$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: 8CnRcR3ueO6MaSCfL3BlwscF1t8Zlg/Xu+XEl7uSNI4= Subject key identifier: 47:87:2D:00:71:67:5B:D4:64:78:24:DD:23:12:E4:E4:BE:2E:C5:40 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 62CB8ECF06392954E1DE3936375D2742AFB94BD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 01DD Signing time: Fri 17 Apr 2026 10:32:29 +0000 Manifest this update: Fri 17 Apr 2026 10:27:29 +0000 Manifest next update: Mon 20 Apr 2026 14:40:29 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: rsMro+val7v1wrwhLknq6/6YpaGLKJ+zkAstX6h2R5w=) 2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: hVyk22sZFd/MG1qjERrqGmbK/XhSHNkWdtj/OyLYlqA=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: BC5B2GF9VTfzPbd5lot6DqU5Mr48ZffzIu7OMz01VQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cb:8e:cf:06:39:29:54:e1:de:39:36:37:5d:27:42:af:b9:4b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Apr 17 10:27:29 2026 GMT Not After : Apr 20 14:40:29 2026 GMT Subject: CN=47872D0071675BD4647824DD2312E4E4BE2EC540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:71:57:e1:d2:78:7d:d7:71:c8:6e:b8:4b: 01:b5:4a:67:c0:94:78:83:c3:2f:28:85:f6:92:19: 1a:43:62:c2:ff:f7:ec:8b:5e:ff:48:b4:7c:a6:09: 78:c2:5b:22:76:d2:38:cf:16:47:71:54:6f:2d:9d: ab:73:d8:0f:12:e7:11:15:e8:9f:8f:2d:dc:35:f2: 8a:08:ed:97:9e:67:4d:c8:35:ed:73:7e:4f:79:1d: 3c:06:39:45:68:0e:e6:58:61:c9:87:66:67:c4:cf: 3a:6e:57:1c:ed:b2:e7:60:9e:f8:88:e6:01:b7:a1: 08:61:b7:67:c5:b9:78:d4:4f:00:f7:dc:01:bd:d0: 37:60:c9:2d:a5:35:26:2f:a6:09:c7:c2:b8:8d:5b: 29:e0:bf:c0:9c:1f:32:9e:c1:7c:2c:06:6a:46:76: fb:e9:6f:29:eb:49:17:5d:4d:e1:83:9a:19:2a:75: df:b7:41:95:71:38:1f:7d:92:d1:a4:1b:47:fc:bb: 71:ad:15:82:a8:34:77:b9:b6:62:b7:74:27:db:76: 35:20:f9:26:23:9f:50:71:d7:ec:00:17:56:db:e3: 76:1a:29:d6:b4:96:32:d9:91:2b:04:9d:60:95:ae: 2a:65:53:9e:e1:41:5e:f1:dd:3d:6a:cf:33:20:9a: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:87:2D:00:71:67:5B:D4:64:78:24:DD:23:12:E4:E4:BE:2E:C5:40 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9f:f2:40:13:27:3d:2c:6b:1c:5c:7d:4f:f9:a9:15:ee:a5: 0f:c8:86:c6:c9:d8:52:ea:ca:fa:0a:d1:5c:b8:41:4e:6c:4f: 5f:a9:cf:79:70:63:84:e9:94:95:50:b6:28:88:88:ff:c6:d1: 06:19:41:b2:44:61:e5:63:8f:97:d6:e8:95:57:f4:8f:1d:26: 09:a9:87:59:9f:a6:29:f4:15:13:d3:06:9c:59:3b:ef:49:79: fb:24:f2:41:bf:f6:de:99:36:46:dd:39:31:d1:98:13:99:4b: ea:02:47:9d:64:e0:58:81:76:84:22:15:c9:2b:98:03:9a:2d: 68:f0:5a:0e:8e:3a:06:1f:8a:de:1a:51:0e:2f:e1:11:26:91: bb:b7:9e:f8:ba:7f:28:1e:8b:d3:99:db:cf:82:61:2b:c7:a4: 59:47:68:21:90:66:52:b3:32:08:32:c5:d0:84:00:24:21:07: a8:b8:f8:f3:f6:24:65:ff:32:47:66:89:0f:49:28:6f:78:84: 38:49:74:63:28:7f:15:08:82:69:22:79:8f:98:9a:c7:a0:57: d9:fd:02:ac:53:f4:91:8f:44:8d:e2:63:f4:cd:5d:77:b1:2b: ee:8c:b2:70:d8:ac:1f:7e:90:2c:7f:62:3a:4e:5a:f8:c1:26: 64:7b:b0:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsuOzwY5KVTh3jk2N10nQq+5S9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNjA0MTcxMDI3MjlaFw0yNjA0MjAxNDQwMjlaMDMxMTAvBgNV BAMTKDQ3ODcyRDAwNzE2NzVCRDQ2NDc4MjRERDIzMTJFNEU0QkUyRUM1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww3FX4dJ4fddxyG64SwG1SmfA lHiDwy8ohfaSGRpDYsL/9+yLXv9ItHymCXjCWyJ20jjPFkdxVG8tnatz2A8S5xEV 6J+PLdw18ooI7ZeeZ03INe1zfk95HTwGOUVoDuZYYcmHZmfEzzpuVxztsudgnviI 5gG3oQhht2fFuXjUTwD33AG90DdgyS2lNSYvpgnHwriNWyngv8CcHzKewXwsBmpG dvvpbynrSRddTeGDmhkqdd+3QZVxOB99ktGkG0f8u3GtFYKoNHe5tmK3dCfbdjUg +SYjn1Bx1+wAF1bb43YaKda0ljLZkSsEnWCVriplU57hQV7x3T1qzzMgmvBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR4ctAHFnW9RkeCTdIxLk5L4uxUAwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaf8kATJz0saxxcfU/5qRXupQ/IhsbJ2FLq yvoK0Vy4QU5sT1+pz3lwY4TplJVQtiiIiP/G0QYZQbJEYeVjj5fW6JVX9I8dJgmp h1mfpin0FRPTBpxZO+9Jefsk8kG/9t6ZNkbdOTHRmBOZS+oCR51k4FiBdoQiFckr mAOaLWjwWg6OOgYfit4aUQ4v4REmkbu3nvi6fygei9OZ28+CYSvHpFlHaCGQZlKz MggyxdCEACQhB6i4+PP2JGX/MkdmiQ9JKG94hDhJdGMofxUIgmkieY+YmsegV9n9 AqxT9JGPRI3iY/TNXXexK+6MsnDYrB9+kCx/YjpOWvjBJmR7sEQ= -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:43 2026 by rpki-client