$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: 2DN1R22cxhnq3PldciafJCQrjmqYLLNgTBa5Md9GACY= Subject key identifier: 07:B9:85:CA:8E:D0:AF:B0:2C:95:8F:12:F5:9D:F3:03:40:AB:1A:B9 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 3393244D391DC951B890678CB8062373554D5B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 04B7 Signing time: Fri 17 Apr 2026 01:00:57 +0000 Manifest this update: Fri 17 Apr 2026 00:55:57 +0000 Manifest next update: Mon 20 Apr 2026 02:24:57 +0000 Files and hashes: 1: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 3: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 4: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) 5: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 6: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: aX4rFGDNpleHxvBTRUZUbnjiDaRRZMNr5aN6ZrBAtZs=) 7: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) 8: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) 9: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:93:24:4d:39:1d:c9:51:b8:90:67:8c:b8:06:23:73:55:4d:5b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Apr 17 00:55:57 2026 GMT Not After : Apr 20 02:24:57 2026 GMT Subject: CN=07B985CA8ED0AFB02C958F12F59DF30340AB1AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:34:73:2b:5c:dc:8a:c0:ce:9d:9a:30:7a: 4b:18:31:52:01:e9:da:59:19:0d:79:e8:35:28:b7: 24:d8:84:c5:ab:80:03:8c:89:c8:e3:bd:fb:57:d3: ef:8e:3b:73:c3:32:8b:2d:0f:cd:2b:4a:5c:61:e1: 00:50:ff:06:1d:76:ad:47:c7:1a:ed:5e:a7:eb:7f: 70:1b:e3:76:b7:70:f9:99:2c:31:d3:04:bb:05:29: 1d:88:fb:20:f7:8b:2f:a0:ea:e0:8f:b1:e8:c1:f7: c8:a9:82:44:2c:e2:c8:da:51:1c:32:f2:4b:ba:00: 0d:17:e0:fd:f6:f1:37:52:8f:ec:60:3f:8b:2a:dd: 53:78:3c:dd:33:79:ac:94:23:ee:93:eb:c1:2b:a3: 3b:97:f3:76:d5:17:d8:4e:65:dd:18:da:ca:1d:5f: d7:90:f9:02:ca:d3:7f:94:1e:a0:c3:a6:77:be:59: 39:82:b9:92:47:d2:e5:51:35:74:2a:b0:47:45:26: 4b:83:69:6b:5e:91:37:69:ef:b2:50:4d:de:56:40: 66:8d:bf:5b:1d:dc:cc:b2:ee:55:33:85:17:25:7c: e9:dd:5e:71:b6:8b:28:8e:d5:39:e6:f5:c1:bb:95: 22:b5:ea:5b:8b:dd:19:e8:e6:22:53:99:a3:06:7c: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B9:85:CA:8E:D0:AF:B0:2C:95:8F:12:F5:9D:F3:03:40:AB:1A:B9 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5d:1c:68:c5:04:1c:ef:2e:c3:af:5a:e8:1a:ca:34:66:80: 43:02:18:5d:46:9c:22:ac:f4:39:e7:af:f6:ce:af:14:af:3c: 51:e5:0c:7a:f0:a4:08:34:19:38:31:1a:2a:bf:5b:04:cc:9e: c6:b3:23:60:f9:f3:69:1b:95:04:5b:d6:a4:3b:47:f6:cd:2e: 6f:b9:2a:9a:ec:b2:92:3d:d9:84:de:bb:4d:cf:20:9c:73:c2: 64:70:ff:f6:ad:a0:dc:fc:85:15:c1:4e:f0:7e:ae:35:95:9e: aa:62:d1:7d:7d:75:a4:5c:f0:7f:b6:ee:bd:55:cf:10:36:a2: ee:7a:d3:33:f5:6f:8a:75:ec:99:fd:9d:b7:e3:8c:cc:2d:11: 96:ad:30:e9:f3:f2:d9:c0:65:49:95:2f:bb:40:76:d9:48:c9: 8b:e3:36:ee:10:82:18:a1:f1:0a:63:9f:6b:1b:76:c4:55:9c: e5:a0:95:1e:2d:04:12:ef:23:e6:cd:30:0c:68:63:50:3b:2b: 4d:51:41:28:0c:1d:2e:7d:f6:db:1c:f9:25:64:cc:99:cc:79: 86:80:fe:48:80:7a:ac:ff:73:64:8c:f1:4c:02:70:34:6d:d6: 81:ce:ce:65:31:1b:30:3b:d4:e4:88:1c:92:81:bf:59:ca:c9: a2:20:06:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5MkTTkdyVG4kGeMuAYjc1VNW38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNjA0MTcwMDU1NTdaFw0yNjA0MjAwMjI0NTdaMDMxMTAvBgNV BAMTKDA3Qjk4NUNBOEVEMEFGQjAyQzk1OEYxMkY1OURGMzAzNDBBQjFBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qTRzK1zcisDOnZoweksYMVIB 6dpZGQ156DUotyTYhMWrgAOMicjjvftX0++OO3PDMostD80rSlxh4QBQ/wYddq1H xxrtXqfrf3Ab43a3cPmZLDHTBLsFKR2I+yD3iy+g6uCPsejB98ipgkQs4sjaURwy 8ku6AA0X4P328TdSj+xgP4sq3VN4PN0zeayUI+6T68ErozuX83bVF9hOZd0Y2sod X9eQ+QLK03+UHqDDpne+WTmCuZJH0uVRNXQqsEdFJkuDaWtekTdp77JQTd5WQGaN v1sd3Myy7lUzhRclfOndXnG2iyiO1Tnm9cG7lSK16luL3Rno5iJTmaMGfIG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7mFyo7Qr7AslY8S9Z3zA0CrGrkwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1dHGjFBBzvLsOvWugayjRmgEMCGF1GnCKs 9Dnnr/bOrxSvPFHlDHrwpAg0GTgxGiq/WwTMnsazI2D582kblQRb1qQ7R/bNLm+5 KprsspI92YTeu03PIJxzwmRw//atoNz8hRXBTvB+rjWVnqpi0X19daRc8H+27r1V zxA2ou560zP1b4p17Jn9nbfjjMwtEZatMOnz8tnAZUmVL7tAdtlIyYvjNu4Qghih 8Qpjn2sbdsRVnOWglR4tBBLvI+bNMAxoY1A7K01RQSgMHS599tsc+SVkzJnMeYaA /kiAeqz/c2SM8UwCcDRt1oHOzmUxGzA71OSIHJKBv1nKyaIgBm4= -----END CERTIFICATE-----Generated at Sat Apr 18 05:51:05 2026 by rpki-client