$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: 0MTwtRm0VtJQ2J3ghWfMM6bhigN59Fo9nzl16s/CmRA= Subject key identifier: 31:61:43:07:31:44:F5:88:58:D5:FF:22:92:1D:67:27:76:06:CA:F0 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 70515FAD53A847BC70841B1A7B5962CA6CECC788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 14:20:03 +0000 Manifest this update: Fri 17 Apr 2026 14:15:03 +0000 Manifest next update: Tue 21 Apr 2026 01:07:03 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: dPESLlDldiPlxlzMP4pyOofDIOVuijVKtCZRkw6hNwI=) 2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: qtEscO6Ss1ZidJKujaFpouGEgWx2zLweILJixQSY1+s=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: DR8p4E6dfI9qOKYwQqPpbHWR26Gw3awxEYM7vP2CqNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:51:5f:ad:53:a8:47:bc:70:84:1b:1a:7b:59:62:ca:6c:ec:c7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Apr 17 14:15:03 2026 GMT Not After : Apr 21 01:07:03 2026 GMT Subject: CN=316143073144F58858D5FF22921D67277606CAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:d1:e3:7e:9b:32:cc:ef:74:c3:d7:e5:6b: e6:5f:8c:f1:1b:36:7a:14:ab:62:1a:4b:35:c7:0d: c0:b3:81:cc:c3:d9:65:fd:c5:a9:bf:c1:f0:73:0d: 1a:fb:68:a0:d7:36:ee:2f:bf:dd:7b:f4:f4:0b:d3: 63:b7:e1:09:2f:f1:32:92:ea:c4:7f:ee:c0:cf:8d: c8:dc:cf:eb:c9:2d:18:4b:eb:45:86:d1:73:06:66: 4f:70:41:a7:bd:e0:89:44:f7:f4:c5:2a:82:91:16: 79:fc:d9:fc:96:09:e2:8f:00:68:d1:7a:5a:87:7a: 0b:f8:3f:5d:6d:a3:01:e7:e9:ad:17:39:ef:c6:d3: e6:e6:5b:d3:2a:2e:a3:6a:e2:12:a1:30:42:d0:2b: 43:16:79:87:b5:f5:19:63:1f:6e:88:8b:72:c1:9f: 78:f2:fb:6d:d4:e7:08:8a:7a:b8:44:2d:83:95:ff: 0d:c6:9f:05:3b:12:16:86:60:e1:6d:fc:7a:b5:68: 4a:91:fb:9b:ee:e7:e0:c8:0b:ee:57:0b:b9:bc:c0: d5:5b:85:91:a9:28:68:cc:75:31:f8:cd:d6:4a:f0: 48:9a:79:de:78:a5:55:a4:5c:51:46:ab:6e:c6:c9: 27:5a:15:63:87:54:b5:e5:94:f5:5f:cc:e9:1a:22: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:61:43:07:31:44:F5:88:58:D5:FF:22:92:1D:67:27:76:06:CA:F0 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a4:73:be:d2:cb:f3:97:d9:0b:2c:f1:b9:eb:97:c6:d9:88: 49:6a:fd:a8:79:26:c8:a0:6d:44:80:3a:c3:f6:8c:4c:d2:f8: d7:b6:5e:8e:ac:7d:24:3b:1c:c3:c8:81:ad:e1:23:9e:df:1b: c3:cf:8e:d8:8f:b9:0c:27:21:d3:91:4f:67:a4:e0:3f:ed:1d: 00:bc:1a:ed:0e:d7:d4:8a:16:46:a5:35:a1:66:23:de:4a:76: b8:6a:7e:1e:07:d2:9d:78:36:f6:ef:77:5b:21:ef:66:4e:f6: 5e:7d:78:2e:d9:90:aa:8f:fb:5a:3c:a8:e6:53:b8:39:be:62: 27:4b:a9:24:7b:d0:6f:74:37:d1:07:12:7f:eb:5b:bc:2c:da: e9:71:d2:6c:a5:ce:c9:53:f7:7e:e1:81:13:7a:29:db:6a:75: 76:c0:91:07:98:77:c8:20:42:86:7b:42:54:77:8f:13:34:86: 8d:8c:53:18:52:ca:8a:8b:0c:46:e3:9b:65:c2:46:02:05:de: b2:d1:28:77:2d:8a:7e:a0:b5:61:51:d6:47:07:d4:db:15:b4: 7a:cb:15:3b:3a:7c:3e:77:af:5d:3e:ea:ba:24:fb:b2:0b:49: 8e:c6:55:7b:ca:49:7b:6c:8a:11:29:45:a0:77:42:85:39:df: c8:c3:bb:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFFfrVOoR7xwhBsae1liymzsx4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNjA0MTcxNDE1MDNaFw0yNjA0MjEwMTA3MDNaMDMxMTAvBgNV BAMTKDMxNjE0MzA3MzE0NEY1ODg1OEQ1RkYyMjkyMUQ2NzI3NzYwNkNBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/9HjfpsyzO90w9fla+ZfjPEb NnoUq2IaSzXHDcCzgczD2WX9xam/wfBzDRr7aKDXNu4vv9179PQL02O34Qkv8TKS 6sR/7sDPjcjcz+vJLRhL60WG0XMGZk9wQae94IlE9/TFKoKRFnn82fyWCeKPAGjR elqHegv4P11towHn6a0XOe/G0+bmW9MqLqNq4hKhMELQK0MWeYe19RljH26Ii3LB n3jy+23U5wiKerhELYOV/w3GnwU7EhaGYOFt/Hq1aEqR+5vu5+DIC+5XC7m8wNVb hZGpKGjMdTH4zdZK8Eiaed54pVWkXFFGq27GySdaFWOHVLXllPVfzOkaIigvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWFDBzFE9YhY1f8ikh1nJ3YGyvAwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKykc77Sy/OX2Qss8bnrl8bZiElq/ah5Jsig bUSAOsP2jEzS+Ne2Xo6sfSQ7HMPIga3hI57fG8PPjtiPuQwnIdORT2ek4D/tHQC8 Gu0O19SKFkalNaFmI95Kdrhqfh4H0p14Nvbvd1sh72ZO9l59eC7ZkKqP+1o8qOZT uDm+YidLqSR70G90N9EHEn/rW7ws2ulx0mylzslT937hgRN6KdtqdXbAkQeYd8gg QoZ7QlR3jxM0ho2MUxhSyoqLDEbjm2XCRgIF3rLRKHctin6gtWFR1kcH1NsVtHrL FTs6fD53r10+6rok+7ILSY7GVXvKSXtsihEpRaB3QoU538jDu1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 17:54:36 2026 by rpki-client