$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: c+tdWGmj1WP7vv2Ftgy0M2JNv2AUV19etEcubjwoki0= Subject key identifier: 8D:BE:F7:90:C6:B0:33:32:A5:09:DF:6C:10:1F:92:36:54:5F:B1:07 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 2A382BD5C9831E5A7C3A3B06085A67302C3B2CA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 0264 Signing time: Thu 16 Apr 2026 21:01:34 +0000 Manifest this update: Thu 16 Apr 2026 20:56:34 +0000 Manifest next update: Mon 20 Apr 2026 08:04:34 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 2: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: kQqYQ/hACmbe/DuIHq/00AQ09we4Hmr2EyaPkz83yu8=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: pWFmQgShm/pzlWpAOaPAaUyW15mLcTXhzsrhlkIsBwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:38:2b:d5:c9:83:1e:5a:7c:3a:3b:06:08:5a:67:30:2c:3b:2c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Apr 16 20:56:34 2026 GMT Not After : Apr 20 08:04:34 2026 GMT Subject: CN=8DBEF790C6B03332A509DF6C101F9236545FB107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:f0:16:94:f0:e9:2c:84:1f:51:83:77:7b: 0b:58:28:b9:5f:dd:87:32:08:84:ba:ec:cb:60:8f: 33:6f:2e:5e:11:c4:43:2e:06:c1:32:d3:93:bf:8f: d3:cf:88:df:05:50:6b:12:48:2b:8c:84:2b:5e:5c: 7d:4d:9a:27:e7:10:51:e2:02:a3:f5:cc:9e:bc:73: 24:0f:fa:21:1e:72:a5:0d:27:ca:41:70:e7:ff:7a: 4a:c0:10:28:7a:d0:ca:97:e3:10:82:e7:61:f9:37: f5:c7:0e:06:55:fd:64:e2:ef:d1:a4:38:14:4f:3b: 72:32:85:58:ed:e7:37:88:63:8a:e0:7e:55:be:93: b5:63:2c:57:ae:66:2b:d5:65:21:f3:a8:cd:00:04: e7:ee:4e:a0:f0:03:3d:df:0e:9a:6d:10:78:45:74: 32:0f:43:58:16:d2:da:db:ff:02:61:e8:69:be:2c: d3:71:f8:56:5e:ad:30:f2:4d:df:01:20:66:99:b9: 58:0c:c9:9d:5e:c1:76:b6:33:f5:e2:db:97:b6:0b: c7:87:d2:4c:9f:c2:80:b3:43:9b:d6:69:d9:bd:9a: 61:e7:d1:7f:83:38:75:79:6d:a7:1c:d9:cc:81:f3: da:93:26:6c:84:a7:9f:f2:ad:04:a3:3c:40:9b:54: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BE:F7:90:C6:B0:33:32:A5:09:DF:6C:10:1F:92:36:54:5F:B1:07 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9b:75:b9:b2:8f:d3:a9:70:2e:2c:f7:89:27:0a:12:cf:00: ac:9e:43:94:af:d5:e6:42:11:34:01:9e:20:a6:d6:68:3b:7d: 4f:f7:82:54:04:74:85:84:ed:32:48:f7:e4:f1:21:97:82:36: 9d:d9:66:79:40:3d:26:c3:bb:3e:3f:a9:47:e7:10:93:1c:8b: 36:ee:0b:8a:af:1e:18:df:b4:c0:2f:d2:a6:b3:67:b9:a9:07: f5:be:64:e7:e6:bb:f4:4e:f3:0a:66:19:c5:e3:1c:fb:6e:1f: 3c:7a:4f:28:bc:5c:b8:78:eb:88:a9:ac:bb:e2:a9:9b:9e:a4: ad:e1:48:bf:0f:17:26:b5:5b:83:57:a8:8e:98:61:07:c6:09: 32:2c:16:34:d0:77:4c:f4:e3:f5:a8:0e:2d:93:db:ca:6f:b8: fe:02:11:52:ff:7c:b9:a4:52:52:37:82:bd:fe:d1:df:0d:35: 04:06:a4:6c:4e:4a:03:d8:88:76:b1:58:b6:eb:49:00:e3:e4: 33:ab:6a:79:e7:15:cb:9d:74:a0:30:87:4d:24:e1:6c:92:9e: 2c:7c:9d:9a:86:6a:db:4a:17:4c:97:a5:15:6d:fd:b6:94:cb: 81:1c:95:c9:bf:c5:a4:5b:ef:0e:e4:bd:5e:e0:8e:46:b3:54: 6b:0d:62:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjgr1cmDHlp8OjsGCFpnMCw7LKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNjA0MTYyMDU2MzRaFw0yNjA0MjAwODA0MzRaMDMxMTAvBgNV BAMTKDhEQkVGNzkwQzZCMDMzMzJBNTA5REY2QzEwMUY5MjM2NTQ1RkIxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl/AWlPDpLIQfUYN3ewtYKLlf 3YcyCIS67MtgjzNvLl4RxEMuBsEy05O/j9PPiN8FUGsSSCuMhCteXH1NmifnEFHi AqP1zJ68cyQP+iEecqUNJ8pBcOf/ekrAECh60MqX4xCC52H5N/XHDgZV/WTi79Gk OBRPO3IyhVjt5zeIY4rgflW+k7VjLFeuZivVZSHzqM0ABOfuTqDwAz3fDpptEHhF dDIPQ1gW0trb/wJh6Gm+LNNx+FZerTDyTd8BIGaZuVgMyZ1ewXa2M/Xi25e2C8eH 0kyfwoCzQ5vWadm9mmHn0X+DOHV5bacc2cyB89qTJmyEp5/yrQSjPECbVDiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjb73kMawMzKlCd9sEB+SNlRfsQcwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqbdbmyj9OpcC4s94knChLPAKyeQ5Sv1eZC ETQBniCm1mg7fU/3glQEdIWE7TJI9+TxIZeCNp3ZZnlAPSbDuz4/qUfnEJMcizbu C4qvHhjftMAv0qazZ7mpB/W+ZOfmu/RO8wpmGcXjHPtuHzx6Tyi8XLh464iprLvi qZuepK3hSL8PFya1W4NXqI6YYQfGCTIsFjTQd0z04/WoDi2T28pvuP4CEVL/fLmk UlI3gr3+0d8NNQQGpGxOSgPYiHaxWLbrSQDj5DOrannnFcuddKAwh00k4WySnix8 nZqGattKF0yXpRVt/baUy4Eclcm/xaRb7w7kvV7gjkazVGsNYjI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:48 2026 by rpki-client