$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: yO0OsYQ2wj7vi/w648gQEMfdTfYkOmOImneeDhCyA/I= Subject key identifier: A7:AD:36:0D:BE:95:0E:63:39:6C:9E:2A:EB:15:E0:FC:DA:B1:C0:E4 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 24C10EE5305967583152C1494A04DC3487722832 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 056C Signing time: Sun 19 Apr 2026 08:10:47 +0000 Manifest this update: Sun 19 Apr 2026 08:05:47 +0000 Manifest next update: Wed 22 Apr 2026 14:33:47 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: KX6HtvmVJJRS090WnbGkhJ4GHSCv6oZtEC+FymgNRPs=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c1:0e:e5:30:59:67:58:31:52:c1:49:4a:04:dc:34:87:72:28:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Apr 19 08:05:47 2026 GMT Not After : Apr 22 14:33:47 2026 GMT Subject: CN=A7AD360DBE950E63396C9E2AEB15E0FCDAB1C0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:3c:f2:83:f3:05:b1:b6:85:64:af:6c:20: e2:d6:ee:81:51:78:c8:5b:f2:a2:25:e8:31:f2:d5: 97:cf:7c:86:e8:15:be:f8:38:5e:d3:65:1e:92:5b: ad:12:78:57:fb:85:ac:35:55:a0:5d:55:44:b0:4c: 1f:88:e6:37:92:f8:04:03:9a:94:7f:6c:49:67:bb: 8b:81:a2:39:5f:95:16:f6:86:3c:c7:fd:7a:d4:22: a0:e0:9d:6e:9a:6e:74:e9:a5:c5:25:5e:84:3d:a1: 72:1b:0a:ce:87:55:40:3c:fc:9f:0f:51:ea:d8:6d: 51:8a:f6:b4:3c:43:2e:4e:ac:0a:e4:11:55:4f:dc: 32:72:d0:56:fe:f5:85:63:a3:69:fa:34:02:db:1c: cb:e7:db:80:ab:70:c5:74:d1:5a:f2:00:3f:af:de: 41:04:96:2b:3b:93:b7:21:eb:af:d9:f3:d6:ef:c5: 14:59:44:1d:3d:53:2b:32:4d:ab:d0:ad:32:8c:3d: 57:e3:a3:5d:be:be:be:5e:28:94:b6:9b:39:c8:ae: d1:ad:98:ea:52:00:9b:2d:ac:6b:ac:82:83:b4:af: 8e:89:53:0f:96:1b:a8:60:8d:45:9d:62:fc:84:44: 0d:a5:e8:93:6f:da:ce:18:06:4e:48:fc:11:85:25: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AD:36:0D:BE:95:0E:63:39:6C:9E:2A:EB:15:E0:FC:DA:B1:C0:E4 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5b:74:54:85:71:ae:52:94:d7:8a:01:42:b7:64:86:37:e6: b7:c2:ae:5a:04:c5:5c:71:6a:19:39:1c:83:40:b8:cc:a5:fb: 70:49:31:fa:82:76:ba:f5:4b:35:39:e3:34:1e:b8:5e:ca:e8: 11:23:3d:2a:a8:4e:14:d6:54:8c:5f:7a:bc:88:21:05:31:d9: 62:c6:e3:3c:63:9e:a6:7c:05:ab:5e:7e:47:84:42:e8:6d:6f: f8:0b:a0:91:3a:95:bf:81:7e:de:d8:1d:a6:28:ef:0e:5e:17: 80:f1:24:f4:df:ca:5b:60:6b:b8:e3:59:b5:ae:bb:0d:54:02: b9:43:1b:3f:de:0e:4f:38:2e:d5:77:c9:e7:9f:66:41:66:fc: da:d7:62:7c:78:29:dc:63:42:f2:ae:99:f7:fd:0b:01:d5:0a: 8a:06:ed:cf:1a:4b:e6:71:79:22:f5:80:e7:ad:d0:dc:51:13: 91:07:97:b5:73:74:48:1c:5c:8f:18:fa:79:bd:fb:03:d5:53: dc:fb:fa:c6:51:b0:85:6f:aa:87:d5:31:d2:63:9d:c6:e8:78: c7:04:47:12:09:de:ca:15:78:71:88:2e:d0:47:87:29:b8:c1: ca:8d:d6:03:d1:de:d3:f7:86:ff:68:ae:81:56:18:e0:d5:f5: 38:cd:1e:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMEO5TBZZ1gxUsFJSgTcNIdyKDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNjA0MTkwODA1NDdaFw0yNjA0MjIxNDMzNDdaMDMxMTAvBgNV BAMTKEE3QUQzNjBEQkU5NTBFNjMzOTZDOUUyQUVCMTVFMEZDREFCMUMwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFDzyg/MFsbaFZK9sIOLW7oFR eMhb8qIl6DHy1ZfPfIboFb74OF7TZR6SW60SeFf7haw1VaBdVUSwTB+I5jeS+AQD mpR/bElnu4uBojlflRb2hjzH/XrUIqDgnW6abnTppcUlXoQ9oXIbCs6HVUA8/J8P UerYbVGK9rQ8Qy5OrArkEVVP3DJy0Fb+9YVjo2n6NALbHMvn24CrcMV00VryAD+v 3kEElis7k7ch66/Z89bvxRRZRB09UysyTavQrTKMPVfjo12+vr5eKJS2mznIrtGt mOpSAJstrGusgoO0r46JUw+WG6hgjUWdYvyERA2l6JNv2s4YBk5I/BGFJQBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp602Db6VDmM5bJ4q6xXg/NqxwOQwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANbdFSFca5SlNeKAUK3ZIY35rfCrloExVxx ahk5HINAuMyl+3BJMfqCdrr1SzU54zQeuF7K6BEjPSqoThTWVIxferyIIQUx2WLG 4zxjnqZ8BatefkeEQuhtb/gLoJE6lb+Bft7YHaYo7w5eF4DxJPTfyltga7jjWbWu uw1UArlDGz/eDk84LtV3yeefZkFm/NrXYnx4KdxjQvKumff9CwHVCooG7c8aS+Zx eSL1gOet0NxRE5EHl7VzdEgcXI8Y+nm9+wPVU9z7+sZRsIVvqofVMdJjncboeMcE RxIJ3soVeHGILtBHhym4wcqN1gPR3tP3hv9oroFWGODV9TjNHok= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:46 2026 by rpki-client