$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: ttQqsth3hh9klPPx/54/pp9L4DrQyBFl0BpBPeEu72g= Subject key identifier: 5F:09:EC:98:70:FE:FE:8D:9A:E8:A2:AB:3D:49:8A:AB:E5:D7:93:C8 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 14A2077359E4515926EB07F84346DB0AFB74BC46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 0125 Signing time: Fri 17 Apr 2026 15:21:49 +0000 Manifest this update: Fri 17 Apr 2026 15:16:49 +0000 Manifest next update: Tue 21 Apr 2026 01:42:49 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) 2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: 4gnyyQzQ4HBG0aVzqQjfc3lCj83xTekzxyh/t7Gp988=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a2:07:73:59:e4:51:59:26:eb:07:f8:43:46:db:0a:fb:74:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Apr 17 15:16:49 2026 GMT Not After : Apr 21 01:42:49 2026 GMT Subject: CN=5F09EC9870FEFE8D9AE8A2AB3D498AABE5D793C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:54:13:4d:06:25:99:fc:4f:05:82:90:19: 12:24:c4:01:d9:92:91:af:34:ab:8b:72:01:79:e7: f2:f3:5a:9a:a0:f8:a9:20:ae:c8:63:86:77:60:11: f3:2f:0e:5f:82:41:32:be:c2:88:e2:d3:8c:c3:4b: 8c:ac:95:2d:33:e8:70:26:e1:ee:ba:f2:6f:fe:5d: ea:1f:73:61:e4:11:fa:4b:ef:ac:19:92:a0:1a:d0: 76:cb:26:06:7d:1a:6f:72:f6:1f:c4:46:fc:82:da: 7b:3d:53:8f:18:03:b1:2b:ad:95:ca:5e:7b:cb:14: 84:1d:97:c9:99:f2:0f:df:db:c1:08:cd:8a:9d:28: 29:74:60:ac:bb:37:ba:11:ae:df:27:ee:ae:e6:49: 64:01:57:07:8e:f4:92:25:f5:fb:86:d8:8d:6e:ce: ad:78:e0:87:d1:05:1e:17:77:e5:6d:79:40:2d:7b: 6d:e5:b6:80:b7:40:aa:26:26:27:27:c1:31:67:10: eb:26:79:12:5b:21:7f:ec:b3:bf:0c:2a:ff:e7:8a: 9e:4e:3f:30:de:9e:fc:c8:99:ab:8f:2c:10:97:e6: 3e:ab:d8:6d:74:b3:75:20:33:a4:51:ee:54:42:28: 0b:78:72:0c:cc:b2:87:ef:36:92:c5:09:70:8e:51: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:09:EC:98:70:FE:FE:8D:9A:E8:A2:AB:3D:49:8A:AB:E5:D7:93:C8 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c1:97:ad:95:96:8e:87:54:19:1c:0d:9c:a5:62:0a:f0:9a: e9:4a:cd:bb:11:cc:de:13:4d:1a:24:6d:67:05:01:1e:79:ac: f7:8d:a0:53:36:a0:44:c2:f3:88:ad:a0:b7:b1:4a:de:ba:a2: 4d:af:56:e7:e7:bb:74:26:87:81:64:03:f1:69:4a:06:62:e9: fa:a8:cd:75:47:e3:bf:65:c2:39:9d:1a:31:40:1b:04:9a:3c: 1e:59:40:09:63:2d:7b:ea:f1:f9:d4:ef:ba:1d:64:96:8c:0c: 74:dc:c5:4e:c0:d3:e8:30:d7:4f:22:fd:4b:05:b0:35:22:07: e5:68:7c:1e:2b:53:e6:c8:3c:3c:78:40:a3:43:8a:f6:ce:6d: 30:37:51:f6:7a:04:70:f2:4b:a9:4a:b4:6b:0c:c5:6c:d8:f8: dd:aa:95:77:65:f9:7e:82:67:45:64:11:0b:64:93:f1:0a:2e: ef:be:6d:a6:59:82:5b:a4:1b:20:2b:10:97:7d:86:87:79:c0: 3a:02:c9:c2:33:45:51:80:f2:11:0c:8d:e8:cb:2c:e4:19:75: aa:50:d7:a2:13:7b:3c:4b:ee:d8:3f:d8:52:ef:27:cc:3c:5c: 6d:2a:51:70:a4:1f:fb:6f:4f:af:c7:86:15:0d:a2:8c:67:8c: 8e:02:ad:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKIHc1nkUVkm6wf4Q0bbCvt0vEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNjA0MTcxNTE2NDlaFw0yNjA0MjEwMTQyNDlaMDMxMTAvBgNV BAMTKDVGMDlFQzk4NzBGRUZFOEQ5QUU4QTJBQjNENDk4QUFCRTVENzkzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzVQTTQYlmfxPBYKQGRIkxAHZ kpGvNKuLcgF55/LzWpqg+KkgrshjhndgEfMvDl+CQTK+woji04zDS4yslS0z6HAm 4e668m/+Xeofc2HkEfpL76wZkqAa0HbLJgZ9Gm9y9h/ERvyC2ns9U48YA7ErrZXK XnvLFIQdl8mZ8g/f28EIzYqdKCl0YKy7N7oRrt8n7q7mSWQBVweO9JIl9fuG2I1u zq144IfRBR4Xd+VteUAte23ltoC3QKomJicnwTFnEOsmeRJbIX/ss78MKv/nip5O PzDenvzImauPLBCX5j6r2G10s3UgM6RR7lRCKAt4cgzMsofvNpLFCXCOUTUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwnsmHD+/o2a6KKrPUmKq+XXk8gwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrBl62Vlo6HVBkcDZylYgrwmulKzbsRzN4T TRokbWcFAR55rPeNoFM2oETC84itoLexSt66ok2vVufnu3Qmh4FkA/FpSgZi6fqo zXVH479lwjmdGjFAGwSaPB5ZQAljLXvq8fnU77odZJaMDHTcxU7A0+gw108i/UsF sDUiB+VofB4rU+bIPDx4QKNDivbObTA3UfZ6BHDyS6lKtGsMxWzY+N2qlXdl+X6C Z0VkEQtkk/EKLu++baZZglukGyArEJd9hod5wDoCycIzRVGA8hEMjejLLOQZdapQ 16ITezxL7tg/2FLvJ8w8XG0qUXCkH/tvT6/HhhUNooxnjI4Crd8= -----END CERTIFICATE-----Generated at Sun Apr 19 14:20:21 2026 by rpki-client