$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: MQUHXkb1plS4rBQ+gy+ux6hfcRos3Crx6fy7v5/FgQA= Subject key identifier: 15:44:B7:47:F5:A6:84:2C:EE:CF:63:C5:EC:15:F7:D3:FB:1B:68:05 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 7C0655FB5B3426285218CBB47C5D0C5221E5CC85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01FC Signing time: Fri 17 Apr 2026 14:01:24 +0000 Manifest this update: Fri 17 Apr 2026 13:56:24 +0000 Manifest next update: Mon 20 Apr 2026 14:52:24 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: zqrtKn4oKUbtDie7V2dCWTumTB9wJ4xxNbRf+4O7PZI=) 2: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:06:55:fb:5b:34:26:28:52:18:cb:b4:7c:5d:0c:52:21:e5:cc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Apr 17 13:56:24 2026 GMT Not After : Apr 20 14:52:24 2026 GMT Subject: CN=1544B747F5A6842CEECF63C5EC15F7D3FB1B6805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:fd:e1:55:a6:00:2e:a5:3c:e8:17:f9:3b: 5c:20:ab:7c:17:a0:63:96:67:a4:9a:5b:1c:c6:bc: 77:19:84:8d:fe:91:18:4d:62:9b:40:5d:b4:c6:b3: 72:f8:48:ee:ad:08:6a:99:ea:cc:85:d1:66:e8:50: a9:cd:6e:c8:62:fd:0a:d7:49:4d:b8:ad:45:74:26: 3c:39:a1:5c:e6:e0:16:3f:b7:b7:50:26:25:e8:fb: 7d:d4:0a:88:41:f8:9d:fe:0e:42:4c:0e:12:b3:d7: e5:e7:7c:08:46:70:88:0e:da:b8:58:c0:d3:89:28: b3:9d:34:43:39:c7:88:24:85:9d:39:11:17:c9:2b: b6:86:ce:ac:33:61:a4:6b:1f:db:19:da:b8:68:97: 55:7c:4c:38:20:76:4e:a9:6c:68:54:45:3b:1a:54: 3d:ac:c8:22:7c:5a:fb:94:a5:de:fc:c5:2a:35:4f: 53:e8:29:ce:a5:bc:68:76:b7:5c:43:c2:a7:a1:13: 38:76:40:ac:eb:3d:52:0e:2b:db:e9:15:b9:f7:2d: 74:93:4f:1d:b3:f1:35:14:19:20:39:b8:58:bb:5a: 06:b1:78:cd:c0:90:22:bd:86:02:15:a5:e7:0a:d9: d9:2b:ae:5f:1e:7c:9d:59:31:c6:6e:10:2c:ba:80: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:44:B7:47:F5:A6:84:2C:EE:CF:63:C5:EC:15:F7:D3:FB:1B:68:05 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f9:72:ca:50:de:85:fd:bc:84:57:11:2e:06:4b:eb:18:b5: d3:06:a4:39:4f:58:96:26:56:7e:17:45:51:11:82:6d:05:4d: d7:f7:05:12:cc:49:42:61:ee:f1:6e:1e:26:a3:4e:62:3f:26: d6:c2:68:99:aa:23:60:81:df:60:78:02:bf:80:1e:0e:73:c0: 32:4a:ee:15:9f:ac:a3:3d:92:52:89:3d:a7:8e:ea:8f:d6:71: de:a6:70:32:19:53:93:8e:0d:40:f4:d1:d1:87:83:ac:59:f5: 2f:74:07:9e:6a:39:7e:33:de:17:cc:ca:65:d0:4e:a7:27:99: 1c:ae:27:60:a7:47:8c:bf:d5:59:25:45:e2:c9:6e:00:f3:33: 4c:76:fd:b6:a2:b1:7b:2a:a3:21:fe:5b:9a:88:c5:81:20:78: 2a:23:ab:5f:17:ad:18:6c:ea:5e:1f:80:e9:9c:77:30:d4:f4: e9:c0:0c:26:99:17:5f:48:6d:4a:e5:65:c2:ab:df:a1:36:e1: 94:22:4f:83:e4:42:80:7e:3a:16:16:28:63:2a:70:32:1b:c4: 45:e4:74:64:27:14:c8:c8:90:4f:b5:48:65:cb:ec:38:e7:50: 40:1d:b7:ee:bc:0b:3d:40:75:d1:3f:71:90:bc:6f:20:a9:29: 3e:e1:7a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAZV+1s0JihSGMu0fF0MUiHlzIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNjA0MTcxMzU2MjRaFw0yNjA0MjAxNDUyMjRaMDMxMTAvBgNV BAMTKDE1NDRCNzQ3RjVBNjg0MkNFRUNGNjNDNUVDMTVGN0QzRkIxQjY4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXo/3hVaYALqU86Bf5O1wgq3wX oGOWZ6SaWxzGvHcZhI3+kRhNYptAXbTGs3L4SO6tCGqZ6syF0WboUKnNbshi/QrX SU24rUV0Jjw5oVzm4BY/t7dQJiXo+33UCohB+J3+DkJMDhKz1+XnfAhGcIgO2rhY wNOJKLOdNEM5x4gkhZ05ERfJK7aGzqwzYaRrH9sZ2rhol1V8TDggdk6pbGhURTsa VD2syCJ8WvuUpd78xSo1T1PoKc6lvGh2t1xDwqehEzh2QKzrPVIOK9vpFbn3LXST Tx2z8TUUGSA5uFi7WgaxeM3AkCK9hgIVpecK2dkrrl8efJ1ZMcZuECy6gCdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUS3R/WmhCzuz2PF7BX30/sbaAUwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID5cspQ3oX9vIRXES4GS+sYtdMGpDlPWJYm Vn4XRVERgm0FTdf3BRLMSUJh7vFuHiajTmI/JtbCaJmqI2CB32B4Ar+AHg5zwDJK 7hWfrKM9klKJPaeO6o/Wcd6mcDIZU5OODUD00dGHg6xZ9S90B55qOX4z3hfMymXQ TqcnmRyuJ2CnR4y/1VklReLJbgDzM0x2/baisXsqoyH+W5qIxYEgeCojq18XrRhs 6l4fgOmcdzDU9OnADCaZF19IbUrlZcKr36E24ZQiT4PkQoB+OhYWKGMqcDIbxEXk dGQnFMjIkE+1SGXL7DjnUEAdt+68Cz1AddE/cZC8byCpKT7hems= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:56 2026 by rpki-client