$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: NJxRCpPeZTXYiKezyXkNPuZ9s3t9M8bYliEBZaXtD7Y= Subject key identifier: B2:9E:48:EE:B6:91:E4:D3:23:14:E8:B3:1B:6F:85:32:33:E6:29:25 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 39A30EB94962FB9EEC8414738660D09AABC617F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: EA Signing time: Wed 15 Apr 2026 13:10:02 +0000 Manifest this update: Wed 15 Apr 2026 13:05:02 +0000 Manifest next update: Sat 18 Apr 2026 23:28:02 +0000 Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: DxrvBG2EwoDi5CWPRxZjQftZXgHK8QtqiBt20+LN2E8=) 2: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: nkenSH9863Z+lpQJQMODyFbT05Pz805l8/5/VZE9gI4=) 3: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: eLoJQcRR7UviwY1rgXoVkCmTBMM5/WsPMnoDlvo+6Xo=) 4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: cPfXuq0p2jW4xPUhE/apIJeWsmib6FpPpP3zgdnQtuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a3:0e:b9:49:62:fb:9e:ec:84:14:73:86:60:d0:9a:ab:c6:17:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Apr 15 13:05:02 2026 GMT Not After : Apr 18 23:28:02 2026 GMT Subject: CN=B29E48EEB691E4D32314E8B31B6F853233E62925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:cc:57:3d:31:08:4d:cd:e0:5c:10:cb:21: 41:68:fb:4c:84:3f:fd:cd:5d:c3:cb:12:3c:77:03: 1b:90:45:37:d9:5d:f8:6c:85:a3:47:29:05:f4:66: b6:4c:74:38:6d:ea:4b:3b:42:ff:61:cb:e9:d1:f5: a5:15:22:99:a6:72:c6:45:3f:16:fa:6e:01:21:85: e0:0c:6c:c0:8c:b0:f2:f2:b2:03:3f:ec:2e:b6:00: 3f:16:13:00:92:3a:83:8c:3d:a3:ab:f9:ac:28:ad: 3b:8a:12:f7:2a:55:df:15:e3:09:57:e4:6a:0f:49: f6:db:7b:06:f9:fc:d1:98:ae:1a:12:76:f5:b1:4c: e6:42:df:6c:29:88:f8:59:29:92:f5:f4:0f:9e:c0: 92:41:ee:02:5c:76:15:3e:aa:ba:de:f2:6d:87:0b: cd:71:d1:13:e6:69:a5:b4:ab:1c:2b:b8:a2:e8:dd: 5c:fb:3e:b4:86:ec:d1:d0:40:32:de:42:92:9d:3d: 15:76:dc:ca:79:7c:fd:00:47:a4:69:c9:3e:09:d9: 3a:9c:b2:19:85:8d:36:d5:b3:3c:46:60:5b:98:cc: 23:f6:57:8c:f2:f5:5c:0c:7d:7e:61:f5:b2:1c:a5: 62:a3:90:db:f8:12:32:a0:12:94:d0:ce:9b:90:5a: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:48:EE:B6:91:E4:D3:23:14:E8:B3:1B:6F:85:32:33:E6:29:25 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:c9:f9:81:08:af:b0:22:d1:4e:3b:4d:c3:eb:e8:f9:c5: 04:10:54:2c:f4:95:ac:84:aa:94:f8:32:4d:56:14:67:19:80: 03:b3:8a:ca:70:14:c9:34:5c:ed:d4:43:d3:92:7e:6b:88:13: c5:46:e1:68:c6:bf:5d:cd:c5:9f:12:53:46:d8:61:72:ed:0a: d8:ca:ce:8f:d2:e1:c4:fd:25:95:cc:3f:7f:bb:1d:8c:2a:38: 6b:22:a9:b8:2e:2e:7c:a8:09:a3:9c:72:9b:71:62:61:87:ef: 10:cd:b1:8f:95:18:a1:73:7e:2b:88:10:cb:52:94:84:78:6f: 3d:28:03:42:39:fa:05:60:e2:79:75:94:7a:2f:8a:4a:0c:5c: a0:35:e0:52:4e:b2:9d:08:86:d3:1a:67:8d:ce:70:d8:aa:0d: dd:f1:45:9d:da:c8:b2:ce:f8:86:62:0e:6d:90:1a:8b:bc:0c: 86:69:ba:db:c3:b1:fd:ba:bb:90:32:40:2a:46:86:a4:f6:8d: 16:7a:b2:14:a3:87:8d:90:82:b2:d7:04:70:09:70:e7:55:d9: 22:6f:c0:6c:7b:ba:c3:77:aa:4f:da:e4:fc:93:c1:10:26:ec: 3f:4b:7e:04:32:be:d5:c3:10:68:a1:12:0b:30:80:a2:3c:71: 95:ad:02:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOaMOuUli+57shBRzhmDQmqvGF/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNjA0MTUxMzA1MDJaFw0yNjA0MTgyMzI4MDJaMDMxMTAvBgNV BAMTKEIyOUU0OEVFQjY5MUU0RDMyMzE0RThCMzFCNkY4NTMyMzNFNjI5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZiMxXPTEITc3gXBDLIUFo+0yE P/3NXcPLEjx3AxuQRTfZXfhshaNHKQX0ZrZMdDht6ks7Qv9hy+nR9aUVIpmmcsZF Pxb6bgEhheAMbMCMsPLysgM/7C62AD8WEwCSOoOMPaOr+aworTuKEvcqVd8V4wlX 5GoPSfbbewb5/NGYrhoSdvWxTOZC32wpiPhZKZL19A+ewJJB7gJcdhU+qrre8m2H C81x0RPmaaW0qxwruKLo3Vz7PrSG7NHQQDLeQpKdPRV23Mp5fP0AR6RpyT4J2Tqc shmFjTbVszxGYFuYzCP2V4zy9VwMfX5h9bIcpWKjkNv4EjKgEpTQzpuQWuo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsp5I7raR5NMjFOizG2+FMjPmKSUwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFCyfmBCK+wItFOO03D6+j5xQQQVCz0layE qpT4Mk1WFGcZgAOzispwFMk0XO3UQ9OSfmuIE8VG4WjGv13NxZ8SU0bYYXLtCtjK zo/S4cT9JZXMP3+7HYwqOGsiqbguLnyoCaOccptxYmGH7xDNsY+VGKFzfiuIEMtS lIR4bz0oA0I5+gVg4nl1lHovikoMXKA14FJOsp0IhtMaZ43OcNiqDd3xRZ3ayLLO +IZiDm2QGou8DIZputvDsf26u5AyQCpGhqT2jRZ6shSjh42QgrLXBHAJcOdV2SJv wGx7usN3qk/a5PyTwRAm7D9LfgQyvtXDEGihEgswgKI8cZWtArw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:12 2026 by rpki-client