$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft File: 542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json) Hash identifier: sUHXkv6fDZtQVrnEaUZG10SWJwtzssCoXOQYHwCHzUM= Subject key identifier: 20:C2:1C:1B:26:0A:A6:69:E4:16:D2:C1:19:4E:C9:99:1C:0D:6E:4C Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF Certificate issuer: /CN=542851974B72056B3D43792A5ED83E94DA8583CF Certificate serial: 3D2E6042E8FF822B1FF9E6613DE98B46037F25F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft Manifest number: 019A Signing time: Fri 17 Apr 2026 01:20:52 +0000 Manifest this update: Fri 17 Apr 2026 01:15:52 +0000 Manifest next update: Mon 20 Apr 2026 03:05:52 +0000 Files and hashes: 1: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: m0i45pCp/4Jx8iJ05mMVwPhu4CRzJcV5a+YUcDB/2nc=) 2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: 698jR3jKZ8pHoaDchjQqCam2SnsQK52skK3UhMYukls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2e:60:42:e8:ff:82:2b:1f:f9:e6:61:3d:e9:8b:46:03:7f:25:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF Validity Not Before: Apr 17 01:15:52 2026 GMT Not After : Apr 20 03:05:52 2026 GMT Subject: CN=20C21C1B260AA669E416D2C1194EC9991C0D6E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:06:19:bf:da:15:2f:eb:2e:84:5f:07:b8: 21:d9:c1:bd:39:53:aa:8e:d7:f1:57:a5:a8:a5:3a: 5b:d8:ed:93:8e:d4:5c:cf:7a:cd:da:07:7d:97:bd: 9e:d3:72:dc:bd:75:17:b6:61:df:0e:18:cf:33:94: 6b:98:46:d0:37:b2:4a:51:31:14:66:43:b6:0d:60: 4c:d2:6d:21:cc:e0:64:f2:da:b5:aa:bc:d0:53:d4: 9f:33:22:7a:63:c9:50:fb:c0:1d:8c:fe:7a:21:48: eb:b2:dc:7c:75:7d:0c:0d:77:8d:b3:72:e8:63:48: c4:89:11:2e:c2:d0:f3:0e:6a:8a:02:e9:20:10:c2: 4d:d7:ff:8c:a9:24:17:38:9d:8c:d4:f5:38:02:7c: bc:c9:9b:0e:77:c0:30:0d:8a:b5:1b:36:a6:80:51: 64:ba:7d:13:0a:15:a9:9e:fa:90:72:34:c8:9e:cf: bf:47:ef:07:81:08:11:89:c5:8e:20:8c:af:7b:e4: 4f:2c:76:fc:29:b7:05:39:17:91:ba:ab:d7:a3:54: 1c:e7:ae:34:50:2c:4b:08:2c:23:a7:4b:e0:e7:a1: 13:f1:48:48:6e:8d:1f:e2:54:7e:f5:29:7d:63:4f: 63:6e:e5:d9:f1:94:8b:a5:ee:12:18:ad:75:fc:a9: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C2:1C:1B:26:0A:A6:69:E4:16:D2:C1:19:4E:C9:99:1C:0D:6E:4C X509v3 Authority Key Identifier: keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a2:78:40:60:25:5e:fd:08:b2:db:b9:b9:38:80:9c:f3:da: a4:57:65:55:44:0d:2d:00:bd:e3:9c:5e:85:80:24:d6:2d:bd: c3:47:97:a6:44:e8:f4:f8:da:8b:e6:9f:8a:34:bb:8c:91:4a: 60:80:d3:06:3b:c6:68:fa:b3:db:7e:4a:01:e5:cc:43:a7:9b: 8c:49:ac:a0:1b:85:59:43:fe:8c:0a:da:51:c8:aa:85:5a:e6: 5a:42:9f:01:00:01:32:9b:42:e5:a0:e5:02:3e:65:81:4a:76: 84:7d:2f:e4:8a:c6:d2:6e:48:29:b3:b8:e8:d5:ab:b6:8e:7c: bc:b8:cd:82:73:cb:c0:6b:2b:4f:c3:69:43:67:12:44:02:81: 48:9c:89:dd:13:34:0d:cd:c3:1a:c7:b6:b4:a1:dd:54:0e:d0: 0e:39:ab:ab:30:4f:ee:32:6e:96:67:26:a6:2f:95:58:7d:b3: 4c:89:fa:83:96:2b:dc:1c:66:1d:d0:45:e8:94:b2:b0:c0:18: 09:60:00:f1:2e:f1:58:df:6d:14:22:57:8f:2c:37:4f:4a:ba: 85:1c:bc:bd:31:19:0c:58:f3:8f:63:6b:e2:37:63:54:50:6f: 4b:37:81:55:94:23:c1:24:e6:92:47:d7:86:8d:11:05:32:65: 16:bf:85:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPS5gQuj/gisf+eZhPemLRgN/JfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTRE QTg1ODNDRjAeFw0yNjA0MTcwMTE1NTJaFw0yNjA0MjAwMzA1NTJaMDMxMTAvBgNV BAMTKDIwQzIxQzFCMjYwQUE2NjlFNDE2RDJDMTE5NEVDOTk5MUMwRDZFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YQYZv9oVL+suhF8HuCHZwb05 U6qO1/FXpailOlvY7ZOO1FzPes3aB32XvZ7Tcty9dRe2Yd8OGM8zlGuYRtA3skpR MRRmQ7YNYEzSbSHM4GTy2rWqvNBT1J8zInpjyVD7wB2M/nohSOuy3Hx1fQwNd42z cuhjSMSJES7C0PMOaooC6SAQwk3X/4ypJBc4nYzU9TgCfLzJmw53wDANirUbNqaA UWS6fRMKFame+pByNMiez79H7weBCBGJxY4gjK975E8sdvwptwU5F5G6q9ejVBzn rjRQLEsILCOnS+DnoRPxSEhujR/iVH71KX1jT2Nu5dnxlIul7hIYrXX8qfhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIMIcGyYKpmnkFtLBGU7JmRwNbkwwHwYDVR0j BBgwFoAUVChRl0tyBWs9Q3kqXtg+lNqFg88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzM1ZTE1Zi1kNDQ5LTQ2ZDgtYmUwZS04NWUzODliZWRjNWUvMC81NDI4NTE5NzRC NzIwNTZCM0Q0Mzc5MkE1RUQ4M0U5NERBODU4M0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTREQTg1 ODNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNF OTREQTg1ODNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWieEBgJV79CLLbubk4gJzz2qRXZVVEDS0A veOcXoWAJNYtvcNHl6ZE6PT42ovmn4o0u4yRSmCA0wY7xmj6s9t+SgHlzEOnm4xJ rKAbhVlD/owK2lHIqoVa5lpCnwEAATKbQuWg5QI+ZYFKdoR9L+SKxtJuSCmzuOjV q7aOfLy4zYJzy8BrK0/DaUNnEkQCgUicid0TNA3NwxrHtrSh3VQO0A45q6swT+4y bpZnJqYvlVh9s0yJ+oOWK9wcZh3QReiUsrDAGAlgAPEu8VjfbRQiV48sN09KuoUc vL0xGQxY849ja+I3Y1RQb0s3gVWUI8Ek5pJH14aNEQUyZRa/hfg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:05:19 2026 by rpki-client