$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: 719stPWt3yNQgJOQCybdVU3ugzTb1pIECCRszkoEyHU= Subject key identifier: 9C:A0:C0:E7:AC:E1:DC:3E:1B:F5:74:E6:D2:99:79:73:C5:07:86:31 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 653CF87D6FD4301A228F8C3C6600F5ADFE80B235 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 033E Signing time: Fri 17 Apr 2026 18:30:03 +0000 Manifest this update: Fri 17 Apr 2026 18:25:03 +0000 Manifest next update: Tue 21 Apr 2026 01:14:03 +0000 Files and hashes: 1: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: UVuZpXFyrqhiOKN105Da6oazN9yog27beBkdQnj5+yc=) 2: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: Fq5zYbjTJ0/FkCGLpNsGsRowFiN3w336hqMcVhjrspg=) 3: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 4: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 5: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: 4jYUGHzgqlt6RurnGux/NFBAQbNpobmY9uiPuWWXUgU=) 6: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: AevEhKshEQeFKNgoJ4MfmjtnuZlVYICKC2fhDAgNA8s=) 7: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: oOOz4CNEtadnsYJAOxlC7YHC+Qqspmn22GaMHdBiKUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3c:f8:7d:6f:d4:30:1a:22:8f:8c:3c:66:00:f5:ad:fe:80:b2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Apr 17 18:25:03 2026 GMT Not After : Apr 21 01:14:03 2026 GMT Subject: CN=9CA0C0E7ACE1DC3E1BF574E6D2997973C5078631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:01:81:21:d0:a6:12:70:0d:61:1e:3d:3d: 76:20:ce:db:ef:74:81:dd:ea:3e:c3:61:20:9a:d0: 62:ba:a9:8e:69:d4:c3:6d:53:b7:0f:1a:2f:4c:b5: 65:9f:a4:45:5d:9f:8b:83:1d:fe:a2:62:b1:39:e4: 5d:f0:4c:cd:15:c6:14:b3:5a:37:4a:20:7b:8f:9d: 55:57:8f:88:f4:37:8e:b3:4c:87:6b:c6:28:91:da: a4:94:d5:7d:97:e0:43:87:58:3e:1d:67:ba:2a:b1: 53:43:81:af:54:a9:bf:b7:29:fd:7f:1f:2a:76:d6: d1:41:db:21:b2:b3:6a:f6:ed:ee:d9:9f:ba:a7:9a: 90:18:c2:34:89:28:03:a5:aa:fb:0f:e0:f1:c1:be: 6c:0e:a5:62:b0:e9:72:8d:2d:9b:bc:b8:0b:83:7d: 07:3b:5a:5c:69:1d:5e:5c:25:af:c1:56:46:11:52: 61:04:58:93:89:69:b0:f5:61:b0:40:3f:87:23:69: 91:3f:d4:2b:59:d5:de:75:f5:c2:71:2b:ac:6c:9d: 03:20:a1:6f:f5:20:e4:02:bc:fc:52:6e:fe:58:35: 52:a5:fc:00:0b:86:bc:13:3a:79:7e:ab:0b:6a:ed: 68:e1:50:bf:15:3c:5b:6b:bd:f3:b9:52:e5:b7:97: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:C0:E7:AC:E1:DC:3E:1B:F5:74:E6:D2:99:79:73:C5:07:86:31 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ec:98:3c:a5:03:bf:31:42:a0:9c:20:8f:b5:34:f8:4e:dc: ca:e9:14:73:a4:a9:53:fa:87:bc:16:f0:ca:ea:5f:1c:19:65: a6:b8:9a:54:df:1a:3a:90:b3:14:17:73:e3:5d:ac:11:14:be: fe:37:b1:a4:07:27:17:58:2c:80:78:df:af:a4:aa:df:f5:df: 43:b7:7b:d7:e4:7f:38:ad:84:16:b1:33:69:20:02:60:d3:43: 34:d7:8f:4b:a5:92:a3:8d:bf:55:4e:3b:93:64:76:f8:2a:6d: b3:04:6f:11:a9:5f:94:20:44:dd:e8:9a:96:b6:34:96:88:10: fb:7d:0e:0c:d1:7a:c6:89:c2:7e:91:25:fc:be:82:4e:a5:30: 9f:35:c4:44:c4:b2:52:62:34:0a:46:0b:fa:a3:51:18:76:77: c6:10:53:e3:40:b4:fc:72:ab:e7:3f:41:de:00:57:b2:d2:5f: 27:79:87:6b:95:e5:d7:bd:4c:25:c1:2e:57:c6:48:cc:cf:71: 51:40:14:15:81:e8:7b:e4:af:3e:d5:27:0c:63:11:a2:85:dd: 65:15:41:d9:45:aa:1c:50:28:0f:ac:f1:0d:68:4b:c9:87:80: f2:20:4e:9e:6e:6a:d1:6d:f1:b6:31:05:fd:f6:1b:c3:9e:b6: 97:97:f6:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTz4fW/UMBoij4w8ZgD1rf6AsjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNjA0MTcxODI1MDNaFw0yNjA0MjEwMTE0MDNaMDMxMTAvBgNV BAMTKDlDQTBDMEU3QUNFMURDM0UxQkY1NzRFNkQyOTk3OTczQzUwNzg2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkgGBIdCmEnANYR49PXYgztvv dIHd6j7DYSCa0GK6qY5p1MNtU7cPGi9MtWWfpEVdn4uDHf6iYrE55F3wTM0VxhSz WjdKIHuPnVVXj4j0N46zTIdrxiiR2qSU1X2X4EOHWD4dZ7oqsVNDga9Uqb+3Kf1/ Hyp21tFB2yGys2r27e7Zn7qnmpAYwjSJKAOlqvsP4PHBvmwOpWKw6XKNLZu8uAuD fQc7WlxpHV5cJa/BVkYRUmEEWJOJabD1YbBAP4cjaZE/1CtZ1d519cJxK6xsnQMg oW/1IOQCvPxSbv5YNVKl/AALhrwTOnl+qwtq7WjhUL8VPFtrvfO5UuW3l7u/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKDA56zh3D4b9XTm0pl5c8UHhjEwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTsmDylA78xQqCcII+1NPhO3MrpFHOkqVP6 h7wW8MrqXxwZZaa4mlTfGjqQsxQXc+NdrBEUvv43saQHJxdYLIB436+kqt/130O3 e9fkfzithBaxM2kgAmDTQzTXj0ulkqONv1VOO5NkdvgqbbMEbxGpX5QgRN3ompa2 NJaIEPt9DgzResaJwn6RJfy+gk6lMJ81xETEslJiNApGC/qjURh2d8YQU+NAtPxy q+c/Qd4AV7LSXyd5h2uV5de9TCXBLlfGSMzPcVFAFBWB6Hvkrz7VJwxjEaKF3WUV QdlFqhxQKA+s8Q1oS8mHgPIgTp5uatFt8bYxBf32G8OetpeX9vM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:59:57 2026 by rpki-client