$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: kcJjpXPU79whn/VJZnWS2pg7dm19aGpBB+Qe70G0sZw= Subject key identifier: 6E:2B:D8:B6:DC:59:3A:22:82:BC:42:91:E6:55:56:61:ED:57:18:7B Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 02F33AA3A747553D71B866C930AB88F496E4D7EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 0137 Signing time: Wed 15 Apr 2026 19:21:13 +0000 Manifest this update: Wed 15 Apr 2026 19:16:13 +0000 Manifest next update: Sun 19 Apr 2026 03:25:13 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: e0KMuAk3wKVRfXy4hiXD02tyuukRyMl2I0WHnvKBFvM=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: cTd29VpZzI6xG+CDfvUS6DsBIPpE0bf2gMX6j0uNJz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f3:3a:a3:a7:47:55:3d:71:b8:66:c9:30:ab:88:f4:96:e4:d7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Apr 15 19:16:13 2026 GMT Not After : Apr 19 03:25:13 2026 GMT Subject: CN=6E2BD8B6DC593A2282BC4291E6555661ED57187B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:d3:7c:fd:ca:a6:ae:2e:60:bb:b9:95:af: fc:6e:30:f6:7f:e6:3a:42:11:a3:d0:52:95:b8:99: 7f:ee:2e:51:11:0d:f9:2c:49:1b:c3:cf:a2:91:df: 9e:79:bc:6b:46:6e:4f:4e:17:cf:01:13:98:dc:ba: fa:90:74:7c:48:6a:78:c2:0c:66:40:6f:cd:c8:94: 2c:9a:0b:4e:ec:02:a7:d0:7f:69:e9:02:83:e3:af: 82:b4:b7:0c:4f:52:a8:92:ae:25:f2:5d:e1:86:01: db:63:0f:20:3e:ad:39:c7:dc:0e:8f:1b:2f:29:57: 88:52:a0:cf:02:a1:af:ba:ca:85:e2:a3:90:e5:35: bc:26:95:f7:f3:29:87:b1:de:bc:e8:1b:a9:d1:ef: f1:5a:48:c0:31:c1:82:5d:d6:1d:39:da:f5:35:5d: a3:2b:57:4c:93:9b:15:b7:1e:2b:08:b5:11:da:ff: b8:2b:f3:57:20:90:d8:7c:a1:ef:5d:93:49:16:26: ec:5d:dc:46:b0:6c:2c:31:c0:3c:2a:71:c8:d6:83: 47:32:62:91:66:55:cd:72:55:0f:47:74:05:4c:65: 06:19:78:cf:4a:56:0c:45:81:44:6c:10:ca:b0:43: a0:15:3f:fb:28:4a:95:de:0c:8b:b2:d5:fe:8d:64: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:D8:B6:DC:59:3A:22:82:BC:42:91:E6:55:56:61:ED:57:18:7B X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2a:ba:a9:28:ce:55:6e:7a:3a:82:f4:29:5b:80:db:00:4a: b0:d6:88:ba:de:fc:b2:e7:05:27:3e:07:71:af:c1:dd:dd:7e: fa:20:dd:9c:81:50:b7:60:19:89:f6:5c:82:76:2a:a2:62:52: c1:3a:c9:e6:41:b0:84:89:f5:2a:2b:fc:60:26:f0:cd:58:1f: 0f:c1:2e:77:ac:b9:29:30:0f:8b:20:36:11:88:c1:5e:fc:96: ec:7f:94:6e:32:fc:1c:f0:9d:9b:bc:6f:9e:67:89:b3:02:dc: 71:50:30:98:f4:7a:17:bd:72:df:31:12:0c:1e:4c:c4:d3:88: 3e:33:5e:9f:a1:b1:65:6f:d3:82:1d:50:00:83:ad:c7:9c:3e: 42:81:17:4e:e8:d6:09:cf:39:10:ba:06:3c:23:ec:b1:9c:18: de:a7:a1:24:a1:14:70:15:69:ab:71:5f:ac:05:f6:33:37:7a: 1d:8d:36:06:2f:67:f7:25:f5:51:ad:c1:23:cb:6d:21:da:8b: 00:d0:7a:87:f3:5a:4d:a3:31:93:63:ff:1a:7e:fb:d3:9f:19: b2:11:02:5b:ff:5e:47:74:b5:9c:42:0e:ab:4d:f2:f9:82:95: d6:c9:2b:11:fe:a0:dd:1a:0d:cc:b8:29:55:36:0b:cd:88:2a: ed:b1:d1:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvM6o6dHVT1xuGbJMKuI9Jbk1+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNjA0MTUxOTE2MTNaFw0yNjA0MTkwMzI1MTNaMDMxMTAvBgNV BAMTKDZFMkJEOEI2REM1OTNBMjI4MkJDNDI5MUU2NTU1NjYxRUQ1NzE4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+dN8/cqmri5gu7mVr/xuMPZ/ 5jpCEaPQUpW4mX/uLlERDfksSRvDz6KR3555vGtGbk9OF88BE5jcuvqQdHxIanjC DGZAb83IlCyaC07sAqfQf2npAoPjr4K0twxPUqiSriXyXeGGAdtjDyA+rTnH3A6P Gy8pV4hSoM8Coa+6yoXio5DlNbwmlffzKYex3rzoG6nR7/FaSMAxwYJd1h052vU1 XaMrV0yTmxW3HisItRHa/7gr81cgkNh8oe9dk0kWJuxd3EawbCwxwDwqccjWg0cy YpFmVc1yVQ9HdAVMZQYZeM9KVgxFgURsEMqwQ6AVP/soSpXeDIuy1f6NZC4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbivYttxZOiKCvEKR5lVWYe1XGHswHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0quqkozlVuejqC9ClbgNsASrDWiLre/LLn BSc+B3Gvwd3dfvog3ZyBULdgGYn2XIJ2KqJiUsE6yeZBsISJ9Sor/GAm8M1YHw/B LnesuSkwD4sgNhGIwV78lux/lG4y/BzwnZu8b55nibMC3HFQMJj0ehe9ct8xEgwe TMTTiD4zXp+hsWVv04IdUACDrcecPkKBF07o1gnPORC6Bjwj7LGcGN6noSShFHAV aatxX6wF9jM3eh2NNgYvZ/cl9VGtwSPLbSHaiwDQeofzWk2jMZNj/xp++9OfGbIR Alv/Xkd0tZxCDqtN8vmCldbJKxH+oN0aDcy4KVU2C82IKu2x0U4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:23 2026 by rpki-client