$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: 21oD5IWXLeteJ2xog+eyIIaswyD6u/U+ZOQlyFr7bP8= Subject key identifier: B4:59:CE:83:A7:4C:EC:61:EB:D9:FF:5D:AE:28:4A:83:53:FF:11:14 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 1BA7190318B3CBE74CBBDC480A21A4B45DB1D723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0153 Signing time: Thu 16 Apr 2026 06:41:23 +0000 Manifest this update: Thu 16 Apr 2026 06:36:23 +0000 Manifest next update: Sun 19 Apr 2026 16:33:23 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: RbjZxdsS7A6tpJPeyr0gjjahehe6fXyYOnmv96NaBPM=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a7:19:03:18:b3:cb:e7:4c:bb:dc:48:0a:21:a4:b4:5d:b1:d7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Apr 16 06:36:23 2026 GMT Not After : Apr 19 16:33:23 2026 GMT Subject: CN=B459CE83A74CEC61EBD9FF5DAE284A8353FF1114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:d5:2a:23:e5:79:cc:68:7c:71:12:d8:1e: 07:6b:81:5e:e8:8c:92:29:24:8e:ad:b9:f1:e8:d9: 51:de:37:9a:ae:02:94:c6:2d:8e:40:e8:5b:42:70: 56:95:ba:90:20:6e:e8:33:f5:a3:2f:4e:1a:51:4b: 97:48:13:c8:6e:6f:bb:6c:11:c0:4e:d7:81:7a:5f: 23:4f:10:c3:3d:a9:77:ad:dd:d3:90:b6:68:cd:bc: 53:04:b7:19:77:77:53:0d:96:4a:3b:16:49:8c:07: 90:65:00:8c:9d:24:a9:6b:c9:bf:2c:c9:2f:7b:b6: 88:47:c9:ac:eb:e8:9e:fe:c3:16:73:7f:f4:07:19: d7:3b:9f:80:44:6c:2d:ff:39:f0:d8:d4:73:4a:02: 0a:65:ad:dc:3f:52:45:84:a8:92:a1:20:f3:eb:7b: 9f:7b:a4:52:4c:e9:e6:41:55:a8:d1:b0:1b:73:2c: ea:79:9f:dd:c7:06:cb:33:d6:0d:12:98:67:63:0a: 36:7b:47:79:23:aa:78:91:17:a9:cf:23:c5:54:3b: de:df:cd:d4:c8:b1:7c:cc:40:de:81:97:e4:1b:32: 8e:6f:ba:d7:a4:1b:e3:0f:6a:bd:e1:b8:8e:f0:4f: 3b:ce:f8:fb:af:69:a2:99:48:b7:94:d1:42:d0:f0: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:CE:83:A7:4C:EC:61:EB:D9:FF:5D:AE:28:4A:83:53:FF:11:14 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:ab:5e:a6:d3:46:69:14:0a:25:dd:db:58:2f:a4:59:9f: e4:ac:73:0e:4c:f0:35:bd:9b:92:a6:2e:c7:cc:0a:37:cf:0d: d5:8c:8f:c9:39:8e:6b:8a:be:10:04:90:98:27:a1:47:3d:ae: cd:a5:d4:b3:97:48:0c:5b:6b:de:80:f4:ef:ff:a7:16:6c:c6: f9:1d:48:36:11:64:f4:93:1e:dd:96:87:58:31:fc:e1:7b:6e: be:5c:1a:a1:09:08:37:c2:ac:f8:f3:a8:a2:29:6f:ad:62:9e: 8f:1b:68:18:59:57:49:af:a5:59:0e:b4:24:a6:41:8e:6d:fd: 88:58:a5:08:21:63:e0:8b:b2:5b:dd:f4:7b:83:e9:86:99:57: 87:02:8c:f9:db:a5:2e:6f:21:b9:63:7c:f9:0f:0c:f5:69:c4: 08:1e:c2:9e:f3:f6:87:cc:a1:b3:b5:fc:48:c4:5c:4c:be:b3: 3d:8c:e9:05:f5:99:99:df:5a:2b:df:99:e0:0f:98:a0:6f:a2: 37:a0:92:fd:69:8b:85:b1:39:f3:32:69:60:ab:c8:9e:7a:26: b2:87:6a:be:5a:b3:f8:fc:4e:33:6c:5a:c8:52:69:7e:20:80: 43:df:3c:3b:25:2b:29:11:76:4f:6d:9d:54:46:69:45:a5:da: cf:bc:43:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6cZAxizy+dMu9xICiGktF2x1yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNjA0MTYwNjM2MjNaFw0yNjA0MTkxNjMzMjNaMDMxMTAvBgNV BAMTKEI0NTlDRTgzQTc0Q0VDNjFFQkQ5RkY1REFFMjg0QTgzNTNGRjExMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WNUqI+V5zGh8cRLYHgdrgV7o jJIpJI6tufHo2VHeN5quApTGLY5A6FtCcFaVupAgbugz9aMvThpRS5dIE8hub7ts EcBO14F6XyNPEMM9qXet3dOQtmjNvFMEtxl3d1MNlko7FkmMB5BlAIydJKlryb8s yS97tohHyazr6J7+wxZzf/QHGdc7n4BEbC3/OfDY1HNKAgplrdw/UkWEqJKhIPPr e597pFJM6eZBVajRsBtzLOp5n93HBssz1g0SmGdjCjZ7R3kjqniRF6nPI8VUO97f zdTIsXzMQN6Bl+QbMo5vutekG+MPar3huI7wTzvO+PuvaaKZSLeU0ULQ8DjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFnOg6dM7GHr2f9drihKg1P/ERQwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8iq16m00ZpFAol3dtYL6RZn+Sscw5M8DW9 m5KmLsfMCjfPDdWMj8k5jmuKvhAEkJgnoUc9rs2l1LOXSAxba96A9O//pxZsxvkd SDYRZPSTHt2Wh1gx/OF7br5cGqEJCDfCrPjzqKIpb61ino8baBhZV0mvpVkOtCSm QY5t/YhYpQghY+CLslvd9HuD6YaZV4cCjPnbpS5vIbljfPkPDPVpxAgewp7z9ofM obO1/EjEXEy+sz2M6QX1mZnfWivfmeAPmKBvojegkv1pi4WxOfMyaWCryJ56JrKH ar5as/j8TjNsWshSaX4ggEPfPDslKykRdk9tnVRGaUWl2s+8Q0s= -----END CERTIFICATE-----Generated at Fri Apr 17 13:37:14 2026 by rpki-client