$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: BcMnjoY3Kla5LxTs3n6EJYGyty29k4Lj7/0tHUIRyDM= Subject key identifier: FB:A2:08:0F:51:7B:C6:AA:6C:53:3E:FC:6A:02:3A:4A:43:A1:FA:E6 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 02823ED4A513C60E25A64995AE95B5A0015A49C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 0569 Signing time: Sat 18 Apr 2026 10:41:48 +0000 Manifest this update: Sat 18 Apr 2026 10:36:48 +0000 Manifest next update: Tue 21 Apr 2026 18:13:48 +0000 Files and hashes: 1: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=) 2: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: 1V5HKoDhDh0upMsP69VpaJdc0Ef0f4cKuhpub/BXrHc=) 3: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI=) 4: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 8mI7JSwFpji+CHoV0owKJg1tF90Qz+Hm6cxxtW8Wxac=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 6: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:3e:d4:a5:13:c6:0e:25:a6:49:95:ae:95:b5:a0:01:5a:49:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Apr 18 10:36:48 2026 GMT Not After : Apr 21 18:13:48 2026 GMT Subject: CN=FBA2080F517BC6AA6C533EFC6A023A4A43A1FAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:88:ed:05:1f:fb:a4:fb:d8:c8:11:9d:47: 1a:55:58:7d:b3:a1:e9:51:d8:c5:cb:f7:db:ef:95: 4a:6d:3b:76:57:36:e6:e9:fb:48:5d:29:7d:d7:73: 74:12:36:2f:a1:28:74:39:f7:38:16:02:b8:eb:02: f6:46:6a:ff:04:1e:c4:cb:31:bc:fb:d9:9b:f3:13: c0:d5:66:b7:d8:c3:f9:ce:1e:80:16:61:6b:fc:8b: a5:7f:45:b6:e4:85:3e:3b:15:b8:99:3a:24:49:6a: fd:dd:fa:4d:6b:43:7b:69:c7:57:66:7d:5f:47:a6: 89:ae:87:7c:57:5b:e7:7b:6d:52:5e:ca:1a:32:35: b4:e2:27:65:58:8a:9e:91:35:4e:de:fc:e4:56:ea: e5:23:24:51:58:22:5c:79:da:32:b8:ed:e2:2d:25: 40:53:c0:00:f6:a1:8c:3f:6e:3d:ef:7d:34:4f:f6: 95:e9:0f:58:d0:a3:80:75:d9:49:80:68:65:fd:8f: 09:14:f0:9c:be:ff:cb:c4:a1:f7:f3:61:25:77:ab: 81:e2:e9:ff:75:f3:3d:b3:2e:0c:96:70:3d:71:8d: d1:05:9d:60:84:46:20:66:36:7f:90:79:e6:eb:09: a1:f3:bd:17:99:d7:28:05:4f:da:79:65:18:b8:43: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:08:0F:51:7B:C6:AA:6C:53:3E:FC:6A:02:3A:4A:43:A1:FA:E6 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e9:37:31:f1:37:17:9a:ac:c9:5b:e2:8b:7a:0b:87:7b:27: ab:43:e0:bc:55:ef:b3:0c:8c:45:1f:41:23:09:79:c2:89:f8: 46:95:72:54:6b:5a:94:1a:ac:81:1c:89:d5:10:95:54:ed:ab: 14:61:d5:83:ab:68:ba:ad:4a:2a:88:24:64:0a:e0:e9:e7:6a: 98:93:fe:8d:ae:63:d0:41:38:df:1c:02:7a:09:ca:41:4c:cc: e7:f0:ce:41:c4:4d:ff:35:08:d8:93:09:10:cc:52:28:fd:5e: c2:3a:ac:07:51:ee:e0:57:0a:ab:f4:72:1f:bc:74:5c:ea:be: 9d:69:de:3d:ee:0e:36:cf:b6:8a:09:d9:32:5c:03:bb:38:89: f2:80:84:b6:14:5e:d2:d3:39:72:59:cc:ca:99:e1:5a:0c:fc: cc:e7:0d:b3:4d:a1:62:7a:b0:a4:87:be:d2:e0:69:74:9d:08: 47:f2:bf:2b:dd:16:fa:bf:d4:fb:a8:a8:69:33:82:72:be:5f: f3:eb:5f:2e:96:f1:d4:b0:10:41:f2:8f:54:bf:55:52:38:bf: 5d:b3:d7:25:9a:f5:cb:e7:a6:96:8f:bd:6d:a1:77:77:5d:d1: 3e:a3:c8:09:18:6a:d2:8c:5d:30:c3:2e:98:9e:14:c6:a3:06: 0a:44:2c:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoI+1KUTxg4lpkmVrpW1oAFaScQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNjA0MTgxMDM2NDhaFw0yNjA0MjExODEzNDhaMDMxMTAvBgNV BAMTKEZCQTIwODBGNTE3QkM2QUE2QzUzM0VGQzZBMDIzQTRBNDNBMUZBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDojtBR/7pPvYyBGdRxpVWH2z oelR2MXL99vvlUptO3ZXNubp+0hdKX3Xc3QSNi+hKHQ59zgWArjrAvZGav8EHsTL Mbz72ZvzE8DVZrfYw/nOHoAWYWv8i6V/RbbkhT47FbiZOiRJav3d+k1rQ3tpx1dm fV9Hpomuh3xXW+d7bVJeyhoyNbTiJ2VYip6RNU7e/ORW6uUjJFFYIlx52jK47eIt JUBTwAD2oYw/bj3vfTRP9pXpD1jQo4B12UmAaGX9jwkU8Jy+/8vEoffzYSV3q4Hi 6f918z2zLgyWcD1xjdEFnWCERiBmNn+QeebrCaHzvReZ1ygFT9p5ZRi4Q7yRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+6IID1F7xqpsUz78agI6SkOh+uYwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrpNzHxNxearMlb4ot6C4d7J6tD4LxV77MM jEUfQSMJecKJ+EaVclRrWpQarIEcidUQlVTtqxRh1YOraLqtSiqIJGQK4OnnapiT /o2uY9BBON8cAnoJykFMzOfwzkHETf81CNiTCRDMUij9XsI6rAdR7uBXCqv0ch+8 dFzqvp1p3j3uDjbPtooJ2TJcA7s4ifKAhLYUXtLTOXJZzMqZ4VoM/MznDbNNoWJ6 sKSHvtLgaXSdCEfyvyvdFvq/1PuoqGkzgnK+X/PrXy6W8dSwEEHyj1S/VVI4v12z 1yWa9cvnppaPvW2hd3dd0T6jyAkYatKMXTDDLpieFMajBgpELHg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:12 2026 by rpki-client