$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: FsU2N0T4+SjTBzlndzhY5A5VWIegaGKgREjeMwqEkwQ= Subject key identifier: BB:F3:1A:62:CD:AA:71:98:6A:DD:A6:D4:6B:F7:27:B1:6E:84:DE:30 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 5DF937FEAC4D942179B08557B49A3E2E3F6FB114 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 026B Signing time: Wed 15 Apr 2026 22:40:47 +0000 Manifest this update: Wed 15 Apr 2026 22:35:47 +0000 Manifest next update: Sun 19 Apr 2026 03:06:47 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: gjnjjok4+4fRPPhkor+5MKTcJ8itbilGFOOC/O3mS80=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f9:37:fe:ac:4d:94:21:79:b0:85:57:b4:9a:3e:2e:3f:6f:b1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Apr 15 22:35:47 2026 GMT Not After : Apr 19 03:06:47 2026 GMT Subject: CN=BBF31A62CDAA71986ADDA6D46BF727B16E84DE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:2f:f3:c9:48:5e:fa:9d:1b:08:d7:19:f1: 5b:7e:33:0d:1a:c4:4d:5f:af:f5:85:fd:e2:d8:44: 15:e8:66:eb:c1:36:3b:04:c6:1f:b1:a6:33:f4:eb: c3:4d:0f:25:73:2f:f6:92:e0:bb:08:74:26:94:a3: d7:e8:69:79:fd:29:31:be:5b:9d:1e:52:61:96:59: 38:4d:39:fb:21:3d:8e:c1:51:e3:02:6e:f3:30:f4: 6a:ac:48:2a:99:92:41:d0:29:32:8d:40:b2:d9:0a: 92:30:ca:e8:22:aa:32:08:a2:ec:e1:11:6d:82:6f: 14:24:2b:f1:ca:b7:3c:51:3a:3f:6f:19:de:cf:de: 4f:f7:32:58:5f:bb:47:75:60:d9:3c:bc:52:f9:b6: ae:4f:63:ad:95:39:22:66:9c:90:e2:cc:ca:59:79: e5:89:45:9d:02:cd:ec:63:4e:03:52:05:ec:50:7e: 53:41:79:7b:5e:fa:40:61:63:ca:51:e5:2c:1d:a6: d3:54:87:0a:b1:4f:88:ac:5c:7a:75:49:b1:8d:7b: 3e:ed:b1:4f:65:75:19:c8:70:1f:56:3b:0e:07:ad: 11:09:ce:6d:f0:4f:d9:b9:57:41:81:81:27:05:9c: 19:d2:99:2a:50:1a:7c:69:7e:72:35:8f:e8:07:bd: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F3:1A:62:CD:AA:71:98:6A:DD:A6:D4:6B:F7:27:B1:6E:84:DE:30 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:78:64:e1:d3:21:71:2a:df:71:ca:cf:0c:6d:23:a2:b3: da:ac:0a:3a:24:ab:41:53:33:37:aa:ed:be:90:4f:74:42:25: b4:16:0c:8b:f3:1f:76:e7:03:4e:b6:d7:51:19:33:b8:bc:33: 5c:78:5c:ad:05:16:f2:f6:65:15:e9:35:d9:34:c6:38:ae:d6: fb:4c:df:4f:77:41:0d:da:99:3c:7d:77:1a:3f:1d:26:d1:c7: 70:4d:ba:f0:fc:d0:3c:90:fd:13:3b:f5:bd:63:0c:16:d3:91: 66:4b:17:1d:07:e8:d3:83:9b:dc:a4:e4:9e:28:fc:6a:b3:16: 9f:25:e2:a8:d5:2c:2d:d4:cd:a6:65:ad:88:d0:a0:85:60:0c: ca:e7:fe:bf:e6:1c:44:44:7a:d3:f1:1a:68:4c:ef:1f:ad:42: 76:13:75:b2:8c:78:03:af:27:b0:3a:ef:bd:47:79:91:2e:48: 6c:94:93:f2:bf:11:df:5e:6d:76:55:e8:94:05:6a:65:1d:59: dc:fa:04:e1:93:db:68:c4:f9:31:4e:e9:14:7b:53:c5:c9:cc: 97:2a:45:97:a5:f8:da:7a:70:d6:5f:af:c3:15:8c:01:43:70: 8b:27:e6:53:22:ee:84:14:98:d0:5d:25:58:1e:28:93:f1:a1: bc:fe:ad:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfk3/qxNlCF5sIVXtJo+Lj9vsRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjA0MTUyMjM1NDdaFw0yNjA0MTkwMzA2NDdaMDMxMTAvBgNV BAMTKEJCRjMxQTYyQ0RBQTcxOTg2QUREQTZENDZCRjcyN0IxNkU4NERFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUy/zyUhe+p0bCNcZ8Vt+Mw0a xE1fr/WF/eLYRBXoZuvBNjsExh+xpjP068NNDyVzL/aS4LsIdCaUo9foaXn9KTG+ W50eUmGWWThNOfshPY7BUeMCbvMw9GqsSCqZkkHQKTKNQLLZCpIwyugiqjIIouzh EW2CbxQkK/HKtzxROj9vGd7P3k/3Mlhfu0d1YNk8vFL5tq5PY62VOSJmnJDizMpZ eeWJRZ0CzexjTgNSBexQflNBeXte+kBhY8pR5SwdptNUhwqxT4isXHp1SbGNez7t sU9ldRnIcB9WOw4HrREJzm3wT9m5V0GBgScFnBnSmSpQGnxpfnI1j+gHvVqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/MaYs2qcZhq3abUa/cnsW6E3jAwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvSeGTh0yFxKt9xys8MbSOis9qsCjokq0FT Mzeq7b6QT3RCJbQWDIvzH3bnA06211EZM7i8M1x4XK0FFvL2ZRXpNdk0xjiu1vtM 3093QQ3amTx9dxo/HSbRx3BNuvD80DyQ/RM79b1jDBbTkWZLFx0H6NODm9yk5J4o /GqzFp8l4qjVLC3UzaZlrYjQoIVgDMrn/r/mHEREetPxGmhM7x+tQnYTdbKMeAOv J7A6771HeZEuSGyUk/K/Ed9ebXZV6JQFamUdWdz6BOGT22jE+TFO6RR7U8XJzJcq RZel+Np6cNZfr8MVjAFDcIsn5lMi7oQUmNBdJVgeKJPxobz+rSU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:26 2026 by rpki-client