$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft File: 990382439FFA8C086A4458B338B52CCD0D54CFA8.mft (raw, json) Hash identifier: qX5oelHk8IS3z2xjimt0U0t0A+kkhCZl/C94T+IlSIM= Subject key identifier: 53:46:DA:E2:31:54:27:A6:C4:DC:E2:3B:F1:F2:EB:0D:D8:81:B0:AB Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 Certificate issuer: /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Certificate serial: 25A5B0377D828FF75533F29FB71B0DF2ACD95189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft Manifest number: 1A Signing time: Wed 15 Apr 2026 07:31:46 +0000 Manifest this update: Wed 15 Apr 2026 07:26:46 +0000 Manifest next update: Sat 18 Apr 2026 17:47:46 +0000 Files and hashes: 1: 990382439FFA8C086A4458B338B52CCD0D54CFA8.crl (hash: +0MbcUr0Dc223SDYaiv+XwFMNB9KobDl0FWkKNpaCSY=) 2: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: 6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a5:b0:37:7d:82:8f:f7:55:33:f2:9f:b7:1b:0d:f2:ac:d9:51:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Validity Not Before: Apr 15 07:26:46 2026 GMT Not After : Apr 18 17:47:46 2026 GMT Subject: CN=5346DAE2315427A6C4DCE23BF1F2EB0DD881B0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:bb:73:f8:bb:eb:96:25:9e:5a:ee:69:f4: 26:f7:a7:70:9d:e8:d2:b8:ff:7d:53:00:a3:3e:2f: 4c:f0:ed:8b:7e:38:db:27:b8:f5:8a:d7:d3:d4:66: bb:77:15:3c:e5:dd:94:76:2f:a0:e3:08:cf:29:42: 49:48:f3:23:40:33:72:1e:72:7c:3a:38:31:0f:df: 9e:e1:3c:75:19:42:61:d2:91:e4:12:3d:6e:ef:d3: 04:c7:6c:41:be:98:18:44:29:b0:0e:97:3a:77:9a: 8c:d6:d7:1f:45:7b:56:f4:f1:a9:e5:fa:60:2a:97: 7d:b1:31:de:16:c5:62:c2:1f:93:3f:70:39:93:18: b0:d2:97:1c:c4:83:41:37:44:26:fe:97:01:81:14: 3c:5c:95:53:98:0a:dc:07:2d:f5:c3:41:48:d3:3a: 34:a6:9e:6a:e5:59:6f:2d:14:ca:de:00:58:78:8e: 7b:df:7a:d6:a7:a0:a0:ea:8a:1e:77:38:12:8a:78: 13:d7:e3:7b:28:92:fc:5c:31:2e:8a:13:0b:6b:92: 0c:20:1f:2a:a5:46:08:09:19:e1:11:bd:bf:be:1b: 59:57:d2:04:3f:4c:a0:a6:28:74:ed:86:23:03:fa: fb:32:6a:cd:9a:86:d0:5e:f3:e2:68:3b:ec:bb:d5: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:46:DA:E2:31:54:27:A6:C4:DC:E2:3B:F1:F2:EB:0D:D8:81:B0:AB X509v3 Authority Key Identifier: keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d8:fa:11:2a:b7:bd:18:b6:1d:27:2d:61:e6:41:35:50:d3: 01:6c:12:96:ec:6f:e8:56:81:ea:09:2f:da:4c:2f:13:d9:25: 2c:08:5d:2e:ee:99:d8:2f:88:87:64:42:5a:c9:ce:ed:6a:0d: 04:83:c5:df:28:b7:87:25:2a:6e:65:0e:ea:fe:49:4b:bd:65: 91:13:57:2a:51:92:4c:4b:2a:84:20:07:5e:20:05:cd:c7:fd: 78:3b:67:34:50:32:11:ba:56:48:6b:36:ac:7a:05:d7:99:12: a5:5b:89:42:12:d5:a7:06:f9:ec:08:80:c8:91:e1:25:f6:af: 07:af:1c:04:a9:b0:67:a1:ca:70:22:f0:5a:b6:9d:0c:35:51: c9:ae:23:3b:f1:5d:39:1e:9e:cc:e8:91:a2:d3:04:80:35:60: 0f:ed:9a:17:b8:e2:40:f9:11:b1:df:4d:3b:a7:00:1e:aa:fc: c9:fc:d5:b5:41:df:2d:1b:9e:75:e7:d8:c6:bc:4e:d9:e9:04: e7:45:4a:8a:a9:08:77:ef:26:30:35:18:1b:00:cd:53:4d:f1: 03:df:0c:6e:10:af:e9:28:27:77:03:ff:d3:d5:7f:6a:53:03: d1:10:7c:81:35:08:55:7e:45:d2:8d:30:0e:de:52:ea:37:db: 17:47:84:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaWwN32Cj/dVM/KftxsN8qzZUYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0Qw RDU0Q0ZBODAeFw0yNjA0MTUwNzI2NDZaFw0yNjA0MTgxNzQ3NDZaMDMxMTAvBgNV BAMTKDUzNDZEQUUyMzE1NDI3QTZDNERDRTIzQkYxRjJFQjBERDg4MUIwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Zbtz+LvrliWeWu5p9Cb3p3Cd 6NK4/31TAKM+L0zw7Yt+ONsnuPWK19PUZrt3FTzl3ZR2L6DjCM8pQklI8yNAM3Ie cnw6ODEP357hPHUZQmHSkeQSPW7v0wTHbEG+mBhEKbAOlzp3mozW1x9Fe1b08anl +mAql32xMd4WxWLCH5M/cDmTGLDSlxzEg0E3RCb+lwGBFDxclVOYCtwHLfXDQUjT OjSmnmrlWW8tFMreAFh4jnvfetanoKDqih53OBKKeBPX43sokvxcMS6KEwtrkgwg HyqlRggJGeERvb++G1lX0gQ/TKCmKHTthiMD+vsyas2ahtBe8+JoO+y71R2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0ba4jFUJ6bE3OI78fLrDdiBsKswHwYDVR0j BBgwFoAUmQOCQ5/6jAhqRFizOLUszQ1Uz6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMC85OTAzODI0MzlG RkE4QzA4NkE0NDU4QjMzOEI1MkNDRDBENTRDRkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0QwRDU0 Q0ZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJD Q0QwRDU0Q0ZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDY+hEqt70Yth0nLWHmQTVQ0wFsEpbsb+hW geoJL9pMLxPZJSwIXS7umdgviIdkQlrJzu1qDQSDxd8ot4clKm5lDur+SUu9ZZET VypRkkxLKoQgB14gBc3H/Xg7ZzRQMhG6VkhrNqx6BdeZEqVbiUIS1acG+ewIgMiR 4SX2rwevHASpsGehynAi8Fq2nQw1UcmuIzvxXTkenszokaLTBIA1YA/tmhe44kD5 EbHfTTunAB6q/Mn81bVB3y0bnnXn2Ma8TtnpBOdFSoqpCHfvJjA1GBsAzVNN8QPf DG4Qr+koJ3cD/9PVf2pTA9EQfIE1CFV+RdKNMA7eUuo32xdHhCw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:58 2026 by rpki-client