$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: Y1+dsuuA/X9ffrV9drmYwvKJUYsSL1TzP1uBg5Yn2Rc= Subject key identifier: 97:03:2B:D7:95:C1:D6:2E:90:8D:32:14:6E:96:CA:F9:64:3F:3C:94 Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 12F006A84369E6A2A531FCB2F41648C34C59D7EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 03DD Signing time: Wed 15 Apr 2026 13:31:42 +0000 Manifest this update: Wed 15 Apr 2026 13:26:42 +0000 Manifest next update: Sat 18 Apr 2026 22:23:42 +0000 Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: 7Yd65JqrohpJvwiZF9aKWV2O7t1EBFpEyKNB8gePPNM=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: bFimiAzva9LShsHLA11pXQ0Ytb437eF/rz76mDmBlA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f0:06:a8:43:69:e6:a2:a5:31:fc:b2:f4:16:48:c3:4c:59:d7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Apr 15 13:26:42 2026 GMT Not After : Apr 18 22:23:42 2026 GMT Subject: CN=97032BD795C1D62E908D32146E96CAF9643F3C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:1c:c8:1d:42:90:fa:fb:89:0b:5c:03:dc: 10:ab:3f:0a:af:cb:02:57:e2:ae:26:19:4f:01:b1: d2:56:69:0d:d5:a0:31:63:d8:1f:8a:1e:13:d6:5c: a6:ee:77:c2:17:ee:e3:b9:69:4e:b0:07:92:70:89: 8e:e6:6e:22:a2:56:a7:0d:b9:96:f4:96:df:c4:6b: 4b:f1:b8:82:7b:0b:08:b8:0c:d1:c1:72:9c:06:c6: fa:97:7b:25:bc:a9:67:31:f3:e7:d1:3d:2a:e6:fd: 98:58:cf:38:cc:09:99:4f:35:9c:e1:74:68:a4:9c: de:ea:7a:2c:79:19:1c:43:14:bc:0f:67:43:ce:2f: e9:5f:be:63:e8:36:fa:40:56:43:39:a7:b6:22:b1: 2d:cd:26:00:98:8a:61:19:11:21:1f:a1:7c:df:90: 36:7a:ca:ae:70:04:86:72:7f:a3:be:56:eb:34:8a: cd:5d:ae:70:a5:ed:c7:da:42:42:52:29:a7:42:02: 25:e4:10:e1:08:a1:11:53:6c:14:60:9d:d5:22:d5: 49:30:f3:97:b1:95:0b:24:8e:78:b3:9c:7b:9f:26: e4:ff:ec:7f:26:97:e7:e8:5d:4d:b9:ea:22:1e:43: e5:81:a3:da:25:58:09:8b:15:75:3d:02:27:3c:d4: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:2B:D7:95:C1:D6:2E:90:8D:32:14:6E:96:CA:F9:64:3F:3C:94 X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:64:55:10:62:81:3f:41:dc:ad:8b:11:6a:af:bf:d3:f4:00: ed:44:f2:01:84:8e:59:af:a9:d9:1f:b7:8f:1f:8f:64:b6:a9: ce:06:08:c2:83:0f:81:7a:92:fb:59:0d:a9:ce:7a:a4:ef:35: 8b:0d:b9:75:01:a3:c1:57:fc:c3:61:a1:9c:23:37:8c:00:2c: e8:c3:00:72:4c:09:73:5f:46:0d:f8:9e:b5:fb:1a:b4:a7:03: ca:7b:62:f4:24:5c:9c:72:38:de:c6:6d:4b:f4:24:24:62:38: c3:83:52:47:af:9f:48:26:b8:13:0f:30:d2:0a:f4:53:f7:4b: c7:10:32:77:17:72:52:43:64:43:e8:85:fe:da:01:4e:d0:bb: 57:ff:80:99:14:4a:2d:7d:20:a0:6d:9b:09:6b:c7:20:c3:d5: 38:b4:2b:2a:94:2a:65:a4:6a:6b:ef:0a:cd:03:54:76:9d:68: 82:c6:c3:70:15:d4:c5:af:89:3e:97:c2:dc:c7:02:03:47:fd: 2b:a4:8d:6c:c8:e6:59:02:55:8d:bf:4d:43:5f:8a:4c:54:de: 9a:b4:be:45:6f:0f:d1:bd:5d:a5:57:ce:84:e4:75:ff:0e:c6: 34:1d:37:23:81:9b:dc:ed:ca:e5:3b:74:62:28:12:eb:11:0f: 79:a3:b4:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvAGqENp5qKlMfyy9BZIw0xZ1+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNjA0MTUxMzI2NDJaFw0yNjA0MTgyMjIzNDJaMDMxMTAvBgNV BAMTKDk3MDMyQkQ3OTVDMUQ2MkU5MDhEMzIxNDZFOTZDQUY5NjQzRjNDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphxzIHUKQ+vuJC1wD3BCrPwqv ywJX4q4mGU8BsdJWaQ3VoDFj2B+KHhPWXKbud8IX7uO5aU6wB5JwiY7mbiKiVqcN uZb0lt/Ea0vxuIJ7Cwi4DNHBcpwGxvqXeyW8qWcx8+fRPSrm/ZhYzzjMCZlPNZzh dGiknN7qeix5GRxDFLwPZ0POL+lfvmPoNvpAVkM5p7YisS3NJgCYimEZESEfoXzf kDZ6yq5wBIZyf6O+Vus0is1drnCl7cfaQkJSKadCAiXkEOEIoRFTbBRgndUi1Ukw 85exlQskjniznHufJuT/7H8ml+foXU256iIeQ+WBo9olWAmLFXU9Aic81PMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwMr15XB1i6QjTIUbpbK+WQ/PJQwHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9kVRBigT9B3K2LEWqvv9P0AO1E8gGEjlmv qdkft48fj2S2qc4GCMKDD4F6kvtZDanOeqTvNYsNuXUBo8FX/MNhoZwjN4wALOjD AHJMCXNfRg34nrX7GrSnA8p7YvQkXJxyON7GbUv0JCRiOMODUkevn0gmuBMPMNIK 9FP3S8cQMncXclJDZEPohf7aAU7Qu1f/gJkUSi19IKBtmwlrxyDD1Ti0KyqUKmWk amvvCs0DVHadaILGw3AV1MWviT6XwtzHAgNH/SukjWzI5lkCVY2/TUNfikxU3pq0 vkVvD9G9XaVXzoTkdf8OxjQdNyOBm9ztyuU7dGIoEusRD3mjtJE= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:10 2026 by rpki-client