$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: otS3D3XRpDsxRu2JpOsgHl5og8cJhDH68Kfkr6hiZbk= Subject key identifier: 17:BA:C6:A9:A2:DB:0E:C2:C3:24:2A:C4:87:D1:A6:BC:DD:29:5D:11 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 60973B9D0CADFA6368C4D67DB2E1FB86FD58DBDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 02B8 Signing time: Fri 17 Apr 2026 17:51:28 +0000 Manifest this update: Fri 17 Apr 2026 17:46:28 +0000 Manifest next update: Mon 20 Apr 2026 20:34:28 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: /V06dww8fHkegE6NXRd5kYOj+QXEWZtWoMUKVqclMF0=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:97:3b:9d:0c:ad:fa:63:68:c4:d6:7d:b2:e1:fb:86:fd:58:db:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Apr 17 17:46:28 2026 GMT Not After : Apr 20 20:34:28 2026 GMT Subject: CN=17BAC6A9A2DB0EC2C3242AC487D1A6BCDD295D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:43:83:43:b3:b6:31:2c:d9:bb:5f:e6:e9: 17:28:51:10:15:5d:16:2e:ad:70:97:df:64:e2:93: e8:ff:fd:0f:c8:e2:81:ca:65:c3:89:26:92:4f:a8: 68:e5:9f:82:b3:04:1b:84:2d:ce:c5:48:bf:3d:50: 86:13:a6:81:a1:cb:1b:df:6b:e4:21:17:83:6b:23: 1f:70:80:04:dd:3a:a3:b1:93:98:86:a8:00:17:52: 79:76:f4:99:ac:ee:25:d3:4d:51:eb:3e:ea:eb:63: cf:07:3a:ff:85:d1:18:f6:fb:14:10:98:03:eb:68: a5:b5:f7:c2:3a:a5:b5:88:16:93:8b:f2:5a:cb:91: 5b:2d:07:45:a7:73:fd:e3:92:6a:d4:19:06:03:f8: ba:ea:55:ba:9d:3d:fd:ca:d4:93:79:e9:13:1f:20: 52:29:5f:02:0c:c1:99:41:60:b5:76:97:b8:fe:cb: fc:fd:b9:03:d6:16:da:8d:24:50:c1:3a:be:26:04: 4f:94:65:c6:ca:e1:cc:cf:a5:38:5b:c4:fa:39:f8: ee:b8:d1:d7:4f:8f:45:a4:66:a2:62:d8:6f:ca:8d: b8:ec:04:96:cd:85:30:06:c8:94:f9:72:45:68:61: 04:00:2b:57:c9:7d:a4:e9:ee:42:a8:52:f0:08:21: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BA:C6:A9:A2:DB:0E:C2:C3:24:2A:C4:87:D1:A6:BC:DD:29:5D:11 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c3:e7:bc:c2:f1:be:b4:64:28:30:e7:43:61:96:ce:6d:77: 30:a2:dd:73:6f:04:a9:9f:e9:65:4e:44:eb:e3:58:1f:02:f5: 50:47:a6:0c:41:30:7f:c4:96:ff:ed:0c:b5:95:13:3b:08:a8: 5d:91:fc:1b:c3:69:ae:d2:18:a0:5d:2b:06:ff:a0:aa:b5:f3: 71:e6:db:06:e4:ba:70:80:35:ac:b5:1b:13:17:eb:1d:b4:17: 9d:3e:02:f8:72:37:ce:db:68:5d:2b:19:0c:15:be:80:1b:40: 5b:b1:f4:81:7a:ba:b2:88:d6:b4:5a:ca:2c:8a:a7:73:b0:11: 02:0f:f6:ac:04:d7:8f:07:8f:f2:cf:6a:90:cc:5e:38:c9:4d: da:3b:6d:37:6f:94:61:da:7d:78:d9:d4:01:64:d8:8d:a4:fb: ea:5d:08:8d:b3:b7:89:b1:2e:3b:f4:ae:87:85:4e:a5:08:ba: 2e:17:bd:6f:6f:f7:05:87:54:d1:75:f4:b6:f9:7e:07:9b:94: af:44:d5:79:41:d4:45:e9:a1:f2:df:44:0f:50:40:f1:b5:42: 86:41:8f:0a:5b:8f:71:ad:2c:f0:51:0b:25:bc:f5:fa:b5:09: f9:26:83:a3:fa:de:c9:c2:d7:28:c2:15:07:d0:0c:c1:a0:a4: 7d:82:9a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJc7nQyt+mNoxNZ9suH7hv1Y290wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNjA0MTcxNzQ2MjhaFw0yNjA0MjAyMDM0MjhaMDMxMTAvBgNV BAMTKDE3QkFDNkE5QTJEQjBFQzJDMzI0MkFDNDg3RDFBNkJDREQyOTVEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbkODQ7O2MSzZu1/m6RcoURAV XRYurXCX32Tik+j//Q/I4oHKZcOJJpJPqGjln4KzBBuELc7FSL89UIYTpoGhyxvf a+QhF4NrIx9wgATdOqOxk5iGqAAXUnl29Jms7iXTTVHrPurrY88HOv+F0Rj2+xQQ mAPraKW198I6pbWIFpOL8lrLkVstB0Wnc/3jkmrUGQYD+LrqVbqdPf3K1JN56RMf IFIpXwIMwZlBYLV2l7j+y/z9uQPWFtqNJFDBOr4mBE+UZcbK4czPpThbxPo5+O64 0ddPj0WkZqJi2G/KjbjsBJbNhTAGyJT5ckVoYQQAK1fJfaTp7kKoUvAIIQLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF7rGqaLbDsLDJCrEh9GmvN0pXREwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjD57zC8b60ZCgw50Nhls5tdzCi3XNvBKmf 6WVOROvjWB8C9VBHpgxBMH/Elv/tDLWVEzsIqF2R/BvDaa7SGKBdKwb/oKq183Hm 2wbkunCANay1GxMX6x20F50+AvhyN87baF0rGQwVvoAbQFux9IF6urKI1rRayiyK p3OwEQIP9qwE148Hj/LPapDMXjjJTdo7bTdvlGHafXjZ1AFk2I2k++pdCI2zt4mx Ljv0roeFTqUIui4XvW9v9wWHVNF19Lb5fgeblK9E1XlB1EXpofLfRA9QQPG1QoZB jwpbj3GtLPBRCyW89fq1Cfkmg6P63snC1yjCFQfQDMGgpH2CmsE= -----END CERTIFICATE-----Generated at Sun Apr 19 11:05:39 2026 by rpki-client