$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: /ydWbOnwziiWhfKC17tZBTsS5yYl8tFN3lVcOBePH2k= Subject key identifier: 84:0D:C9:D8:32:0C:5E:54:EB:43:26:C3:C4:3D:67:33:4A:4A:63:64 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 09AB19E93F48B6BED428376B62F0A7347A453E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 028E Signing time: Fri 17 Apr 2026 11:41:55 +0000 Manifest this update: Fri 17 Apr 2026 11:36:55 +0000 Manifest next update: Mon 20 Apr 2026 13:54:55 +0000 Files and hashes: 1: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: IHBWZ2aLtDtFiajS88smGA0f9ZjzM14ZA4EnckIFmqY=) 2: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: W4QqpemtzShS1QHLz/OQQiGGQqIHL/ZWTyinECHq8iM=) 3: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: FHbXQkePjO5Kv7MIwfEIPoO/ttV45kfWL4gTr6/e2cs=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: Mn2kP+cKGGOLyQSD70wITKilYtAFBvqgDyOS5Ob9KJw=) 5: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: vX9pHt7sIXoxfLpse+BOzTgHFLfYNSeE1BeT5z4TwOI=) 6: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: Jg0eBzFNwVRly/0j1c4wnh+Pn1/PmT37QsudfpP4Olc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ab:19:e9:3f:48:b6:be:d4:28:37:6b:62:f0:a7:34:7a:45:3e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Apr 17 11:36:55 2026 GMT Not After : Apr 20 13:54:55 2026 GMT Subject: CN=840DC9D8320C5E54EB4326C3C43D67334A4A6364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:f0:40:a1:95:c0:ba:69:80:42:f6:f2:6a: b5:7e:f8:39:9c:65:d6:bd:6b:df:65:66:e9:92:97: 2c:5d:18:f3:4f:8d:c1:b7:96:c5:12:5e:fd:e2:17: 6a:80:0c:62:ac:d1:cb:cc:22:f1:b6:80:d7:37:76: 7a:ee:7d:25:43:7b:b3:34:75:1d:9c:b6:2f:62:ba: 17:10:42:a3:c0:be:ee:ef:29:e4:2b:7e:53:5c:da: 68:3e:99:f3:d9:0e:75:55:b0:ae:6f:5c:52:9e:21: f8:c0:42:22:8d:cc:a1:50:d5:33:b5:13:2b:66:03: 2d:e6:0c:c4:c7:e6:e7:2c:98:b3:d9:13:71:22:44: 96:07:e7:86:1b:d9:2d:9a:bb:23:2c:89:1d:86:b2: 2c:93:b9:97:5d:60:ef:85:bb:a9:1d:fa:99:55:a6: 13:6c:61:e2:2c:33:c6:39:62:6c:e6:69:27:17:d5: 2f:1b:88:54:e4:b7:21:e1:cf:d5:9a:ad:15:6c:63: 3b:26:58:b0:54:c9:7d:eb:5e:76:b2:31:4e:65:13: 14:96:ae:64:ff:7e:79:fd:1c:69:9b:32:34:ec:e6: 56:92:28:45:cc:13:56:94:ac:39:10:f2:d1:89:04: f5:94:3f:c3:09:53:83:e8:b3:a5:b7:0d:8c:b8:94: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:C9:D8:32:0C:5E:54:EB:43:26:C3:C4:3D:67:33:4A:4A:63:64 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:88:c7:04:d0:59:9f:e0:cd:a0:17:2d:4d:16:fa:3b:88:ec: 56:5d:e8:32:c7:82:f1:38:46:09:33:99:8f:b9:80:07:43:52: 61:9a:46:47:1d:57:82:64:6f:10:8d:fd:15:2a:43:3b:1d:c8: 57:10:c1:7d:cf:3d:42:5b:06:5d:ca:4c:0a:0e:84:0d:8d:83: 19:97:cb:6b:0b:51:7d:ed:cd:cc:ca:d3:14:ad:9d:0b:9c:c8: 8c:4f:ee:fd:ba:22:c1:8a:86:b6:f3:15:58:af:77:24:97:ab: d2:21:47:e6:24:67:e6:cb:6c:bc:87:2b:46:6f:24:98:54:28: 9a:67:bb:3a:4c:95:15:f5:2f:df:a4:ee:46:07:3c:17:21:d1: df:00:05:5f:26:ba:52:e3:7f:03:2b:28:19:6e:b7:5f:6f:37: 44:81:63:ae:0a:8b:c2:c5:bc:4f:e4:f9:08:2d:7a:7a:cd:3c: 49:e6:47:0b:37:99:b8:99:0c:20:47:8e:c4:02:c4:13:96:65: 16:ad:2e:00:c0:f7:13:40:c2:6e:b0:b0:1c:03:7a:de:71:ce: 9a:aa:bd:9f:0f:21:75:fc:d7:5a:a7:e7:c8:e9:e9:ed:70:4c: e1:c1:9b:a6:5d:05:45:a4:98:ea:1a:cc:b6:0a:f5:06:d9:4c: b6:55:08:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCasZ6T9Itr7UKDdrYvCnNHpFPg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNjA0MTcxMTM2NTVaFw0yNjA0MjAxMzU0NTVaMDMxMTAvBgNV BAMTKDg0MERDOUQ4MzIwQzVFNTRFQjQzMjZDM0M0M0Q2NzMzNEE0QTYzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HPBAoZXAummAQvbyarV++Dmc Zda9a99lZumSlyxdGPNPjcG3lsUSXv3iF2qADGKs0cvMIvG2gNc3dnrufSVDe7M0 dR2cti9iuhcQQqPAvu7vKeQrflNc2mg+mfPZDnVVsK5vXFKeIfjAQiKNzKFQ1TO1 EytmAy3mDMTH5ucsmLPZE3EiRJYH54Yb2S2auyMsiR2GsiyTuZddYO+Fu6kd+plV phNsYeIsM8Y5YmzmaScX1S8biFTktyHhz9WarRVsYzsmWLBUyX3rXnayMU5lExSW rmT/fnn9HGmbMjTs5laSKEXME1aUrDkQ8tGJBPWUP8MJU4Pos6W3DYy4lORNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhA3J2DIMXlTrQybDxD1nM0pKY2QwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaIxwTQWZ/gzaAXLU0W+juI7FZd6DLHgvE4 RgkzmY+5gAdDUmGaRkcdV4JkbxCN/RUqQzsdyFcQwX3PPUJbBl3KTAoOhA2NgxmX y2sLUX3tzczK0xStnQucyIxP7v26IsGKhrbzFVivdySXq9IhR+YkZ+bLbLyHK0Zv JJhUKJpnuzpMlRX1L9+k7kYHPBch0d8ABV8mulLjfwMrKBlut19vN0SBY64Ki8LF vE/k+QgtenrNPEnmRws3mbiZDCBHjsQCxBOWZRatLgDA9xNAwm6wsBwDet5xzpqq vZ8PIXX811qn58jp6e1wTOHBm6ZdBUWkmOoazLYK9QbZTLZVCGE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:19 2026 by rpki-client