$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: gm3kMqvwZxuxvTGhHXvn8esxzuk8qvpjlwwEwxe11GQ= Subject key identifier: AD:D0:21:04:BE:69:54:90:03:1C:07:3B:54:C6:62:83:42:D8:98:7D Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 19769D80E2A88B64D7D1A29BE14455FB01CB7EA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 0289 Signing time: Sat 18 Apr 2026 07:41:13 +0000 Manifest this update: Sat 18 Apr 2026 07:36:13 +0000 Manifest next update: Tue 21 Apr 2026 13:02:13 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: bx941lkVWwboyqavPFHgAidbCfctvsSuI+cx3Q/s8d4=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: IG1xkP17/hC/ImkkCYcinf8gtC3kZiUA7WdckI5avsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:76:9d:80:e2:a8:8b:64:d7:d1:a2:9b:e1:44:55:fb:01:cb:7e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Apr 18 07:36:13 2026 GMT Not After : Apr 21 13:02:13 2026 GMT Subject: CN=ADD02104BE695490031C073B54C6628342D8987D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:4f:3f:3f:14:84:70:77:25:aa:96:45:17: 2f:e7:4f:6d:21:d9:1c:7f:9f:be:b2:f4:17:3c:17: c8:64:93:88:47:40:23:8b:3b:96:88:88:1b:56:82: 62:ca:a9:2e:7a:d1:e7:3a:3c:1b:6d:e0:13:ad:3c: f8:e4:c6:ee:50:ca:f0:0e:ad:49:cd:0b:1d:e7:24: 16:ae:13:ac:8d:dd:11:c8:a4:91:26:b0:a2:26:ee: 43:9a:2d:17:79:26:ff:dd:7b:04:91:aa:db:83:3d: d8:2d:fc:84:1e:55:ad:82:44:df:04:6e:72:47:2b: 92:cd:46:e2:d7:30:f7:12:4a:25:9d:d8:47:30:5c: 94:23:ea:33:e2:1c:83:f8:87:e5:f0:d8:40:25:24: 74:54:3d:df:10:c2:8e:8c:c8:0c:30:a5:b6:79:94: 2d:d4:f4:40:4d:f1:50:b5:af:e0:8b:b1:1e:f2:1f: 32:53:23:fd:1a:36:f4:61:34:ac:27:9e:f8:21:5b: 4b:11:b4:fa:37:a2:1f:51:5c:c3:7f:79:4c:9a:2e: f0:32:c2:50:3a:9f:5d:77:d9:f8:1a:cd:b7:b6:55: c5:44:e7:3f:2f:e7:09:18:96:f9:54:2f:a7:92:9b: a0:27:58:73:15:81:85:80:ec:1d:40:cc:20:ab:14: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:21:04:BE:69:54:90:03:1C:07:3B:54:C6:62:83:42:D8:98:7D X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:00:cc:cd:d9:cd:e4:21:8c:cd:02:69:6b:60:ba:bf:45:4a: c4:ef:e8:91:79:3c:61:fa:0d:23:84:27:82:62:16:8e:84:5f: 58:da:1c:3b:5f:97:ae:a6:e7:b7:af:7c:16:39:2e:c0:c6:2e: 29:95:36:b6:3c:2c:6c:ad:13:01:03:72:21:b8:10:46:5a:14: 70:7c:7f:97:8b:0d:e3:99:78:1e:fa:d1:7c:6e:77:b6:1b:31: ff:6b:18:83:77:58:59:1c:0c:45:a9:4e:8f:da:6d:6c:30:16: 5e:0b:e6:fb:23:e3:33:64:ab:3f:36:44:aa:c5:ec:9c:b0:ef: 9b:28:1a:7b:2b:b2:cc:db:bf:67:19:ce:2e:8a:ed:23:30:ae: 6d:ca:3c:16:05:52:c7:90:30:dd:ed:aa:7a:2a:24:c8:67:c1: 0b:e2:72:70:3f:9d:97:a1:18:09:b2:82:21:a6:c3:38:12:1b: de:59:bc:be:5f:ae:df:ba:ac:b2:c4:be:cc:01:b9:b0:42:9c: 8e:8b:25:43:e1:82:24:1e:9e:5b:b0:6b:9d:54:d8:e8:6b:64: c1:6d:bf:43:50:0b:73:97:8a:d6:68:ef:c4:84:69:ea:ec:89: b5:47:0d:cc:50:c4:49:3f:2f:a4:19:cf:52:4b:fc:7d:10:9d: dc:92:a8:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXadgOKoi2TX0aKb4URV+wHLfqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNjA0MTgwNzM2MTNaFw0yNjA0MjExMzAyMTNaMDMxMTAvBgNV BAMTKEFERDAyMTA0QkU2OTU0OTAwMzFDMDczQjU0QzY2MjgzNDJEODk4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNw08/PxSEcHclqpZFFy/nT20h 2Rx/n76y9Bc8F8hkk4hHQCOLO5aIiBtWgmLKqS560ec6PBtt4BOtPPjkxu5QyvAO rUnNCx3nJBauE6yN3RHIpJEmsKIm7kOaLRd5Jv/dewSRqtuDPdgt/IQeVa2CRN8E bnJHK5LNRuLXMPcSSiWd2EcwXJQj6jPiHIP4h+Xw2EAlJHRUPd8Qwo6MyAwwpbZ5 lC3U9EBN8VC1r+CLsR7yHzJTI/0aNvRhNKwnnvghW0sRtPo3oh9RXMN/eUyaLvAy wlA6n1132fgazbe2VcVE5z8v5wkYlvlUL6eSm6AnWHMVgYWA7B1AzCCrFHmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdAhBL5pVJADHAc7VMZig0LYmH0wHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgAzM3ZzeQhjM0CaWtgur9FSsTv6JF5PGH6 DSOEJ4JiFo6EX1jaHDtfl66m57evfBY5LsDGLimVNrY8LGytEwEDciG4EEZaFHB8 f5eLDeOZeB760Xxud7YbMf9rGIN3WFkcDEWpTo/abWwwFl4L5vsj4zNkqz82RKrF 7Jyw75soGnsrsszbv2cZzi6K7SMwrm3KPBYFUseQMN3tqnoqJMhnwQvicnA/nZeh GAmygiGmwzgSG95ZvL5frt+6rLLEvswBubBCnI6LJUPhgiQenluwa51U2OhrZMFt v0NQC3OXitZo78SEaersibVHDcxQxEk/L6QZz1JL/H0QndySqK8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:56 2026 by rpki-client