$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft File: F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json) Hash identifier: kMIZ884O9lY/25eKDG0fhyt3jr5CSjAW6x938jX6rs8= Subject key identifier: F9:9F:C9:3E:51:5B:2F:DB:1A:99:68:DF:21:C3:EE:6E:FB:FF:D2:DB Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E Certificate issuer: /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Certificate serial: 4F520888EAFD3D985CC5964F9F4CDE02D71ABD30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft Manifest number: 01FF Signing time: Sat 18 Apr 2026 07:52:17 +0000 Manifest this update: Sat 18 Apr 2026 07:47:17 +0000 Manifest next update: Tue 21 Apr 2026 17:46:17 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: G6TGVbIdxDM3PGXqhIliPZL2762vyLXXOxGMZfTWgBw=) 2: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: RZ4bp7Oy7pl2X5O1IMN3KVz6tjMmY7bQy7d603hEV5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 17:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:52:08:88:ea:fd:3d:98:5c:c5:96:4f:9f:4c:de:02:d7:1a:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E Validity Not Before: Apr 18 07:47:17 2026 GMT Not After : Apr 21 17:46:17 2026 GMT Subject: CN=F99FC93E515B2FDB1A9968DF21C3EE6EFBFFD2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:44:e7:53:c8:3e:dd:29:6a:6e:e1:8d:15: bf:e6:88:6d:d4:b5:2e:54:57:dc:b7:a3:30:3a:f0: 8e:53:00:16:0a:e3:6f:7e:db:d4:dc:6f:b4:45:a9: 63:74:8c:1b:3d:bf:23:bb:61:99:c3:0c:19:de:c0: a2:99:6b:cc:a1:42:ad:4f:07:db:50:9d:a1:0a:95: 53:12:5b:0a:72:81:6e:70:34:a6:83:7b:7a:88:16: c1:ad:76:a9:4e:8e:e4:d4:9f:e5:93:45:91:92:07: 16:85:f6:dc:6b:61:04:f7:e8:a8:e0:f6:8b:a2:6e: 7a:a0:92:4a:72:93:ce:b3:db:31:99:49:8e:d2:8b: 52:2b:9c:ab:bd:33:09:28:6b:df:89:35:3b:3d:e0: 48:05:42:97:64:c0:6a:a9:e8:38:1c:1d:33:5e:87: c2:13:6f:16:af:98:82:ec:47:4f:3c:10:c5:7c:e2: ed:0e:ab:8e:8d:03:8b:db:a4:f9:2f:01:5b:3a:79: 1b:6e:9d:61:89:c7:8b:ac:f5:cd:06:aa:53:ca:c5: 09:4e:9c:1b:2d:19:6e:23:56:22:c1:99:b3:c6:ca: f8:56:f2:e1:d0:0d:b9:80:78:80:b9:ff:d7:ab:84: f9:c0:dd:5b:09:ed:d2:27:e5:e6:37:59:3b:c1:c3: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9F:C9:3E:51:5B:2F:DB:1A:99:68:DF:21:C3:EE:6E:FB:FF:D2:DB X509v3 Authority Key Identifier: keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fd:20:87:d1:65:8c:18:ff:df:b0:ce:f7:02:e6:fa:dc:92: d9:09:b4:72:ae:68:52:a3:1e:34:86:21:88:3b:d4:0e:3e:a6: 40:0d:06:58:8f:14:83:f7:0d:6b:e1:d4:90:eb:06:88:84:08: 7a:a1:79:00:95:c4:e7:56:73:26:c6:9b:cb:07:59:d1:75:d4: 5c:ad:f5:85:c9:59:56:87:a7:16:f5:6a:58:4d:0d:19:30:0a: d6:d1:92:14:72:52:fd:0e:98:80:af:ce:4a:e2:72:59:f8:f4: d2:8c:3d:b8:d8:3e:6d:0a:cc:bd:06:84:74:5f:54:33:db:42: 56:70:03:96:5e:09:4d:02:e7:ca:22:98:61:e3:fb:9d:4a:f6: 00:f9:6f:1e:3f:35:da:e6:28:5c:a6:6c:a6:56:5f:8e:3a:b4: d1:76:da:66:87:f8:cb:6e:56:d3:c8:a3:08:30:b7:3a:18:2b: 6b:df:fe:74:5f:c4:b2:59:89:e7:37:cd:16:6f:d9:13:33:c0: 97:5e:a1:49:55:59:15:f8:5d:87:81:a3:81:93:c7:fc:1e:82: 7e:1e:4b:2d:cf:94:21:86:1e:78:a6:e9:6d:7b:51:4a:14:2c: 32:1b:e3:dc:7e:db:7e:ee:a3:ea:3c:3d:08:43:c5:fa:ae:95: 30:e9:21:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1IIiOr9PZhcxZZPn0zeAtcavTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB NjExQTgyRTAeFw0yNjA0MTgwNzQ3MTdaFw0yNjA0MjExNzQ2MTdaMDMxMTAvBgNV BAMTKEY5OUZDOTNFNTE1QjJGREIxQTk5NjhERjIxQzNFRTZFRkJGRkQyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtN0TnU8g+3SlqbuGNFb/miG3U tS5UV9y3ozA68I5TABYK429+29Tcb7RFqWN0jBs9vyO7YZnDDBnewKKZa8yhQq1P B9tQnaEKlVMSWwpygW5wNKaDe3qIFsGtdqlOjuTUn+WTRZGSBxaF9txrYQT36Kjg 9ouibnqgkkpyk86z2zGZSY7Si1IrnKu9Mwkoa9+JNTs94EgFQpdkwGqp6DgcHTNe h8ITbxavmILsR088EMV84u0Oq46NA4vbpPkvAVs6eRtunWGJx4us9c0GqlPKxQlO nBstGW4jViLBmbPGyvhW8uHQDbmAeIC5/9erhPnA3VsJ7dIn5eY3WTvBw4tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Z/JPlFbL9samWjfIcPubvv/0tswHwYDVR0j BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx QTgyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3 MjFBNjExQTgyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED9IIfRZYwY/9+wzvcC5vrcktkJtHKuaFKj HjSGIYg71A4+pkANBliPFIP3DWvh1JDrBoiECHqheQCVxOdWcybGm8sHWdF11Fyt 9YXJWVaHpxb1alhNDRkwCtbRkhRyUv0OmICvzkricln49NKMPbjYPm0KzL0GhHRf VDPbQlZwA5ZeCU0C58oimGHj+51K9gD5bx4/NdrmKFymbKZWX446tNF22maH+Mtu VtPIowgwtzoYK2vf/nRfxLJZiec3zRZv2RMzwJdeoUlVWRX4XYeBo4GTx/wegn4e Sy3PlCGGHnim6W17UUoULDIb49x+237uo+o8PQhDxfqulTDpIWg= -----END CERTIFICATE-----Generated at Sun Apr 19 12:57:21 2026 by rpki-client