$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: 0uSVC/tX9B9n8wtu2gK9lNCn3OUuijDzL/WzwDBaHMw= Subject key identifier: 90:85:E2:5A:74:45:54:21:E8:2F:5E:F8:75:9B:C5:F1:1E:21:C4:03 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 2D9145BB3D4788BE6C84B73F84FD427D332E74DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 0233 Signing time: Fri 17 Apr 2026 11:54:20 +0000 Manifest this update: Fri 17 Apr 2026 11:49:20 +0000 Manifest next update: Mon 20 Apr 2026 18:55:20 +0000 Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: d0HjkKB7FfimroRB+n2YS7p7zUW66ddpBfJeipPxBBQ=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) 3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: Ho/z5p+Llpo5JnM3SsfeDK5P3p/cHY+sMZHhBZ/rOSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:91:45:bb:3d:47:88:be:6c:84:b7:3f:84:fd:42:7d:33:2e:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Apr 17 11:49:20 2026 GMT Not After : Apr 20 18:55:20 2026 GMT Subject: CN=9085E25A74455421E82F5EF8759BC5F11E21C403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:26:4c:8b:64:ad:8d:1c:57:b9:9d:07:c0:0d: 50:16:81:38:a0:2d:0d:78:8a:a0:67:e2:98:f1:0e: 6c:90:48:8e:df:6f:4c:2d:fb:0e:e8:b6:9f:d2:f2: 28:18:82:da:5b:fc:ff:f7:a8:6d:2a:71:83:a0:33: bd:93:f8:4c:c5:bf:4d:b1:23:63:05:13:fd:fc:d6: b0:ce:7a:91:c5:6a:c4:8d:e1:71:ce:dd:2e:8d:08: a4:16:59:61:d1:91:4a:37:98:aa:60:eb:bd:40:54: 19:44:b1:07:dc:94:44:77:1c:3d:da:4e:40:63:c5: ac:f8:c3:79:f9:88:62:07:ce:1e:74:90:d8:a4:4c: f8:3a:3d:35:aa:36:a3:9e:26:c8:d3:a6:fc:fb:86: 29:01:2f:dc:12:78:da:1b:c5:ee:24:23:48:ae:3b: ec:26:3c:e5:69:15:a4:4a:78:a7:c3:1f:d2:c9:5e: b0:e0:77:87:d9:85:3f:ec:34:e1:03:61:2f:51:1e: d7:dc:a3:64:65:66:30:7f:62:16:9d:83:d6:e5:48: 86:eb:63:bf:a7:cc:b9:3d:ca:60:d0:b0:50:a3:d9: d8:e3:10:10:f9:de:4e:f6:c4:ed:ee:60:16:22:2a: be:55:ad:d8:5e:46:3f:0a:c0:dc:c9:ed:03:1a:0d: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:E2:5A:74:45:54:21:E8:2F:5E:F8:75:9B:C5:F1:1E:21:C4:03 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:20:b9:7a:e4:e4:68:a0:eb:57:1a:63:4d:46:36:ed:25:3a: 95:90:f1:55:c6:3d:8f:f8:17:86:01:fc:df:58:a9:2a:5f:68: 96:aa:57:a1:ed:f7:cd:cb:47:5e:31:1a:54:2d:f1:bc:ad:3e: 6b:ae:0b:a5:95:b9:33:ac:c9:3b:6b:82:80:4e:5c:be:4e:30: e9:3a:7a:6e:c4:b2:01:21:ea:e5:bd:72:41:5f:29:0c:09:4c: 69:d3:68:f4:ff:8a:e6:5f:98:f8:90:83:7c:4d:95:6b:9c:58: 87:6d:04:19:4a:58:26:39:35:03:cc:12:cb:6c:0e:dc:cc:21: cd:df:d3:1b:da:63:87:19:e6:7f:c9:b1:1e:55:5b:b2:68:1c: 00:8b:a9:ca:d6:dc:0d:b9:f0:98:3c:2c:c5:c6:a2:62:28:4b: fb:65:8f:ea:4b:38:fc:23:ad:6f:66:0b:53:e5:57:3a:fd:11: 34:62:f8:95:77:17:85:67:eb:88:11:70:ad:26:0c:31:71:89: 2d:07:03:04:a5:ed:70:35:fa:f7:21:49:a3:e0:a7:91:a2:8a: 02:ce:6d:32:86:13:9f:7e:8c:ed:03:9f:21:6a:93:4b:58:b0: ae:15:0c:7a:9f:38:49:fc:33:f1:d4:cb:a8:9b:c7:e8:3a:3d: 08:96:43:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZFFuz1HiL5shLc/hP1CfTMudNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjA0MTcxMTQ5MjBaFw0yNjA0MjAxODU1MjBaMDMxMTAvBgNV BAMTKDkwODVFMjVBNzQ0NTU0MjFFODJGNUVGODc1OUJDNUYxMUUyMUM0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnJkyLZK2NHFe5nQfADVAWgTig LQ14iqBn4pjxDmyQSI7fb0wt+w7otp/S8igYgtpb/P/3qG0qcYOgM72T+EzFv02x I2MFE/381rDOepHFasSN4XHO3S6NCKQWWWHRkUo3mKpg671AVBlEsQfclER3HD3a TkBjxaz4w3n5iGIHzh50kNikTPg6PTWqNqOeJsjTpvz7hikBL9wSeNobxe4kI0iu O+wmPOVpFaRKeKfDH9LJXrDgd4fZhT/sNOEDYS9RHtfco2RlZjB/Yhadg9blSIbr Y7+nzLk9ymDQsFCj2djjEBD53k72xO3uYBYiKr5VrdheRj8KwNzJ7QMaDZ2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIXiWnRFVCHoL174dZvF8R4hxAMwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwguXrk5Gig61caY01GNu0lOpWQ8VXGPY/4 F4YB/N9YqSpfaJaqV6Ht983LR14xGlQt8bytPmuuC6WVuTOsyTtrgoBOXL5OMOk6 em7EsgEh6uW9ckFfKQwJTGnTaPT/iuZfmPiQg3xNlWucWIdtBBlKWCY5NQPMEsts DtzMIc3f0xvaY4cZ5n/JsR5VW7JoHACLqcrW3A258Jg8LMXGomIoS/tlj+pLOPwj rW9mC1PlVzr9ETRi+JV3F4Vn64gRcK0mDDFxiS0HAwSl7XA1+vchSaPgp5GiigLO bTKGE59+jO0DnyFqk0tYsK4VDHqfOEn8M/HUy6ibx+g6PQiWQ4o= -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:02 2026 by rpki-client