$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: a+Y3ywVjmk0ltvI5XU4O0RBSrC+xrTsCG8mAPfkTtSk= Subject key identifier: 16:8A:12:9D:BC:3A:DE:BF:34:A5:79:90:5C:34:96:C7:6E:BE:7D:65 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 6F47A36682E532369BCD7987D9DA084F200B883E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0137 Signing time: Thu 16 Apr 2026 15:22:36 +0000 Manifest this update: Thu 16 Apr 2026 15:17:36 +0000 Manifest next update: Sun 19 Apr 2026 15:59:36 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: dycYEKO0qAU+kqi/wd1ndbQugP/uJT2Hip8Cy06+wEU=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:47:a3:66:82:e5:32:36:9b:cd:79:87:d9:da:08:4f:20:0b:88:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Apr 16 15:17:36 2026 GMT Not After : Apr 19 15:59:36 2026 GMT Subject: CN=168A129DBC3ADEBF34A579905C3496C76EBE7D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:97:01:c5:4f:c4:16:67:89:bb:ce:29:94: 16:5b:d5:79:38:bc:6f:0f:97:8d:c8:3c:c5:f6:1b: 4a:44:d3:59:fc:c6:0a:ec:88:70:8f:11:41:a9:06: 16:b5:63:f2:16:f6:4f:3a:de:fc:06:bc:a4:5d:7f: b2:86:23:e6:86:13:7e:88:ad:58:0d:d7:97:00:ba: 57:d6:f7:bf:a4:24:6d:02:0f:1f:78:bb:e7:59:14: b3:93:f2:30:8a:f3:2d:58:b2:0c:e0:7c:12:3f:73: 64:da:62:5f:75:7a:36:76:4c:dd:f9:32:0a:be:64: 29:eb:21:d9:95:64:68:dd:2d:54:05:a1:03:b5:ad: 8b:87:e6:89:a7:fb:83:97:4c:26:b3:96:65:55:b1: 1c:2d:ba:8b:15:3c:5c:84:bc:c1:05:6a:43:9c:ef: 91:59:fb:7b:85:d7:a5:1e:d0:00:09:fe:e1:4e:69: ef:c9:82:68:af:7b:8b:24:24:b0:97:63:63:e2:d7: 6b:66:8d:80:ef:07:ed:42:9a:b1:df:42:c8:fd:9e: 1d:84:5b:d4:2c:0a:4a:b0:49:05:1c:a5:e4:71:f5: f9:54:5f:c0:64:cf:42:c9:2d:e2:ab:ab:85:5c:97: 49:2b:ef:63:c9:af:5d:9d:c4:f9:97:24:d7:67:f2: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:12:9D:BC:3A:DE:BF:34:A5:79:90:5C:34:96:C7:6E:BE:7D:65 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7c:cb:ad:10:25:8d:67:80:a1:06:eb:3f:b8:41:41:28:fa: c0:71:23:87:ce:da:82:68:be:7d:fe:43:0c:19:41:1e:14:70: 5f:a0:be:c5:48:39:89:02:99:ee:50:7b:5e:e4:21:be:98:82: 2b:7b:d0:a3:3f:e7:66:dd:80:3d:76:ea:74:83:0e:94:82:43: 85:13:68:8a:35:b5:8b:46:f2:b0:bf:19:e4:a0:47:c5:60:9f: 4f:6b:22:f6:ea:4a:12:31:90:7b:a7:9a:a0:14:a0:13:9e:35: 0a:c5:4c:13:78:01:21:a4:4e:0a:64:7b:45:0b:b9:b8:f8:a8: 11:43:2c:4c:8c:5d:14:20:7f:19:2c:e3:fc:08:05:6f:c1:93: ae:63:d3:89:b7:7e:34:cf:fc:31:5a:86:1e:fe:63:cd:c0:d6: 7f:d5:17:d2:f3:f0:1e:35:c5:c2:1d:35:3f:f8:3e:88:a4:c0: 65:33:19:ba:e6:c2:f3:2d:e0:ca:a8:89:a8:91:ca:24:20:b8: 5c:a3:cf:73:43:41:2d:01:a9:2b:42:da:58:ed:93:9a:aa:4d: f0:29:d0:b8:82:6f:d2:2f:31:40:d6:7f:12:f8:bd:dd:b1:3f: d2:dd:8c:ed:a1:1a:fd:d7:1d:85:7f:97:8e:5b:7b:32:65:72: 67:83:43:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0ejZoLlMjabzXmH2doITyALiD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjA0MTYxNTE3MzZaFw0yNjA0MTkxNTU5MzZaMDMxMTAvBgNV BAMTKDE2OEExMjlEQkMzQURFQkYzNEE1Nzk5MDVDMzQ5NkM3NkVCRTdENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s5cBxU/EFmeJu84plBZb1Xk4 vG8Pl43IPMX2G0pE01n8xgrsiHCPEUGpBha1Y/IW9k863vwGvKRdf7KGI+aGE36I rVgN15cAulfW97+kJG0CDx94u+dZFLOT8jCK8y1YsgzgfBI/c2TaYl91ejZ2TN35 Mgq+ZCnrIdmVZGjdLVQFoQO1rYuH5omn+4OXTCazlmVVsRwtuosVPFyEvMEFakOc 75FZ+3uF16Ue0AAJ/uFOae/Jgmive4skJLCXY2Pi12tmjYDvB+1CmrHfQsj9nh2E W9QsCkqwSQUcpeRx9flUX8Bkz0LJLeKrq4Vcl0kr72PJr12dxPmXJNdn8mKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFooSnbw63r80pXmQXDSWx26+fWUwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx8y60QJY1ngKEG6z+4QUEo+sBxI4fO2oJo vn3+QwwZQR4UcF+gvsVIOYkCme5Qe17kIb6Ygit70KM/52bdgD126nSDDpSCQ4UT aIo1tYtG8rC/GeSgR8Vgn09rIvbqShIxkHunmqAUoBOeNQrFTBN4ASGkTgpke0UL ubj4qBFDLEyMXRQgfxks4/wIBW/Bk65j04m3fjTP/DFahh7+Y83A1n/VF9Lz8B41 xcIdNT/4PoikwGUzGbrmwvMt4MqoiaiRyiQguFyjz3NDQS0BqStC2ljtk5qqTfAp 0LiCb9IvMUDWfxL4vd2xP9LdjO2hGv3XHYV/l45bezJlcmeDQ3o= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:09 2026 by rpki-client