$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: cyVM2BqYyT8IM2C+42/f/iM6xTMC05KicK8bpfip8Zk= Subject key identifier: 94:B6:45:3D:E1:26:45:9B:A6:21:FA:15:F5:51:D2:D8:4F:BA:32:71 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 48DC983F0232F49761BE944BA4493A598B935DF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 0343 Signing time: Thu 16 Apr 2026 21:21:17 +0000 Manifest this update: Thu 16 Apr 2026 21:16:17 +0000 Manifest next update: Mon 20 Apr 2026 01:56:17 +0000 Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: ei6/LO/T09ytMBC+PyfbdOtH98MmaPRo6freod5GLHY=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:dc:98:3f:02:32:f4:97:61:be:94:4b:a4:49:3a:59:8b:93:5d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Apr 16 21:16:17 2026 GMT Not After : Apr 20 01:56:17 2026 GMT Subject: CN=94B6453DE126459BA621FA15F551D2D84FBA3271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:15:fa:9a:32:ad:48:b0:8f:27:8e:d9:ea: dd:13:fd:21:a8:c3:ea:37:57:a3:f4:f8:6f:63:50: 52:29:4d:49:08:7b:88:e7:35:2c:0d:e0:4b:14:86: 73:8e:2e:e8:da:65:52:6b:7b:45:57:c0:31:cf:84: 46:f4:60:f9:1e:01:b5:2b:ed:94:70:3a:71:7c:8e: 7c:0f:92:98:53:87:64:0a:5b:a0:a2:43:b1:86:30: 48:3a:5b:e6:1f:a6:ad:37:9d:58:21:d1:42:15:8a: 89:83:39:07:e1:fa:34:4d:8e:00:9a:83:6e:2b:29: dd:ce:a3:5e:ac:5e:6e:38:cf:b6:9e:79:19:3a:f5: 89:88:01:1d:36:e0:87:69:80:13:f7:1c:2e:e0:2f: a2:48:a8:55:0d:3b:52:91:f1:57:78:34:c6:66:23: 45:7e:cb:57:65:fa:77:8b:4c:1c:17:bb:55:0f:ce: 54:e5:c9:cf:c9:ce:25:dc:52:68:ae:e1:56:f0:cd: 28:f6:ce:22:5c:4f:7b:12:40:d1:47:5e:7a:b2:74: bf:9c:86:4e:13:6b:5e:2f:25:71:37:f9:f9:6c:f9: 00:20:03:61:10:75:13:db:fb:67:e9:dd:e1:0a:3b: 10:e7:f6:4d:d8:61:f2:66:5d:18:3e:b2:20:3a:e7: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:45:3D:E1:26:45:9B:A6:21:FA:15:F5:51:D2:D8:4F:BA:32:71 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:16:c9:e0:2d:14:ec:03:78:a6:43:4e:fc:4c:c0:82:81:f3: 08:17:b8:be:84:67:3d:46:fa:bd:85:08:62:31:05:56:af:a2: e0:7a:a8:aa:cd:b9:8b:a2:6f:14:b4:a3:d0:0e:ff:32:d2:53: a5:77:57:6d:c4:db:5b:c4:35:db:f5:d4:f8:33:b9:34:72:05: ac:8f:ac:df:38:45:68:0d:c2:d5:d5:2a:b8:78:cf:4a:04:50: 00:86:23:f4:12:60:f5:32:a2:bc:84:8e:42:e9:9b:64:22:24: 7e:37:f7:6a:3d:a5:db:65:86:f8:7f:df:48:cc:aa:2f:38:74: 23:77:ad:c0:6d:8e:f2:7b:df:ae:2c:91:6b:9f:ac:9c:70:1e: d4:7d:a6:14:0e:fa:75:9f:ce:f6:e5:91:a0:70:5a:9b:a1:1c: f9:d5:09:a0:b0:9f:f4:a2:a2:16:4e:52:b5:f1:aa:3c:02:e1: 2d:19:ea:20:f7:d9:3c:0c:fe:48:bb:80:43:e2:db:b2:1c:ec: 38:8a:8e:5d:d9:c9:b2:fd:d7:ec:bb:98:0b:89:56:ae:b3:66: a6:b1:2b:ca:61:be:d3:3d:76:10:34:2f:bf:ba:2e:35:30:65: 78:28:5b:50:d9:ae:a7:89:9b:e5:2e:a3:23:93:cd:f1:8a:d0: c5:db:83:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNyYPwIy9JdhvpRLpEk6WYuTXfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNjA0MTYyMTE2MTdaFw0yNjA0MjAwMTU2MTdaMDMxMTAvBgNV BAMTKDk0QjY0NTNERTEyNjQ1OUJBNjIxRkExNUY1NTFEMkQ4NEZCQTMyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HxX6mjKtSLCPJ47Z6t0T/SGo w+o3V6P0+G9jUFIpTUkIe4jnNSwN4EsUhnOOLujaZVJre0VXwDHPhEb0YPkeAbUr 7ZRwOnF8jnwPkphTh2QKW6CiQ7GGMEg6W+Yfpq03nVgh0UIViomDOQfh+jRNjgCa g24rKd3Oo16sXm44z7aeeRk69YmIAR024IdpgBP3HC7gL6JIqFUNO1KR8Vd4NMZm I0V+y1dl+neLTBwXu1UPzlTlyc/JziXcUmiu4VbwzSj2ziJcT3sSQNFHXnqydL+c hk4Ta14vJXE3+fls+QAgA2EQdRPb+2fp3eEKOxDn9k3YYfJmXRg+siA658t5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLZFPeEmRZumIfoV9VHS2E+6MnEwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0WyeAtFOwDeKZDTvxMwIKB8wgXuL6EZz1G +r2FCGIxBVavouB6qKrNuYuibxS0o9AO/zLSU6V3V23E21vENdv11PgzuTRyBayP rN84RWgNwtXVKrh4z0oEUACGI/QSYPUyoryEjkLpm2QiJH4392o9pdtlhvh/30jM qi84dCN3rcBtjvJ7364skWufrJxwHtR9phQO+nWfzvblkaBwWpuhHPnVCaCwn/Si ohZOUrXxqjwC4S0Z6iD32TwM/ki7gEPi27Ic7DiKjl3ZybL91+y7mAuJVq6zZqax K8phvtM9dhA0L7+6LjUwZXgoW1DZrqeJm+UuoyOTzfGK0MXbg+Q= -----END CERTIFICATE-----Generated at Sat Apr 18 01:40:48 2026 by rpki-client