$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: 1lVMYHe2G5rNr+yPND+k8OOQBcYqODFXaXJzhnXk7ZU= Subject key identifier: 20:96:0C:EE:10:3E:B9:8A:CF:B2:CF:3E:AC:BE:0C:BC:74:F4:27:2A Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 09A582203A878B1ACE7A6841FFCCD4693F2584F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 0156 Signing time: Wed 15 Apr 2026 10:20:01 +0000 Manifest this update: Wed 15 Apr 2026 10:15:01 +0000 Manifest next update: Sat 18 Apr 2026 21:12:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: NbVoKFvZA9x7Z9SpGO7eJhP/PrQvPjMB+U8rXLGAP4o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: w9hQ5rbZfE7IROTeojQ9J4QeF16+cKyoED1FRu521SM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a5:82:20:3a:87:8b:1a:ce:7a:68:41:ff:cc:d4:69:3f:25:84:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Apr 15 10:15:01 2026 GMT Not After : Apr 18 21:12:01 2026 GMT Subject: CN=20960CEE103EB98ACFB2CF3EACBE0CBC74F4272A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:36:2a:f2:23:0d:90:69:d3:42:74:dd:7d: e4:c9:9a:83:10:a7:2d:da:bf:f5:d3:03:5e:65:3b: da:7f:34:c8:90:1e:87:86:fc:ac:a5:1b:eb:73:5d: ca:4a:b0:5c:93:25:e3:df:05:ff:d2:13:5a:bf:94: c3:68:56:b8:5e:2c:eb:25:cf:60:6a:36:9f:da:00: 09:ab:6a:f1:3f:9f:fc:a5:32:95:75:2b:ff:ca:6d: f6:78:03:98:f6:45:b7:fc:51:6e:97:e0:ed:81:c0: 6d:61:63:c2:46:62:99:d6:5f:1d:42:d4:50:30:65: 67:a2:ec:a1:20:e5:2a:63:29:30:9d:13:be:a3:ad: f8:29:c8:f3:c5:ce:a9:38:57:c5:bb:f6:e2:de:ee: c2:8c:d0:8d:8d:a4:d1:72:e8:e3:25:fa:ef:87:2b: 4d:51:83:63:15:6b:4f:26:81:20:70:88:71:f1:90: 97:9f:f2:0e:c0:3a:fc:48:cc:46:f2:a2:95:08:2f: d0:30:4e:68:87:23:41:9f:8f:78:42:d1:52:33:c8: 47:a9:8f:ec:4e:d3:60:d6:64:0d:bc:fa:88:0e:96: 84:63:54:1c:b7:7f:c8:74:99:5b:1c:a2:3d:ba:9a: 63:b8:d6:c5:f0:99:0d:55:29:df:45:d4:14:21:f8: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:0C:EE:10:3E:B9:8A:CF:B2:CF:3E:AC:BE:0C:BC:74:F4:27:2A X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:ff:8e:06:2e:a8:70:04:f1:3b:b9:f7:89:03:f0:34:9f: eb:ad:64:89:37:9d:a6:9c:2c:67:97:a8:17:a9:c8:ef:17:d6: fb:8a:ee:65:cb:d1:fa:91:db:23:9a:29:d3:6f:f2:b1:68:41: 10:a6:4e:8c:87:8b:76:08:49:ee:94:55:78:53:e1:90:43:19: 7a:f0:2b:e7:b8:30:b9:9f:fc:70:91:f8:98:0a:dc:e1:7f:c3: 9b:e5:bd:17:98:af:b6:ca:e4:75:cd:cc:61:fd:17:a2:13:52: 93:ee:94:00:9b:e0:3a:66:79:7d:a6:2d:de:a8:66:db:96:68: 9e:c5:ce:34:40:5a:97:7a:55:5f:55:d1:b2:d0:a7:d9:11:ab: 0d:6d:47:4f:34:c3:15:a0:87:1c:c4:83:1a:16:72:b6:5b:f3: 17:bc:c0:d1:05:65:75:f5:03:ad:28:01:11:c0:2c:06:88:35: 25:01:95:65:b2:67:b4:1f:a1:2c:86:32:d3:ba:9c:c9:87:a9: 67:8a:c2:17:a5:86:1d:31:6c:b6:68:75:e8:fe:e0:06:9a:d1: 28:c7:0b:01:41:ac:6f:ce:73:92:32:bf:f1:d6:c0:5e:13:c3: 92:39:00:db:91:1e:85:29:8a:66:d1:83:d6:a0:dd:0f:05:fa: 5a:71:cf:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaWCIDqHixrOemhB/8zUaT8lhPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNjA0MTUxMDE1MDFaFw0yNjA0MTgyMTEyMDFaMDMxMTAvBgNV BAMTKDIwOTYwQ0VFMTAzRUI5OEFDRkIyQ0YzRUFDQkUwQ0JDNzRGNDI3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWTYq8iMNkGnTQnTdfeTJmoMQ py3av/XTA15lO9p/NMiQHoeG/KylG+tzXcpKsFyTJePfBf/SE1q/lMNoVrheLOsl z2BqNp/aAAmravE/n/ylMpV1K//KbfZ4A5j2Rbf8UW6X4O2BwG1hY8JGYpnWXx1C 1FAwZWei7KEg5SpjKTCdE76jrfgpyPPFzqk4V8W79uLe7sKM0I2NpNFy6OMl+u+H K01Rg2MVa08mgSBwiHHxkJef8g7AOvxIzEbyopUIL9AwTmiHI0Gfj3hC0VIzyEep j+xO02DWZA28+ogOloRjVBy3f8h0mVscoj26mmO41sXwmQ1VKd9F1BQh+LAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJYM7hA+uYrPss8+rL4MvHT0JyowHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsp/44GLqhwBPE7ufeJA/A0n+utZIk3naac LGeXqBepyO8X1vuK7mXL0fqR2yOaKdNv8rFoQRCmToyHi3YISe6UVXhT4ZBDGXrw K+e4MLmf/HCR+JgK3OF/w5vlvReYr7bK5HXNzGH9F6ITUpPulACb4DpmeX2mLd6o ZtuWaJ7FzjRAWpd6VV9V0bLQp9kRqw1tR080wxWghxzEgxoWcrZb8xe8wNEFZXX1 A60oARHALAaINSUBlWWyZ7QfoSyGMtO6nMmHqWeKwhelhh0xbLZodej+4Aaa0SjH CwFBrG/Oc5Iyv/HWwF4Tw5I5ANuRHoUpimbRg9ag3Q8F+lpxz2w= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:39 2026 by rpki-client