$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: +NzqngdpV/5eeUZx6hZ/pJtdOCEmwuaSEjCEBShdNcY= Subject key identifier: B7:8A:D4:3C:67:9B:6B:12:FA:B8:97:AC:81:FA:D7:31:57:53:35:71 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 6CBE0F2A086A2AB67017A67AD7899DA687B041E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 013A Signing time: Fri 17 Apr 2026 10:11:21 +0000 Manifest this update: Fri 17 Apr 2026 10:06:21 +0000 Manifest next update: Mon 20 Apr 2026 21:57:21 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: iuAv/UaFFKrVUGSGL5PWp9D2W6/vC4UW88o2fSNFOM4=) 2: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: 8TXKICwT8dIf+BWgcGR3HNuwgXa2m57AHbNnxJIYs1s=) 3: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: LMvCvx9kzXW3z3DBoUouBvkL3POitD3r1eyTOk/uLqs=) 4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: JW2y4bSiPzDa57yfaBUJmXIx1LPnCEOpddrHM3xkrR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:be:0f:2a:08:6a:2a:b6:70:17:a6:7a:d7:89:9d:a6:87:b0:41:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Apr 17 10:06:21 2026 GMT Not After : Apr 20 21:57:21 2026 GMT Subject: CN=B78AD43C679B6B12FAB897AC81FAD73157533571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:3c:a7:d2:61:cd:23:45:5a:b4:e9:da:e5: 29:8f:49:dc:8a:38:a6:d1:78:e7:91:7b:ff:cf:7e: 52:9c:17:58:c6:c8:cd:f9:7f:6d:b1:16:92:93:a4: fc:df:b9:f1:64:3a:11:6a:86:ac:20:f9:0f:99:04: e6:f7:04:5e:0b:7f:57:58:28:7a:b5:f5:71:40:84: a1:fa:8e:63:e4:90:db:a4:a0:e8:1e:9e:35:f2:01: 2c:a1:bf:7e:99:dc:a2:09:9d:7d:56:b0:87:ed:cf: 28:d0:ec:ea:a8:38:1b:13:0b:45:db:12:98:14:a1: 1d:13:d9:b3:88:5f:71:7d:8b:01:d3:c4:2c:7f:e8: 29:c3:2b:f5:f4:59:46:3b:99:a6:47:55:29:78:c9: 98:1b:09:d6:79:5a:3e:4e:e8:ff:c7:a9:b7:65:0b: 6a:d1:c2:82:85:ad:bd:fa:f0:ab:a5:7d:78:bf:04: 83:b3:e4:9b:1f:63:c1:5d:a5:46:e5:0d:b6:8c:06: 60:d2:c3:6b:7c:31:f3:72:cf:f5:14:df:7c:a0:b0: 64:7b:69:92:a7:37:51:d2:66:d3:72:12:50:b9:20: ab:f9:79:a9:05:f9:21:45:dd:6b:50:ac:6f:f6:d5: b5:b8:f1:c0:59:f7:4d:d8:2a:60:f9:ef:f7:52:95: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:D4:3C:67:9B:6B:12:FA:B8:97:AC:81:FA:D7:31:57:53:35:71 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:d9:47:45:3f:e8:c7:c6:54:a9:33:a1:2a:08:e5:c1:2b: 16:87:a0:5b:96:7b:7b:c6:fd:d4:d7:5f:b4:4a:db:79:75:5e: a9:52:88:67:3b:00:9b:9e:35:93:eb:2f:83:28:68:bd:1e:ac: 56:89:ad:70:20:18:74:a0:a6:f2:38:cd:a2:40:24:6a:c3:68: 4a:0f:bd:a9:0e:45:b1:21:e6:e6:ed:5b:39:ec:5c:4f:7f:5b: db:ed:eb:51:b4:fe:87:c7:78:60:08:17:35:94:3c:dd:60:e9: 9b:f5:78:7a:fd:87:9b:7e:46:eb:e3:24:d9:88:6b:ee:ef:01: 8a:81:a7:ce:52:40:f6:c6:16:cc:c8:6f:e9:88:91:03:07:12: 1a:a4:0b:bc:65:70:58:7b:a1:d8:c6:a0:90:57:26:c9:8d:a0: 9d:83:70:1a:4e:e4:40:49:98:18:f0:35:fc:9e:37:26:df:55: 32:33:d0:b6:b8:e4:b2:97:13:23:90:ff:8d:d2:70:1f:8b:f0: e8:19:0c:36:80:3e:07:d5:d1:8f:db:03:49:2c:a9:c8:7a:65: be:89:d4:bb:fc:1c:ec:e6:43:09:fe:e7:35:cf:78:6f:db:3f: e3:be:a8:d6:e0:60:ac:dc:06:fd:c5:30:92:5f:83:76:d1:fd: b8:29:ff:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbL4PKghqKrZwF6Z614mdpoewQeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNjA0MTcxMDA2MjFaFw0yNjA0MjAyMTU3MjFaMDMxMTAvBgNV BAMTKEI3OEFENDNDNjc5QjZCMTJGQUI4OTdBQzgxRkFENzMxNTc1MzM1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gzyn0mHNI0VatOna5SmPSdyK OKbReOeRe//PflKcF1jGyM35f22xFpKTpPzfufFkOhFqhqwg+Q+ZBOb3BF4Lf1dY KHq19XFAhKH6jmPkkNukoOgenjXyASyhv36Z3KIJnX1WsIftzyjQ7OqoOBsTC0Xb EpgUoR0T2bOIX3F9iwHTxCx/6CnDK/X0WUY7maZHVSl4yZgbCdZ5Wj5O6P/Hqbdl C2rRwoKFrb368KulfXi/BIOz5JsfY8FdpUblDbaMBmDSw2t8MfNyz/UU33ygsGR7 aZKnN1HSZtNyElC5IKv5eakF+SFF3WtQrG/21bW48cBZ903YKmD57/dSlWs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4rUPGebaxL6uJesgfrXMVdTNXEwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH82UdFP+jHxlSpM6EqCOXBKxaHoFuWe3vG /dTXX7RK23l1XqlSiGc7AJueNZPrL4MoaL0erFaJrXAgGHSgpvI4zaJAJGrDaEoP vakORbEh5ubtWznsXE9/W9vt61G0/ofHeGAIFzWUPN1g6Zv1eHr9h5t+RuvjJNmI a+7vAYqBp85SQPbGFszIb+mIkQMHEhqkC7xlcFh7odjGoJBXJsmNoJ2DcBpO5EBJ mBjwNfyeNybfVTIz0La45LKXEyOQ/43ScB+L8OgZDDaAPgfV0Y/bA0ksqch6Zb6J 1Lv8HOzmQwn+5zXPeG/bP+O+qNbgYKzcBv3FMJJfg3bR/bgp/3Y= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:45 2026 by rpki-client