$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json) Hash identifier: XCAoeDVJNH8sGM+lWpWTtcgBJCAoegkRSzxKvrvt8gI= Subject key identifier: 47:E8:98:EE:63:06:37:9E:3B:73:58:83:FD:95:FD:DB:27:BA:EC:9C Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 43DEB77585CBEE22ADB4DA49EE54A5C8792B5F9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft Manifest number: 0289 Signing time: Sun 19 Apr 2026 04:32:29 +0000 Manifest this update: Sun 19 Apr 2026 04:27:29 +0000 Manifest next update: Wed 22 Apr 2026 11:42:29 +0000 Files and hashes: 1: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: SFQmtlEqNhmx25kRgKhycgtd/3jV5zQ3nNu6Q6CPubo=) 2: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: qoBpMRmpRtbQKjYwfY3kpPKBcu0qLy5Xmpu8A4tgZ7k=) 3: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: wLC5dsyoC1MaLKlHWA7nUE6H0ska+R8/1/l3g1ECW64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:de:b7:75:85:cb:ee:22:ad:b4:da:49:ee:54:a5:c8:79:2b:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Apr 19 04:27:29 2026 GMT Not After : Apr 22 11:42:29 2026 GMT Subject: CN=47E898EE6306379E3B735883FD95FDDB27BAEC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:42:c6:2a:b0:96:dd:cd:68:7e:19:61:be: a2:43:06:b5:d3:7c:87:71:ba:0c:76:37:6f:6b:a7: 0b:ef:e2:07:e3:c4:e0:35:77:2d:f4:d1:b9:c4:21: 16:d0:df:a4:ae:6a:3d:f5:40:40:13:bc:b3:47:cf: 09:fd:10:6d:a3:26:d1:1a:df:4a:c1:b4:d4:57:03: 62:3b:4c:b2:d7:9e:b3:38:c0:a3:73:45:cd:52:02: 58:0a:68:33:0c:77:7d:e7:11:42:43:4d:6f:ca:1a: 1f:8a:8c:d4:78:f9:cd:81:df:d0:9e:ba:41:63:d7: 5a:bf:3f:a3:8a:1b:89:66:2a:55:aa:4f:58:e5:d3: b5:39:2c:06:30:3b:19:81:bf:0a:d4:b5:9b:3c:1e: d5:86:39:2f:99:0c:b7:ce:98:29:ce:6b:83:79:50: 2e:14:6d:aa:8c:4e:32:2d:34:3f:21:87:86:17:be: a2:92:98:1a:41:fe:82:52:94:5f:69:96:3e:cf:f3: 3d:c9:a3:ba:15:40:6f:a3:90:ce:92:5a:1f:bd:f2: 6b:4a:23:ac:4f:ba:cc:31:a4:cf:6d:29:25:32:90: 09:ce:34:25:91:85:0a:fe:a5:83:78:10:df:e6:46: 07:5e:40:ac:12:0c:1b:8d:bc:38:f3:bf:88:49:7f: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:98:EE:63:06:37:9E:3B:73:58:83:FD:95:FD:DB:27:BA:EC:9C X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:1f:21:70:3c:27:a3:9d:88:d3:8f:24:7b:fe:7c:82:ab: 0e:73:af:ad:0f:ed:01:df:ab:ea:42:91:53:be:bc:c4:72:4f: 7e:75:0b:d5:0b:70:6b:c0:8d:19:22:42:9f:8d:c6:e4:23:a9: 7c:ec:a0:48:63:b5:d5:45:cc:f2:e1:19:b9:5a:e5:1e:7d:11: 5c:65:95:87:55:dd:a7:75:d9:0b:58:da:58:bf:07:67:06:25: 7a:1f:b5:80:bb:30:6b:05:e7:13:49:d6:ff:73:7e:08:91:53: cb:29:20:21:f3:d7:1d:bb:b6:d4:b7:15:74:0e:c7:ee:b6:c6: 76:68:b4:7a:01:2b:9f:8b:b3:44:76:92:65:63:eb:c3:5c:ed: cd:3c:49:1e:94:7e:4d:92:c2:19:1c:25:f6:57:73:c3:7d:f4: 5d:0c:da:2c:91:d0:73:77:03:5d:d0:3f:29:fb:0a:39:07:a0: b5:ea:4f:87:03:f3:0a:2d:02:a2:40:b2:fb:26:3e:b5:22:5f: 2c:1f:35:a0:97:57:53:5b:ed:c4:fa:9d:15:20:dd:c6:82:22: 6d:eb:8e:ec:ef:a0:30:1d:6f:c9:16:78:ef:e6:82:cc:b9:e9: f4:1e:04:28:31:f2:af:cf:d8:5f:af:df:4d:3d:76:56:e3:ab: 40:30:4f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ963dYXL7iKttNpJ7lSlyHkrX5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNjA0MTkwNDI3MjlaFw0yNjA0MjIxMTQyMjlaMDMxMTAvBgNV BAMTKDQ3RTg5OEVFNjMwNjM3OUUzQjczNTg4M0ZEOTVGRERCMjdCQUVDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1kLGKrCW3c1ofhlhvqJDBrXT fIdxugx2N29rpwvv4gfjxOA1dy300bnEIRbQ36Suaj31QEATvLNHzwn9EG2jJtEa 30rBtNRXA2I7TLLXnrM4wKNzRc1SAlgKaDMMd33nEUJDTW/KGh+KjNR4+c2B39Ce ukFj11q/P6OKG4lmKlWqT1jl07U5LAYwOxmBvwrUtZs8HtWGOS+ZDLfOmCnOa4N5 UC4UbaqMTjItND8hh4YXvqKSmBpB/oJSlF9plj7P8z3Jo7oVQG+jkM6SWh+98mtK I6xPuswxpM9tKSUykAnONCWRhQr+pYN4EN/mRgdeQKwSDBuNvDjzv4hJf5WrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+iY7mMGN547c1iD/ZX92ye67JwwHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRD NTVFMEVDMjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACINHyFwPCejnYjTjyR7/nyCqw5zr60P7QHf q+pCkVO+vMRyT351C9ULcGvAjRkiQp+NxuQjqXzsoEhjtdVFzPLhGbla5R59EVxl lYdV3ad12QtY2li/B2cGJXoftYC7MGsF5xNJ1v9zfgiRU8spICHz1x27ttS3FXQO x+62xnZotHoBK5+Ls0R2kmVj68Nc7c08SR6Ufk2SwhkcJfZXc8N99F0M2iyR0HN3 A13QPyn7CjkHoLXqT4cD8wotAqJAsvsmPrUiXywfNaCXV1Nb7cT6nRUg3caCIm3r juzvoDAdb8kWeO/mgsy56fQeBCgx8q/P2F+v3009dlbjq0AwT9Q= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:05 2026 by rpki-client