$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft File: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json) Hash identifier: WwuWg9fS1l6QQZ+jd8NVFPkSkNTh6ZahwlqJ+JOmDWs= Subject key identifier: 16:B6:B7:5D:E9:41:02:57:3A:1D:02:C7:8F:FA:10:B0:71:5D:A1:1C Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 Certificate issuer: /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Certificate serial: 498290BFE009853C557166F87D747E35621142C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft Manifest number: 0108 Signing time: Wed 15 Apr 2026 14:22:22 +0000 Manifest this update: Wed 15 Apr 2026 14:17:22 +0000 Manifest next update: Sat 18 Apr 2026 23:28:22 +0000 Files and hashes: 1: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: mDFd08tPILLw1T3gAXQau9nwubN6g+t2GLdqlL1NiMc=) 2: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: Sds95Ss3ilJlMKDO38Rkj40VQdzRD9GgP564MrRxXGU=) 3: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: IGC+YzF7hbNTh+lU4Xp4ZN99v7lUHzjLqU8mpRmWZMw=) 4: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: sRyhu6fDfcemdhV/NAA1n4G4NdnybRSnokvW0ioWtBY=) 5: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: ZZwJ8u3tlh6Pq2i9Ooa5Yuej46if28a3Zda51Doe0WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:82:90:bf:e0:09:85:3c:55:71:66:f8:7d:74:7e:35:62:11:42:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Validity Not Before: Apr 15 14:17:22 2026 GMT Not After : Apr 18 23:28:22 2026 GMT Subject: CN=16B6B75DE94102573A1D02C78FFA10B0715DA11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:ce:b5:e9:38:bb:8d:82:7d:7f:37:02:aa: 34:39:e1:5f:e2:e6:14:33:ef:a1:f1:72:ca:99:b6: 4d:f2:73:f3:7d:68:da:d2:85:b6:d7:03:57:d8:77: 4e:50:ac:89:1a:74:f5:67:09:fd:14:ec:da:5d:14: 38:2e:ad:6b:63:5d:60:15:0d:40:91:a3:67:b1:d3: ab:90:29:14:27:1e:42:a5:b4:12:49:f5:22:97:94: ea:08:40:01:62:87:70:ee:c4:9d:64:a9:96:43:e9: 8e:7c:28:47:f9:03:ea:62:e9:29:dc:95:b4:dd:02: 79:73:cc:53:58:b7:6e:09:8b:ba:9f:6d:28:8c:46: a3:5c:08:30:ee:99:18:fc:28:2f:8d:e6:cf:07:39: 61:8a:b4:97:e4:a9:5f:75:13:2f:c0:9a:9f:b4:45: bd:d2:b6:bc:85:c7:dd:a6:37:5d:77:cd:a6:76:da: 0d:d9:82:f3:82:2c:5c:21:a1:e0:59:f9:5f:ff:66: 43:72:e4:1f:2b:34:51:1c:61:4e:a0:b2:30:56:e5: de:a0:bc:e7:85:c0:5a:33:ff:f9:16:1a:ba:c5:8d: de:b8:0d:74:8a:48:fa:20:81:0f:bf:c9:75:1f:cd: 11:68:ab:2c:d5:1b:9b:ca:47:2d:3d:de:a5:f8:d2: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B6:B7:5D:E9:41:02:57:3A:1D:02:C7:8F:FA:10:B0:71:5D:A1:1C X509v3 Authority Key Identifier: keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:99:cd:4d:ea:d6:78:97:a4:6e:f8:d2:0f:45:b4:2b:d0:4f: 3f:da:60:5f:1b:65:45:ef:10:0d:72:1f:cd:0d:ff:c6:94:86: a5:cd:46:43:88:9a:09:25:94:f7:e7:80:6d:9f:f9:b2:12:53: 59:e3:d1:82:97:b7:d1:6e:a2:fd:ae:50:5b:3e:99:50:eb:80: 65:d0:9b:47:1d:9b:80:4d:19:35:8d:37:48:87:cd:e0:25:56: 1c:c7:18:c4:fb:0a:4a:75:55:74:69:93:b8:97:85:d8:fe:9d: d5:f1:dd:e7:e8:70:77:76:3a:dc:06:5e:5e:16:00:f5:9f:9d: de:39:7f:99:fa:32:bb:a0:f1:54:8b:19:ad:8f:32:3c:c8:c7: 41:2d:dc:c9:85:01:ee:90:56:1a:d8:ae:59:9d:34:1c:1d:e2: c6:de:ec:9a:d2:7c:11:fa:ac:d8:ed:54:16:49:78:5f:23:5f: 84:04:8a:5f:0b:a3:1c:f0:c7:4a:af:ef:f1:68:d4:a2:b3:b3: 72:0a:93:39:75:19:88:f7:5c:93:47:64:50:34:3b:2e:6a:dc: 69:6d:1a:94:cd:00:fb:76:12:b6:a7:78:a8:46:34:00:fb:6d: ac:43:ee:91:01:6b:75:cf:a8:76:04:01:7d:49:97:55:72:6b: cc:b2:47:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYKQv+AJhTxVcWb4fXR+NWIRQsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz NEM0OEFGMjAeFw0yNjA0MTUxNDE3MjJaFw0yNjA0MTgyMzI4MjJaMDMxMTAvBgNV BAMTKDE2QjZCNzVERTk0MTAyNTczQTFEMDJDNzhGRkExMEIwNzE1REExMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kc616Ti7jYJ9fzcCqjQ54V/i 5hQz76HxcsqZtk3yc/N9aNrShbbXA1fYd05QrIkadPVnCf0U7NpdFDgurWtjXWAV DUCRo2ex06uQKRQnHkKltBJJ9SKXlOoIQAFih3DuxJ1kqZZD6Y58KEf5A+pi6Snc lbTdAnlzzFNYt24Ji7qfbSiMRqNcCDDumRj8KC+N5s8HOWGKtJfkqV91Ey/Amp+0 Rb3StryFx92mN113zaZ22g3ZgvOCLFwhoeBZ+V//ZkNy5B8rNFEcYU6gsjBW5d6g vOeFwFoz//kWGrrFjd64DXSKSPoggQ+/yXUfzRFoqyzVG5vKRy093qX40ga7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFra3XelBAlc6HQLHj/oQsHFdoRwwHwYDVR0j BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5 RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0 OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiZzU3q1niXpG740g9FtCvQTz/aYF8bZUXv EA1yH80N/8aUhqXNRkOImgkllPfngG2f+bISU1nj0YKXt9Fuov2uUFs+mVDrgGXQ m0cdm4BNGTWNN0iHzeAlVhzHGMT7Ckp1VXRpk7iXhdj+ndXx3efocHd2OtwGXl4W APWfnd45f5n6Mrug8VSLGa2PMjzIx0Et3MmFAe6QVhrYrlmdNBwd4sbe7JrSfBH6 rNjtVBZJeF8jX4QEil8Loxzwx0qv7/Fo1KKzs3IKkzl1GYj3XJNHZFA0Oy5q3Glt GpTNAPt2EraneKhGNAD7baxD7pEBa3XPqHYEAX1Jl1Vya8yyR5Q= -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:12 2026 by rpki-client