$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: UKtvHwCSGIG8NEY6LzSbCX6dgirS0U30TbJ3i1xjQZw= Subject key identifier: DF:92:E9:8C:4F:8E:75:B8:4A:67:7D:D8:9B:8F:B0:25:7D:92:9B:D6 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 03D1A4AE397C89E39638A5BD5D60F8C61271F94E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 029E Signing time: Fri 17 Apr 2026 02:21:26 +0000 Manifest this update: Fri 17 Apr 2026 02:16:26 +0000 Manifest next update: Mon 20 Apr 2026 04:43:26 +0000 Files and hashes: 1: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: QpSfvsP98aIKyEmSeWKpPTeKkbj8V0H1wJ3Z6AyDMxQ=) 2: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: AA52rkzyrvi9rx6IuPvoxChCUlojIckMTzbSuJyQ2Ps=) 3: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: TPGP1WPLeZbCaltrlkU8mbWIgtWk0gBSa5ZHqBY62UE=) 4: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: qH4fRHR0W4MFKh1E1105QryHXU3lSEp8fpTQZ+gmPmA=) 5: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: /Lar0zoBB4XPY+wQ2ITKPZI23ikh0KXVF/LsaIxKVs8=) 6: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: AtVHs5kAJBkQyj2u1rc3FvQOLg6GUIRmBQO2EJLX0+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d1:a4:ae:39:7c:89:e3:96:38:a5:bd:5d:60:f8:c6:12:71:f9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Apr 17 02:16:26 2026 GMT Not After : Apr 20 04:43:26 2026 GMT Subject: CN=DF92E98C4F8E75B84A677DD89B8FB0257D929BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:3b:7d:65:a6:da:ab:47:7f:82:8a:3f:c6: 50:a4:c4:4b:43:ae:e6:fb:76:f3:6f:28:29:7a:02: 4b:5b:73:4f:aa:dd:ef:2a:67:13:a9:ac:21:ae:cb: cd:91:36:f0:0d:ad:e3:ec:d2:4b:21:dc:b1:f3:83: f8:a5:6f:14:e7:78:23:e7:8a:e4:18:ee:e1:c8:1d: d4:d9:b0:91:df:de:70:d0:e8:28:d7:5d:c1:b0:5b: ed:51:74:0c:7e:56:e2:01:ca:56:e1:a4:0d:8c:5b: 0d:f4:20:bf:26:ce:6b:a2:65:75:20:7b:62:43:0a: 8a:d1:e7:11:31:49:b1:8e:13:ee:af:5a:9f:ac:cc: 31:9a:23:23:56:89:1d:22:41:40:4d:83:22:12:79: 4e:9b:5f:c0:5b:8e:a6:a9:b4:85:18:37:1a:17:22: 4b:d3:d4:8e:56:52:6f:c9:84:f8:41:e5:02:76:90: 29:f9:73:32:26:8c:1e:a3:d3:52:43:80:a8:c3:19: 1f:08:72:c4:f1:c0:c6:7f:3f:43:f5:11:c3:d5:64: d6:fb:cf:83:ce:f3:2f:69:df:f9:cf:43:db:7d:76: b6:a9:ce:a9:34:69:e4:d1:58:79:a5:dd:86:4e:fd: 83:d4:7f:73:78:46:b3:34:79:6d:40:cb:1b:23:a3: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:92:E9:8C:4F:8E:75:B8:4A:67:7D:D8:9B:8F:B0:25:7D:92:9B:D6 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c6:2d:cc:d0:00:cb:b8:3d:a5:cc:76:fd:4f:e5:f6:66:4f: ae:60:04:27:2f:10:fd:81:f3:6e:41:af:1b:e3:4b:cb:ab:32: ae:4d:e5:9e:c6:ac:6a:fe:96:db:c4:98:30:5f:44:b7:e3:dc: 8f:52:59:c7:e8:0a:66:28:c1:e6:38:9f:20:14:fe:45:23:2c: 4e:86:f1:f7:70:7f:bb:0c:bc:cd:08:d0:79:59:0b:bb:92:7d: 93:54:be:4b:80:ad:12:5b:5d:c9:49:97:38:9b:28:08:5d:a7: 0d:8f:24:54:5a:39:df:66:4f:1e:67:0c:c2:cb:7c:35:7c:b7: 11:d4:4f:23:5e:3d:30:cc:04:ac:85:7a:da:c3:20:fc:2b:ef: 15:ea:f9:a7:04:05:6e:03:52:a5:35:49:6e:70:ae:5a:30:d1: 52:ba:15:78:bf:f7:ef:8c:5e:de:3a:31:98:5f:ef:0e:b1:36: 5d:40:2e:4c:82:f0:b5:5b:69:b0:18:ce:49:a6:aa:5f:66:0c: 71:06:95:f1:0d:e8:c6:10:6c:4a:12:64:82:35:20:50:9b:01: 73:8e:bb:03:72:f9:db:75:70:91:a5:d6:8c:44:a9:1a:83:fb: 27:60:10:3f:cc:f9:89:87:04:78:12:6b:52:73:da:58:81:c4: 60:c7:7a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9Gkrjl8ieOWOKW9XWD4xhJx+U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjA0MTcwMjE2MjZaFw0yNjA0MjAwNDQzMjZaMDMxMTAvBgNV BAMTKERGOTJFOThDNEY4RTc1Qjg0QTY3N0REODlCOEZCMDI1N0Q5MjlCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/jt9Zabaq0d/goo/xlCkxEtD rub7dvNvKCl6Aktbc0+q3e8qZxOprCGuy82RNvANrePs0ksh3LHzg/ilbxTneCPn iuQY7uHIHdTZsJHf3nDQ6CjXXcGwW+1RdAx+VuIBylbhpA2MWw30IL8mzmuiZXUg e2JDCorR5xExSbGOE+6vWp+szDGaIyNWiR0iQUBNgyISeU6bX8BbjqaptIUYNxoX IkvT1I5WUm/JhPhB5QJ2kCn5czImjB6j01JDgKjDGR8IcsTxwMZ/P0P1EcPVZNb7 z4PO8y9p3/nPQ9t9drapzqk0aeTRWHml3YZO/YPUf3N4RrM0eW1Ayxsjo8lBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35LpjE+OdbhKZ33Ym4+wJX2Sm9YwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLGLczQAMu4PaXMdv1P5fZmT65gBCcvEP2B 825BrxvjS8urMq5N5Z7GrGr+ltvEmDBfRLfj3I9SWcfoCmYoweY4nyAU/kUjLE6G 8fdwf7sMvM0I0HlZC7uSfZNUvkuArRJbXclJlzibKAhdpw2PJFRaOd9mTx5nDMLL fDV8txHUTyNePTDMBKyFetrDIPwr7xXq+acEBW4DUqU1SW5wrlow0VK6FXi/9++M Xt46MZhf7w6xNl1ALkyC8LVbabAYzkmmql9mDHEGlfEN6MYQbEoSZII1IFCbAXOO uwNy+dt1cJGl1oxEqRqD+ydgED/M+YmHBHgSa1Jz2liBxGDHegA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:56 2026 by rpki-client