$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: d4tyYrZ1TLX9xqhhbcCccptLaB8FlqweuKbIpuQME3s= Subject key identifier: 85:F4:74:6C:4D:26:99:A5:06:E1:80:98:22:1B:F7:A1:93:32:8B:DC Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 717B2037820FC9AD6AA9FA6B736A4CC5A57F53EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03FD Signing time: Fri 17 Apr 2026 16:42:20 +0000 Manifest this update: Fri 17 Apr 2026 16:37:20 +0000 Manifest next update: Mon 20 Apr 2026 22:56:20 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=) 2: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: UuTu7e3+zWAM3tqzM1lDC6GDGKFz8QAZ3rF08nv/dYo=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: n7ownWEIH0rA0SfQVLVJMCLmB6VqRirtLy9VqmlyXDg=) 4: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: xdErjCfMk966tDU4iQnRJbOhsmBX3IXD1cFh9Iu8PEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:20:37:82:0f:c9:ad:6a:a9:fa:6b:73:6a:4c:c5:a5:7f:53:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Apr 17 16:37:20 2026 GMT Not After : Apr 20 22:56:20 2026 GMT Subject: CN=85F4746C4D2699A506E18098221BF7A193328BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:53:47:7e:80:a3:d5:19:9d:a8:dd:cf:d1: 76:73:7e:78:a8:4a:55:bf:7e:80:dd:f8:6e:30:31: 64:82:fe:3b:14:5b:f2:8a:f7:b3:58:f1:a6:df:4d: 15:be:3e:b6:1c:ae:b5:2a:7e:0f:d5:05:20:b8:3e: 36:11:b4:4f:13:76:fc:43:3e:b4:46:52:a9:51:41: 41:3c:9e:70:be:b4:86:2b:bf:b6:cb:1b:b9:0a:b3: a6:44:e7:97:fa:d3:fa:8a:08:99:0a:c6:0f:58:ab: 61:61:df:99:e8:a9:0a:60:56:d8:ff:84:cd:55:2c: ba:68:81:cf:21:02:99:1f:eb:5e:ac:d7:cf:f6:e4: 04:bb:3b:da:44:fe:1c:69:e6:c9:2e:c6:99:dc:29: 9d:3d:31:38:2b:a0:b3:21:03:f7:19:db:bb:d8:dc: 26:8d:c1:8a:70:69:18:a1:4f:29:eb:e8:ce:b2:cc: 7f:ad:8c:d2:5b:fe:79:59:30:da:4c:fd:4a:c6:66: c2:90:42:72:fa:19:5b:7e:cd:8b:05:f2:24:af:29: 4b:0e:af:34:dd:83:bb:b1:b4:b2:06:2b:5e:32:a1: 14:a0:22:90:f4:fc:ee:9a:6e:ce:4d:35:32:78:b6: 98:92:f5:e4:99:36:d9:f8:b9:45:2e:10:47:1b:36: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:74:6C:4D:26:99:A5:06:E1:80:98:22:1B:F7:A1:93:32:8B:DC X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0d:88:81:0b:d4:3e:87:40:c9:79:81:b2:00:19:e6:27:e8: 34:8c:39:74:77:19:84:8f:77:a8:44:eb:b4:6b:05:a8:1d:83: ca:ee:c8:70:48:1f:17:c0:d5:e7:97:3a:52:f8:77:18:0d:0d: 6e:7f:2e:23:26:fe:39:ca:a6:33:3e:5c:ad:ed:a5:64:1d:f0: 2f:3d:7e:e9:0c:e2:fd:6a:5a:33:3c:22:04:5a:18:96:18:00: 86:97:d7:78:66:5a:ca:1c:e0:18:07:57:32:3a:08:fd:d7:80: a7:c2:d3:64:02:37:22:15:35:52:00:ca:aa:5e:b5:b2:b5:6f: 22:85:23:c8:ae:6e:ee:80:9c:dc:af:6b:fb:b0:5e:fb:91:29: bd:40:be:4b:e9:f5:e2:78:a6:ca:d6:f4:3f:cf:d1:66:ae:cf: e5:9c:c2:96:7f:a9:c5:0c:d6:cc:13:e1:1b:f5:a0:a2:8d:90: 0a:d4:36:52:76:4c:03:8d:f4:76:27:a7:51:e7:45:ca:3d:35: 70:a9:57:3c:f7:80:ce:fe:14:be:c3:df:8a:1e:71:c1:0c:96: 95:1e:93:8a:44:7e:40:05:58:87:36:f6:f0:e7:08:d6:c4:ff: 70:0e:48:af:9d:ba:e8:b6:a7:ec:e5:ff:53:6c:1c:4d:f6:a6: de:57:3e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXsgN4IPya1qqfprc2pMxaV/U+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNjA0MTcxNjM3MjBaFw0yNjA0MjAyMjU2MjBaMDMxMTAvBgNV BAMTKDg1RjQ3NDZDNEQyNjk5QTUwNkUxODA5ODIyMUJGN0ExOTMzMjhCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vFNHfoCj1RmdqN3P0XZzfnio SlW/foDd+G4wMWSC/jsUW/KK97NY8abfTRW+PrYcrrUqfg/VBSC4PjYRtE8TdvxD PrRGUqlRQUE8nnC+tIYrv7bLG7kKs6ZE55f60/qKCJkKxg9Yq2Fh35noqQpgVtj/ hM1VLLpogc8hApkf616s18/25AS7O9pE/hxp5skuxpncKZ09MTgroLMhA/cZ27vY 3CaNwYpwaRihTynr6M6yzH+tjNJb/nlZMNpM/UrGZsKQQnL6GVt+zYsF8iSvKUsO rzTdg7uxtLIGK14yoRSgIpD0/O6abs5NNTJ4tpiS9eSZNtn4uUUuEEcbNmMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhfR0bE0mmaUG4YCYIhv3oZMyi9wwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMNiIEL1D6HQMl5gbIAGeYn6DSMOXR3GYSP d6hE67RrBagdg8ruyHBIHxfA1eeXOlL4dxgNDW5/LiMm/jnKpjM+XK3tpWQd8C89 fukM4v1qWjM8IgRaGJYYAIaX13hmWsoc4BgHVzI6CP3XgKfC02QCNyIVNVIAyqpe tbK1byKFI8iubu6AnNyva/uwXvuRKb1Avkvp9eJ4psrW9D/P0Wauz+WcwpZ/qcUM 1swT4Rv1oKKNkArUNlJ2TAON9HYnp1HnRco9NXCpVzz3gM7+FL7D34oeccEMlpUe k4pEfkAFWIc29vDnCNbE/3AOSK+duui2p+zl/1NsHE32pt5XPlc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:34:33 2026 by rpki-client