$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json) Hash identifier: AT8MCWlgvGSYYcNdep/Hf8HH3QT3xQVQjx9IhU9WFgI= Subject key identifier: D2:3C:BE:35:C1:B3:C2:05:40:78:C2:49:16:EF:1E:B9:75:DD:B1:9C Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 6F515FF85AABDF34721A9EBBBA2AB7511EC695DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft Manifest number: 0588 Signing time: Thu 16 Apr 2026 23:51:20 +0000 Manifest this update: Thu 16 Apr 2026 23:46:20 +0000 Manifest next update: Mon 20 Apr 2026 09:16:20 +0000 Files and hashes: 1: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=) 2: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=) 3: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=) 4: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=) 5: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=) 6: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=) 7: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=) 8: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=) 9: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=) 10: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=) 11: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=) 12: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=) 13: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: LmT22i8a1/lu/ZfSA5EFlX636tvyIgx/YE9fAK9G6Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:51:5f:f8:5a:ab:df:34:72:1a:9e:bb:ba:2a:b7:51:1e:c6:95:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Apr 16 23:46:20 2026 GMT Not After : Apr 20 09:16:20 2026 GMT Subject: CN=D23CBE35C1B3C2054078C24916EF1EB975DDB19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:1b:1e:c2:68:ba:ef:03:32:77:bd:06:15: fa:8d:72:67:89:48:c6:ba:e8:3b:85:17:7b:52:65: eb:3f:2b:d2:3e:e6:ea:68:ff:68:0a:18:a7:0b:20: 34:b5:42:38:86:30:48:45:c6:b8:1a:50:8d:98:0c: b2:f2:2c:43:d6:36:b5:d2:de:15:ab:b2:d8:e1:c3: 63:6d:dc:a4:21:0e:00:4b:46:67:c0:b3:93:4d:6f: a0:3d:28:3b:e0:de:df:05:2c:b9:a0:b4:f9:07:f3: f4:99:9d:7a:c9:72:9f:32:02:78:38:b3:e4:e2:f3: cd:58:e3:65:e0:1d:e6:94:8d:d4:fc:77:e7:d5:0f: 1c:11:70:0d:5e:7e:d4:03:97:01:70:30:6a:09:88: b5:84:0d:81:7a:98:05:61:82:84:2a:2e:43:a4:8f: 2a:ce:48:43:64:c4:84:c2:1f:70:c3:2e:a9:e7:91: 2a:b5:39:30:e0:dc:a2:ed:2c:c0:fa:43:b6:d2:ee: 4b:52:d8:0f:fd:3e:96:fd:f0:8d:4c:f9:b7:f4:f8: ed:02:95:28:d1:54:2b:f9:ac:3b:74:a9:bf:bc:44: c1:7a:18:e4:1d:71:8d:7c:f2:7c:58:81:74:c0:ce: 23:f6:94:e1:f2:6d:b4:fe:67:01:44:d7:42:46:66: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3C:BE:35:C1:B3:C2:05:40:78:C2:49:16:EF:1E:B9:75:DD:B1:9C X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ed:c1:81:1c:39:fd:80:5a:05:f2:c1:f9:9a:a7:ac:1a:e1: 05:c2:1b:86:66:77:80:4a:4e:8f:ad:44:61:95:0f:fb:4f:fc: f9:96:f5:83:5b:22:f2:8a:ef:ab:b0:37:c8:f1:9b:28:1c:29: 29:eb:5b:f4:93:f4:e0:59:3b:e8:79:16:a5:5d:40:3d:8d:db: 5c:fa:09:ae:8d:f7:1e:c9:31:3f:d9:31:f8:03:6c:f4:9d:4b: c8:40:29:f4:ee:25:04:ba:b7:5d:31:18:f8:47:78:ae:6f:f2: 1c:40:87:4a:cc:19:ea:2b:5e:c6:07:1f:32:15:36:0b:2d:61: 1f:f3:c5:55:0f:f3:51:e0:8a:7c:82:d6:b8:84:19:12:28:e0: 4a:a2:b7:14:25:04:62:3b:9e:31:ff:51:e4:7b:42:1c:64:56: 5f:99:af:52:8a:07:9d:20:fe:de:d6:04:d6:44:89:24:0c:28: a3:ff:20:a7:26:54:04:5d:a4:93:f7:07:42:b8:15:f3:89:1e: 9c:27:f8:23:82:f2:09:00:26:b2:c3:9f:31:f2:03:8d:23:31: cb:71:be:b1:b9:d3:58:e2:b1:c9:06:b5:17:84:60:21:14:f4: a1:24:00:c4:dc:5b:52:4f:ec:cb:41:5c:1f:b4:3f:98:c6:1c: 03:d3:96:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1Ff+Fqr3zRyGp67uiq3UR7Gld4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNjA0MTYyMzQ2MjBaFw0yNjA0MjAwOTE2MjBaMDMxMTAvBgNV BAMTKEQyM0NCRTM1QzFCM0MyMDU0MDc4QzI0OTE2RUYxRUI5NzVEREIxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJRsewmi67wMyd70GFfqNcmeJ SMa66DuFF3tSZes/K9I+5upo/2gKGKcLIDS1QjiGMEhFxrgaUI2YDLLyLEPWNrXS 3hWrstjhw2Nt3KQhDgBLRmfAs5NNb6A9KDvg3t8FLLmgtPkH8/SZnXrJcp8yAng4 s+Ti881Y42XgHeaUjdT8d+fVDxwRcA1eftQDlwFwMGoJiLWEDYF6mAVhgoQqLkOk jyrOSENkxITCH3DDLqnnkSq1OTDg3KLtLMD6Q7bS7ktS2A/9Ppb98I1M+bf0+O0C lSjRVCv5rDt0qb+8RMF6GOQdcY188nxYgXTAziP2lOHybbT+ZwFE10JGZpTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jy+NcGzwgVAeMJJFu8euXXdsZwwHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5 ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjtwYEcOf2AWgXywfmap6wa4QXCG4Zmd4BK To+tRGGVD/tP/PmW9YNbIvKK76uwN8jxmygcKSnrW/ST9OBZO+h5FqVdQD2N21z6 Ca6N9x7JMT/ZMfgDbPSdS8hAKfTuJQS6t10xGPhHeK5v8hxAh0rMGeorXsYHHzIV NgstYR/zxVUP81HginyC1riEGRIo4EqitxQlBGI7njH/UeR7QhxkVl+Zr1KKB50g /t7WBNZEiSQMKKP/IKcmVARdpJP3B0K4FfOJHpwn+COC8gkAJrLDnzHyA40jMctx vrG501jisckGtReEYCEU9KEkAMTcW1JP7MtBXB+0P5jGHAPTlkE= -----END CERTIFICATE-----Generated at Fri Apr 17 21:37:58 2026 by rpki-client