$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: PAVKweb1se6FlbMtz7UrcTiIJV1RchK8txZTIDpc6KM= Subject key identifier: 1B:14:CC:5D:39:1E:9E:85:C6:BA:AD:CF:77:7A:37:C5:A5:9E:A3:37 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 197C07E021EFC631340C1CEF4708176BC4639DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 01F1 Signing time: Sat 18 Apr 2026 13:52:20 +0000 Manifest this update: Sat 18 Apr 2026 13:47:20 +0000 Manifest next update: Tue 21 Apr 2026 23:05:20 +0000 Files and hashes: 1: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: NQHGEUDRiXIKhlqun6HUzgzAgG6hDFCPy0ofeC6C2yE=) 2: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: OobwzolwtRmygeuTYUefzBiRSFBCBOQFHnU4gob3o4o=) 3: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: JEvIOsVwGUTyy+ELa7pteKDjLoptkdSCpebP+nyLjgQ=) 4: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: wJLVv3dGJ3iMYrWAOPrHgUOs/cbBFI5PK39xmjvRLuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7c:07:e0:21:ef:c6:31:34:0c:1c:ef:47:08:17:6b:c4:63:9d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Apr 18 13:47:20 2026 GMT Not After : Apr 21 23:05:20 2026 GMT Subject: CN=1B14CC5D391E9E85C6BAADCF777A37C5A59EA337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:fb:f7:24:dd:30:96:2a:96:e9:d2:a3:6e: 17:2f:1a:3c:26:20:09:ae:ed:c1:88:05:3d:84:20: 30:e5:d1:09:5f:9f:c1:a2:1b:94:c6:0c:27:b0:40: 5f:b8:4f:1f:2a:e2:f3:ea:85:16:73:00:11:3d:ef: 3a:d0:30:58:13:57:00:1b:4c:02:e0:c9:7e:dd:32: de:4e:95:b3:92:e0:5f:a7:10:db:ae:52:28:52:47: eb:69:87:3e:74:53:be:39:37:43:4d:56:d3:44:64: 89:6e:3e:fb:aa:7d:b4:dd:62:6b:d0:59:2d:c8:24: f1:81:30:f4:93:14:0f:d5:d8:ed:88:7e:97:32:00: 29:97:22:a2:4d:4c:9c:2a:9f:c5:12:10:37:1f:a1: 66:b2:b2:87:37:28:68:8c:71:41:ed:1e:1a:59:23: 76:50:36:4b:f5:de:46:8a:b3:7b:a8:0f:05:3d:c9: aa:e5:9f:da:b1:f3:19:49:d8:22:8d:b2:8f:75:3a: 48:e6:72:2a:ef:97:5b:60:80:53:a5:64:54:36:47: 01:6d:9a:c7:13:1c:05:0b:ce:b1:5a:4b:df:fb:52: ec:6c:7c:46:22:aa:0f:ae:6c:11:0c:f9:a9:12:94: 48:04:ef:a1:ae:99:19:66:32:7a:36:2b:98:ef:cc: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:14:CC:5D:39:1E:9E:85:C6:BA:AD:CF:77:7A:37:C5:A5:9E:A3:37 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:c3:c0:4a:e9:86:73:6b:78:5b:78:75:fc:81:8b:65:a4: 4c:4d:ec:18:2b:9f:ff:62:b2:ed:45:bb:32:29:96:c0:c6:02: 33:bf:8e:6e:ef:be:d3:40:f6:7e:3b:18:6b:24:16:90:38:bf: 89:29:68:b1:e1:df:ae:0b:02:6b:af:b4:ed:9c:a8:ac:05:1f: 2d:37:40:50:5d:cd:80:41:76:fe:75:38:80:f4:90:23:d3:0e: d6:48:a8:d9:67:ab:3f:7c:34:88:3b:5f:3f:dc:75:c0:f3:e4: 16:f9:eb:61:89:bd:3e:81:14:15:4a:84:ac:53:3b:d6:ff:6d: 04:c6:67:c9:35:92:aa:31:37:72:ab:92:8e:dc:c3:2f:61:cc: c7:72:65:32:8c:b5:0e:f3:2e:be:77:6f:55:18:38:e9:81:c4: db:51:19:aa:37:12:9e:32:86:e7:27:51:22:44:63:07:ff:31: 34:9d:eb:a4:e5:c7:4f:74:62:6f:6a:70:02:fa:d2:18:22:7d: 08:29:0d:04:f2:b6:1e:d5:f9:af:39:44:a7:6d:a7:0a:a5:f3: 03:5b:85:8d:bf:4f:2c:05:2a:92:fa:5f:36:dc:77:af:0f:3c: b6:39:82:81:2e:54:53:7d:de:43:8c:eb:2f:09:b4:1d:1d:59: 97:b6:ed:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXwH4CHvxjE0DBzvRwgXa8RjnaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNjA0MTgxMzQ3MjBaFw0yNjA0MjEyMzA1MjBaMDMxMTAvBgNV BAMTKDFCMTRDQzVEMzkxRTlFODVDNkJBQURDRjc3N0EzN0M1QTU5RUEzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxfv3JN0wliqW6dKjbhcvGjwm IAmu7cGIBT2EIDDl0Qlfn8GiG5TGDCewQF+4Tx8q4vPqhRZzABE97zrQMFgTVwAb TALgyX7dMt5OlbOS4F+nENuuUihSR+tphz50U745N0NNVtNEZIluPvuqfbTdYmvQ WS3IJPGBMPSTFA/V2O2IfpcyACmXIqJNTJwqn8USEDcfoWaysoc3KGiMcUHtHhpZ I3ZQNkv13kaKs3uoDwU9yarln9qx8xlJ2CKNso91Okjmcirvl1tggFOlZFQ2RwFt mscTHAULzrFaS9/7UuxsfEYiqg+ubBEM+akSlEgE76GumRlmMno2K5jvzBJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxTMXTkenoXGuq3Pd3o3xaWeozcwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcGw8BK6YZza3hbeHX8gYtlpExN7Bgrn/9i su1FuzIplsDGAjO/jm7vvtNA9n47GGskFpA4v4kpaLHh364LAmuvtO2cqKwFHy03 QFBdzYBBdv51OID0kCPTDtZIqNlnqz98NIg7Xz/cdcDz5Bb562GJvT6BFBVKhKxT O9b/bQTGZ8k1kqoxN3Krko7cwy9hzMdyZTKMtQ7zLr53b1UYOOmBxNtRGao3Ep4y hucnUSJEYwf/MTSd66Tlx090Ym9qcAL60hgifQgpDQTyth7V+a85RKdtpwql8wNb hY2/TywFKpL6Xzbcd68PPLY5goEuVFN93kOM6y8JtB0dWZe27eM= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:26 2026 by rpki-client