$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: nTzQL6Ncnmv6Ort1VqDtsFmxSQ4Y+vNGOd7vBRtsf4U= Subject key identifier: CE:40:31:58:48:3C:B4:29:06:FF:77:91:96:33:1E:84:CA:23:BE:4F Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 48727719F6AD8E4C2509EECF4D1ACB325C7B32F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0390 Signing time: Thu 16 Apr 2026 10:12:07 +0000 Manifest this update: Thu 16 Apr 2026 10:07:07 +0000 Manifest next update: Sun 19 Apr 2026 13:55:07 +0000 Files and hashes: 1: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 0p+RHlD+ckETCqq2WqDZcV+JUSgfzHv8YOtEjocJvbw=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 3: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:72:77:19:f6:ad:8e:4c:25:09:ee:cf:4d:1a:cb:32:5c:7b:32:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Apr 16 10:07:07 2026 GMT Not After : Apr 19 13:55:07 2026 GMT Subject: CN=CE403158483CB42906FF779196331E84CA23BE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:9d:88:e5:2b:e0:c1:42:d9:7b:53:ac:2a: 47:ff:71:dc:d2:b9:64:32:bf:37:38:3e:24:b6:77: 3e:47:c5:03:b3:5f:73:25:98:a2:2a:d8:80:30:3b: 37:f8:2d:69:53:b3:da:c1:c9:59:a5:7a:cd:74:2f: 96:76:99:28:84:a7:f8:4d:ba:bc:24:91:b1:93:b0: 98:84:89:4a:89:34:a5:a3:ea:26:9e:93:14:df:dc: db:5d:27:f9:6c:a5:f6:88:3d:c5:c9:bd:ee:b9:0d: 44:d0:73:e3:2d:e2:81:32:26:2b:85:f6:b9:64:42: 2c:6d:d1:7f:e1:e6:f2:1d:50:38:8c:0c:65:91:d3: 46:20:9e:d3:98:4e:d6:ee:14:5a:3a:6b:ac:35:7b: 0a:e7:af:d1:68:54:a3:cd:c8:b7:7b:5b:0b:e0:c8: b7:98:31:c7:a6:7c:9b:46:f4:fb:8a:fe:0c:ee:cf: 93:5c:4b:a1:93:0a:89:c4:7e:e6:ce:a8:5d:fa:80: e9:48:3b:d1:2f:30:c2:eb:9b:23:38:5d:ad:35:9a: 88:1b:00:5c:1e:3f:78:15:80:b1:40:22:a9:5d:6e: 63:c3:f2:19:8b:5b:8c:7e:bb:e1:64:73:8c:a7:64: c5:a7:84:1f:a0:58:1c:70:0b:35:27:85:d7:4d:a0: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:40:31:58:48:3C:B4:29:06:FF:77:91:96:33:1E:84:CA:23:BE:4F X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:23:0e:e5:c8:a5:e3:32:48:21:b4:95:5b:31:4e:45:f6:06: fe:74:a5:ef:61:9f:e6:11:1c:ef:05:ae:85:52:0a:ec:41:ce: 3e:63:46:4c:af:81:c9:2c:1b:95:4b:1f:76:3c:3a:a6:a5:6c: 3a:ad:e3:c9:a9:f4:3c:7e:ef:6d:00:ca:84:80:a1:e0:82:af: 9e:7a:91:db:12:54:87:80:2d:bf:9a:33:70:31:40:d4:3c:63: 2a:aa:13:71:88:af:7c:7d:90:46:b9:b5:5b:e1:e6:a4:2a:f3: ab:8a:4a:d4:00:f0:8f:81:3e:e7:bb:ef:ea:4a:b6:aa:f5:ad: 7a:8c:c2:84:b2:ae:ba:b2:33:ea:17:28:f1:8d:ea:1a:19:ca: a5:f2:aa:16:25:13:85:da:03:6b:ef:25:b0:54:0a:52:4b:6e: d3:43:59:a9:74:d9:2b:c1:1e:be:68:19:32:ab:94:38:95:e3: 46:71:a0:30:3d:7b:17:53:c9:ac:bd:38:43:a8:29:84:07:0b: f8:dc:82:d3:7f:ee:4e:d7:00:a3:0e:07:83:dd:f6:91:0c:d2: 66:7b:0d:1b:85:bf:b7:82:45:1b:d2:eb:25:50:fa:57:34:f1: cc:49:d3:6f:e7:3c:fe:58:f8:18:7e:fa:c6:42:f6:c3:4e:7a: e5:d3:20:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHJ3GfatjkwlCe7PTRrLMlx7MvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNjA0MTYxMDA3MDdaFw0yNjA0MTkxMzU1MDdaMDMxMTAvBgNV BAMTKENFNDAzMTU4NDgzQ0I0MjkwNkZGNzc5MTk2MzMxRTg0Q0EyM0JFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3p2I5SvgwULZe1OsKkf/cdzS uWQyvzc4PiS2dz5HxQOzX3MlmKIq2IAwOzf4LWlTs9rByVmles10L5Z2mSiEp/hN urwkkbGTsJiEiUqJNKWj6iaekxTf3NtdJ/lspfaIPcXJve65DUTQc+Mt4oEyJiuF 9rlkQixt0X/h5vIdUDiMDGWR00YgntOYTtbuFFo6a6w1ewrnr9FoVKPNyLd7Wwvg yLeYMcemfJtG9PuK/gzuz5NcS6GTConEfubOqF36gOlIO9EvMMLrmyM4Xa01mogb AFweP3gVgLFAIqldbmPD8hmLW4x+u+Fkc4ynZMWnhB+gWBxwCzUnhddNoPc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkAxWEg8tCkG/3eRljMehMojvk8wHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4jDuXIpeMySCG0lVsxTkX2Bv50pe9hn+YR HO8FroVSCuxBzj5jRkyvgcksG5VLH3Y8OqalbDqt48mp9Dx+720AyoSAoeCCr556 kdsSVIeALb+aM3AxQNQ8YyqqE3GIr3x9kEa5tVvh5qQq86uKStQA8I+BPue77+pK tqr1rXqMwoSyrrqyM+oXKPGN6hoZyqXyqhYlE4XaA2vvJbBUClJLbtNDWal02SvB Hr5oGTKrlDiV40ZxoDA9exdTyay9OEOoKYQHC/jcgtN/7k7XAKMOB4Pd9pEM0mZ7 DRuFv7eCRRvS6yVQ+lc08cxJ02/nPP5Y+Bh++sZC9sNOeuXTILk= -----END CERTIFICATE-----Generated at Sat Apr 18 01:31:16 2026 by rpki-client