$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: hhU/XhTadAntVZckbHJBQLw6lmkONr/UKoTIGBGN3sM= Subject key identifier: 35:C3:35:69:E3:3D:1F:35:C5:4D:4B:EA:6C:48:7D:7A:B1:35:2B:7F Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 66724B1A5BBFB3BF0AB6A9643FC05657EB5CE39E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 020E Signing time: Thu 16 Apr 2026 13:41:01 +0000 Manifest this update: Thu 16 Apr 2026 13:36:01 +0000 Manifest next update: Mon 20 Apr 2026 00:45:01 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: tfL7Rweq7Ju/sG9ljq11LoddCUDtOH+x+siyBg7e79M=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:4b:1a:5b:bf:b3:bf:0a:b6:a9:64:3f:c0:56:57:eb:5c:e3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Apr 16 13:36:01 2026 GMT Not After : Apr 20 00:45:01 2026 GMT Subject: CN=35C33569E33D1F35C54D4BEA6C487D7AB1352B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:c4:9a:e1:ab:e1:51:b5:a1:ad:57:30:32: cf:6c:0a:f3:41:a4:5f:20:dc:8c:22:c1:e4:a0:a2: 99:dc:3a:7b:68:32:8b:2f:23:12:5f:69:b1:65:60: db:07:d7:86:7f:2c:e6:b1:2f:d4:79:f6:42:96:4c: bb:ec:ed:50:c4:ef:ed:31:04:6a:25:b3:02:b3:52: cf:5e:60:54:e3:59:38:c0:ad:25:9d:a4:e8:95:0f: 8b:fe:fb:c3:13:ec:bb:72:7c:34:d4:df:45:c9:7e: 42:61:7f:fc:ad:76:63:43:ac:1e:f4:55:81:07:8e: d1:08:43:89:35:96:f6:d6:65:87:31:54:74:5f:11: 2f:90:a3:d8:2f:fa:7c:55:ae:8f:f2:5d:4f:6c:ac: e9:1f:59:fa:6e:e0:94:75:1b:b9:d8:ea:0d:4f:c3: 9a:3e:50:96:a7:e3:a5:a7:d0:08:73:47:13:57:8f: 07:c4:9d:21:78:86:6d:a3:64:1c:50:c6:fd:d5:56: 5d:ce:d3:87:ae:e8:d4:ec:c0:4e:75:41:ee:f7:65: 9c:cf:b2:5d:3c:1b:cf:4e:36:cd:8d:04:67:ad:82: 79:4a:50:e5:f7:a8:02:d8:ff:6f:64:f6:cc:1c:3d: 26:f7:30:21:fe:e8:e0:a8:b3:fd:07:13:98:32:83: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:35:69:E3:3D:1F:35:C5:4D:4B:EA:6C:48:7D:7A:B1:35:2B:7F X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:8e:bc:09:ab:f6:24:a2:6c:3e:df:70:08:05:67:ea:d6:8c: 47:db:80:d8:68:f9:ff:2d:7b:08:b5:85:35:a9:2c:b0:bf:58: 40:3d:93:c9:ae:ba:68:db:25:44:2b:8a:18:68:41:08:41:1d: d6:99:07:95:9d:39:0a:e1:c0:77:12:dd:62:e5:91:05:11:e0: b0:06:28:ae:1e:d2:8a:50:a1:a2:51:a4:8e:2f:54:b1:07:d1: 05:1b:f8:f8:a7:0f:02:ea:fe:80:55:b8:70:de:0e:1d:cb:7c: 35:1d:42:d4:b7:13:54:6f:12:9a:86:af:92:c7:fe:8a:26:a2: 46:d2:ff:c0:e0:8e:0f:91:10:6b:4b:4d:6e:66:28:33:c9:8d: 37:95:2a:37:a4:3d:01:c1:50:bd:11:02:d7:8f:f1:4f:17:2f: e2:37:e9:30:cc:5a:62:8f:8e:f7:3c:99:31:2d:a7:25:77:04: 3c:60:9a:ba:59:f0:ce:48:0f:f9:88:39:91:fa:a4:d0:e1:63: 56:e3:3b:40:17:99:53:74:21:5b:68:72:8d:8a:f8:ef:99:2c: 14:b4:41:fa:ea:47:e0:99:f7:c3:dc:32:a1:49:d7:fb:b4:63: 61:fe:a9:45:ba:fc:18:0c:5c:c3:b1:ba:c6:6b:e5:28:33:71: 56:ce:c8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnJLGlu/s78KtqlkP8BWV+tc454wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNjA0MTYxMzM2MDFaFw0yNjA0MjAwMDQ1MDFaMDMxMTAvBgNV BAMTKDM1QzMzNTY5RTMzRDFGMzVDNTRENEJFQTZDNDg3RDdBQjEzNTJCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9o8Sa4avhUbWhrVcwMs9sCvNB pF8g3IwiweSgopncOntoMosvIxJfabFlYNsH14Z/LOaxL9R59kKWTLvs7VDE7+0x BGolswKzUs9eYFTjWTjArSWdpOiVD4v++8MT7LtyfDTU30XJfkJhf/ytdmNDrB70 VYEHjtEIQ4k1lvbWZYcxVHRfES+Qo9gv+nxVro/yXU9srOkfWfpu4JR1G7nY6g1P w5o+UJan46Wn0AhzRxNXjwfEnSF4hm2jZBxQxv3VVl3O04eu6NTswE51Qe73ZZzP sl08G89ONs2NBGetgnlKUOX3qALY/29k9swcPSb3MCH+6OCos/0HE5gyg2XZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcM1aeM9HzXFTUvqbEh9erE1K38wHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSOvAmr9iSibD7fcAgFZ+rWjEfbgNho+f8t ewi1hTWpLLC/WEA9k8muumjbJUQrihhoQQhBHdaZB5WdOQrhwHcS3WLlkQUR4LAG KK4e0opQoaJRpI4vVLEH0QUb+PinDwLq/oBVuHDeDh3LfDUdQtS3E1RvEpqGr5LH /oomokbS/8Dgjg+REGtLTW5mKDPJjTeVKjekPQHBUL0RAteP8U8XL+I36TDMWmKP jvc8mTEtpyV3BDxgmrpZ8M5ID/mIOZH6pNDhY1bjO0AXmVN0IVtoco2K+O+ZLBS0 QfrqR+CZ98PcMqFJ1/u0Y2H+qUW6/BgMXMOxusZr5SgzcVbOyBo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:24 2026 by rpki-client