$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: fg/CmEbr3T/663JbMb7z6MUzsU1BspYvSD1afuiY6BE= Subject key identifier: 94:B7:A5:1A:CE:65:36:19:2A:4F:18:B5:1B:D1:D5:67:88:F7:62:FC Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 3D5B5A6F40C9DB16D3A1EB92617266240D65D6A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 0188 Signing time: Wed 15 Apr 2026 19:02:30 +0000 Manifest this update: Wed 15 Apr 2026 18:57:30 +0000 Manifest next update: Sun 19 Apr 2026 06:02:30 +0000 Files and hashes: 1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=) 2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: gJxHxoFjA3q/EVMT3HqKSXJSlgTIHwjmHFAE6pG4zpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5b:5a:6f:40:c9:db:16:d3:a1:eb:92:61:72:66:24:0d:65:d6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Apr 15 18:57:30 2026 GMT Not After : Apr 19 06:02:30 2026 GMT Subject: CN=94B7A51ACE6536192A4F18B51BD1D56788F762FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:b3:60:7e:2f:09:ab:c2:67:86:38:2c:d8: f0:29:48:62:4f:3f:29:76:9b:28:8e:d4:05:a6:ac: c3:02:23:83:77:83:f0:49:b2:17:0c:d9:66:69:95: c6:83:cf:0a:84:ac:ea:49:60:4f:10:0e:99:70:8c: ac:38:bd:30:82:8b:d9:49:8f:f7:3f:2c:18:8f:b7: 98:0e:84:22:48:c4:ae:9d:c3:b3:38:ab:0d:9a:e2: dc:3b:fa:87:5b:1d:02:71:70:ed:76:09:8d:51:50: a4:9f:01:c1:c7:94:08:cd:70:96:f5:88:b4:9b:24: 43:4a:9b:32:54:e2:e8:fc:a4:c0:80:e4:a4:a1:a4: da:1a:e1:6d:ab:8f:f0:c8:01:e3:60:83:0f:00:36: be:5e:f3:a3:b2:2b:2c:cf:e3:98:79:38:97:87:83: 65:58:aa:ae:db:46:02:2b:0b:39:d5:93:76:38:f6: c5:04:fe:d8:c6:5d:3a:f6:98:a0:29:ab:d7:32:7e: 7e:5a:bc:56:ee:92:25:57:88:39:f6:19:38:c9:a4: 8e:e0:bd:a0:e8:d1:53:09:c2:8b:b7:20:39:df:af: 8f:14:44:50:2a:52:b6:e4:75:80:b1:64:2f:4b:4e: 87:4d:7e:2e:03:f9:68:4d:43:5d:0f:3f:ad:f1:cf: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B7:A5:1A:CE:65:36:19:2A:4F:18:B5:1B:D1:D5:67:88:F7:62:FC X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4c:ef:3b:5b:00:d7:23:3a:09:3f:f4:7a:00:7c:a6:de:a4: b8:31:36:79:d1:c5:dd:86:c2:9d:bb:0a:5b:6b:87:6d:d4:9f: 5d:a2:02:b3:fa:c3:43:10:de:0a:4b:9d:d4:b6:f9:c5:79:71: 22:d4:3d:85:ba:a0:2d:73:fb:f8:fb:55:e9:89:82:9e:8f:72: 52:53:25:18:25:e9:39:f3:b9:d1:c5:f8:87:6d:ea:5e:9f:2c: 1e:84:4a:69:22:22:fb:33:a4:79:1c:fe:d3:5d:0d:24:fa:a3: 2c:c3:03:99:5e:da:28:d5:74:fa:f0:45:37:6b:ee:f1:5b:9e: 14:dc:a6:92:15:d7:5e:5f:28:b7:3d:e1:d7:59:a8:c6:15:06: df:ce:ee:b7:91:8b:0f:b6:c9:c8:88:d1:c2:17:e9:60:3e:96: 31:fb:36:49:af:df:ac:a0:8a:a2:88:4e:b2:f8:15:4e:80:2b: df:e9:14:04:73:c0:80:2d:83:0e:1c:af:58:c2:93:d5:59:d5: 0d:83:34:6c:37:be:bf:62:b7:00:60:66:bc:e9:d7:ac:3d:73: 12:af:05:2b:58:41:db:7e:44:fc:76:6c:23:89:f1:2d:00:7f: 76:57:bf:4f:43:93:d1:db:5d:d7:16:2e:f7:88:8f:84:75:0e: 67:f9:75:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVtab0DJ2xbToeuSYXJmJA1l1qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNjA0MTUxODU3MzBaFw0yNjA0MTkwNjAyMzBaMDMxMTAvBgNV BAMTKDk0QjdBNTFBQ0U2NTM2MTkyQTRGMThCNTFCRDFENTY3ODhGNzYyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjbNgfi8Jq8Jnhjgs2PApSGJP Pyl2myiO1AWmrMMCI4N3g/BJshcM2WZplcaDzwqErOpJYE8QDplwjKw4vTCCi9lJ j/c/LBiPt5gOhCJIxK6dw7M4qw2a4tw7+odbHQJxcO12CY1RUKSfAcHHlAjNcJb1 iLSbJENKmzJU4uj8pMCA5KShpNoa4W2rj/DIAeNggw8ANr5e86OyKyzP45h5OJeH g2VYqq7bRgIrCznVk3Y49sUE/tjGXTr2mKApq9cyfn5avFbukiVXiDn2GTjJpI7g vaDo0VMJwou3IDnfr48URFAqUrbkdYCxZC9LTodNfi4D+WhNQ10PP63xz2gzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLelGs5lNhkqTxi1G9HVZ4j3YvwwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5M7ztbANcjOgk/9HoAfKbepLgxNnnRxd2G wp27Cltrh23Un12iArP6w0MQ3gpLndS2+cV5cSLUPYW6oC1z+/j7VemJgp6PclJT JRgl6TnzudHF+Idt6l6fLB6ESmkiIvszpHkc/tNdDST6oyzDA5le2ijVdPrwRTdr 7vFbnhTcppIV115fKLc94ddZqMYVBt/O7reRiw+2yciI0cIX6WA+ljH7Nkmv36yg iqKITrL4FU6AK9/pFARzwIAtgw4cr1jCk9VZ1Q2DNGw3vr9itwBgZrzp16w9cxKv BStYQdt+RPx2bCOJ8S0Af3ZXv09Dk9HbXdcWLveIj4R1Dmf5dZs= -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:42 2026 by rpki-client