$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: Cx3hTNUoSvhMvZBQRdlf9he9HI9+lpSbtwFVZcGgzzw= Subject key identifier: 59:A4:D9:BC:6D:92:2A:2D:23:54:45:F0:5E:B2:11:5A:D2:67:63:AB Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 359BB70BE2C781798E41FCA05B9D87C990AD3A15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 010B Signing time: Thu 16 Apr 2026 10:11:37 +0000 Manifest this update: Thu 16 Apr 2026 10:06:37 +0000 Manifest next update: Sun 19 Apr 2026 16:30:37 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: y97ro9gaN48YYgw7dGVO0k3oLHHn6elcNvOupRq/DoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9b:b7:0b:e2:c7:81:79:8e:41:fc:a0:5b:9d:87:c9:90:ad:3a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Apr 16 10:06:37 2026 GMT Not After : Apr 19 16:30:37 2026 GMT Subject: CN=59A4D9BC6D922A2D235445F05EB2115AD26763AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:5a:87:93:34:eb:ae:2b:ac:14:5c:1c:4f: 70:75:02:3c:f5:91:21:8d:d6:df:fe:5c:b9:a4:e6: 1a:8e:f7:f1:2e:0e:ae:5d:af:06:3b:ff:16:38:b2: f5:e7:94:cb:df:17:24:c5:82:66:63:af:f8:ff:a2: b0:1d:ea:93:80:49:8f:60:86:5c:ec:78:7e:b5:65: 18:a8:c1:d6:69:89:08:80:5b:a9:52:b7:1c:14:35: fb:be:13:7f:fb:df:9e:6e:f3:f7:c4:ed:8c:0b:01: 67:37:8e:70:3b:0b:a7:e7:08:5b:06:cf:7d:4d:b1: 5f:b4:4b:5f:b2:8f:7f:16:59:f1:e9:64:e7:1b:e5: a2:07:fe:cb:53:c4:98:ed:e5:15:65:39:b8:e9:35: b2:13:e8:76:32:bc:6a:58:5e:5f:c7:4d:f2:5d:5b: cb:02:f7:4f:f6:97:5a:f7:6d:58:e3:ab:c1:db:0d: 99:3b:30:3c:2e:d3:b6:5e:fc:51:09:02:c9:07:6d: d9:75:18:8a:59:2e:12:1b:5f:eb:40:9e:6b:e2:2b: 80:f2:7d:ca:9c:87:ba:47:9f:58:52:ee:e8:ee:ab: 5b:fb:f6:a6:7e:b8:b6:4b:ae:bb:12:d5:9a:67:78: 58:ef:33:a4:5c:07:4a:0b:cd:2d:c7:c8:c8:4a:6c: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:D9:BC:6D:92:2A:2D:23:54:45:F0:5E:B2:11:5A:D2:67:63:AB X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:15:c7:4b:ad:54:34:c1:b1:09:17:b5:3e:a3:58:b4:0f: 77:74:18:dd:1d:3f:21:24:2f:e9:f8:a1:26:e1:6e:1b:9e:1a: 0b:f4:21:d6:6f:65:5b:02:07:b6:f7:ba:ed:a8:39:ef:b2:e5: e3:7c:3e:c8:fe:db:72:ac:85:dd:f8:37:f9:f9:8c:18:51:ae: f4:a8:65:49:e4:6f:4e:03:b3:52:52:9b:b1:eb:79:39:d7:9a: 2d:96:bd:1c:ad:5e:f8:0c:27:ac:30:2b:50:77:42:1d:da:ca: 95:2a:4f:48:40:0f:fc:13:89:48:b7:16:a0:d6:6c:12:65:04: f1:b4:84:b3:2a:07:58:2f:5d:2e:8a:91:cf:32:d4:8e:44:e0: 09:d8:07:15:5d:9b:68:5b:f6:7d:eb:c5:7e:88:2b:2b:09:fc: c3:a4:2c:25:3f:02:36:01:77:d4:5b:91:68:93:15:22:0f:04: ad:1f:b7:5a:86:d3:79:7c:41:92:db:aa:9c:46:d7:b8:c4:b4: b3:aa:18:45:c0:09:e9:37:b1:ca:6c:88:81:f4:78:31:78:2c: de:8f:58:49:fa:39:d7:4f:e9:ea:3f:13:8e:cb:03:39:6c:40: 3b:20:70:5f:d0:19:3b:80:f4:6f:58:f8:49:e1:d5:dc:9e:75: df:ec:11:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZu3C+LHgXmOQfygW52HyZCtOhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNjA0MTYxMDA2MzdaFw0yNjA0MTkxNjMwMzdaMDMxMTAvBgNV BAMTKDU5QTREOUJDNkQ5MjJBMkQyMzU0NDVGMDVFQjIxMTVBRDI2NzYzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfVqHkzTrriusFFwcT3B1Ajz1 kSGN1t/+XLmk5hqO9/EuDq5drwY7/xY4svXnlMvfFyTFgmZjr/j/orAd6pOASY9g hlzseH61ZRiowdZpiQiAW6lStxwUNfu+E3/7355u8/fE7YwLAWc3jnA7C6fnCFsG z31NsV+0S1+yj38WWfHpZOcb5aIH/stTxJjt5RVlObjpNbIT6HYyvGpYXl/HTfJd W8sC90/2l1r3bVjjq8HbDZk7MDwu07Ze/FEJAskHbdl1GIpZLhIbX+tAnmviK4Dy fcqch7pHn1hS7ujuq1v79qZ+uLZLrrsS1ZpneFjvM6RcB0oLzS3HyMhKbIzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWaTZvG2SKi0jVEXwXrIRWtJnY6swHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWpFcdLrVQ0wbEJF7U+o1i0D3d0GN0dPyEk L+n4oSbhbhueGgv0IdZvZVsCB7b3uu2oOe+y5eN8Psj+23Kshd34N/n5jBhRrvSo ZUnkb04Ds1JSm7HreTnXmi2WvRytXvgMJ6wwK1B3Qh3aypUqT0hAD/wTiUi3FqDW bBJlBPG0hLMqB1gvXS6Kkc8y1I5E4AnYBxVdm2hb9n3rxX6IKysJ/MOkLCU/AjYB d9RbkWiTFSIPBK0ft1qG03l8QZLbqpxG17jEtLOqGEXACek3scpsiIH0eDF4LN6P WEn6OddP6eo/E47LAzlsQDsgcF/QGTuA9G9Y+Enh1dyedd/sEcA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:28 2026 by rpki-client