$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: qC5fwSoJs/VW73Uuq0/HrouoifmlE6wz1CB1cO43r7M= Subject key identifier: 8F:46:65:B2:A3:1E:A3:9B:45:D8:31:7E:2E:1C:CE:86:77:6A:EE:F9 Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 1556A479CD44AF3B212F4F5C9F9C6B2D8FA0A13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 7A Signing time: Thu 16 Apr 2026 04:20:00 +0000 Manifest this update: Thu 16 Apr 2026 04:15:00 +0000 Manifest next update: Sun 19 Apr 2026 05:32:00 +0000 Files and hashes: 1: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 2: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 3: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: bJ523UMle6pO5BzgtnygiAvX8r2xGzDgPw/btROq1/Q=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 5: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:56:a4:79:cd:44:af:3b:21:2f:4f:5c:9f:9c:6b:2d:8f:a0:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Apr 16 04:15:00 2026 GMT Not After : Apr 19 05:32:00 2026 GMT Subject: CN=8F4665B2A31EA39B45D8317E2E1CCE86776AEEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9c:3a:07:9f:d7:5c:22:0b:68:c5:65:21:97: 89:1f:6f:d1:60:3a:af:fa:37:d5:37:6f:f2:fb:60: a7:3e:5f:ae:68:f0:e9:f9:7e:c0:5c:76:d1:e1:10: 5d:d3:0b:1b:1c:db:73:b5:6e:6c:ec:18:4f:85:8b: ba:e1:db:17:5f:15:2a:e7:0f:59:25:ed:44:51:db: 76:25:2d:06:4a:a1:b1:2b:70:b0:ac:da:68:b5:38: 0a:f1:03:ca:9e:6b:85:9c:da:fa:e3:18:a2:98:3b: 4b:68:8a:f7:3d:b3:f2:77:57:a2:6a:ec:d1:bd:2a: fc:dc:bb:7f:3a:fc:1e:8a:59:a9:6a:bc:b3:46:91: cf:46:3f:6f:d5:eb:21:70:cc:90:18:12:c9:d0:1c: e5:0c:95:78:9a:57:6b:c1:a0:c1:2c:ec:bd:4f:2a: 8b:44:6c:bf:cc:93:c4:92:56:6f:26:1c:b2:b1:ca: a9:38:72:e6:54:41:8b:f2:46:00:b4:2b:d4:d8:b6: be:bb:36:08:f5:e0:6f:25:11:1d:77:6a:7d:66:7a: 4d:12:b4:5f:76:24:a0:da:db:4a:dd:54:6f:79:db: 9b:5a:b0:0a:3e:00:cf:67:a8:58:9f:4f:b5:cd:2b: 99:e5:20:cf:8d:aa:ed:50:e5:20:66:5a:e1:7f:62: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:46:65:B2:A3:1E:A3:9B:45:D8:31:7E:2E:1C:CE:86:77:6A:EE:F9 X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ac:81:61:82:fa:de:54:eb:95:32:5f:33:05:ee:77:24:b2: 16:f3:b7:b3:d6:4f:52:a4:ca:d0:ed:7d:a5:cd:87:66:79:5f: a7:54:c5:ac:af:f8:4c:ca:ad:1e:a1:28:78:d4:28:e9:f5:cf: 92:49:ea:05:6b:ea:87:c5:6f:26:33:0c:0e:b4:90:4f:73:84: 5d:1a:b8:ee:74:dc:91:5f:89:b2:9d:4d:05:55:1e:9f:f1:29: 72:82:8c:8f:41:fc:e8:f3:6f:64:06:98:f8:d8:71:7e:02:ba: 87:00:3a:27:b7:77:ab:17:e6:ab:13:00:d2:25:c8:0b:a1:eb: 6e:b5:f6:be:45:86:5f:e4:55:e5:00:c7:8b:7f:80:94:9c:90: 0c:30:49:17:06:08:62:92:50:eb:f3:d4:27:74:7f:b5:37:cc: f0:c8:58:36:59:da:5d:e6:e0:f0:b2:8e:44:ba:aa:b3:81:a1: 33:8b:3d:d4:13:71:4f:7d:6d:c8:cf:70:42:61:23:05:43:1c: a7:bc:a4:c9:24:5f:ea:16:03:cf:90:67:f3:ba:36:68:f3:8c: 7e:6b:61:de:47:74:9d:86:aa:fc:26:a4:d3:6e:d1:0a:70:f7: 31:76:c9:8a:b8:47:da:6c:43:c9:07:6d:e9:37:2b:d2:5e:b9: c6:7f:e1:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVakec1ErzshL09cn5xrLY+goT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNjA0MTYwNDE1MDBaFw0yNjA0MTkwNTMyMDBaMDMxMTAvBgNV BAMTKDhGNDY2NUIyQTMxRUEzOUI0NUQ4MzE3RTJFMUNDRTg2Nzc2QUVFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4nDoHn9dcIgtoxWUhl4kfb9Fg Oq/6N9U3b/L7YKc+X65o8On5fsBcdtHhEF3TCxsc23O1bmzsGE+Fi7rh2xdfFSrn D1kl7URR23YlLQZKobErcLCs2mi1OArxA8qea4Wc2vrjGKKYO0toivc9s/J3V6Jq 7NG9Kvzcu386/B6KWalqvLNGkc9GP2/V6yFwzJAYEsnQHOUMlXiaV2vBoMEs7L1P KotEbL/Mk8SSVm8mHLKxyqk4cuZUQYvyRgC0K9TYtr67Ngj14G8lER13an1mek0S tF92JKDa20rdVG9525tasAo+AM9nqFifT7XNK5nlIM+Nqu1Q5SBmWuF/YgkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0ZlsqMeo5tF2DF+LhzOhndq7vkwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOsgWGC+t5U65UyXzMF7nckshbzt7PWT1Kk ytDtfaXNh2Z5X6dUxayv+EzKrR6hKHjUKOn1z5JJ6gVr6ofFbyYzDA60kE9zhF0a uO503JFfibKdTQVVHp/xKXKCjI9B/Ojzb2QGmPjYcX4CuocAOie3d6sX5qsTANIl yAuh62619r5Fhl/kVeUAx4t/gJSckAwwSRcGCGKSUOvz1Cd0f7U3zPDIWDZZ2l3m 4PCyjkS6qrOBoTOLPdQTcU99bcjPcEJhIwVDHKe8pMkkX+oWA8+QZ/O6NmjzjH5r Yd5HdJ2GqvwmpNNu0Qpw9zF2yYq4R9psQ8kHbek3K9JeucZ/4Qk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:26 2026 by rpki-client