$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: mOq4nHTZUsHjayYAzX7CpJMCIt3OV6cIWdlYtc2MUQg= Subject key identifier: 3B:AD:6D:48:4E:8A:C9:E9:0B:A9:C1:E1:CB:DF:8F:3B:79:83:E0:EB Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 0CB995CF49B073353E8E2CA69D8876533B4E9C9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 027F Signing time: Fri 17 Apr 2026 07:20:59 +0000 Manifest this update: Fri 17 Apr 2026 07:15:59 +0000 Manifest next update: Mon 20 Apr 2026 07:31:59 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 2: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: B8GN4ZbR8uRsjchEMqoXR97d9AhOTZeLuTjW2Xzj494=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b9:95:cf:49:b0:73:35:3e:8e:2c:a6:9d:88:76:53:3b:4e:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Apr 17 07:15:59 2026 GMT Not After : Apr 20 07:31:59 2026 GMT Subject: CN=3BAD6D484E8AC9E90BA9C1E1CBDF8F3B7983E0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:34:02:0f:a5:09:97:95:d1:9c:4d:74:51: e9:39:40:5f:8b:67:7b:e3:3e:9c:82:7d:7f:ce:2b: 8a:b5:f9:ce:28:32:8b:bd:ed:95:9d:17:02:72:3b: 3e:e6:34:e1:6d:cb:78:c6:23:f9:3d:53:97:93:6f: 54:f3:f5:85:5b:80:97:ca:87:3c:2a:e7:ea:4a:e7: 27:b1:d6:be:8e:24:ab:4c:a8:44:c3:fa:eb:06:fb: aa:a8:9d:20:20:23:dc:e1:19:c6:75:7b:82:0b:6d: 1f:14:10:a1:60:a0:89:a6:6d:d8:8d:29:5b:67:72: 2f:44:a2:e2:4e:b0:46:d7:55:26:6d:38:62:90:9f: f7:3b:3e:6b:74:32:12:43:19:1c:59:c3:c5:d2:e2: cc:7c:58:45:56:e5:32:cd:91:81:66:62:45:60:fc: 4f:3f:07:e1:2b:55:7a:51:ec:b0:9b:0f:6c:f6:e5: 0a:74:88:1e:ca:75:c1:54:21:da:64:d8:5b:7f:d6: d4:3a:c7:88:70:4f:a3:50:9a:ed:fc:55:7b:e7:4a: b4:37:8d:79:a0:7c:27:1c:52:0d:5d:13:db:d8:23: 7a:83:fe:68:d7:72:fb:c3:4e:31:a4:2d:3a:82:d7: 9f:d1:6d:a9:c1:a2:70:b2:d3:c4:9d:ba:5b:eb:dd: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:6D:48:4E:8A:C9:E9:0B:A9:C1:E1:CB:DF:8F:3B:79:83:E0:EB X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:21:cb:4d:03:77:24:70:f9:df:90:15:5f:98:1e:28:e7:40: c1:4f:c7:ac:6e:78:ab:b4:65:38:cf:1a:b0:6a:78:d1:05:cd: d0:bd:d9:4c:a4:cc:d6:93:d0:a1:bf:f7:51:da:48:15:60:85: e3:e5:87:4f:60:7c:97:1e:c6:61:4a:2d:2d:bb:88:20:4c:96: de:d6:49:9f:cf:11:0f:21:30:68:31:31:33:85:fe:39:d7:b4: e8:fd:c5:c8:63:67:5d:8d:e5:1e:65:f5:66:69:e4:86:a4:5d: eb:ec:b4:40:21:a7:23:2e:08:af:f9:6e:ca:73:e1:61:33:e9: 7c:8c:3d:b1:c8:7b:eb:81:ce:89:85:72:16:91:e4:58:e6:fe: 0c:dd:ec:8e:64:1c:75:33:89:f7:f2:ab:a2:1d:5f:08:8d:ea: 7f:f8:3f:1e:00:60:5b:0c:60:aa:31:6d:e3:ba:02:7d:c6:fe: 70:40:6a:5d:65:0e:70:42:da:32:84:a8:dd:29:b4:8e:60:9b: 40:f2:ed:ad:8b:de:68:5d:82:94:ec:5d:b0:c8:54:e1:89:29: 8c:37:51:ed:e7:ba:c0:ca:df:53:4f:12:4a:50:e2:fb:78:08: 56:ee:4c:93:24:94:46:f8:de:cc:39:25:ed:eb:c9:60:68:32: 09:43:6f:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLmVz0mwczU+jiymnYh2UztOnJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNjA0MTcwNzE1NTlaFw0yNjA0MjAwNzMxNTlaMDMxMTAvBgNV BAMTKDNCQUQ2RDQ4NEU4QUM5RTkwQkE5QzFFMUNCREY4RjNCNzk4M0UwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznzQCD6UJl5XRnE10Uek5QF+L Z3vjPpyCfX/OK4q1+c4oMou97ZWdFwJyOz7mNOFty3jGI/k9U5eTb1Tz9YVbgJfK hzwq5+pK5yex1r6OJKtMqETD+usG+6qonSAgI9zhGcZ1e4ILbR8UEKFgoImmbdiN KVtnci9EouJOsEbXVSZtOGKQn/c7Pmt0MhJDGRxZw8XS4sx8WEVW5TLNkYFmYkVg /E8/B+ErVXpR7LCbD2z25Qp0iB7KdcFUIdpk2Ft/1tQ6x4hwT6NQmu38VXvnSrQ3 jXmgfCccUg1dE9vYI3qD/mjXcvvDTjGkLTqC15/RbanBonCy08Sdulvr3RZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO61tSE6KyekLqcHhy9+PO3mD4OswHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADohy00DdyRw+d+QFV+YHijnQMFPx6xueKu0 ZTjPGrBqeNEFzdC92UykzNaT0KG/91HaSBVghePlh09gfJcexmFKLS27iCBMlt7W SZ/PEQ8hMGgxMTOF/jnXtOj9xchjZ12N5R5l9WZp5IakXevstEAhpyMuCK/5bspz 4WEz6XyMPbHIe+uBzomFchaR5Fjm/gzd7I5kHHUziffyq6IdXwiN6n/4Px4AYFsM YKoxbeO6An3G/nBAal1lDnBC2jKEqN0ptI5gm0Dy7a2L3mhdgpTsXbDIVOGJKYw3 Ue3nusDK31NPEkpQ4vt4CFbuTJMklEb43sw5Je3ryWBoMglDb3c= -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:00 2026 by rpki-client