$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: F3b6YRlrhRydE2zGfmptfxx9q15QR5pGNrVBhBlWALc= Subject key identifier: 59:9D:91:CB:33:D4:33:BD:A1:E8:AA:49:0B:09:EA:FE:A1:C6:76:8C Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 3B52BC03B17CA2045D9F00E206F1B0926E5829CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 03DA Signing time: Sat 18 Apr 2026 01:51:56 +0000 Manifest this update: Sat 18 Apr 2026 01:46:56 +0000 Manifest next update: Tue 21 Apr 2026 09:00:56 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: ARirKLcn+hZmZWkrxNXM0T2/avCH3uNOEDnHMdCorEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:52:bc:03:b1:7c:a2:04:5d:9f:00:e2:06:f1:b0:92:6e:58:29:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Apr 18 01:46:56 2026 GMT Not After : Apr 21 09:00:56 2026 GMT Subject: CN=599D91CB33D433BDA1E8AA490B09EAFEA1C6768C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:5b:ed:95:f0:59:a2:93:86:e1:6f:53:42: a5:eb:5f:18:0e:c6:08:89:bc:cf:e2:b6:f9:b2:5a: c7:d2:bd:33:15:12:c9:32:5b:68:76:23:22:ca:55: 73:33:ae:58:82:5e:20:90:4b:9d:81:ed:9a:7a:b8: 1e:fe:52:50:a6:5f:b4:6b:bc:9d:47:d1:de:29:e2: e7:df:62:42:35:4b:8c:ac:89:a8:9c:1d:dd:b1:87: 7c:c2:db:d8:13:17:a0:89:6d:10:5a:b8:f6:47:23: 3e:4d:8d:58:42:1c:29:35:db:10:e3:9f:96:39:8b: 75:82:c1:e1:5c:a1:fc:00:d2:67:03:81:eb:28:29: 3f:c1:bc:86:3e:1f:aa:08:c3:3f:67:ee:6c:a3:f3: 49:0e:45:e0:20:80:18:65:47:18:f2:5f:ff:d6:ac: b7:d4:ae:ca:d9:01:01:73:ce:d3:35:5f:5a:7f:6d: b0:0c:01:07:2d:d1:dd:31:44:04:05:a4:93:d9:a9: 1b:28:38:b4:f2:1a:e4:05:d9:12:1e:e6:dd:e2:01: 63:8f:e8:1e:a4:f9:b3:9a:71:9a:65:8f:e5:67:22: 6a:04:a0:1d:83:ce:de:b2:d7:26:f2:20:77:58:7c: 29:8f:89:39:4c:61:80:7f:71:95:f8:b7:c3:3e:2f: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:91:CB:33:D4:33:BD:A1:E8:AA:49:0B:09:EA:FE:A1:C6:76:8C X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d1:27:f2:a3:89:45:7b:6c:39:7b:4a:12:d9:8b:b2:b8:f2: 4a:fb:44:8c:89:a6:38:b0:03:d1:47:dc:5d:17:11:75:f5:ac: cc:f3:b5:15:66:79:f8:fe:b9:f8:7c:62:35:6c:04:d0:75:1e: 64:07:57:14:03:fa:bd:e2:ef:24:76:c1:4d:1c:94:b1:07:40: 83:f5:83:a7:8d:ba:5f:af:d2:9d:6c:1a:1c:af:57:20:a9:2b: 34:45:a9:da:5d:85:f1:df:cf:c9:ed:79:7a:2f:93:15:fa:95: 86:c5:2c:67:c9:4a:71:46:94:0c:8e:26:57:ed:87:92:38:9b: 77:aa:48:db:e8:3c:fd:4e:fd:59:16:61:2b:fa:29:be:85:4b: e7:1d:2d:c4:ed:bf:1d:f1:59:86:d3:67:b6:7a:1f:5a:2f:fb: 82:b3:a5:f7:56:e3:b7:41:56:2b:94:e7:fa:27:d8:39:43:35: ed:41:ee:39:f1:30:9a:8b:47:26:d6:20:1d:39:83:14:bc:a4: da:5e:3b:e5:b1:c2:d8:11:8d:41:18:bf:46:3a:64:26:2a:96: ea:d1:4c:01:15:65:00:d2:11:4c:74:55:03:e6:e2:6a:38:cb: d0:58:49:1c:31:8e:8f:59:7a:06:f4:b6:44:3f:ff:43:0c:7b: 3a:13:61:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1K8A7F8ogRdnwDiBvGwkm5YKcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNjA0MTgwMTQ2NTZaFw0yNjA0MjEwOTAwNTZaMDMxMTAvBgNV BAMTKDU5OUQ5MUNCMzNENDMzQkRBMUU4QUE0OTBCMDlFQUZFQTFDNjc2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROFvtlfBZopOG4W9TQqXrXxgO xgiJvM/itvmyWsfSvTMVEskyW2h2IyLKVXMzrliCXiCQS52B7Zp6uB7+UlCmX7Rr vJ1H0d4p4uffYkI1S4ysiaicHd2xh3zC29gTF6CJbRBauPZHIz5NjVhCHCk12xDj n5Y5i3WCweFcofwA0mcDgesoKT/BvIY+H6oIwz9n7myj80kOReAggBhlRxjyX//W rLfUrsrZAQFzztM1X1p/bbAMAQct0d0xRAQFpJPZqRsoOLTyGuQF2RIe5t3iAWOP 6B6k+bOacZplj+VnImoEoB2Dzt6y1ybyIHdYfCmPiTlMYYB/cZX4t8M+L0PRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZ2RyzPUM72h6KpJCwnq/qHGdowwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjRJ/KjiUV7bDl7ShLZi7K48kr7RIyJpjiw A9FH3F0XEXX1rMzztRVmefj+ufh8YjVsBNB1HmQHVxQD+r3i7yR2wU0clLEHQIP1 g6eNul+v0p1sGhyvVyCpKzRFqdpdhfHfz8nteXovkxX6lYbFLGfJSnFGlAyOJlft h5I4m3eqSNvoPP1O/VkWYSv6Kb6FS+cdLcTtvx3xWYbTZ7Z6H1ov+4KzpfdW47dB ViuU5/on2DlDNe1B7jnxMJqLRybWIB05gxS8pNpeO+WxwtgRjUEYv0Y6ZCYqlurR TAEVZQDSEUx0VQPm4mo4y9BYSRwxjo9Zegb0tkQ//0MMezoTYQw= -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:29 2026 by rpki-client