$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: SXJiPe14WwlVyi/2YX/UmeaFHh52iTO9/E5okyVkW2c= Subject key identifier: F4:4C:C8:0F:0E:B5:82:14:B7:5D:0B:C1:54:B7:B2:05:60:CB:6B:AF Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 17256B0D21A07E3F7DCE6E7BAFA438A390A29198 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 0364 Signing time: Thu 16 Apr 2026 15:50:59 +0000 Manifest this update: Thu 16 Apr 2026 15:45:59 +0000 Manifest next update: Sun 19 Apr 2026 21:59:59 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 4: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: Y0bn8jtTtB8J2sfXCx1Z1+XH/Viayi6CtMlOox95rRE=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:6b:0d:21:a0:7e:3f:7d:ce:6e:7b:af:a4:38:a3:90:a2:91:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Apr 16 15:45:59 2026 GMT Not After : Apr 19 21:59:59 2026 GMT Subject: CN=F44CC80F0EB58214B75D0BC154B7B20560CB6BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:5f:76:d7:ff:d9:02:9f:b4:5e:a3:64:fa: 9e:cd:7d:3e:dc:ef:41:bb:6f:8b:b7:66:51:2c:5b: f9:91:3a:42:21:61:75:eb:a9:41:ba:88:ad:25:cd: e5:bb:d8:ef:8b:a6:06:6c:23:00:07:ef:13:aa:6c: 4b:42:1c:52:6b:b7:58:d7:25:e3:54:3e:80:58:56: a5:6b:c7:33:4d:49:12:cb:9f:15:a2:f5:a2:f8:44: 52:ea:33:98:1c:5b:04:16:2f:d3:ac:1b:c1:a2:30: 10:56:b2:be:b6:6a:00:a7:65:f2:29:81:92:a1:5a: 46:c8:46:13:46:15:14:81:52:7b:e8:52:0a:e3:2f: b7:cb:90:7e:85:11:91:1a:39:ba:75:26:05:b1:f0: c5:51:fe:0a:a8:5c:b5:8e:c2:0c:7e:0b:4d:ae:f9: cf:23:6e:eb:f1:52:f3:64:9b:29:af:72:fe:18:a1: ca:d6:55:8b:04:99:bc:62:56:30:34:22:e8:c0:6c: 76:97:da:e2:c4:52:7f:95:c2:2d:60:3c:f0:85:63: aa:c1:d6:cd:15:1c:25:e6:89:cc:9a:93:1c:e7:66: 9c:29:e1:9d:23:dd:3f:af:e9:3a:3c:ba:60:02:f7: fd:e1:bc:6c:fa:43:78:23:c5:18:2d:70:5f:2a:01: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4C:C8:0F:0E:B5:82:14:B7:5D:0B:C1:54:B7:B2:05:60:CB:6B:AF X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cb:c8:8a:59:68:d2:bb:61:89:59:0f:48:f9:b7:50:0b:31: 9b:62:06:0a:cb:db:5a:9e:95:1f:e1:70:66:49:4f:93:a8:37: 17:6e:72:a6:f5:ad:a7:df:ce:72:a7:f7:01:db:af:fb:69:df: b9:fd:e6:50:aa:3c:8d:1c:e6:16:69:f6:36:f2:76:d9:37:f8: f1:c3:62:66:aa:0e:79:0b:3d:cd:ed:d7:04:e9:e9:6b:a9:e3: 04:d3:19:67:af:b4:c6:04:72:0e:f3:c6:2d:fd:d2:97:66:ab: bb:f1:38:c7:9b:de:34:1c:56:2e:d8:6f:f1:cc:56:7a:20:02: 7e:8f:80:16:8f:7d:be:4e:6a:4a:99:00:e2:c2:c4:51:f3:31: 24:cd:4e:4c:9c:2b:ee:c5:50:41:ca:1d:6c:b4:9a:df:67:fc: 5c:43:fb:ad:d4:d8:7e:34:d8:a4:67:ac:54:5c:51:35:8f:22: e5:42:db:5a:6f:c2:a1:d9:91:0d:d3:b4:47:38:d0:dc:43:e8: 5e:f3:1f:11:2f:a9:14:df:ae:cc:ed:9c:66:59:56:fe:55:51: 2c:81:18:c8:d9:a0:d2:4c:cb:f0:69:c2:fd:29:63:bc:ed:d9: ab:ff:e3:ef:34:cc:05:17:91:81:6c:01:66:00:25:f1:30:83: 37:eb:c2:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyVrDSGgfj99zm57r6Q4o5CikZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNjA0MTYxNTQ1NTlaFw0yNjA0MTkyMTU5NTlaMDMxMTAvBgNV BAMTKEY0NENDODBGMEVCNTgyMTRCNzVEMEJDMTU0QjdCMjA1NjBDQjZCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WV921//ZAp+0XqNk+p7NfT7c 70G7b4u3ZlEsW/mROkIhYXXrqUG6iK0lzeW72O+LpgZsIwAH7xOqbEtCHFJrt1jX JeNUPoBYVqVrxzNNSRLLnxWi9aL4RFLqM5gcWwQWL9OsG8GiMBBWsr62agCnZfIp gZKhWkbIRhNGFRSBUnvoUgrjL7fLkH6FEZEaObp1JgWx8MVR/gqoXLWOwgx+C02u +c8jbuvxUvNkmymvcv4YocrWVYsEmbxiVjA0IujAbHaX2uLEUn+Vwi1gPPCFY6rB 1s0VHCXmicyakxznZpwp4Z0j3T+v6To8umAC9/3hvGz6Q3gjxRgtcF8qAcyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EzIDw61ghS3XQvBVLeyBWDLa68wHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHLyIpZaNK7YYlZD0j5t1ALMZtiBgrL21qe lR/hcGZJT5OoNxducqb1raffznKn9wHbr/tp37n95lCqPI0c5hZp9jbydtk3+PHD YmaqDnkLPc3t1wTp6Wup4wTTGWevtMYEcg7zxi390pdmq7vxOMeb3jQcVi7Yb/HM VnogAn6PgBaPfb5OakqZAOLCxFHzMSTNTkycK+7FUEHKHWy0mt9n/FxD+63U2H40 2KRnrFRcUTWPIuVC21pvwqHZkQ3TtEc40NxD6F7zHxEvqRTfrsztnGZZVv5VUSyB GMjZoNJMy/Bpwv0pY7zt2av/4+80zAUXkYFsAWYAJfEwgzfrwvE= -----END CERTIFICATE-----Generated at Sat Apr 18 05:50:15 2026 by rpki-client