$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: aZiab/eDZLcUlOLb67rnfVjxAng3SjSxQ083mKXngGI= Subject key identifier: F3:A3:97:A7:EC:5B:D2:96:CE:9F:6B:16:AA:24:5A:AB:66:BD:9B:EE Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 2CD04103581A4A4B575C29AA33A1BFF62EE4C76B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 10:30:51 +0000 Manifest this update: Fri 17 Apr 2026 10:25:51 +0000 Manifest next update: Mon 20 Apr 2026 17:10:51 +0000 Files and hashes: 1: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 2: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 3: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: Zk2SX8IMFK2Exi4GknOoic1sU3sqD/IWjI3W6ocuSyg=) 4: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 5: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 7: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 8: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d0:41:03:58:1a:4a:4b:57:5c:29:aa:33:a1:bf:f6:2e:e4:c7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Apr 17 10:25:51 2026 GMT Not After : Apr 20 17:10:51 2026 GMT Subject: CN=F3A397A7EC5BD296CE9F6B16AA245AAB66BD9BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:de:0f:a8:4d:8c:01:b8:16:3c:58:81:bc: 89:86:7a:ee:7c:d8:de:76:73:89:98:4d:83:a3:9d: 4c:3d:f9:bd:20:97:9c:96:8a:2e:a8:05:66:b3:e0: ad:f4:30:72:3b:7c:86:0f:ab:ee:d0:40:59:7a:f6: ca:63:95:41:d7:40:59:a2:cf:83:40:74:53:62:4c: be:a3:a9:d2:b0:2c:5f:98:6b:29:17:9d:1f:78:c8: e3:14:09:13:6a:68:55:f7:aa:e0:ba:ce:0f:f1:c6: 16:ed:fd:a4:3d:59:c8:67:14:dd:f0:33:b8:43:a1: 7c:a7:2a:13:7f:55:47:90:2d:f3:05:40:05:c7:aa: cb:43:74:5e:3a:b2:32:b1:4e:44:46:e3:c7:30:d8: aa:aa:ff:a1:fc:03:7c:3d:8a:6e:4c:08:41:23:64: d5:48:47:a8:a1:3d:9f:77:4f:6c:85:b3:47:85:cb: e7:0c:b9:a8:c5:a9:70:8e:42:87:99:ac:92:6c:70: 2d:38:3e:cc:b4:e6:38:d9:39:53:ad:0d:96:9c:f3: 40:17:29:d1:04:6f:28:e3:4b:03:59:c0:8a:ab:37: 80:c6:df:cf:04:e8:12:ac:ab:97:96:29:ff:51:21: b9:e2:b0:8e:12:d9:e1:c3:33:e6:87:c2:e7:1c:a7: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A3:97:A7:EC:5B:D2:96:CE:9F:6B:16:AA:24:5A:AB:66:BD:9B:EE X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8e:73:32:a9:d9:75:05:9c:36:6e:05:0b:6b:f9:25:fc:be: 86:45:0e:c2:ef:8f:cd:00:4b:0c:4c:53:06:da:a6:7d:bb:37: 87:a6:06:16:84:bb:0a:f4:3d:f7:d5:51:23:cc:50:d2:2e:2c: 92:4b:96:7a:c3:13:ed:ba:2e:83:c1:cd:1c:cb:70:0d:64:fe: 7a:6c:ec:26:38:f9:93:9a:bd:fa:98:60:18:85:8a:27:98:3d: 3b:76:d0:f6:ba:46:71:e7:5c:99:d3:d8:d7:b6:b7:c2:0a:22: 46:75:1a:b9:12:76:99:f9:f3:96:e9:6e:dd:89:20:da:9a:8e: f1:e0:39:b6:2e:7a:2c:9c:62:4e:f7:8f:f5:78:67:07:ea:4e: 7a:90:57:d2:ba:32:e6:38:8c:7d:c5:bd:f4:a7:24:86:b6:9d: 4d:cf:0b:87:05:9c:1a:34:2e:08:fb:3a:4c:e0:d6:4d:c8:c6: 0e:ce:07:35:4a:d0:73:33:91:eb:37:fc:61:0f:06:cb:6f:36: ee:a1:ce:89:9c:53:40:d7:52:ca:80:98:0b:84:72:3e:de:e2: 44:b5:8e:24:d8:99:3e:04:54:f8:7f:cb:fd:4b:cf:e8:78:b4: 15:d3:c1:38:e7:37:2d:c5:7d:34:aa:02:d4:f5:43:aa:d5:6f: 37:73:fc:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNBBA1gaSktXXCmqM6G/9i7kx2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNjA0MTcxMDI1NTFaFw0yNjA0MjAxNzEwNTFaMDMxMTAvBgNV BAMTKEYzQTM5N0E3RUM1QkQyOTZDRTlGNkIxNkFBMjQ1QUFCNjZCRDlCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpc94PqE2MAbgWPFiBvImGeu58 2N52c4mYTYOjnUw9+b0gl5yWii6oBWaz4K30MHI7fIYPq+7QQFl69spjlUHXQFmi z4NAdFNiTL6jqdKwLF+YaykXnR94yOMUCRNqaFX3quC6zg/xxhbt/aQ9WchnFN3w M7hDoXynKhN/VUeQLfMFQAXHqstDdF46sjKxTkRG48cw2Kqq/6H8A3w9im5MCEEj ZNVIR6ihPZ93T2yFs0eFy+cMuajFqXCOQoeZrJJscC04Psy05jjZOVOtDZac80AX KdEEbyjjSwNZwIqrN4DG388E6BKsq5eWKf9RIbnisI4S2eHDM+aHwuccp4B3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86OXp+xb0pbOn2sWqiRaq2a9m+4wHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOOczKp2XUFnDZuBQtr+SX8voZFDsLvj80A SwxMUwbapn27N4emBhaEuwr0PffVUSPMUNIuLJJLlnrDE+26LoPBzRzLcA1k/nps 7CY4+ZOavfqYYBiFiieYPTt20Pa6RnHnXJnT2Ne2t8IKIkZ1GrkSdpn585bpbt2J INqajvHgObYueiycYk73j/V4ZwfqTnqQV9K6MuY4jH3FvfSnJIa2nU3PC4cFnBo0 Lgj7Okzg1k3Ixg7OBzVK0HMzkes3/GEPBstvNu6hzomcU0DXUsqAmAuEcj7e4kS1 jiTYmT4EVPh/y/1Lz+h4tBXTwTjnNy3FfTSqAtT1Q6rVbzdz/Hw= -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:38 2026 by rpki-client