$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: Dw841/elA6pvtRRSJkVW4lhpiJU/io6TPlWNt7XoozQ= Subject key identifier: 73:E0:45:E6:FF:6B:22:12:C2:85:67:AE:6C:06:E6:48:59:F5:36:B6 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 3B59D668D1ADD768FFAE2CFD16A5B850029056E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 026D Signing time: Fri 17 Apr 2026 00:42:41 +0000 Manifest this update: Fri 17 Apr 2026 00:37:41 +0000 Manifest next update: Mon 20 Apr 2026 09:37:41 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: h9dnF3KOw12yt6fcsAbVmRkmtSJxVLoM69P1BMcAcZ8=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: RmcTSNRb4aZHsTyIQG1pExZoYxPr3P86MsdiwAWVKTA=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: y+iKNFKKHbs0CSJEt1lYsgu6qhzfE0PgaZ6d5ep/InE=) 4: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: 3Ifg4o0wPphvUUVAERULCgZrQ/AcxTaRs1iLEEcDXgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:59:d6:68:d1:ad:d7:68:ff:ae:2c:fd:16:a5:b8:50:02:90:56:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Apr 17 00:37:41 2026 GMT Not After : Apr 20 09:37:41 2026 GMT Subject: CN=73E045E6FF6B2212C28567AE6C06E64859F536B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:be:4c:89:29:c9:bd:ce:2f:21:cb:6e:7f: eb:5d:8c:46:f5:4f:24:89:53:fa:63:96:6c:8d:9b: 60:8e:14:e4:e7:cb:4a:93:01:d8:49:6c:ae:8a:b9: ff:cc:8c:a1:39:12:3e:a8:bf:87:ab:dc:97:b1:99: 03:8a:24:d1:7a:8f:6f:4e:e4:68:ce:56:b9:c9:1d: 3f:d4:ea:d6:d5:9e:60:7f:a2:54:55:d3:3f:2f:77: 71:a7:d1:fa:d0:16:cd:09:b1:ff:73:09:e7:72:1c: 7e:57:47:00:44:c8:c1:65:68:d2:1e:e7:c6:ce:4d: 35:de:46:d1:3d:d6:d1:46:e9:57:24:27:d3:14:f7: 75:22:b0:fe:f6:fa:47:5c:e4:17:97:b7:bd:54:63: ce:29:80:47:0c:1c:8d:04:87:a2:b2:81:4f:3c:39: 48:51:a1:b9:77:40:4b:ac:f4:e0:2b:8d:43:0f:4e: 3c:70:8e:09:fd:a8:2d:bc:9f:4f:44:81:e5:ef:1e: 70:9f:66:a0:11:0d:e1:df:4e:11:1c:f0:36:c2:be: 24:c7:3e:82:54:ac:f3:00:34:98:87:06:04:f7:76: 3f:5f:6b:c7:3c:f7:ef:c0:0b:9f:36:7c:0d:3a:b2: f0:9f:e7:8f:90:af:70:92:77:32:0a:82:7f:5a:13: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E0:45:E6:FF:6B:22:12:C2:85:67:AE:6C:06:E6:48:59:F5:36:B6 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:90:58:26:1d:5b:ac:11:93:8c:97:9c:80:19:6f:74:8c:94: 46:14:90:0d:04:34:6d:6b:58:ba:b7:45:f7:6f:b6:60:49:64: 29:91:8b:bb:c3:6c:62:95:fd:4a:0e:3a:71:08:67:bd:22:52: b2:29:46:f8:d8:a2:16:94:2e:53:a1:2b:57:c5:d3:57:90:bf: de:19:45:bc:3b:6b:93:1c:94:46:7f:cd:a7:44:d2:a2:66:ba: 81:b3:b8:c4:df:8c:ae:65:b0:b3:5a:f0:7b:99:ee:98:40:3e: a3:0d:6a:69:9e:c2:71:b3:70:63:01:f4:66:1f:69:ac:43:03: dd:a6:f6:8c:65:8b:97:c7:b0:12:0d:71:de:3d:76:f1:40:d0: d2:26:f2:a4:06:44:bb:9e:72:aa:2d:cf:00:2e:b4:76:ce:d3: 9b:99:b7:60:3f:fa:c5:33:99:89:fe:c4:42:45:09:41:f8:3e: 67:bf:31:e1:2b:b8:a8:c7:86:27:a8:af:ac:2e:b8:11:e6:67: 8e:55:cf:d7:3a:97:f9:0a:33:0a:2c:aa:22:8c:49:72:86:68: bf:9d:c2:aa:f3:9f:a9:2c:41:29:2f:46:d5:a7:25:14:37:b0: d0:9e:61:56:b0:e1:ef:86:62:bf:78:06:35:b3:9b:54:14:2b: 7c:6a:db:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1nWaNGt12j/riz9FqW4UAKQVuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNjA0MTcwMDM3NDFaFw0yNjA0MjAwOTM3NDFaMDMxMTAvBgNV BAMTKDczRTA0NUU2RkY2QjIyMTJDMjg1NjdBRTZDMDZFNjQ4NTlGNTM2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnL5MiSnJvc4vIctuf+tdjEb1 TySJU/pjlmyNm2COFOTny0qTAdhJbK6Kuf/MjKE5Ej6ov4er3JexmQOKJNF6j29O 5GjOVrnJHT/U6tbVnmB/olRV0z8vd3Gn0frQFs0Jsf9zCedyHH5XRwBEyMFlaNIe 58bOTTXeRtE91tFG6VckJ9MU93UisP72+kdc5BeXt71UY84pgEcMHI0Eh6KygU88 OUhRobl3QEus9OArjUMPTjxwjgn9qC28n09EgeXvHnCfZqARDeHfThEc8DbCviTH PoJUrPMANJiHBgT3dj9fa8c89+/AC582fA06svCf54+Qr3CSdzIKgn9aE/6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+BF5v9rIhLChWeubAbmSFn1NrYwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiQWCYdW6wRk4yXnIAZb3SMlEYUkA0ENG1r WLq3RfdvtmBJZCmRi7vDbGKV/UoOOnEIZ70iUrIpRvjYohaULlOhK1fF01eQv94Z Rbw7a5MclEZ/zadE0qJmuoGzuMTfjK5lsLNa8HuZ7phAPqMNammewnGzcGMB9GYf aaxDA92m9oxli5fHsBINcd49dvFA0NIm8qQGRLuecqotzwAutHbO05uZt2A/+sUz mYn+xEJFCUH4Pme/MeEruKjHhieor6wuuBHmZ45Vz9c6l/kKMwosqiKMSXKGaL+d wqrzn6ksQSkvRtWnJRQ3sNCeYVaw4e+GYr94BjWzm1QUK3xq24g= -----END CERTIFICATE-----Generated at Fri Apr 17 19:29:30 2026 by rpki-client