$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json) Hash identifier: H1rQeToW4vZXBtaQydGfw2ySvF6PE/LXFNlmpTTskME= Subject key identifier: FB:0F:89:C4:DB:97:FC:11:1B:3B:7C:8E:92:78:22:6A:05:00:29:8D Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 099EA3F857881BF4413BF31E5CF9184259909765 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft Manifest number: 0268 Signing time: Sat 18 Apr 2026 07:01:50 +0000 Manifest this update: Sat 18 Apr 2026 06:56:50 +0000 Manifest next update: Tue 21 Apr 2026 12:15:50 +0000 Files and hashes: 1: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: R+4ofBcwSyTe84XGWAH/VXGrbEs8rkXJ1xMlhzrX02U=) 2: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: VM1TTTBtFqXiHv5MQ1XeRw0drRLzWLiwHDKK5EhMyGk=) 3: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: D0b7YQ9CGnuoR/guzqV8sUGQy2lE5KoINh6LVHdhIG8=) 4: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: FhNB6lvqrgsnyj+NwSVLGUciAJ8IZ9sjnpMtoRLaqRw=) 5: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: Ty7LXGWFu77417YzD9LySsWN2AIJ4KwCcp3kNzWJAIM=) 6: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: dgoYQWGc8XoioTXPbChMdivJ51xZvH2aNKeh0hKS/wU=) 7: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: mPh7GdsHOCij5+t8LRe0pT3jX8ibPd0uc3fcqsjEKco=) 8: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: pUT+77NF9fhVPPk3eUp7Oq/eJ7jC0eN/eJbkieFZInU=) 9: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: 3OBbHewWawWqfsZhQsBflUfa075kIfGtDz3DRgtjCTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9e:a3:f8:57:88:1b:f4:41:3b:f3:1e:5c:f9:18:42:59:90:97:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Apr 18 06:56:50 2026 GMT Not After : Apr 21 12:15:50 2026 GMT Subject: CN=FB0F89C4DB97FC111B3B7C8E9278226A0500298D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:c1:d4:66:f8:c7:2b:08:ef:d8:43:e8:3d: b3:f7:ad:a1:9e:4b:91:7c:46:e1:cf:ff:93:a0:b3: 4a:ce:ea:55:6b:0e:83:78:58:e9:2b:ca:f0:bf:99: 8d:20:42:8f:ba:a2:43:4b:d2:88:58:88:b0:f2:dd: 22:4e:93:c9:3d:bf:d0:fd:36:b8:d8:62:ce:49:4b: 1f:85:f2:02:86:bb:6a:2f:a2:8c:3a:ea:4a:15:bc: 88:02:3c:ee:83:08:4e:5f:5b:34:1a:04:83:d7:e2: d3:16:3e:de:89:44:2e:75:45:30:64:7c:70:9a:c7: 50:3b:59:36:03:8b:5f:af:ac:51:43:14:b2:43:f0: da:da:ff:20:71:6e:d9:c7:60:7a:69:2d:af:1b:a5: 22:b1:65:9b:1d:9f:a5:91:cc:2d:98:31:d1:0c:0c: 57:a5:d0:c4:cc:cf:9d:91:73:b0:94:ba:0c:44:f1: 5d:98:0a:9b:2d:6e:5f:d3:ca:d7:9b:79:f5:a0:f9: 84:57:7a:8c:c4:77:37:0f:be:a5:7b:fb:bb:19:b4: 72:5e:18:62:6e:83:ef:4a:ae:b1:17:f9:fa:e9:13: 6e:77:06:97:85:84:86:07:a9:75:74:bb:e2:5c:e2: f5:c7:76:f0:d3:ae:b2:79:27:6f:20:80:56:b1:45: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:89:C4:DB:97:FC:11:1B:3B:7C:8E:92:78:22:6A:05:00:29:8D X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:66:a0:e0:b1:e2:83:d1:b3:e0:e8:2f:f2:62:74:a5:2d:15: 51:85:28:07:ca:43:e6:80:64:1e:f3:80:06:30:62:87:8f:2c: 0a:4a:1c:c0:1f:0a:48:37:f5:7b:31:15:9a:0f:a2:e2:4f:f5: 39:67:6c:55:d0:4e:3c:bb:71:a5:d9:e1:c4:97:0a:28:4b:f7: 87:5d:eb:2f:10:95:ea:54:7c:ce:ef:19:5b:7f:24:20:51:72: 05:f5:70:23:08:d3:93:e0:a5:e3:ed:a1:8f:5f:24:6c:1f:e2: c2:2e:3c:dc:4a:86:e5:b0:cb:90:b4:cf:a9:23:8c:e8:8c:4e: 1f:64:f0:e6:7d:d5:4e:8a:32:cb:69:c7:53:0e:30:8f:37:5b: 76:f7:a6:2e:3b:aa:f7:be:b4:18:c1:19:20:39:b7:0f:87:62: 95:52:34:c9:33:9a:80:c2:3c:e7:88:2d:30:a2:12:69:22:3d: fd:b0:1b:5a:87:7d:c4:55:5a:d4:ed:60:05:49:50:bd:41:16: f0:b3:64:f7:99:03:2d:84:3e:dd:e2:f2:62:ab:b6:cf:9c:35: 88:21:12:0f:b6:21:3d:34:85:9d:62:75:5b:f8:bd:ee:60:cc: 11:74:ce:51:c3:f7:df:d2:62:32:57:e5:d0:a1:7c:df:0c:ae: e3:31:d1:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZ6j+FeIG/RBO/MeXPkYQlmQl2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNjA0MTgwNjU2NTBaFw0yNjA0MjExMjE1NTBaMDMxMTAvBgNV BAMTKEZCMEY4OUM0REI5N0ZDMTExQjNCN0M4RTkyNzgyMjZBMDUwMDI5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpcHUZvjHKwjv2EPoPbP3raGe S5F8RuHP/5Ogs0rO6lVrDoN4WOkryvC/mY0gQo+6okNL0ohYiLDy3SJOk8k9v9D9 NrjYYs5JSx+F8gKGu2ovoow66koVvIgCPO6DCE5fWzQaBIPX4tMWPt6JRC51RTBk fHCax1A7WTYDi1+vrFFDFLJD8Nra/yBxbtnHYHppLa8bpSKxZZsdn6WRzC2YMdEM DFel0MTMz52Rc7CUugxE8V2YCpstbl/TytebefWg+YRXeozEdzcPvqV7+7sZtHJe GGJug+9KrrEX+frpE253BpeFhIYHqXV0u+Jc4vXHdvDTrrJ5J28ggFaxRQUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+w+JxNuX/BEbO3yOkngiagUAKY0wHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1 OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpmoOCx4oPRs+DoL/JidKUtFVGFKAfKQ+aA ZB7zgAYwYoePLApKHMAfCkg39XsxFZoPouJP9TlnbFXQTjy7caXZ4cSXCihL94dd 6y8QlepUfM7vGVt/JCBRcgX1cCMI05PgpePtoY9fJGwf4sIuPNxKhuWwy5C0z6kj jOiMTh9k8OZ91U6KMstpx1MOMI83W3b3pi47qve+tBjBGSA5tw+HYpVSNMkzmoDC POeILTCiEmkiPf2wG1qHfcRVWtTtYAVJUL1BFvCzZPeZAy2EPt3i8mKrts+cNYgh Eg+2IT00hZ1idVv4ve5gzBF0zlHD99/SYjJX5dChfN8MruMx0X0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:39 2026 by rpki-client