$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: 3cPCdJw66SLePMCokAjat6x3gNxbtA6AV5w7C2T4IX8= Subject key identifier: AE:B9:DF:63:F0:35:D5:29:2C:9F:D0:46:44:DC:FE:3E:04:23:2D:F3 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 3984A9E85E9CD0A398BFABF111D037744FBE4413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 026D Signing time: Thu 16 Apr 2026 13:00:54 +0000 Manifest this update: Thu 16 Apr 2026 12:55:54 +0000 Manifest next update: Sun 19 Apr 2026 15:35:54 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: 2/oi5Fz9ArJe/hUMCjwMqMSbj0WWgaw15Mg66bVC2nw=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: TU/lPlfDzJtw35bEd20WHsVMGmXj/m5tHMEpU4CBLtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:84:a9:e8:5e:9c:d0:a3:98:bf:ab:f1:11:d0:37:74:4f:be:44:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Apr 16 12:55:54 2026 GMT Not After : Apr 19 15:35:54 2026 GMT Subject: CN=AEB9DF63F035D5292C9FD04644DCFE3E04232DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:1a:81:27:5b:a1:18:30:38:7d:98:dc:39: c9:8f:ea:28:36:7b:4c:96:2c:87:4b:9b:ad:5e:43: 5f:3f:4f:8d:20:75:63:8b:8d:be:fc:9e:37:e5:86: 51:be:24:c4:9f:ed:d4:5e:e5:9b:29:e1:77:bf:77: 88:4f:e1:2a:0c:18:06:f6:cd:db:8f:dc:28:9b:2f: ca:6e:3a:82:a4:f5:51:c3:26:66:86:e5:0e:f6:9e: 0d:f5:51:6b:2d:9f:ac:04:28:29:05:67:8c:49:29: 3f:2b:d4:b4:b1:c7:62:6b:4a:36:45:e5:81:67:fb: 9e:6b:37:80:2d:93:59:48:23:45:69:be:d1:ef:50: 9b:de:e0:3a:23:56:59:b4:61:04:31:df:d1:41:70: 21:44:3f:ef:64:82:c1:be:f3:6b:c7:e0:94:37:56: 86:5b:8d:2f:ca:7b:ef:ef:a6:1c:32:a7:1f:8d:61: 89:71:e4:4a:5b:b8:8d:59:31:c9:77:6d:64:e7:79: 1f:b7:3c:ee:ab:14:7a:d2:41:07:53:63:32:7f:94: 07:fe:d2:45:fd:d4:d5:07:9c:6a:6a:9c:9d:19:6a: db:a7:c4:17:2e:8c:b0:9b:05:16:68:3a:5d:d7:42: 02:96:47:07:97:c7:21:e2:02:bf:ad:d1:8a:fe:29: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:DF:63:F0:35:D5:29:2C:9F:D0:46:44:DC:FE:3E:04:23:2D:F3 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5a:5f:38:a4:bd:87:e9:4b:ae:2e:e5:31:f7:7a:9a:dc:c6: 87:f3:76:ca:0d:35:b3:ed:9c:5c:5d:9f:c8:55:7b:ca:12:9d: b9:62:8d:bc:ab:c7:df:6d:ff:3b:db:05:de:dc:18:50:74:47: 5b:8f:9f:37:2a:dd:a6:ef:8e:9f:86:3e:a2:9b:a1:20:f4:8f: 94:87:de:1a:ac:9e:5e:8a:01:4c:79:b0:db:c9:e8:0c:14:71: b8:0b:03:c7:1c:7c:46:0c:36:63:ec:71:f1:4d:84:29:6c:4d: 4f:c5:7a:0a:63:29:f2:67:01:cc:2e:e5:96:e5:33:63:43:28: 68:84:76:d8:af:22:ab:48:d1:55:c3:8b:91:06:83:61:d5:df: 6d:90:aa:dd:a4:10:4e:49:1b:0f:d0:8c:2d:46:56:b1:be:27: e1:53:ba:98:99:6f:58:9c:72:39:94:b8:1b:1b:cb:a4:7a:03: ca:4f:11:02:e9:40:c7:0b:d6:b8:84:fc:73:a3:76:99:6f:a0: 8e:78:d4:f8:c0:8f:4b:87:69:f8:c5:42:b9:76:e5:f6:91:3d: f3:34:85:89:b9:2b:d9:88:e7:bb:18:fe:02:88:8a:bd:ed:70: 50:1e:74:1f:ae:cf:28:ce:72:3d:ea:f7:14:fd:e3:86:91:2b: cc:64:af:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYSp6F6c0KOYv6vxEdA3dE++RBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNjA0MTYxMjU1NTRaFw0yNjA0MTkxNTM1NTRaMDMxMTAvBgNV BAMTKEFFQjlERjYzRjAzNUQ1MjkyQzlGRDA0NjQ0RENGRTNFMDQyMzJERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwBqBJ1uhGDA4fZjcOcmP6ig2 e0yWLIdLm61eQ18/T40gdWOLjb78njflhlG+JMSf7dRe5Zsp4Xe/d4hP4SoMGAb2 zduP3CibL8puOoKk9VHDJmaG5Q72ng31UWstn6wEKCkFZ4xJKT8r1LSxx2JrSjZF 5YFn+55rN4Atk1lII0VpvtHvUJve4DojVlm0YQQx39FBcCFEP+9kgsG+82vH4JQ3 VoZbjS/Ke+/vphwypx+NYYlx5EpbuI1ZMcl3bWTneR+3PO6rFHrSQQdTYzJ/lAf+ 0kX91NUHnGpqnJ0ZatunxBcujLCbBRZoOl3XQgKWRweXxyHiAr+t0Yr+KQY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrrnfY/A11Sksn9BGRNz+PgQjLfMwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpaXzikvYfpS64u5TH3eprcxofzdsoNNbPt nFxdn8hVe8oSnblijbyrx99t/zvbBd7cGFB0R1uPnzcq3abvjp+GPqKboSD0j5SH 3hqsnl6KAUx5sNvJ6AwUcbgLA8ccfEYMNmPscfFNhClsTU/FegpjKfJnAcwu5Zbl M2NDKGiEdtivIqtI0VXDi5EGg2HV322Qqt2kEE5JGw/QjC1GVrG+J+FTupiZb1ic cjmUuBsby6R6A8pPEQLpQMcL1riE/HOjdplvoI541PjAj0uHafjFQrl25faRPfM0 hYm5K9mI57sY/gKIir3tcFAedB+uzyjOcj3q9xT944aRK8xkr4M= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:44 2026 by rpki-client