$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: vPlbogs5wp8/bPyHkFhNspuv/XOLjBqPHGtosUdhx0k= Subject key identifier: 30:E5:B2:97:35:BA:0C:33:AF:BD:23:D4:7C:79:64:F3:CB:1F:26:8F Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 27375DF6AEEC2F0EB73E05D4F787405F7952B31B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: 0134 Signing time: Wed 15 Apr 2026 19:30:56 +0000 Manifest this update: Wed 15 Apr 2026 19:25:56 +0000 Manifest next update: Sun 19 Apr 2026 03:51:56 +0000 Files and hashes: 1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: XPXFi+CrXb0szqqz/lxrVfC4rUp40i81Qh+YMvkij4E=) 2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: 2E3PXcqZ1EZWrQNl9389rSbxV86vRj53SObypk/JZKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:37:5d:f6:ae:ec:2f:0e:b7:3e:05:d4:f7:87:40:5f:79:52:b3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Apr 15 19:25:56 2026 GMT Not After : Apr 19 03:51:56 2026 GMT Subject: CN=30E5B29735BA0C33AFBD23D47C7964F3CB1F268F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:0d:c9:08:81:1b:29:a4:b9:8e:86:7e:b2: a3:6d:62:4c:5a:81:86:20:8b:8f:25:e6:3f:aa:9f: 41:3a:0f:e3:18:b9:f2:48:cb:aa:e7:55:a3:f6:8c: 6b:f0:71:7e:22:6d:52:c6:26:42:d9:cf:26:b0:9c: 08:70:57:f0:33:e4:f9:2c:fe:16:98:50:3f:90:18: d5:fc:3b:58:9d:b5:6c:26:d3:e8:7c:2c:8c:2f:6a: 96:90:06:ff:1d:57:b4:8d:e9:7c:47:22:5a:fd:1a: 14:45:5f:1b:99:f3:14:7d:6b:90:f0:d2:52:1d:99: 13:c1:8c:d8:44:01:f6:8e:75:f9:3e:a7:6c:a4:d6: 3f:d8:a0:70:df:08:dc:cc:84:b8:82:08:f9:5f:8f: 73:9b:5b:f1:be:6b:7b:2e:81:55:0e:e5:b3:01:9f: fb:35:cf:6b:f5:15:3f:de:ef:b4:ee:99:42:b0:2a: 84:cc:ea:35:02:ef:c7:bc:23:03:a7:75:63:db:34: 7d:a7:3f:82:c0:f2:80:ad:3c:ff:80:68:df:ca:ee: 3e:5e:26:b1:da:dd:4a:7e:80:01:54:e1:d4:9c:47: c1:5c:49:6f:d7:00:5e:51:ef:ff:26:28:cb:65:9a: 25:1e:54:4d:e2:b7:1b:7b:7c:99:8e:d8:e1:07:e3: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E5:B2:97:35:BA:0C:33:AF:BD:23:D4:7C:79:64:F3:CB:1F:26:8F X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ca:e2:17:9f:a0:18:0a:e1:bf:61:3f:70:dd:7d:45:40:e5: f2:05:bc:57:ab:49:91:9f:03:22:f8:68:53:e7:e0:4e:50:ae: f1:2c:96:d6:42:a7:66:91:83:c9:b1:74:23:02:3d:a4:97:1f: 45:05:0f:0a:82:ef:4c:dd:f2:c9:d5:95:04:e1:39:23:c0:91: db:34:61:1e:7b:2c:6d:ce:5c:ea:a3:cb:48:5f:f8:aa:9f:5b: 7a:7f:5e:3c:d5:07:39:a3:48:49:8c:36:96:0d:e4:fb:67:dd: 98:c0:49:c4:02:82:58:e1:d4:f8:9d:ac:0f:77:59:1c:3f:df: a6:75:f7:0c:f3:5e:92:27:c5:83:8e:b8:93:e5:a1:cd:10:b4: 17:dd:f2:f3:7e:58:35:24:52:d9:fd:2d:0f:8d:3b:40:04:da: 8c:55:44:bf:2a:44:67:08:ea:bc:4e:7e:94:4d:af:10:ed:a5: 47:bd:e6:91:cb:eb:2a:34:ed:10:83:22:f5:5e:f1:2c:ff:ef: cf:0d:ac:94:56:55:45:50:7d:a7:c1:78:15:c6:eb:75:4d:0a: 82:e7:8e:7a:81:2a:59:2d:5d:87:bc:4d:4d:1a:c8:ca:87:38: 14:bb:c1:29:e8:0b:a1:80:ca:5f:af:bb:76:8d:a4:a1:17:c8: 7e:9a:e0:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzdd9q7sLw63PgXU94dAX3lSsxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNjA0MTUxOTI1NTZaFw0yNjA0MTkwMzUxNTZaMDMxMTAvBgNV BAMTKDMwRTVCMjk3MzVCQTBDMzNBRkJEMjNENDdDNzk2NEYzQ0IxRjI2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+Q3JCIEbKaS5joZ+sqNtYkxa gYYgi48l5j+qn0E6D+MYufJIy6rnVaP2jGvwcX4ibVLGJkLZzyawnAhwV/Az5Pks /haYUD+QGNX8O1idtWwm0+h8LIwvapaQBv8dV7SN6XxHIlr9GhRFXxuZ8xR9a5Dw 0lIdmRPBjNhEAfaOdfk+p2yk1j/YoHDfCNzMhLiCCPlfj3ObW/G+a3sugVUO5bMB n/s1z2v1FT/e77TumUKwKoTM6jUC78e8IwOndWPbNH2nP4LA8oCtPP+AaN/K7j5e JrHa3Up+gAFU4dScR8FcSW/XAF5R7/8mKMtlmiUeVE3itxt7fJmO2OEH4+/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOWylzW6DDOvvSPUfHlk88sfJo8wHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnK4hefoBgK4b9hP3DdfUVA5fIFvFerSZGf AyL4aFPn4E5QrvEsltZCp2aRg8mxdCMCPaSXH0UFDwqC70zd8snVlQThOSPAkds0 YR57LG3OXOqjy0hf+KqfW3p/XjzVBzmjSEmMNpYN5Ptn3ZjAScQCgljh1PidrA93 WRw/36Z19wzzXpInxYOOuJPloc0QtBfd8vN+WDUkUtn9LQ+NO0AE2oxVRL8qRGcI 6rxOfpRNrxDtpUe95pHL6yo07RCDIvVe8Sz/788NrJRWVUVQfafBeBXG63VNCoLn jnqBKlktXYe8TU0ayMqHOBS7wSnoC6GAyl+vu3aNpKEXyH6a4J4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:32 2026 by rpki-client