$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: kWFEQeHwJnWK+YmeQE8fWg1uLFKYnfC7sKvg5wb6/QQ= Subject key identifier: 31:4B:45:68:1E:9F:5B:FE:C7:E6:03:F8:9F:DC:62:6A:97:89:09:28 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 26AFBF30AE69D21ABEF7F03442B35D93A073D784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 012C Signing time: Thu 16 Apr 2026 00:12:42 +0000 Manifest this update: Thu 16 Apr 2026 00:07:42 +0000 Manifest next update: Sun 19 Apr 2026 08:48:42 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: SAqY4TyzVixVm1zbUaZThxlNYWb6zRYf3Oxs8i95Ubc=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:af:bf:30:ae:69:d2:1a:be:f7:f0:34:42:b3:5d:93:a0:73:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Apr 16 00:07:42 2026 GMT Not After : Apr 19 08:48:42 2026 GMT Subject: CN=314B45681E9F5BFEC7E603F89FDC626A97890928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:23:cc:c6:43:6f:e0:f3:7b:43:b8:3f:e9: 36:b1:f7:20:dd:79:e7:07:c6:35:41:d1:46:50:99: 69:cc:74:68:d3:40:16:1c:48:6d:0f:79:50:b5:b6: e0:45:d4:1d:47:bf:21:b9:5b:68:b5:6e:9e:88:63: 2b:8e:f4:b7:cf:99:d2:46:8c:f9:b4:95:de:90:9e: a1:81:29:44:2f:e1:ab:5b:30:a7:c1:d3:ee:02:a4: 3f:75:74:f7:b9:d2:f9:27:76:77:2b:a9:41:eb:a8: 38:4f:94:37:8e:5c:73:98:0e:f7:aa:b1:4e:13:9d: 22:53:fa:f3:00:65:78:09:18:eb:98:e8:77:3e:b7: e0:b3:f8:ef:b5:eb:76:f7:99:b5:0d:8a:d9:fd:5a: 44:9c:c4:e1:89:7d:1c:26:f1:1d:16:90:94:24:38: 60:4a:37:23:ee:e9:ac:b3:60:25:bb:dd:e5:78:e2: 34:79:ca:87:b4:9f:8d:e1:5e:89:ca:40:47:36:20: a0:f0:e5:56:fe:d0:8e:cd:f8:7f:f0:04:67:3c:61: e8:33:b1:95:8a:b6:5f:87:ae:88:34:de:d6:48:ba: 81:38:39:dc:b1:f6:53:05:f5:35:21:57:b3:7f:63: 23:fa:0e:65:85:fc:13:b0:de:df:40:f1:d5:52:5f: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:45:68:1E:9F:5B:FE:C7:E6:03:F8:9F:DC:62:6A:97:89:09:28 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1a:4d:40:aa:0f:dc:99:3e:9d:1d:0c:81:ad:e7:90:71:f9: 5b:42:f9:c4:5a:b3:7d:99:f8:2a:11:2d:ef:5d:9b:ca:4e:91: 1e:1d:03:22:dc:c5:58:c3:f3:25:0c:38:be:f5:80:71:7b:fe: b0:fc:52:d6:47:ae:ca:c3:b3:84:c3:ec:4a:ef:55:95:5d:89: a0:53:e0:c1:4d:df:d6:0d:d2:0c:19:af:83:72:8e:ab:90:17: 39:6b:79:3c:e7:a0:72:eb:5f:ff:c8:a2:96:82:25:eb:a4:21: 94:a4:1b:e1:2f:d1:90:b5:14:40:e0:b9:c2:41:d3:a9:18:45: c4:c5:9c:46:de:18:ab:39:a6:b7:e8:e4:5d:52:49:fd:b1:72: 48:f1:4f:b0:05:60:b4:79:0f:d0:40:72:c0:6a:51:c0:18:9c: 3b:88:7d:94:8e:0c:41:be:20:4d:7c:71:c0:b4:ec:30:76:b5: 29:5a:71:a9:0d:06:5a:77:c1:80:08:26:e3:36:51:1b:d6:a9: e6:8e:ff:0c:45:eb:90:f9:eb:58:1e:aa:e8:88:3e:99:ad:f1: 8f:03:92:e8:b3:70:db:d9:41:4e:fe:46:d7:09:a0:d4:74:1a: 61:15:f1:2d:04:d5:72:4b:4f:78:76:8c:9c:a0:90:38:a0:82: 64:b8:ec:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJq+/MK5p0hq+9/A0QrNdk6Bz14QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNjA0MTYwMDA3NDJaFw0yNjA0MTkwODQ4NDJaMDMxMTAvBgNV BAMTKDMxNEI0NTY4MUU5RjVCRkVDN0U2MDNGODlGREM2MjZBOTc4OTA5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudSPMxkNv4PN7Q7g/6Tax9yDd eecHxjVB0UZQmWnMdGjTQBYcSG0PeVC1tuBF1B1HvyG5W2i1bp6IYyuO9LfPmdJG jPm0ld6QnqGBKUQv4atbMKfB0+4CpD91dPe50vkndncrqUHrqDhPlDeOXHOYDveq sU4TnSJT+vMAZXgJGOuY6Hc+t+Cz+O+163b3mbUNitn9WkScxOGJfRwm8R0WkJQk OGBKNyPu6ayzYCW73eV44jR5yoe0n43hXonKQEc2IKDw5Vb+0I7N+H/wBGc8Yegz sZWKtl+Hrog03tZIuoE4Odyx9lMF9TUhV7N/YyP6DmWF/BOw3t9A8dVSX9SzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUtFaB6fW/7H5gP4n9xiapeJCSgwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAaTUCqD9yZPp0dDIGt55Bx+VtC+cRas32Z +CoRLe9dm8pOkR4dAyLcxVjD8yUMOL71gHF7/rD8UtZHrsrDs4TD7ErvVZVdiaBT 4MFN39YN0gwZr4NyjquQFzlreTznoHLrX//IopaCJeukIZSkG+Ev0ZC1FEDgucJB 06kYRcTFnEbeGKs5prfo5F1SSf2xckjxT7AFYLR5D9BAcsBqUcAYnDuIfZSODEG+ IE18ccC07DB2tSlacakNBlp3wYAIJuM2URvWqeaO/wxF65D561gequiIPpmt8Y8D kuizcNvZQU7+RtcJoNR0GmEV8S0E1XJLT3h2jJygkDiggmS47Hs= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:49 2026 by rpki-client