$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: mYMSW4/Xxxr5sfSu3yspQ0+jzWgER5204qiXCZUt6Rs= Subject key identifier: 1E:69:38:80:EB:E6:20:95:52:63:44:8F:FE:7E:18:3D:41:9E:8B:32 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 7DEC965A2F0E4B7B5F4D843B8D1DEF7F5F2EB515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 0243 Signing time: Fri 17 Apr 2026 00:20:50 +0000 Manifest this update: Fri 17 Apr 2026 00:15:50 +0000 Manifest next update: Mon 20 Apr 2026 10:53:50 +0000 Files and hashes: 1: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: CGmHxAtr+Jus80SuXv5gUxSyYMNWFj1vczIEr0lBucs=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 3: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 4: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 5: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:96:5a:2f:0e:4b:7b:5f:4d:84:3b:8d:1d:ef:7f:5f:2e:b5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Apr 17 00:15:50 2026 GMT Not After : Apr 20 10:53:50 2026 GMT Subject: CN=1E693880EBE620955263448FFE7E183D419E8B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:36:37:88:98:d9:11:1b:2a:a4:5d:81:0a: ba:78:4a:07:08:41:12:76:97:7f:e9:1d:93:d7:44: 9b:e4:99:34:c6:1e:91:bd:89:f8:d0:58:e7:ba:2e: e9:01:05:9f:eb:b0:de:5b:90:ad:55:5a:d3:6d:2a: 9f:e4:1c:cf:bf:36:d4:e8:b9:b0:4b:00:21:29:60: 4d:c9:46:04:46:89:b4:2e:cd:51:20:87:94:89:c8: f9:44:74:c5:96:84:bf:58:0c:85:19:be:85:30:b9: ce:fa:fb:e7:30:63:ae:e0:92:0f:9d:0c:79:21:7b: 60:23:83:2e:f1:ed:67:0c:d4:09:32:de:3b:8f:1f: 86:12:fb:8d:08:a6:f4:75:a4:c5:f1:de:7d:f3:5f: d1:e4:97:f1:d1:d3:39:56:67:b7:c4:1d:65:26:46: c0:fe:4f:39:1c:38:35:41:58:4d:5c:65:3d:97:2d: e8:fd:bc:e5:32:27:71:4c:89:57:87:a6:c1:71:e7: 45:a9:10:b8:51:b1:36:69:64:36:c6:f2:00:70:5e: de:89:89:27:30:1a:a3:7d:0d:e2:02:76:9d:be:91: 5f:83:8b:c8:5f:d1:1c:69:e4:48:a7:9f:50:a2:63: 5d:b4:cd:51:69:b6:25:97:3f:f2:01:6a:53:13:f5: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:38:80:EB:E6:20:95:52:63:44:8F:FE:7E:18:3D:41:9E:8B:32 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:65:35:12:98:08:81:0c:9a:56:01:4e:12:b2:5b:9c:9e:b1: ab:f0:d6:6c:82:f2:96:5a:a6:36:1c:7a:ed:0b:a5:c1:cb:e6: 9c:63:f5:14:d7:20:0b:71:a3:d0:75:fb:a4:16:74:4e:28:a2: 6e:38:69:50:5a:40:28:2e:0e:1a:7d:c2:b8:79:42:d4:bb:65: 4f:3c:c5:70:89:39:ce:16:57:22:82:8e:7a:25:61:19:fa:0b: ab:30:30:c1:21:5e:74:68:53:5e:73:64:67:21:f2:55:aa:08: 44:dd:74:ef:29:67:21:18:aa:47:cd:54:e8:22:1b:1d:ff:13: 63:a0:97:60:c7:6e:74:4e:02:50:eb:0f:33:59:54:18:e5:5a: b8:84:15:52:c7:c1:d4:bf:5c:f5:b9:e9:59:52:02:56:83:19: 98:68:8e:bb:c5:f3:6b:7d:70:0a:cb:e9:b4:0c:5d:41:3c:bb: 4d:ac:4b:96:1e:f6:5b:84:da:8f:16:44:0d:f9:e0:d5:5e:86: a2:96:4e:d1:e4:71:5e:a6:7d:4a:58:70:66:1c:5a:3c:85:08: 5e:83:2d:34:74:7b:b8:bf:fe:cb:4b:ad:a6:18:66:db:3a:d2: 54:70:92:e6:21:44:a9:49:0d:fa:dd:ec:2f:c7:b1:e7:b9:43: d9:bc:e6:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeyWWi8OS3tfTYQ7jR3vf18utRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNjA0MTcwMDE1NTBaFw0yNjA0MjAxMDUzNTBaMDMxMTAvBgNV BAMTKDFFNjkzODgwRUJFNjIwOTU1MjYzNDQ4RkZFN0UxODNENDE5RThCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeaDY3iJjZERsqpF2BCrp4SgcI QRJ2l3/pHZPXRJvkmTTGHpG9ifjQWOe6LukBBZ/rsN5bkK1VWtNtKp/kHM+/NtTo ubBLACEpYE3JRgRGibQuzVEgh5SJyPlEdMWWhL9YDIUZvoUwuc76++cwY67gkg+d DHkhe2Ajgy7x7WcM1Aky3juPH4YS+40IpvR1pMXx3n3zX9Hkl/HR0zlWZ7fEHWUm RsD+TzkcODVBWE1cZT2XLej9vOUyJ3FMiVeHpsFx50WpELhRsTZpZDbG8gBwXt6J iScwGqN9DeICdp2+kV+Di8hf0Rxp5Einn1CiY120zVFptiWXP/IBalMT9TaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmk4gOvmIJVSY0SP/n4YPUGeizIwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVlNRKYCIEMmlYBThKyW5yesavw1myC8pZa pjYceu0LpcHL5pxj9RTXIAtxo9B1+6QWdE4oom44aVBaQCguDhp9wrh5QtS7ZU88 xXCJOc4WVyKCjnolYRn6C6swMMEhXnRoU15zZGch8lWqCETddO8pZyEYqkfNVOgi Gx3/E2Ogl2DHbnROAlDrDzNZVBjlWriEFVLHwdS/XPW56VlSAlaDGZhojrvF82t9 cArL6bQMXUE8u02sS5Ye9luE2o8WRA354NVehqKWTtHkcV6mfUpYcGYcWjyFCF6D LTR0e7i//stLraYYZts60lRwkuYhRKlJDfrd7C/Hsee5Q9m85h0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:19 2026 by rpki-client