$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: Ig7iEwFdJ+wBBSKVdB1iiQfxzHm9m+ZhBjRr/VIYTIA= Subject key identifier: 4F:44:37:AC:27:87:8B:FD:AE:F7:EE:10:F1:01:E0:2A:7F:B4:5E:FB Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 7890582A717233539443365D544181CE497FC49E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: F1 Signing time: Fri 17 Apr 2026 11:02:14 +0000 Manifest this update: Fri 17 Apr 2026 10:57:14 +0000 Manifest next update: Mon 20 Apr 2026 21:33:14 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: tPHaptfkdzhcWE1Xx/3UsBtbYxz9HpLTxMU3z7eyPFI=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:58:2a:71:72:33:53:94:43:36:5d:54:41:81:ce:49:7f:c4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Apr 17 10:57:14 2026 GMT Not After : Apr 20 21:33:14 2026 GMT Subject: CN=4F4437AC27878BFDAEF7EE10F101E02A7FB45EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:48:af:92:bc:09:02:0f:7f:8c:ed:2d:5f: 63:00:b6:78:2b:30:09:2f:3e:63:89:38:ad:7a:a1: 33:b1:77:d0:e2:40:ab:39:a4:88:47:e0:8b:ea:a3: d1:5c:d7:af:68:29:c9:b1:e3:97:be:88:57:a3:c1: 73:95:8a:e9:95:c1:9b:57:18:b5:5d:57:e7:93:7c: 62:0e:a7:e0:f4:af:1c:76:9d:ea:1c:26:c7:f2:8f: d3:3e:a2:42:8a:c5:99:22:8f:10:f7:21:b9:fe:25: 08:0f:00:e9:e6:28:86:b4:e1:f8:5d:a9:e5:fd:c0: cd:2b:84:f5:59:56:a6:4a:91:bc:ef:d7:b6:40:92: 62:cc:9c:c6:d7:3b:1a:aa:1b:5a:29:76:6a:e0:9f: 99:7c:ca:a5:d7:f4:50:54:c8:b0:30:f7:da:8f:9f: ba:38:09:54:de:15:f5:c9:6b:5d:26:e0:22:07:b6: 36:85:9b:72:e7:dc:d4:29:2d:d5:8c:c8:46:67:74: d1:e0:9d:c2:85:71:d0:28:94:ef:a0:bb:b9:6c:7c: 6e:81:af:f2:5a:44:5b:a6:7b:19:24:dc:0e:8c:31: 70:ee:38:5e:09:9f:c2:83:53:98:7f:bd:09:27:12: fb:be:fa:8e:d9:dd:c0:2e:fa:ea:9d:7a:dc:e7:b1: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:44:37:AC:27:87:8B:FD:AE:F7:EE:10:F1:01:E0:2A:7F:B4:5E:FB X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1b:6b:11:59:4a:02:12:64:69:70:0d:94:3e:1a:e5:6d:20: c7:b7:64:93:ea:46:f2:14:17:c1:ca:ef:b7:30:70:d1:37:d4: bb:f2:5b:3b:3a:1b:57:a6:a2:86:df:d9:25:bf:7d:35:bb:db: 1d:97:a8:f3:a7:bf:d9:d8:85:32:9d:bf:f2:dc:9d:a3:38:c8: 4f:2e:af:85:d5:00:cb:a3:c9:89:c6:44:bc:a0:52:56:60:25: ce:90:6f:2a:98:b8:65:0c:87:41:25:ed:2b:83:69:78:80:ff: 45:eb:8c:6e:06:95:0c:68:c7:22:e2:c2:92:94:8c:e4:08:86: 07:cc:90:1c:eb:f5:30:73:f5:b0:1f:e2:d5:4f:98:c7:48:c4: 17:5a:86:54:b1:f7:7f:96:d3:50:8a:93:99:2f:d6:33:3a:95: 72:4b:9b:d8:3a:7c:1f:83:13:6a:7f:2b:c8:85:a2:f4:be:b4: 56:0e:87:b7:67:d9:0b:b8:fc:c2:f3:25:6a:a6:41:36:1d:b3: 9c:e8:ac:e1:e8:6d:9c:6c:29:9a:96:7c:d8:2c:49:45:24:77: a9:4e:09:36:b3:04:e9:72:bd:86:ec:1c:f8:5c:93:ef:bd:8c: f2:77:a6:56:09:c2:d9:48:0c:13:cd:90:7d:dc:54:33:fb:ac: 85:66:4a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJBYKnFyM1OUQzZdVEGBzkl/xJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNjA0MTcxMDU3MTRaFw0yNjA0MjAyMTMzMTRaMDMxMTAvBgNV BAMTKDRGNDQzN0FDMjc4NzhCRkRBRUY3RUUxMEYxMDFFMDJBN0ZCNDVFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChP0ivkrwJAg9/jO0tX2MAtngr MAkvPmOJOK16oTOxd9DiQKs5pIhH4Ivqo9Fc169oKcmx45e+iFejwXOViumVwZtX GLVdV+eTfGIOp+D0rxx2neocJsfyj9M+okKKxZkijxD3Ibn+JQgPAOnmKIa04fhd qeX9wM0rhPVZVqZKkbzv17ZAkmLMnMbXOxqqG1opdmrgn5l8yqXX9FBUyLAw99qP n7o4CVTeFfXJa10m4CIHtjaFm3Ln3NQpLdWMyEZndNHgncKFcdAolO+gu7lsfG6B r/JaRFumexkk3A6MMXDuOF4Jn8KDU5h/vQknEvu++o7Z3cAu+uqdetznsZbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0Q3rCeHi/2u9+4Q8QHgKn+0XvswHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEbaxFZSgISZGlwDZQ+GuVtIMe3ZJPqRvIU F8HK77cwcNE31LvyWzs6G1emoobf2SW/fTW72x2XqPOnv9nYhTKdv/LcnaM4yE8u r4XVAMujyYnGRLygUlZgJc6QbyqYuGUMh0El7SuDaXiA/0XrjG4GlQxoxyLiwpKU jOQIhgfMkBzr9TBz9bAf4tVPmMdIxBdahlSx93+W01CKk5kv1jM6lXJLm9g6fB+D E2p/K8iFovS+tFYOh7dn2Qu4/MLzJWqmQTYds5zorOHobZxsKZqWfNgsSUUkd6lO CTazBOlyvYbsHPhck++9jPJ3plYJwtlIDBPNkH3cVDP7rIVmSvA= -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:25 2026 by rpki-client