$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: epU472+e/dS9gvNTMfhJn+DScLpUpf8LTY545nPDXso= Subject key identifier: 9A:44:C4:2A:A2:35:3F:9C:83:0F:EE:15:57:9F:B5:9F:53:D1:BD:CA Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 46762A484E695E4F2BE71E709F15244ACCB382A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 14:51:34 +0000 Manifest this update: Thu 16 Apr 2026 14:46:34 +0000 Manifest next update: Sun 19 Apr 2026 22:55:34 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: hd9xk3ym2HJbspk+aXhs2xvywZ8ZyM8GuT3X33VYFh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:76:2a:48:4e:69:5e:4f:2b:e7:1e:70:9f:15:24:4a:cc:b3:82:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Apr 16 14:46:34 2026 GMT Not After : Apr 19 22:55:34 2026 GMT Subject: CN=9A44C42AA2353F9C830FEE15579FB59F53D1BDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:8d:d6:71:b3:7a:aa:c5:2f:06:cb:b4:28: aa:f1:8e:61:49:c0:8b:f9:f2:37:d7:72:30:12:21: 97:ca:05:53:83:ea:d2:d6:97:6f:d8:f3:30:cf:e1: 18:db:80:bb:04:a1:bc:d2:d9:28:e1:00:f5:18:eb: 44:54:2a:ed:e1:5f:30:80:5c:c0:a2:f5:3f:88:a5: ac:21:40:56:fd:6b:e6:5f:2e:bc:19:6b:e7:5b:6d: 86:7b:20:45:a2:fc:41:5b:13:b2:20:2d:d2:b0:fa: aa:b5:ca:5b:85:27:cb:f4:b1:09:d8:bf:3d:6b:12: 7e:ad:87:c8:46:7d:68:9c:dd:5e:8b:b9:08:04:e4: 0c:4a:ba:24:4b:d4:54:63:5b:f8:6b:eb:85:ea:d1: 0c:9c:ea:10:51:74:36:41:b2:40:95:cc:46:29:de: 1a:7b:b6:61:0d:1b:c2:7e:28:a6:62:90:5c:05:26: 92:5a:bb:36:66:02:22:ef:27:f8:e9:b9:9b:21:5a: 08:8e:2c:7f:35:60:0b:76:62:bc:54:a9:a7:32:6a: 9a:35:03:c5:60:e0:5d:a4:74:d6:51:90:50:e9:f9: bf:34:dd:79:7b:bb:bf:c4:ca:de:91:77:14:97:83: 03:6d:f1:47:17:d3:6e:d3:2d:95:df:9f:cd:c7:fb: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:C4:2A:A2:35:3F:9C:83:0F:EE:15:57:9F:B5:9F:53:D1:BD:CA X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f2:57:4c:25:6d:6d:fd:a1:f8:10:2e:f9:2e:f3:33:b4:27: 1e:36:09:c7:ea:8a:33:ab:28:d3:25:62:03:6b:82:c6:74:6d: f7:76:90:20:be:f1:b1:82:b5:b1:30:ea:77:23:a9:78:80:f8: 76:3c:9e:18:a0:ad:5a:e0:fb:18:ee:3b:d3:05:a0:fe:a2:a1: e0:48:3f:77:64:67:fe:1c:1e:d3:f8:88:59:ab:01:d6:4f:92: 4a:4a:9f:8e:4c:b9:29:9b:2a:5b:12:e7:fd:e5:2f:37:0d:6a: 19:8b:79:7b:6d:9b:5b:03:32:a5:46:53:33:7d:9c:0e:0e:9f: 3e:f5:42:97:29:9d:50:be:ad:8b:16:f1:17:7a:48:53:1f:bf: 9c:47:38:9a:ce:f6:5f:ee:fb:50:c5:a1:a9:79:5b:65:b5:90: 4d:47:55:23:23:fe:ca:7d:e2:6d:2a:17:e5:9b:f3:89:3f:0c: f9:31:db:d9:4c:51:c3:e2:6d:4b:e9:9e:13:e3:97:24:e0:e7: 7e:ee:7d:a7:2b:e3:52:d6:39:20:ac:68:a6:e8:03:2b:c3:e5: 47:a7:7d:1e:3d:ca:e2:d7:5e:48:92:f8:4c:b0:a9:e4:a0:49: 30:38:5c:58:a7:5e:63:34:24:d7:79:ce:a1:f3:4e:3d:65:74: 63:8d:ea:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnYqSE5pXk8r5x5wnxUkSsyzgqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNjA0MTYxNDQ2MzRaFw0yNjA0MTkyMjU1MzRaMDMxMTAvBgNV BAMTKDlBNDRDNDJBQTIzNTNGOUM4MzBGRUUxNTU3OUZCNTlGNTNEMUJEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiY3WcbN6qsUvBsu0KKrxjmFJ wIv58jfXcjASIZfKBVOD6tLWl2/Y8zDP4RjbgLsEobzS2SjhAPUY60RUKu3hXzCA XMCi9T+IpawhQFb9a+ZfLrwZa+dbbYZ7IEWi/EFbE7IgLdKw+qq1yluFJ8v0sQnY vz1rEn6th8hGfWic3V6LuQgE5AxKuiRL1FRjW/hr64Xq0Qyc6hBRdDZBskCVzEYp 3hp7tmENG8J+KKZikFwFJpJauzZmAiLvJ/jpuZshWgiOLH81YAt2YrxUqacyapo1 A8Vg4F2kdNZRkFDp+b803Xl7u7/Eyt6RdxSXgwNt8UcX027TLZXfn83H+0BNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmkTEKqI1P5yDD+4VV5+1n1PRvcowHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADryV0wlbW39ofgQLvku8zO0Jx42CcfqijOr KNMlYgNrgsZ0bfd2kCC+8bGCtbEw6ncjqXiA+HY8nhigrVrg+xjuO9MFoP6ioeBI P3dkZ/4cHtP4iFmrAdZPkkpKn45MuSmbKlsS5/3lLzcNahmLeXttm1sDMqVGUzN9 nA4Onz71QpcpnVC+rYsW8Rd6SFMfv5xHOJrO9l/u+1DFoal5W2W1kE1HVSMj/sp9 4m0qF+Wb84k/DPkx29lMUcPibUvpnhPjlyTg537ufacr41LWOSCsaKboAyvD5Uen fR49yuLXXkiS+EywqeSgSTA4XFinXmM0JNd5zqHzTj1ldGON6ok= -----END CERTIFICATE-----Generated at Sat Apr 18 07:15:59 2026 by rpki-client