$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: cmlJya6qyCUUJcPtO65pza1x6BLouf2MTvseS/wtJVo= Subject key identifier: AF:A2:54:24:BA:AD:34:83:4F:CC:05:AC:E8:06:5F:AE:9B:12:50:40 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 66A7EBADBCFF2A4393FCAE5B8A20D0F84536EAC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 02BB Signing time: Wed 15 Apr 2026 21:21:54 +0000 Manifest this update: Wed 15 Apr 2026 21:16:54 +0000 Manifest next update: Sat 18 Apr 2026 22:25:54 +0000 Files and hashes: 1: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) 3: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: nbw3R/XNAZHTCNgOOB0dciOgUDPJPnir3DnGIYtZ7iE=) 4: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a7:eb:ad:bc:ff:2a:43:93:fc:ae:5b:8a:20:d0:f8:45:36:ea:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Apr 15 21:16:54 2026 GMT Not After : Apr 18 22:25:54 2026 GMT Subject: CN=AFA25424BAAD34834FCC05ACE8065FAE9B125040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:84:ba:f4:a8:35:6c:f5:92:af:db:1e:7e: 7d:cd:b4:ba:ec:a3:5f:dc:13:87:47:66:29:f1:89: 78:1a:d9:63:f5:a9:5d:cc:ae:2b:dd:52:c9:0f:6f: b8:be:41:17:3e:01:6a:66:69:f1:be:5a:67:50:d9: 63:8d:18:d9:f1:c1:e3:6b:cd:24:bd:50:c9:41:28: b6:0d:34:df:af:57:ac:e2:2e:8d:fc:86:93:e1:b3: 7e:d7:a5:20:c9:ad:60:e8:d0:d0:71:2c:81:96:d0: d4:9e:8f:f5:b7:ef:af:1e:32:53:e7:4f:67:87:da: 22:d8:b3:de:ba:18:d1:ce:0d:75:ae:62:0a:c5:dc: 5d:c9:30:d8:61:4f:39:96:ce:2e:7b:4d:c9:31:67: 13:6d:6c:9f:2c:a3:01:e1:79:1d:a2:9d:d9:f4:31: ff:9d:9d:b3:3d:58:63:d1:6d:b4:98:94:74:b3:8d: 32:13:9f:64:9f:6d:5d:88:00:96:5b:e4:e6:e0:8e: 09:36:a4:8b:c5:cc:ee:a3:db:75:5b:c7:69:d2:b0: a9:94:b6:bd:5f:6b:09:f8:2d:4a:23:4b:5a:d1:d6: 3c:48:35:43:b8:39:bf:6e:0a:88:da:1e:d4:f1:23: e8:ac:3b:55:23:9d:4e:1f:31:33:3c:61:f1:78:1c: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A2:54:24:BA:AD:34:83:4F:CC:05:AC:E8:06:5F:AE:9B:12:50:40 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c8:22:87:8c:75:1a:dd:55:32:6d:12:7e:65:4f:d6:00:3e: f2:ce:f3:16:5c:e9:a0:8d:78:d8:12:46:47:29:10:d5:ad:25: 52:77:20:ac:27:3e:80:e1:ea:55:c7:49:d0:96:8a:4b:58:49: 70:0b:d8:7f:d6:64:0a:8f:df:66:90:0a:83:04:23:50:05:c4: da:bb:d4:9e:3e:58:f5:6b:41:59:01:5e:3f:7b:1d:0e:05:95: 51:ee:a4:c8:0b:56:4e:80:a8:95:db:96:f7:46:21:f5:8b:bf: d2:83:ce:d8:37:21:35:f8:8c:ad:85:6e:1c:1d:f1:9e:1c:d2: 90:6e:6a:1b:ff:9d:9a:34:df:e8:9b:e1:1f:93:bd:71:fe:03: 3a:21:9c:63:8c:e6:50:84:b0:92:33:a5:a6:df:d8:c8:f2:95: 4a:f2:ac:d8:02:94:7b:93:9f:4d:89:30:49:17:d8:68:f4:bc: 61:c1:f4:61:12:93:4e:75:20:64:ed:a4:62:a0:08:f1:94:b0: 02:ca:59:55:82:52:68:2c:0d:18:08:80:d9:8c:6d:93:d0:d5: 7e:ab:11:e7:03:fa:ea:7a:40:2c:ac:66:d2:a1:53:03:9c:d3: 58:26:83:cb:f3:85:64:26:3f:14:cc:0c:b9:5b:5f:50:23:ae: d5:81:30:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqfrrbz/KkOT/K5biiDQ+EU26skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNjA0MTUyMTE2NTRaFw0yNjA0MTgyMjI1NTRaMDMxMTAvBgNV BAMTKEFGQTI1NDI0QkFBRDM0ODM0RkNDMDVBQ0U4MDY1RkFFOUIxMjUwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oYS69Kg1bPWSr9sefn3NtLrs o1/cE4dHZinxiXga2WP1qV3MrivdUskPb7i+QRc+AWpmafG+WmdQ2WONGNnxweNr zSS9UMlBKLYNNN+vV6ziLo38hpPhs37XpSDJrWDo0NBxLIGW0NSej/W3768eMlPn T2eH2iLYs966GNHODXWuYgrF3F3JMNhhTzmWzi57TckxZxNtbJ8sowHheR2indn0 Mf+dnbM9WGPRbbSYlHSzjTITn2SfbV2IAJZb5Obgjgk2pIvFzO6j23Vbx2nSsKmU tr1fawn4LUojS1rR1jxINUO4Ob9uCojaHtTxI+isO1UjnU4fMTM8YfF4HPa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6JUJLqtNINPzAWs6AZfrpsSUEAwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITIIoeMdRrdVTJtEn5lT9YAPvLO8xZc6aCN eNgSRkcpENWtJVJ3IKwnPoDh6lXHSdCWiktYSXAL2H/WZAqP32aQCoMEI1AFxNq7 1J4+WPVrQVkBXj97HQ4FlVHupMgLVk6AqJXblvdGIfWLv9KDztg3ITX4jK2Fbhwd 8Z4c0pBuahv/nZo03+ib4R+TvXH+AzohnGOM5lCEsJIzpabf2MjylUryrNgClHuT n02JMEkX2Gj0vGHB9GESk051IGTtpGKgCPGUsALKWVWCUmgsDRgIgNmMbZPQ1X6r EecD+up6QCysZtKhUwOc01gmg8vzhWQmPxTMDLlbX1AjrtWBMPc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:48:01 2026 by rpki-client