$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft (raw, json) Hash identifier: rLWFrCQAC2r5IjIibl+LU1FywnYpxi6dF4R0YmIjyGY= Subject key identifier: 80:23:43:E4:BE:39:82:08:50:AE:48:FF:14:78:BC:51:AF:CD:57:F4 Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Certificate serial: 23073B81AB6431C7D39DC096D2A73EAA351F5009 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft Manifest number: 3F Signing time: Sat 18 Apr 2026 19:40:54 +0000 Manifest this update: Sat 18 Apr 2026 19:35:54 +0000 Manifest next update: Wed 22 Apr 2026 07:06:54 +0000 Files and hashes: 1: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl (hash: 9rCaJGgFVuxD9dP9FOY8BdCn4+/jJf6P7T0z7BApAVA=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:07:3b:81:ab:64:31:c7:d3:9d:c0:96:d2:a7:3e:aa:35:1f:50:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Validity Not Before: Apr 18 19:35:54 2026 GMT Not After : Apr 22 07:06:54 2026 GMT Subject: CN=802343E4BE39820850AE48FF1478BC51AFCD57F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:90:d6:5b:a2:65:1b:ec:02:5f:50:33:82: 76:15:12:cd:95:4c:9f:21:be:0d:39:e0:a8:15:db: 05:66:cd:55:0b:01:02:ed:2f:eb:f5:85:58:98:35: a3:09:07:2c:3e:b0:5e:dd:d0:a4:4d:88:e7:9b:3a: a7:61:63:fe:03:ae:e7:2c:4c:cf:de:cd:0b:2a:ee: f7:18:13:6c:6a:4c:f8:9d:be:35:51:9d:a5:5a:88: 99:73:82:6b:d9:97:69:35:4c:8c:6a:40:4e:be:31: cc:79:73:b9:27:a4:66:97:96:59:ce:0f:ac:f2:1e: 6e:39:88:33:ba:59:24:cb:ec:c9:04:66:c2:05:4f: 5c:66:7d:02:26:9a:e8:c9:6a:de:41:7a:84:6a:31: 30:dd:01:ab:d5:f4:b6:19:ce:d1:7a:d5:22:b2:4a: 8f:5e:ff:f9:0f:92:3e:ef:40:1f:6f:ba:b8:a3:e0: d1:f7:2c:49:b2:10:d1:25:01:ff:6a:30:24:04:78: fe:7a:42:f1:97:24:f0:5a:7c:a7:2b:14:3a:a9:8b: 43:5f:9a:34:25:26:9a:05:1e:fe:b7:46:b6:ea:6c: 0d:c1:31:64:9b:d7:7c:69:d4:7a:d2:84:37:be:73: 78:d4:a4:17:1b:b6:40:d3:cb:95:9e:b9:ba:b1:6f: 06:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:43:E4:BE:39:82:08:50:AE:48:FF:14:78:BC:51:AF:CD:57:F4 X509v3 Authority Key Identifier: keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:df:e4:1a:51:0d:d4:16:8b:dd:dc:85:b0:17:03:5a:cf:95: 78:90:53:c0:79:0c:dc:c2:2f:d9:26:c6:89:6f:8a:52:c5:db: 1f:05:e5:ca:05:e2:5b:31:91:45:ae:32:ce:fb:04:ba:ea:7e: 11:cc:cd:8d:46:48:a8:b8:00:fc:97:c6:f4:7d:e4:87:70:99: ba:0d:ff:29:d9:68:7a:6f:8c:12:12:34:4b:04:c4:af:12:f0: f7:09:09:1f:06:7f:4c:2d:4f:e1:76:f7:a5:fd:ff:55:d2:29: 3a:e6:c1:d6:bb:df:4b:ad:67:35:ac:2e:03:57:06:46:a3:7e: 77:e9:98:65:af:59:c9:73:2e:e5:31:2c:2b:e1:a1:e0:24:9d: b3:70:c8:8d:20:b7:7a:fe:c3:06:cf:de:43:1d:5a:7a:01:b9: 54:7f:02:59:7c:19:98:c2:b0:53:3d:72:69:2a:ad:58:eb:92: 07:7f:1c:31:a6:c1:4a:7e:7f:5d:25:e1:3b:3a:8d:e7:20:b5: 4d:a9:d5:41:d4:61:58:61:e8:42:a0:87:19:56:e3:a7:d7:89: 58:59:a6:42:4d:89:25:be:9e:5f:9c:9c:d5:9a:53:67:57:4b: b3:fe:89:cc:d5:1b:da:b5:7a:ab:b3:c4:67:ff:81:44:8e:f2: 75:b9:de:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwc7gatkMcfTncCW0qc+qjUfUAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0 MTM5RjAwRjAeFw0yNjA0MTgxOTM1NTRaFw0yNjA0MjIwNzA2NTRaMDMxMTAvBgNV BAMTKDgwMjM0M0U0QkUzOTgyMDg1MEFFNDhGRjE0NzhCQzUxQUZDRDU3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvP5DWW6JlG+wCX1AzgnYVEs2V TJ8hvg054KgV2wVmzVULAQLtL+v1hViYNaMJByw+sF7d0KRNiOebOqdhY/4Drucs TM/ezQsq7vcYE2xqTPidvjVRnaVaiJlzgmvZl2k1TIxqQE6+Mcx5c7knpGaXllnO D6zyHm45iDO6WSTL7MkEZsIFT1xmfQImmujJat5BeoRqMTDdAavV9LYZztF61SKy So9e//kPkj7vQB9vurij4NH3LEmyENElAf9qMCQEeP56QvGXJPBafKcrFDqpi0Nf mjQlJpoFHv63RrbqbA3BMWSb13xp1HrShDe+c3jUpBcbtkDTy5WeubqxbwahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCND5L45gghQrkj/FHi8Ua/NV/QwHwYDVR0j BBgwFoAUERpW/wRo2sD/9BuC0j8h3UE58A8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2VmMjhhZi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMTFBNTZGRjA0 NjhEQUMwRkZGNDFCODJEMjNGMjFERDQxMzlGMDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0MTM5 RjAwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIx REQ0MTM5RjAwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7f5BpRDdQWi93chbAXA1rPlXiQU8B5DNzC L9kmxolvilLF2x8F5coF4lsxkUWuMs77BLrqfhHMzY1GSKi4APyXxvR95IdwmboN /ynZaHpvjBISNEsExK8S8PcJCR8Gf0wtT+F296X9/1XSKTrmwda730utZzWsLgNX BkajfnfpmGWvWclzLuUxLCvhoeAknbNwyI0gt3r+wwbP3kMdWnoBuVR/All8GZjC sFM9cmkqrVjrkgd/HDGmwUp+f10l4Ts6jecgtU2p1UHUYVhh6EKghxlW46fXiVhZ pkJNiSW+nl+cnNWaU2dXS7P+iczVG9q1equzxGf/gUSO8nW53qE= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:28 2026 by rpki-client