$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: oUmIewDaQKpihrR3xY4usQFQGcyqf66HSipiiXvX2ks= Subject key identifier: 27:13:EB:19:4D:6F:94:6D:DB:F6:23:E5:6D:B8:7C:69:FC:CB:41:A7 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 1DFDA3DD4AE10B70CAA14F7196BA825308FC4E10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 029B Signing time: Fri 17 Apr 2026 07:02:19 +0000 Manifest this update: Fri 17 Apr 2026 06:57:19 +0000 Manifest next update: Mon 20 Apr 2026 13:13:19 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: 1RXfmRe6pRQmnIPjeWeRW2vJ6NRJSAw79evFjQ5QUOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fd:a3:dd:4a:e1:0b:70:ca:a1:4f:71:96:ba:82:53:08:fc:4e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Apr 17 06:57:19 2026 GMT Not After : Apr 20 13:13:19 2026 GMT Subject: CN=2713EB194D6F946DDBF623E56DB87C69FCCB41A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:99:a5:fd:b8:e4:b1:a0:02:28:73:46:2f: ea:83:5b:e8:cf:52:01:d1:b4:8d:15:25:14:ea:14: c6:b8:63:5c:17:4a:b1:a7:e0:38:7b:57:73:0b:c7: 33:2d:e3:a9:d5:8d:5c:a4:3b:c2:0d:87:b5:e4:61: b2:3b:b7:85:bd:bc:11:02:ca:e8:19:ce:1b:5f:de: eb:a3:3b:f9:92:fe:ac:e6:45:ca:39:8e:4a:de:f1: 85:3d:53:e7:12:a2:26:b7:2c:ce:03:12:51:88:0e: 58:6b:05:ea:2b:35:ea:f0:18:17:79:71:71:16:d5: 15:50:92:30:80:45:3c:31:1b:bc:34:3a:f6:1f:fd: b8:c2:2f:dd:1d:1c:05:ac:ea:8b:7c:f5:dc:2a:d7: 15:99:ba:47:a4:cf:8b:af:ed:04:44:ec:95:03:3d: 0d:51:93:56:5d:8b:65:7b:26:dc:7e:6f:2d:c2:c1: 5c:40:2e:a1:4c:d8:d7:32:50:c9:40:5c:c9:7b:ce: 64:f2:c6:f9:dd:fa:4d:72:fb:39:75:88:9d:86:3e: eb:dc:0e:1d:39:0b:60:58:39:84:5f:e7:21:0a:b0: 53:c8:88:aa:45:eb:0e:f6:0d:4e:bb:37:8b:b8:20: 14:a6:34:e5:b5:a1:7c:52:e4:60:31:ac:68:02:3b: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:EB:19:4D:6F:94:6D:DB:F6:23:E5:6D:B8:7C:69:FC:CB:41:A7 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:07:2d:0d:17:a2:9a:8a:aa:7c:72:04:c2:1d:4d:74:9b:21: 18:5f:25:0d:9b:11:9d:23:74:a9:3b:57:f2:ea:c8:3d:99:8d: e2:dc:b7:31:aa:ac:d9:ea:bb:0b:7c:4b:f2:5b:59:e6:27:55: c3:fe:7f:a6:d9:77:6e:cd:c9:59:e0:23:06:99:65:03:5b:e8: b0:68:e1:c3:c0:da:e0:dc:7c:43:23:2b:99:68:97:7c:d3:e9: d9:5f:d5:92:88:4e:b5:86:42:70:0a:75:22:46:2c:5e:01:c3: 2e:cd:de:15:78:25:f3:39:9c:92:a4:f8:71:22:ee:ca:e9:0b: d3:cd:7c:00:84:4c:59:37:5f:75:be:6c:60:67:74:cb:98:39: cb:17:96:91:03:46:4f:91:6f:33:70:6f:6b:d6:87:67:9c:34: 87:08:5b:d4:91:fd:be:a2:8b:99:d5:4e:2c:c6:db:48:38:09: d4:21:cf:f4:80:6b:d4:31:96:41:67:de:b8:73:00:a5:90:b2: ea:a8:08:6b:1e:61:45:63:00:1f:4e:a4:49:32:88:03:83:fc: 78:1e:95:21:85:71:47:59:78:06:5b:17:f7:0f:e2:1a:c4:c1: 94:f3:25:4c:f6:88:da:0f:4e:2a:82:7b:55:45:b9:d0:90:a0: d6:d6:cc:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf2j3UrhC3DKoU9xlrqCUwj8ThAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNjA0MTcwNjU3MTlaFw0yNjA0MjAxMzEzMTlaMDMxMTAvBgNV BAMTKDI3MTNFQjE5NEQ2Rjk0NkREQkY2MjNFNTZEQjg3QzY5RkNDQjQxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHl5ml/bjksaACKHNGL+qDW+jP UgHRtI0VJRTqFMa4Y1wXSrGn4Dh7V3MLxzMt46nVjVykO8INh7XkYbI7t4W9vBEC yugZzhtf3uujO/mS/qzmRco5jkre8YU9U+cSoia3LM4DElGIDlhrBeorNerwGBd5 cXEW1RVQkjCARTwxG7w0OvYf/bjCL90dHAWs6ot89dwq1xWZukekz4uv7QRE7JUD PQ1Rk1Zdi2V7Jtx+by3CwVxALqFM2NcyUMlAXMl7zmTyxvnd+k1y+zl1iJ2GPuvc Dh05C2BYOYRf5yEKsFPIiKpF6w72DU67N4u4IBSmNOW1oXxS5GAxrGgCO6lPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxPrGU1vlG3b9iPlbbh8afzLQacwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkHLQ0XopqKqnxyBMIdTXSbIRhfJQ2bEZ0j dKk7V/LqyD2ZjeLctzGqrNnquwt8S/JbWeYnVcP+f6bZd27NyVngIwaZZQNb6LBo 4cPA2uDcfEMjK5lol3zT6dlf1ZKITrWGQnAKdSJGLF4Bwy7N3hV4JfM5nJKk+HEi 7srpC9PNfACETFk3X3W+bGBndMuYOcsXlpEDRk+RbzNwb2vWh2ecNIcIW9SR/b6i i5nVTizG20g4CdQhz/SAa9QxlkFn3rhzAKWQsuqoCGseYUVjAB9OpEkyiAOD/Hge lSGFcUdZeAZbF/cP4hrEwZTzJUz2iNoPTiqCe1VFudCQoNbWzKc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:48 2026 by rpki-client