$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: FAIe38R8aqq1d3o5tt0kLt4ZeSfdG6IYTPLeQhdHksg= Subject key identifier: D1:A1:34:4C:DC:19:4F:8F:51:81:42:AA:29:72:A4:F6:55:4E:47:D9 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 16B36F42963EC8F06583A12FA5F07BE016B6FF88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01F6 Signing time: Wed 15 Apr 2026 16:01:52 +0000 Manifest this update: Wed 15 Apr 2026 15:56:52 +0000 Manifest next update: Sat 18 Apr 2026 23:17:52 +0000 Files and hashes: 1: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: Wtyw13V4XM7A01ucWtMSCQ1BsH0SCZKrW6jVbe62dwc=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: JwBkepnpQbBJB71OebvFB7o8bqpYUdblIRtS8UsRdpI=) 3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 2hd2Kw7s5AZpDbq89PNUJ3gEV2BNvCaqP2MGIQVe7Kc=) 4: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: CB4IY4WzjgQQU1NfRMv9LPe7q7h1FO/e433NdThmvTE=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 8vz8EiP54cEwQfLbkw39aE70XAXWioBBsBb0DcsdEz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b3:6f:42:96:3e:c8:f0:65:83:a1:2f:a5:f0:7b:e0:16:b6:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Apr 15 15:56:52 2026 GMT Not After : Apr 18 23:17:52 2026 GMT Subject: CN=D1A1344CDC194F8F518142AA2972A4F6554E47D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:68:f6:26:35:8a:00:63:4d:38:2d:62:fb: 9d:ec:46:fb:a4:63:30:24:65:ba:37:d4:a4:03:41: 49:21:13:c0:62:90:1a:82:15:d2:63:51:eb:e1:02: 33:10:01:10:51:8d:3a:4c:ef:31:ba:5d:40:4f:84: fb:56:c5:a4:4a:4d:ea:fb:bb:8f:c3:27:b9:36:bb: e4:59:fb:d8:8c:1b:ca:e7:11:fd:52:fc:d2:24:8d: 32:01:b6:af:96:7e:04:a4:40:d3:e2:8b:bb:6c:db: f7:d4:2b:ce:5b:53:71:a4:0d:06:d8:a1:71:97:96: f6:64:18:d8:d5:ef:ad:e5:63:2f:a0:6b:e9:71:32: 1a:3a:74:2d:20:22:c0:41:c1:7f:cc:2b:9c:37:d6: 72:f6:20:99:66:00:26:49:fd:97:62:b3:6d:86:5f: 44:59:be:f2:49:74:13:47:d2:e6:e7:59:7a:74:cd: 46:86:d0:4b:d5:d9:de:fd:db:6a:09:e9:e8:67:11: 7b:d8:33:a7:11:55:9d:ab:dd:8e:90:51:37:47:6b: ad:c1:94:bc:4e:1c:5d:06:7e:f6:96:6d:82:1e:7f: 10:45:5b:f8:f0:17:b9:77:97:3e:9e:90:e1:7b:5e: 2e:72:2c:f4:f8:72:cb:94:28:65:6b:15:60:f0:2d: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A1:34:4C:DC:19:4F:8F:51:81:42:AA:29:72:A4:F6:55:4E:47:D9 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:27:f8:d1:fc:83:8a:60:01:8b:0e:09:a0:5f:da:89:fe:6d: 7b:cb:78:6c:1b:7c:1a:d1:ee:8e:2e:da:e1:c9:ea:46:1e:69: 54:b5:c0:2c:ec:22:22:d0:a7:ee:67:19:df:90:5a:f5:06:0d: d7:60:db:b3:ae:33:0c:e9:2f:e0:28:d5:32:9c:c6:e5:88:88: 6a:d7:60:9d:8e:0f:7d:d5:18:f0:e1:21:74:b3:36:61:cb:66: 73:44:01:07:87:02:06:ce:b2:04:19:6f:84:58:64:87:08:9c: 95:41:f0:80:de:fe:c1:6a:e1:65:0b:9d:dd:91:23:74:47:b3: cd:0b:56:27:d2:82:19:0f:ad:1c:dc:9c:6a:77:8e:cf:a0:4b: 60:4e:f8:57:0f:af:3c:3a:e0:fc:18:41:de:46:88:e0:00:17: c7:fe:8c:0c:b4:ae:77:1e:70:20:f6:4c:00:37:ea:24:5e:05: 0e:38:46:68:4a:4f:83:50:58:d7:6c:d9:11:c0:44:5d:05:e0: f7:24:67:21:5e:c8:50:2a:f4:ea:a8:2e:37:fb:94:9a:ed:38: 37:e4:f9:af:d6:31:59:21:c5:15:45:0c:ef:07:57:01:9d:92: 49:22:8d:69:4b:8e:65:6d:c0:af:c1:93:88:da:5b:1e:b2:5a: ef:8b:34:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrNvQpY+yPBlg6EvpfB74Ba2/4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNjA0MTUxNTU2NTJaFw0yNjA0MTgyMzE3NTJaMDMxMTAvBgNV BAMTKEQxQTEzNDRDREMxOTRGOEY1MTgxNDJBQTI5NzJBNEY2NTU0RTQ3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7mj2JjWKAGNNOC1i+53sRvuk YzAkZbo31KQDQUkhE8BikBqCFdJjUevhAjMQARBRjTpM7zG6XUBPhPtWxaRKTer7 u4/DJ7k2u+RZ+9iMG8rnEf1S/NIkjTIBtq+WfgSkQNPii7ts2/fUK85bU3GkDQbY oXGXlvZkGNjV763lYy+ga+lxMho6dC0gIsBBwX/MK5w31nL2IJlmACZJ/Zdis22G X0RZvvJJdBNH0ubnWXp0zUaG0EvV2d7922oJ6ehnEXvYM6cRVZ2r3Y6QUTdHa63B lLxOHF0GfvaWbYIefxBFW/jwF7l3lz6ekOF7Xi5yLPT4csuUKGVrFWDwLfTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aE0TNwZT49RgUKqKXKk9lVOR9kwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4n+NH8g4pgAYsOCaBf2on+bXvLeGwbfBrR 7o4u2uHJ6kYeaVS1wCzsIiLQp+5nGd+QWvUGDddg27OuMwzpL+Ao1TKcxuWIiGrX YJ2OD33VGPDhIXSzNmHLZnNEAQeHAgbOsgQZb4RYZIcInJVB8IDe/sFq4WULnd2R I3RHs80LVifSghkPrRzcnGp3js+gS2BO+FcPrzw64PwYQd5GiOAAF8f+jAy0rnce cCD2TAA36iReBQ44RmhKT4NQWNds2RHARF0F4PckZyFeyFAq9OqoLjf7lJrtODfk +a/WMVkhxRVFDO8HVwGdkkkijWlLjmVtwK/Bk4jaWx6yWu+LNCs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:52 2026 by rpki-client