$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: Zb3ZCTNbX19H8P+XxzPSZNySDsLQwclVG8WgrTivL/g= Subject key identifier: 8A:5D:80:32:37:08:13:0F:42:F1:88:FB:5F:21:B0:7A:96:A9:87:FB Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 4AC7225D3F31F6C24AAC8CEDA8F9B488BB70AEBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 01DD Signing time: Fri 17 Apr 2026 08:40:47 +0000 Manifest this update: Fri 17 Apr 2026 08:35:47 +0000 Manifest next update: Mon 20 Apr 2026 14:50:47 +0000 Files and hashes: 1: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: /paKxP4QMOl7o/KwSLXztrknLwkFvyAYdzpHPBDGP60=) 2: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: KDQzPrtNIXyhd85n6tMQmBZ4RcnahdjkHgk6ym7Khfs=) 3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: Ztu1zC4P//Wr/D7wJOmEtvMGkjEYCJfDGpTLJpsLi2U=) 4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: qlhe8ugwsxt3uspMmDDw6M2qCFy+W45YSb6JDOgXmxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:22:5d:3f:31:f6:c2:4a:ac:8c:ed:a8:f9:b4:88:bb:70:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Apr 17 08:35:47 2026 GMT Not After : Apr 20 14:50:47 2026 GMT Subject: CN=8A5D80323708130F42F188FB5F21B07A96A987FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:81:65:7c:51:93:c2:d5:e1:52:01:01:bc: 8f:8d:6d:ee:69:0a:99:ca:86:63:0c:e0:ea:b8:9b: fa:be:a5:1a:1a:dc:f5:b5:2e:35:70:9b:6f:3a:b4: 2b:e3:a4:13:7a:c2:bd:ff:13:68:02:45:eb:7b:ee: d2:91:fa:a3:a6:86:c6:75:67:55:a8:4a:72:63:12: 5c:32:fd:f2:ed:04:c9:78:55:75:1a:02:79:34:86: c9:b6:78:e9:6f:3f:25:ab:5a:f9:a6:d4:fa:bb:95: 5e:ef:73:6d:73:18:b4:95:2b:dd:25:8d:22:b8:41: 2d:96:d9:2f:00:ae:31:a0:b6:22:2c:05:ee:ea:0c: 50:78:ef:e1:77:28:d0:87:f0:b6:5a:fc:7d:3e:98: 0c:11:18:7f:2b:93:bd:93:bc:1e:3d:5c:8a:79:da: 66:d4:3a:12:7e:6d:9d:4e:a3:37:3b:8d:cb:d4:0e: b1:dd:e9:b1:3e:5e:99:fb:29:f6:05:1e:39:9e:72: 06:9e:d5:8b:67:8b:81:37:e4:81:ad:d5:cc:f3:2f: f3:62:0f:c2:69:7f:a9:ed:d8:91:33:8a:f9:43:ff: ab:f2:6a:b8:18:a1:30:3f:1f:a3:e9:0e:aa:8d:19: 81:1b:34:70:05:d5:ad:a3:31:f0:3f:f1:57:da:f2: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:80:32:37:08:13:0F:42:F1:88:FB:5F:21:B0:7A:96:A9:87:FB X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:08:32:be:9c:a2:bb:fc:30:08:a8:8c:82:d2:ce:dd:a3: 96:75:23:55:44:97:86:ad:a8:18:0e:14:91:aa:8f:ac:a1:89: 5d:15:ae:e5:9d:83:3f:d7:a2:b1:f5:40:de:5d:33:78:7e:f4: 93:bf:28:2a:0d:28:f0:f0:15:8a:e2:7d:f3:36:26:29:66:a4: 3c:2d:b2:f8:16:c1:b5:c4:02:bb:de:8c:83:b5:c2:37:d3:bc: 65:fb:63:5b:0e:c1:c8:cf:2b:b7:5b:78:f4:cb:53:3a:03:14: 9c:bb:5b:2d:23:a6:98:fe:c6:ea:1c:54:36:a9:37:85:de:03: ce:da:03:fe:14:70:1d:fc:93:58:3e:5c:00:7e:63:0f:a7:13: 38:e8:76:c1:aa:30:b8:8a:86:8f:02:7c:e8:9c:d9:3a:cc:e3: 6c:36:c3:db:de:4a:8b:3f:4d:7b:52:e3:f6:b4:f2:0a:6a:17: dc:82:53:59:33:44:b1:19:36:6c:32:37:09:c2:3f:ff:a8:ff: 14:b1:4b:e0:bc:64:89:eb:83:79:f2:1f:61:94:1f:05:61:3d: 07:ec:2b:ff:63:28:5d:7a:48:a0:fd:f9:6c:c2:96:81:a3:0e: c1:0f:b9:09:55:a9:42:38:f8:d5:bc:b7:74:93:02:8a:56:80: 9a:9e:fe:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsciXT8x9sJKrIztqPm0iLtwrr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNjA0MTcwODM1NDdaFw0yNjA0MjAxNDUwNDdaMDMxMTAvBgNV BAMTKDhBNUQ4MDMyMzcwODEzMEY0MkYxODhGQjVGMjFCMDdBOTZBOTg3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS24FlfFGTwtXhUgEBvI+Nbe5p CpnKhmMM4Oq4m/q+pRoa3PW1LjVwm286tCvjpBN6wr3/E2gCRet77tKR+qOmhsZ1 Z1WoSnJjElwy/fLtBMl4VXUaAnk0hsm2eOlvPyWrWvmm1Pq7lV7vc21zGLSVK90l jSK4QS2W2S8ArjGgtiIsBe7qDFB47+F3KNCH8LZa/H0+mAwRGH8rk72TvB49XIp5 2mbUOhJ+bZ1Oozc7jcvUDrHd6bE+Xpn7KfYFHjmecgae1Ytni4E35IGt1czzL/Ni D8Jpf6nt2JEzivlD/6vyargYoTA/H6PpDqqNGYEbNHAF1a2jMfA/8Vfa8rN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUil2AMjcIEw9C8Yj7XyGwepaph/swHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXDCDK+nKK7/DAIqIyC0s7do5Z1I1VEl4at qBgOFJGqj6yhiV0VruWdgz/XorH1QN5dM3h+9JO/KCoNKPDwFYriffM2JilmpDwt svgWwbXEArvejIO1wjfTvGX7Y1sOwcjPK7dbePTLUzoDFJy7Wy0jppj+xuocVDap N4XeA87aA/4UcB38k1g+XAB+Yw+nEzjodsGqMLiKho8CfOic2TrM42w2w9veSos/ TXtS4/a08gpqF9yCU1kzRLEZNmwyNwnCP/+o/xSxS+C8ZInrg3nyH2GUHwVhPQfs K/9jKF16SKD9+WzCloGjDsEPuQlVqUI4+NW8t3STAopWgJqe/mg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:42 2026 by rpki-client