$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: lmo04Ho3cVW4xsXvVC3xq8I5UuAqoukuzkFW8WhaVMk= Subject key identifier: 4F:1F:A2:7B:6B:2C:DB:24:82:A2:6E:86:99:D3:FF:85:59:BF:CD:3B Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 317EBB45F088AF43ACEB3D1C4DB456A05E22F56B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01FE Signing time: Thu 16 Apr 2026 01:01:18 +0000 Manifest this update: Thu 16 Apr 2026 00:56:18 +0000 Manifest next update: Sun 19 Apr 2026 12:23:18 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: 5/bb2m/l4G8bQopKZ9eyezGHRGaLv9nfRV9c/BB9Gks=) 2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: XWN5vbmtOEcp5xyELCyZnfLomxj+WdvfrDl4GPhXXeU=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: CyqCQFsLxJfTBDBdmJ04cZzDUHG5T26HrmU816zhY/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7e:bb:45:f0:88:af:43:ac:eb:3d:1c:4d:b4:56:a0:5e:22:f5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Apr 16 00:56:18 2026 GMT Not After : Apr 19 12:23:18 2026 GMT Subject: CN=4F1FA27B6B2CDB2482A26E8699D3FF8559BFCD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:fe:bb:0f:8d:85:44:db:a2:d3:72:26:fd: aa:4f:e4:14:d8:19:24:af:68:b1:bb:b8:df:42:2c: 5b:4d:00:d2:94:0a:20:78:b2:69:54:0d:81:da:b2: 0e:82:59:29:13:a1:e4:fa:88:41:bc:62:59:d5:83: 1f:00:f9:0e:30:23:92:d4:05:27:32:d9:a3:5f:41: 76:0c:2f:ed:26:49:63:78:8c:10:d4:52:f5:51:64: f1:69:7e:a5:52:c1:02:a7:44:55:75:c7:2d:e6:3e: a3:ad:c1:8a:35:c3:06:7e:2b:71:6b:44:a1:7d:89: 79:53:92:dc:77:93:8d:0e:12:09:c1:3a:e6:ba:ec: a1:60:72:08:08:8f:05:21:c6:dc:ed:2b:3c:91:e8: 50:9a:e7:9d:c3:0f:b0:75:8c:e0:25:33:5d:a1:0e: 6c:ea:41:c2:f7:6e:f4:f8:78:98:97:a9:26:7e:27: 99:58:50:74:1a:cc:f6:ae:94:ea:7e:c8:70:99:ed: b7:d2:71:ea:ea:63:fd:0b:bc:e7:e2:9b:63:eb:1c: d3:3e:a5:73:98:09:9a:ce:9b:77:80:6b:18:4a:be: cc:d0:01:8c:a0:0b:66:9d:77:ff:e4:10:33:9b:f5: 25:74:6e:b6:43:8c:45:18:68:8d:ad:75:78:15:90: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:A2:7B:6B:2C:DB:24:82:A2:6E:86:99:D3:FF:85:59:BF:CD:3B X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4d:aa:d9:28:f2:ea:d2:a7:d2:65:9e:eb:24:fe:28:e3:88: 30:aa:51:7e:a8:cb:81:49:62:9b:a7:35:0a:8c:28:ec:e6:1e: 45:7c:28:da:08:74:27:ec:51:c0:19:21:1b:72:ed:70:82:6a: 3e:e9:93:0e:8a:98:44:02:1b:e6:bf:d2:39:ce:c6:cc:a2:18: 25:3d:d9:65:80:f9:ca:b7:6c:9f:45:83:10:09:60:64:19:c3: 99:2b:2f:43:33:4f:4d:c0:fb:db:e7:ea:1b:a8:df:29:e5:55: 97:eb:c6:30:38:c7:21:ef:70:83:3a:38:1a:0e:a4:4f:a8:7d: 30:95:7b:cd:37:46:91:53:a9:af:f7:30:2c:ad:a5:d9:69:d6: 60:22:00:0d:73:4a:d0:36:5a:49:45:b5:98:ad:9e:91:ca:82: 8b:07:79:dc:4a:38:d2:cf:c3:0d:50:23:be:f7:46:3f:3e:6d: 3e:c8:8a:b9:52:1b:7a:81:96:b5:a4:1f:e5:df:a3:c0:2a:75: 21:03:f7:a3:56:f5:e0:3d:41:1f:16:9f:2d:3c:16:3d:43:35: 57:df:94:f4:ec:0f:eb:a9:03:74:5f:40:1b:fc:c1:df:0a:c3: 68:c4:d9:73:70:f8:57:c0:27:c1:50:64:b1:09:56:99:f3:c1: ab:28:b2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMX67RfCIr0Os6z0cTbRWoF4i9WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNjA0MTYwMDU2MThaFw0yNjA0MTkxMjIzMThaMDMxMTAvBgNV BAMTKDRGMUZBMjdCNkIyQ0RCMjQ4MkEyNkU4Njk5RDNGRjg1NTlCRkNEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoP67D42FRNui03Im/apP5BTY GSSvaLG7uN9CLFtNANKUCiB4smlUDYHasg6CWSkToeT6iEG8YlnVgx8A+Q4wI5LU BScy2aNfQXYML+0mSWN4jBDUUvVRZPFpfqVSwQKnRFV1xy3mPqOtwYo1wwZ+K3Fr RKF9iXlTktx3k40OEgnBOua67KFgcggIjwUhxtztKzyR6FCa553DD7B1jOAlM12h DmzqQcL3bvT4eJiXqSZ+J5lYUHQazPaulOp+yHCZ7bfScerqY/0LvOfim2PrHNM+ pXOYCZrOm3eAaxhKvszQAYygC2add//kEDOb9SV0brZDjEUYaI2tdXgVkIHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTx+ie2ss2ySCom6GmdP/hVm/zTswHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFNqtko8urSp9Jlnusk/ijjiDCqUX6oy4FJ YpunNQqMKOzmHkV8KNoIdCfsUcAZIRty7XCCaj7pkw6KmEQCG+a/0jnOxsyiGCU9 2WWA+cq3bJ9FgxAJYGQZw5krL0MzT03A+9vn6huo3ynlVZfrxjA4xyHvcIM6OBoO pE+ofTCVe803RpFTqa/3MCytpdlp1mAiAA1zStA2WklFtZitnpHKgosHedxKONLP ww1QI773Rj8+bT7IirlSG3qBlrWkH+Xfo8AqdSED96NW9eA9QR8Wny08Fj1DNVff lPTsD+upA3RfQBv8wd8Kw2jE2XNw+FfAJ8FQZLEJVpnzwasosto= -----END CERTIFICATE-----Generated at Fri Apr 17 18:00:38 2026 by rpki-client