$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: x3kwfuTEv8+VaYEi/sjl8vexfQuLyJVW+UZhCkbJkVU= Subject key identifier: AD:A1:6C:E6:C4:71:77:0E:46:4D:48:3C:59:96:AB:D2:06:F0:6C:4B Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 6D6492985312A81F7CA6F477113FE00781696EF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 028A Signing time: Sat 18 Apr 2026 14:22:38 +0000 Manifest this update: Sat 18 Apr 2026 14:17:38 +0000 Manifest next update: Tue 21 Apr 2026 19:10:38 +0000 Files and hashes: 1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: NnGeZKlWmM7+NPb2koajBHwzMbWniSV81vWWBb/tLhE=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: WnciReR37Q3sZkKiPgEqiE1RTQq39mIcAnatYEQxD2I=) 3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: fk5h/S4jSQI4thBEqEx+ocxOCOpDquhTLg33I3n6VV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:64:92:98:53:12:a8:1f:7c:a6:f4:77:11:3f:e0:07:81:69:6e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Apr 18 14:17:38 2026 GMT Not After : Apr 21 19:10:38 2026 GMT Subject: CN=ADA16CE6C471770E464D483C5996ABD206F06C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:09:94:30:e6:62:3e:67:f8:47:5c:c2:42: 19:3f:b5:40:d1:d7:66:e4:17:c5:28:1f:e6:b0:52: 9f:23:13:4c:5a:26:89:49:0d:3c:05:1f:51:6b:1d: f9:9f:97:85:f8:c2:7e:c9:5a:f8:8e:03:e3:3a:ea: 87:6b:a0:1b:f5:4e:9a:35:63:bb:63:e7:c2:0e:ba: 26:90:3a:98:49:63:6b:66:32:a6:cc:ac:e6:13:6b: de:8b:18:a2:39:b6:93:b1:01:b1:16:ac:be:31:d0: 56:96:86:88:19:7a:98:be:54:4f:6a:eb:9a:39:3e: f3:31:f8:ae:d0:2f:23:c8:bb:be:cb:18:65:cf:b2: 64:96:84:ef:1f:b7:95:5c:88:6f:0f:b1:db:30:ce: 94:e1:dd:19:af:a0:b1:00:76:e8:16:19:2e:45:fb: 98:2f:49:db:c5:9d:9b:49:39:ac:35:08:23:09:df: 33:d6:09:5c:c3:50:62:ff:a0:9c:07:ad:f0:d8:03: 24:e7:a4:62:fe:c9:1b:01:42:90:be:df:71:45:32: 00:aa:15:b6:8c:bb:2a:f6:22:03:3e:6e:30:38:ca: e2:d2:de:2f:5e:0b:2a:e4:6c:a4:4c:8b:71:52:a5: 58:28:80:10:9f:f6:ed:3f:17:91:1a:9d:d3:9b:c5: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A1:6C:E6:C4:71:77:0E:46:4D:48:3C:59:96:AB:D2:06:F0:6C:4B X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ad:eb:e4:3f:da:04:c8:f2:a1:87:1c:3c:b3:d8:3a:01:50: 41:37:af:41:65:7b:bd:26:57:5f:5b:b9:c3:ca:ca:e8:51:5e: f4:93:6f:f6:5c:c8:fb:0b:7f:91:4f:5e:8a:7a:71:0e:6b:36: 26:6c:40:59:93:92:76:f5:2b:c3:89:d7:d9:1a:bb:9d:42:c6: 62:42:e0:bc:5f:91:05:fe:c5:8d:ec:66:60:4b:ef:50:5b:64: 4f:f8:9a:6f:1a:12:ac:d7:2b:e9:75:cd:56:05:a7:12:0b:fa: a4:8c:77:29:d2:a5:7a:c6:d6:f8:1a:8a:8d:51:a4:71:9a:22: 4e:b6:c2:01:1a:38:fe:b8:27:ed:75:d1:bc:f9:38:0d:30:45: 7e:b4:c9:0f:4e:08:0d:17:c4:f4:80:8e:19:a4:0c:42:96:24: 39:45:c2:e7:a9:4c:4e:63:dc:bd:24:22:8d:57:cb:5a:e7:6a: 2d:4b:12:ea:d9:b7:1e:ce:2f:ae:99:49:3a:07:74:5c:92:a2: 88:5e:86:44:97:24:c5:8d:02:e3:33:4c:5f:8c:ff:29:91:a3: c1:49:8d:f6:82:99:da:1c:02:bd:0d:be:f3:76:4c:68:6d:75: 5e:30:3b:d0:da:53:44:5d:c4:37:38:88:34:6c:3b:ea:e3:54: bc:13:45:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWSSmFMSqB98pvR3ET/gB4FpbvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNjA0MTgxNDE3MzhaFw0yNjA0MjExOTEwMzhaMDMxMTAvBgNV BAMTKEFEQTE2Q0U2QzQ3MTc3MEU0NjRENDgzQzU5OTZBQkQyMDZGMDZDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDriAmUMOZiPmf4R1zCQhk/tUDR 12bkF8UoH+awUp8jE0xaJolJDTwFH1FrHfmfl4X4wn7JWviOA+M66odroBv1Tpo1 Y7tj58IOuiaQOphJY2tmMqbMrOYTa96LGKI5tpOxAbEWrL4x0FaWhogZepi+VE9q 65o5PvMx+K7QLyPIu77LGGXPsmSWhO8ft5VciG8PsdswzpTh3RmvoLEAdugWGS5F +5gvSdvFnZtJOaw1CCMJ3zPWCVzDUGL/oJwHrfDYAyTnpGL+yRsBQpC+33FFMgCq FbaMuyr2IgM+bjA4yuLS3i9eCyrkbKRMi3FSpVgogBCf9u0/F5EandObxRLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraFs5sRxdw5GTUg8WZar0gbwbEswHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICt6+Q/2gTI8qGHHDyz2DoBUEE3r0Fle70m V19bucPKyuhRXvSTb/ZcyPsLf5FPXop6cQ5rNiZsQFmTknb1K8OJ19kau51CxmJC 4LxfkQX+xY3sZmBL71BbZE/4mm8aEqzXK+l1zVYFpxIL+qSMdynSpXrG1vgaio1R pHGaIk62wgEaOP64J+110bz5OA0wRX60yQ9OCA0XxPSAjhmkDEKWJDlFwuepTE5j 3L0kIo1Xy1rnai1LEurZtx7OL66ZSToHdFySoohehkSXJMWNAuMzTF+M/ymRo8FJ jfaCmdocAr0NvvN2TGhtdV4wO9DaU0RdxDc4iDRsO+rjVLwTRX8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:46 2026 by rpki-client