$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: hdKsn6xMMloaUMIHHK8Z1zU5utpORuz2BhaTWnDH6Yg= Subject key identifier: 94:ED:B5:48:3E:44:38:86:6D:B3:CC:3F:A3:AB:C9:AE:6C:01:31:43 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 3086F2B2000ED0D2F351B8A6236943F476BE142A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0572 Signing time: Thu 16 Apr 2026 00:21:13 +0000 Manifest this update: Thu 16 Apr 2026 00:16:13 +0000 Manifest next update: Sun 19 Apr 2026 00:22:13 +0000 Files and hashes: 1: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: QnGg22SZuK266bFPHwHwBpqFRCbJl09JC7xuEZH7e2E=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 3: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 5: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: lt8611+icqcOlcb0vp3/L3lkdrCllwLsjssGKj3PZL0=) 6: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 7: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: 2OHD4uzXRRC+UwdGonPOMWJEcqOJBkhkj3qw69Y3hzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 00:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:f2:b2:00:0e:d0:d2:f3:51:b8:a6:23:69:43:f4:76:be:14:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Apr 16 00:16:13 2026 GMT Not After : Apr 19 00:22:13 2026 GMT Subject: CN=94EDB5483E4438866DB3CC3FA3ABC9AE6C013143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:89:f0:a3:33:82:70:83:7e:13:87:ec:cb: f8:5d:bd:ff:2a:17:9f:c4:8a:7d:55:6b:dd:e5:73: 96:c1:4f:17:b5:5a:92:c4:7c:68:64:db:d5:4a:05: a4:7e:5a:c1:eb:89:f0:17:6a:5f:32:a3:b9:a7:53: 9f:d2:b7:94:3f:41:2c:64:0a:92:08:b4:a8:26:63: 08:84:cf:8e:b8:2c:91:89:51:85:b1:de:93:62:cd: ef:2e:32:69:60:55:df:4c:52:17:bf:e5:dc:e8:f7: 22:67:9b:fa:ce:41:3e:0b:75:26:f4:fc:b0:f7:3f: c7:ec:43:79:28:08:b7:29:55:95:87:10:cb:ef:2d: fe:51:91:0d:8d:bc:51:72:21:46:9b:bb:cc:c8:f8: 10:8f:31:4c:ad:07:6e:55:8d:12:76:45:b3:f7:79: fa:6e:48:19:d6:ca:70:43:8d:33:a8:67:44:63:f9: 3f:68:da:6b:5f:5d:68:59:d1:6b:10:00:93:b0:1e: fd:25:88:e5:a1:90:16:10:37:d4:b7:cc:2f:c5:41: 6b:70:98:c4:5f:ba:d1:a9:58:f5:6f:37:86:25:d7: a8:c1:19:59:7f:1f:67:f6:a4:aa:a4:09:9e:4d:93: e4:d0:7d:75:a7:65:d2:50:67:33:ac:b5:31:6c:52: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:B5:48:3E:44:38:86:6D:B3:CC:3F:A3:AB:C9:AE:6C:01:31:43 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ec:aa:ba:65:cd:4c:87:62:31:1c:b0:2a:80:b4:e0:a5:dc: 6b:0f:d0:a5:3d:d3:4d:02:d9:df:c9:1d:b2:18:68:98:23:3c: 3d:d8:1e:4f:3f:2b:3d:7c:dc:50:a8:10:c5:a3:3a:9c:4e:8c: 67:3a:26:fe:18:f8:f8:41:84:d3:28:ca:5e:83:97:77:52:f7: 67:44:cd:00:dc:64:c7:a3:f4:2e:86:f2:11:1c:8c:2d:97:2c: 86:1b:e8:57:5c:83:ad:15:ac:6c:51:cd:ef:13:88:39:1b:13: c2:ed:63:26:e6:ab:15:37:a9:0f:c9:9e:5e:7b:d4:e2:8a:6b: 6f:53:dc:d6:2a:4f:b1:8e:4c:5a:f5:5f:17:15:41:bb:d7:1d: cd:a8:ab:4b:c4:ff:db:1d:79:be:a3:a4:2a:c6:b6:ad:82:7f: a0:81:37:a7:36:22:ab:b9:e1:50:df:22:70:fd:20:75:e9:c2: 41:60:5a:08:a9:36:b2:d4:40:05:73:2d:a2:80:3a:b6:b0:90: d1:ea:cf:33:fc:22:b8:0a:b3:93:86:97:2f:a6:61:40:ba:b0: f6:43:1b:a4:38:69:94:59:e1:af:e9:f6:67:95:bf:ff:41:57: 8f:a3:ee:7a:50:ab:74:c6:51:5f:15:53:a2:6c:bf:53:10:37: 7c:44:dd:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIbysgAO0NLzUbimI2lD9Ha+FCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNjA0MTYwMDE2MTNaFw0yNjA0MTkwMDIyMTNaMDMxMTAvBgNV BAMTKDk0RURCNTQ4M0U0NDM4ODY2REIzQ0MzRkEzQUJDOUFFNkMwMTMxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oInwozOCcIN+E4fsy/hdvf8q F5/Ein1Va93lc5bBTxe1WpLEfGhk29VKBaR+WsHrifAXal8yo7mnU5/St5Q/QSxk CpIItKgmYwiEz464LJGJUYWx3pNize8uMmlgVd9MUhe/5dzo9yJnm/rOQT4LdSb0 /LD3P8fsQ3koCLcpVZWHEMvvLf5RkQ2NvFFyIUabu8zI+BCPMUytB25VjRJ2RbP3 efpuSBnWynBDjTOoZ0Rj+T9o2mtfXWhZ0WsQAJOwHv0liOWhkBYQN9S3zC/FQWtw mMRfutGpWPVvN4Yl16jBGVl/H2f2pKqkCZ5Nk+TQfXWnZdJQZzOstTFsUqafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlO21SD5EOIZts8w/o6vJrmwBMUMwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/sqrplzUyHYjEcsCqAtOCl3GsP0KU9000C 2d/JHbIYaJgjPD3YHk8/Kz183FCoEMWjOpxOjGc6Jv4Y+PhBhNMoyl6Dl3dS92dE zQDcZMej9C6G8hEcjC2XLIYb6Fdcg60VrGxRze8TiDkbE8LtYybmqxU3qQ/Jnl57 1OKKa29T3NYqT7GOTFr1XxcVQbvXHc2oq0vE/9sdeb6jpCrGtq2Cf6CBN6c2Iqu5 4VDfInD9IHXpwkFgWgipNrLUQAVzLaKAOrawkNHqzzP8IrgKs5OGly+mYUC6sPZD G6Q4aZRZ4a/p9meVv/9BV4+j7npQq3TGUV8VU6Jsv1MQN3xE3Ww= -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:10 2026 by rpki-client