$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: vue2/P9T/G5XQxl/KbZ3UrawVoJv5btsbZK5TAaziPk= Subject key identifier: 1A:C5:4C:9F:A9:A7:19:6A:BB:C5:DC:A6:05:51:1B:1F:0E:F2:A0:B6 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 7A93C3B00780C1D8DD055E7B90749BBEC8EA58B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 018A Signing time: Wed 15 Apr 2026 19:01:36 +0000 Manifest this update: Wed 15 Apr 2026 18:56:36 +0000 Manifest next update: Sun 19 Apr 2026 05:57:36 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 2: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 3: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 4: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 5: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: yqp+u+Z4P7ziqJo0K397Ec+HxwFm0MZZ85ii77B53Yg=) 6: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=) 7: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=) 8: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:c3:b0:07:80:c1:d8:dd:05:5e:7b:90:74:9b:be:c8:ea:58:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Apr 15 18:56:36 2026 GMT Not After : Apr 19 05:57:36 2026 GMT Subject: CN=1AC54C9FA9A7196ABBC5DCA605511B1F0EF2A0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:3b:9d:65:97:fc:a4:f3:40:ba:62:36:ee: 39:f0:d7:63:34:fd:75:2c:c4:63:01:85:0a:7b:7a: 16:95:a4:8f:df:52:ac:b6:08:0a:2f:17:4d:39:0b: a2:f4:9a:dd:2f:71:c5:44:53:66:b0:4c:74:64:c1: 65:13:a8:0a:7f:09:e9:18:14:29:be:16:28:19:92: d0:f4:97:2a:46:a1:2a:90:9f:5e:d7:a0:8b:49:38: 39:10:95:9a:d2:06:3e:73:ec:9e:4e:a9:29:df:12: a9:c3:5c:00:b6:7f:be:1e:65:1a:ed:6d:35:60:ea: c5:08:a4:e8:9b:c6:15:9d:0d:79:59:66:10:a6:fa: d6:c5:7c:81:8b:87:9b:60:24:29:f3:30:d3:b8:ee: cc:9e:6e:58:be:76:ca:81:e2:5d:a8:d6:40:ee:ee: 01:b2:f9:20:7b:66:9b:26:eb:0e:9c:61:18:68:c5: 47:81:5b:6c:09:62:36:88:db:62:ae:76:9e:ba:dc: c1:6c:a1:fc:b9:0c:6e:e4:33:5c:0d:f7:ab:47:59: b4:70:94:55:a2:09:75:44:f2:a9:7d:05:0e:8a:d3: b2:06:84:74:a2:d5:09:d3:24:8e:ab:0d:02:28:b6: cd:84:18:f6:7f:86:d0:e3:b6:83:2d:c7:bf:a6:b3: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:4C:9F:A9:A7:19:6A:BB:C5:DC:A6:05:51:1B:1F:0E:F2:A0:B6 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:db:19:c7:fb:c4:01:df:10:bd:63:16:91:08:58:ea:7d:10: 18:45:7a:5c:ae:be:4e:39:f9:b7:89:77:0d:b9:51:cf:24:d2: 91:2d:84:1f:fc:33:dc:27:80:43:2b:01:cd:b5:3c:50:61:46: a8:6c:fe:d2:64:72:d4:b2:e9:6d:0c:75:96:c5:0e:66:de:e4: fe:e1:1c:fc:cc:0e:99:b3:20:8e:38:45:ab:d3:95:0a:1c:32: ab:1b:a8:db:4f:b0:2b:dd:ee:1a:ce:38:31:4c:f2:28:4b:bc: 09:ef:87:6d:e6:0d:a4:d2:ef:ef:3b:e6:58:31:4b:6a:bb:35: 4d:a8:79:b1:7b:64:47:76:f8:5c:43:45:87:3d:03:d4:02:7c: 5f:10:0f:a0:44:52:c4:e0:ab:75:f0:33:91:11:ea:8c:88:e3: c1:b7:68:de:bc:4e:09:40:8f:29:a0:96:69:38:83:56:ec:ae: 11:07:cc:00:85:aa:eb:3c:54:bc:c1:8b:6b:23:4d:fa:7c:b7: be:1c:9a:b4:04:54:e4:1e:88:b8:a7:f2:72:1f:32:97:d0:ea: 48:5b:ce:bd:4c:7c:b9:7e:81:f3:e8:5a:15:07:b6:2b:d3:ae: c0:8d:e9:67:ee:d9:29:ae:f4:3a:60:37:30:58:eb:da:ef:67: fe:3e:91:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepPDsAeAwdjdBV57kHSbvsjqWLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNjA0MTUxODU2MzZaFw0yNjA0MTkwNTU3MzZaMDMxMTAvBgNV BAMTKDFBQzU0QzlGQTlBNzE5NkFCQkM1RENBNjA1NTExQjFGMEVGMkEwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOzudZZf8pPNAumI27jnw12M0 /XUsxGMBhQp7ehaVpI/fUqy2CAovF005C6L0mt0vccVEU2awTHRkwWUTqAp/CekY FCm+FigZktD0lypGoSqQn17XoItJODkQlZrSBj5z7J5OqSnfEqnDXAC2f74eZRrt bTVg6sUIpOibxhWdDXlZZhCm+tbFfIGLh5tgJCnzMNO47syebli+dsqB4l2o1kDu 7gGy+SB7Zpsm6w6cYRhoxUeBW2wJYjaI22Kudp663MFsofy5DG7kM1wN96tHWbRw lFWiCXVE8ql9BQ6K07IGhHSi1QnTJI6rDQIots2EGPZ/htDjtoMtx7+msxz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsVMn6mnGWq7xdymBVEbHw7yoLYwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzbGcf7xAHfEL1jFpEIWOp9EBhFelyuvk45 +beJdw25Uc8k0pEthB/8M9wngEMrAc21PFBhRqhs/tJkctSy6W0MdZbFDmbe5P7h HPzMDpmzII44RavTlQocMqsbqNtPsCvd7hrOODFM8ihLvAnvh23mDaTS7+875lgx S2q7NU2oebF7ZEd2+FxDRYc9A9QCfF8QD6BEUsTgq3XwM5ER6oyI48G3aN68TglA jymglmk4g1bsrhEHzACFqus8VLzBi2sjTfp8t74cmrQEVOQeiLin8nIfMpfQ6khb zr1MfLl+gfPoWhUHtivTrsCN6Wfu2Smu9DpgNzBY69rvZ/4+kag= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:51 2026 by rpki-client