$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: fEy3JtKFHLnxAR3wM0KmDC6rEAs2rFd6/8r6wp/5Scc= Subject key identifier: DB:B7:E4:9C:18:F5:A7:2D:31:FF:50:8D:99:72:92:B8:52:91:50:99 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 7D12B29EDBE73AEFE24D5269944B3D1348E2F099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 0140 Signing time: Sat 18 Apr 2026 07:52:43 +0000 Manifest this update: Sat 18 Apr 2026 07:47:43 +0000 Manifest next update: Tue 21 Apr 2026 16:34:43 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: qdcFmE7b+q0LTLl9il6wSO52ud1F6bxcFwe5bz9+Mwo=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: yThEaj9cxtdok/5GUXj7+kkX5Xj5C+3r/fUIRdcZf5k=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: XyEEBYltue26H8HO4v1e76vA9wYxXjnPj9cDHbKqqio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 16:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:b2:9e:db:e7:3a:ef:e2:4d:52:69:94:4b:3d:13:48:e2:f0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Apr 18 07:47:43 2026 GMT Not After : Apr 21 16:34:43 2026 GMT Subject: CN=DBB7E49C18F5A72D31FF508D997292B852915099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:4f:da:a7:69:d5:bd:4e:3e:42:11:37:87: c4:89:72:bc:b1:71:40:09:d9:49:3a:b0:29:20:b3: 91:3d:fa:b0:ba:ab:9e:a3:00:d3:07:25:b9:95:b3: 35:05:12:58:07:25:d4:0e:b0:12:20:63:0b:e8:10: e0:87:69:63:02:f1:2d:56:3d:2b:a6:52:06:6d:67: 75:87:0b:2d:e3:73:12:bd:56:4e:5f:1d:fc:26:28: 6f:4c:78:e4:92:7f:c2:ff:6f:5f:52:e3:d1:06:31: c3:39:f1:09:2d:e3:81:e0:79:a7:63:d0:de:2e:2e: 74:26:dd:5e:bb:91:09:04:ee:a7:ed:8f:71:76:d3: d2:b2:65:74:b2:29:43:cd:64:40:d6:67:a7:8c:61: 4e:53:94:9f:d8:23:ce:e8:34:12:91:3c:a9:dc:69: e9:2f:99:31:d5:8f:60:8d:31:66:29:fe:e8:e1:a7: 30:49:17:82:55:3e:75:88:16:69:27:cf:e9:1f:58: a2:7c:13:0b:ad:04:84:34:e4:83:7c:72:cd:ae:7a: 21:41:33:f2:6a:f0:2a:81:03:29:c9:fa:6b:d2:3b: ae:07:51:45:dd:a7:3e:71:81:7c:38:f4:76:a5:ae: 16:61:53:91:10:51:d9:b1:cb:84:e8:6a:d6:9b:3f: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:E4:9C:18:F5:A7:2D:31:FF:50:8D:99:72:92:B8:52:91:50:99 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:45:53:22:61:d4:55:7b:86:78:95:e0:3a:af:22:01:4b:b1: 46:96:90:05:10:69:ca:30:b7:15:81:9b:78:9e:7c:14:7e:2c: b7:cd:75:9c:36:30:3e:fd:a4:61:54:08:81:3d:01:c3:90:61: fd:27:c5:18:46:d7:08:58:2d:dc:54:13:10:01:8e:8b:7d:ae: f5:19:0b:6d:ae:ac:f5:73:6a:a2:c0:00:08:3f:32:d9:8e:ac: 70:bd:3a:f4:48:9c:a9:f9:32:bb:ac:49:66:b8:f0:96:f0:63: 00:e0:94:14:82:d8:f6:20:87:63:00:a7:10:02:25:3b:b2:35: 8b:ba:13:1e:53:ba:cf:6b:00:c7:fc:c9:3a:44:93:10:c0:7b: b0:cd:4a:71:2e:a3:d0:14:c8:06:e9:57:f6:1f:c9:77:4c:7e: 1e:f1:6a:a9:a7:5f:d8:1f:94:73:c5:08:05:01:52:a3:74:b7: f7:55:01:05:58:e9:26:5a:f5:8f:e7:1e:13:f8:5a:e7:e3:7a: f7:8a:6d:6f:67:02:75:46:2f:d4:fb:2f:e6:41:e3:0f:6e:6b: df:60:49:4a:4f:db:94:d0:26:04:1a:52:ba:9d:de:e0:79:f8: d8:cf:39:7f:03:56:c2:d3:56:25:3e:cc:20:3e:89:36:6b:4d: 7e:32:29:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRKyntvnOu/iTVJplEs9E0ji8JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNjA0MTgwNzQ3NDNaFw0yNjA0MjExNjM0NDNaMDMxMTAvBgNV BAMTKERCQjdFNDlDMThGNUE3MkQzMUZGNTA4RDk5NzI5MkI4NTI5MTUwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTk/ap2nVvU4+QhE3h8SJcryx cUAJ2Uk6sCkgs5E9+rC6q56jANMHJbmVszUFElgHJdQOsBIgYwvoEOCHaWMC8S1W PSumUgZtZ3WHCy3jcxK9Vk5fHfwmKG9MeOSSf8L/b19S49EGMcM58Qkt44Hgeadj 0N4uLnQm3V67kQkE7qftj3F209KyZXSyKUPNZEDWZ6eMYU5TlJ/YI87oNBKRPKnc aekvmTHVj2CNMWYp/ujhpzBJF4JVPnWIFmknz+kfWKJ8EwutBIQ05IN8cs2ueiFB M/Jq8CqBAynJ+mvSO64HUUXdpz5xgXw49HalrhZhU5EQUdmxy4ToatabP1z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27fknBj1py0x/1CNmXKSuFKRUJkwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxFUyJh1FV7hniV4DqvIgFLsUaWkAUQacow txWBm3iefBR+LLfNdZw2MD79pGFUCIE9AcOQYf0nxRhG1whYLdxUExABjot9rvUZ C22urPVzaqLAAAg/MtmOrHC9OvRInKn5MrusSWa48JbwYwDglBSC2PYgh2MApxAC JTuyNYu6Ex5Tus9rAMf8yTpEkxDAe7DNSnEuo9AUyAbpV/YfyXdMfh7xaqmnX9gf lHPFCAUBUqN0t/dVAQVY6SZa9Y/nHhP4WufjeveKbW9nAnVGL9T7L+ZB4w9ua99g SUpP25TQJgQaUrqd3uB5+NjPOX8DVsLTViU+zCA+iTZrTX4yKb0= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:54 2026 by rpki-client