$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: b1IdT+GBFqAab/+oX9c+CewzzLVV5tuOcmJ6xwU0Ous= Subject key identifier: DE:3B:E4:B3:04:54:15:59:80:AA:AC:2A:D1:B0:7D:DB:D6:F5:8C:92 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 15316781D6531BDD259E203C889CCBD094A3C327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 0133 Signing time: Wed 15 Apr 2026 22:12:24 +0000 Manifest this update: Wed 15 Apr 2026 22:07:24 +0000 Manifest next update: Sun 19 Apr 2026 04:23:24 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: fmytzBR8cmf3vdnIrK45FL503JvRMo/wdgQ7EJfM3Ng=) 2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: ekIoOh7ptq61gqMc11fxCutSdspxuLB4UaH+Gajb3G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:31:67:81:d6:53:1b:dd:25:9e:20:3c:88:9c:cb:d0:94:a3:c3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Apr 15 22:07:24 2026 GMT Not After : Apr 19 04:23:24 2026 GMT Subject: CN=DE3BE4B30454155980AAAC2AD1B07DDBD6F58C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:65:fd:d9:4a:cb:c2:ac:ed:18:d5:33:b9: 69:e3:be:32:1a:2f:53:7d:b1:c6:8e:2e:96:1b:30: d2:8d:44:83:27:6c:79:a2:92:7c:54:ad:3e:75:9e: 77:52:18:f4:02:64:d9:f6:70:63:6e:7d:40:31:3b: 2a:97:5a:c3:ee:41:5a:8c:84:a8:33:cb:b6:73:6e: 9f:c4:ee:57:98:75:fc:aa:97:8c:a6:f8:e6:60:b9: ff:2c:56:d1:1b:bf:ae:f2:db:76:73:92:eb:4d:ed: 61:38:ad:27:40:27:82:4a:3d:f0:39:05:cc:03:2c: 35:82:13:b6:46:f6:35:2f:93:e0:b2:0f:e9:fa:09: b0:6f:51:68:0b:af:1b:95:da:44:86:14:38:e6:ac: 07:79:65:c4:be:88:09:a5:07:d4:5a:e2:15:6a:14: 2f:92:e7:14:94:3d:aa:a6:0a:a3:4b:d7:0c:77:9e: 9f:2e:bb:61:0d:e1:e5:f8:61:c0:08:28:83:d0:cf: 2d:1e:e8:bf:c2:22:84:6c:22:58:10:08:aa:5b:55: cd:e5:93:82:04:5f:36:d2:52:2d:4a:74:d9:dc:b9: 74:fe:6f:44:fc:0e:45:2b:ca:d4:4e:60:1b:a7:95: 06:19:67:4e:56:a6:c9:2d:b4:15:12:aa:73:f7:3b: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3B:E4:B3:04:54:15:59:80:AA:AC:2A:D1:B0:7D:DB:D6:F5:8C:92 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:69:57:6f:65:71:02:44:88:c5:0a:f5:85:66:4b:ce:1f:df: 9c:76:87:da:67:f8:6f:0f:4e:00:fa:07:89:f6:d9:37:14:a8: a5:90:08:38:0a:b9:c9:b1:c9:68:75:99:77:b8:ea:f4:76:a9: 74:d7:42:35:04:4d:a3:76:bd:bf:ff:d4:da:55:5d:77:64:b0: aa:a7:7e:a2:a8:f5:3f:32:41:fb:5f:94:23:ac:2c:60:2d:c5: 6a:17:9b:b4:d0:27:16:67:ec:54:1d:e7:a3:06:1a:f1:87:73: da:e6:88:95:64:95:bb:8a:82:91:f0:06:79:c3:b5:5b:42:3e: dc:21:8e:c3:90:51:97:65:b3:83:06:a4:59:0b:f3:fd:5d:08: 6b:ad:20:3b:6a:2f:bf:da:b4:95:03:3a:70:62:8d:b1:13:87: 9f:2f:3a:8b:67:fa:e8:cd:8a:e6:f8:00:0b:c7:76:9b:88:cc: de:5c:43:a4:d5:e0:27:d4:2a:28:af:d6:61:e0:c3:6d:cb:d6: 2c:26:00:d4:14:e3:79:10:03:8c:fd:af:ee:4f:25:a6:c1:c3: 0f:a3:e9:c0:e6:ca:07:f3:a4:94:15:4a:2f:6e:af:06:a9:42: 1b:72:4c:cb:bd:25:fa:6c:97:15:26:a1:df:70:7f:47:8b:68: 08:87:9c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTFngdZTG90lniA8iJzL0JSjwycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNjA0MTUyMjA3MjRaFw0yNjA0MTkwNDIzMjRaMDMxMTAvBgNV BAMTKERFM0JFNEIzMDQ1NDE1NTk4MEFBQUMyQUQxQjA3RERCRDZGNThDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQWX92UrLwqztGNUzuWnjvjIa L1N9scaOLpYbMNKNRIMnbHmiknxUrT51nndSGPQCZNn2cGNufUAxOyqXWsPuQVqM hKgzy7Zzbp/E7leYdfyql4ym+OZguf8sVtEbv67y23ZzkutN7WE4rSdAJ4JKPfA5 BcwDLDWCE7ZG9jUvk+CyD+n6CbBvUWgLrxuV2kSGFDjmrAd5ZcS+iAmlB9Ra4hVq FC+S5xSUPaqmCqNL1wx3np8uu2EN4eX4YcAIKIPQzy0e6L/CIoRsIlgQCKpbVc3l k4IEXzbSUi1KdNncuXT+b0T8DkUrytROYBunlQYZZ05WpskttBUSqnP3Ow9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jvkswRUFVmAqqwq0bB929b1jJIwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1pV29lcQJEiMUK9YVmS84f35x2h9pn+G8P TgD6B4n22TcUqKWQCDgKucmxyWh1mXe46vR2qXTXQjUETaN2vb//1NpVXXdksKqn fqKo9T8yQftflCOsLGAtxWoXm7TQJxZn7FQd56MGGvGHc9rmiJVklbuKgpHwBnnD tVtCPtwhjsOQUZdls4MGpFkL8/1dCGutIDtqL7/atJUDOnBijbETh58vOotn+ujN iub4AAvHdpuIzN5cQ6TV4CfUKiiv1mHgw23L1iwmANQU43kQA4z9r+5PJabBww+j 6cDmygfzpJQVSi9urwapQhtyTMu9JfpslxUmod9wf0eLaAiHnKc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:31 2026 by rpki-client