMkMxNDc1MUJGQzBFRDc5NjE5MkRBMDYwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6Z4KoVm3za3nrz/Qwf4t/KEX EnBPyxbkFsDfHIqnmDYMUdYjei60zVTkcbuRYTcA/0QDTd3l0+4xYrX/HPOYtIDJ 57j/qylsvESI/QJNn4XOEcbBgiKaezf6MHdfwwky44KFPYShLi/IF4N/HLZU+vIf 9PiPQf8MTqzKx54gXnm83GyL5jbRvqVIZHks6icVzheUP7pziqR8DAoyoguCwG/G VZNhFnA8X0H2xHgGS9IcHD4YVbxx6/qzSVxaqb8M85HGiw26Nn/ZFTSeyaqOSHjq P4/BjstFuDAqqDukfXRwkqQjbLVko0Yb5plI9Tu4Z13+xsSJFlhRYYiFFIYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZYTM+qo0SwUdRv8DteWGS2gYNswHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFt/NM9fsdYj78Eyx9qPWEVTEP8oi/pqswd FtxFur5pKWZhwHPUFidg4zGGXt3CG8kZerReYnEtDhMp3yyOe5c/Tk5qUOb7BB20 fKSHeJi9MsPifm2q8m6zAauMsrHPZdjPkv19LrykrgCB/b/si0dHzKuzmWDh2MIF vFOPPuBLKjnjSVlWPXodmhpx7+RRpL1ei3+MgGVx4T9uqk5qy/pC0Afu6RAq0XIa n+Z3VS5ytByC4bQ/QCT65sGgLkT8aUGOdE3y42KCtHR6DJ0/z7vAns1sYiVPz19c 96O+xXgQnB+RPazJ9JFjhcgMlawOHMjhEFoSy7PnxmUMVyYU0mw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:15 2026 by rpki-client