$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: nZcgcFd/4W6cwc0RqiwFATHvfsXuC4cxVjSmmzYOhag= Subject key identifier: C9:49:45:8B:15:3B:01:05:5F:B0:62:8C:85:FB:6B:DD:32:BA:5A:1E Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 19E12448DEE27BFDA157979B9D83773BBB4B0A05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0566 Signing time: Sun 05 Apr 2026 10:12:08 +0000 Manifest this update: Sun 05 Apr 2026 10:07:08 +0000 Manifest next update: Wed 08 Apr 2026 17:53:08 +0000 Files and hashes: 1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 2: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) 3: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: rldt68MuZqV67zvJR7NOJzhKu1x8wfpRVRGjTbmoC4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 17:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e1:24:48:de:e2:7b:fd:a1:57:97:9b:9d:83:77:3b:bb:4b:0a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Apr 5 10:07:08 2026 GMT Not After : Apr 8 17:53:08 2026 GMT Subject: CN=C949458B153B01055FB0628C85FB6BDD32BA5A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:76:7c:1c:a8:bc:78:b0:78:ef:2e:cf:58: b6:54:aa:ab:33:99:d8:f6:38:9c:b4:70:2b:11:da: ff:55:3f:88:c6:2d:24:db:17:02:e4:ff:23:a2:db: 1c:77:81:e6:b2:52:0a:77:2e:c3:0a:c7:02:86:03: 76:d5:9b:03:c1:b2:47:5c:44:09:75:7c:6d:10:e0: 40:19:c0:e2:c9:d3:41:11:74:ae:9b:7d:1c:d3:67: 98:fe:d4:a3:da:8d:e3:e9:aa:06:43:d3:fd:6e:91: ca:29:e7:e9:90:3b:c2:e5:00:64:d9:7e:d6:11:6d: 0f:22:55:f8:7a:db:7a:aa:7c:8b:fe:e4:b7:b4:ff: e7:3c:22:13:15:a3:c2:6c:b8:db:e4:a3:a8:c0:ce: 52:23:93:74:d8:21:da:45:a4:8c:32:2b:d7:0c:69: 27:61:f7:31:cf:82:66:52:c4:f3:b7:30:e9:74:99: 4d:8a:b8:8d:6d:a2:7f:10:eb:f5:55:51:00:a4:a7: 2a:5d:da:bb:8c:af:21:fb:e9:a0:52:19:a7:50:1b: 72:bf:61:99:b6:4c:3c:fa:d2:23:ef:f2:04:e8:3f: 61:59:7f:da:8a:a7:83:c5:e1:60:f6:22:34:19:9d: f9:4a:d5:27:05:e4:95:df:c4:74:4c:51:b9:c0:20: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:45:8B:15:3B:01:05:5F:B0:62:8C:85:FB:6B:DD:32:BA:5A:1E X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:06:bf:d8:6a:4e:cc:a6:5a:78:58:35:46:ad:45:34:ae: 75:59:6e:73:0e:df:62:86:c5:3b:1a:e3:03:0c:43:e1:23:8d: e2:39:90:c9:9c:43:bb:76:ac:bd:c5:3a:dd:3a:37:c4:e6:14: bb:b4:e4:51:88:fc:c1:ec:c5:1e:98:0e:50:44:c8:b7:e5:51: 86:14:90:9a:f4:1e:53:64:b8:21:6d:cf:5a:10:14:c3:96:2d: 6b:c8:65:53:4a:bc:29:05:7e:e4:9d:db:9c:a8:b9:b3:37:6d: 2e:8d:6d:18:17:d3:96:61:3c:91:21:28:98:29:09:29:cc:d9: ed:82:18:ec:2a:b1:a0:df:8f:19:ab:c7:01:5c:12:b4:b1:ed: 16:77:54:3c:ed:8a:04:26:23:9d:90:d4:0d:3b:ab:f2:fc:d4: 55:10:71:5e:be:2d:1d:8a:20:10:c4:41:25:1d:36:d5:47:f7: 59:12:a2:6a:d2:31:f3:19:2e:2d:98:49:e6:a4:44:2e:9d:72: 4b:e7:03:62:14:18:c2:4b:bb:f3:8f:c7:2b:e1:85:7d:e0:43: a5:6a:1c:fd:17:96:a7:78:93:e0:45:f6:8c:d1:28:32:47:c6: 06:08:6c:4d:1c:c7:d0:82:ed:03:e7:aa:0b:75:78:8e:21:18: a1:01:b1:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeEkSN7ie/2hV5ebnYN3O7tLCgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNjA0MDUxMDA3MDhaFw0yNjA0MDgxNzUzMDhaMDMxMTAvBgNV BAMTKEM5NDk0NThCMTUzQjAxMDU1RkIwNjI4Qzg1RkI2QkREMzJCQTVBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lHZ8HKi8eLB47y7PWLZUqqsz mdj2OJy0cCsR2v9VP4jGLSTbFwLk/yOi2xx3geayUgp3LsMKxwKGA3bVmwPBskdc RAl1fG0Q4EAZwOLJ00ERdK6bfRzTZ5j+1KPajePpqgZD0/1ukcop5+mQO8LlAGTZ ftYRbQ8iVfh623qqfIv+5Le0/+c8IhMVo8JsuNvko6jAzlIjk3TYIdpFpIwyK9cM aSdh9zHPgmZSxPO3MOl0mU2KuI1ton8Q6/VVUQCkpypd2ruMryH76aBSGadQG3K/ YZm2TDz60iPv8gToP2FZf9qKp4PF4WD2IjQZnflK1ScF5JXfxHRMUbnAIDm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUlFixU7AQVfsGKMhftr3TK6Wh4wHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7ZBr/Yak7Mplp4WDVGrUU0rnVZbnMO32KG xTsa4wMMQ+EjjeI5kMmcQ7t2rL3FOt06N8TmFLu05FGI/MHsxR6YDlBEyLflUYYU kJr0HlNkuCFtz1oQFMOWLWvIZVNKvCkFfuSd25youbM3bS6NbRgX05ZhPJEhKJgp CSnM2e2CGOwqsaDfjxmrxwFcErSx7RZ3VDztigQmI52Q1A07q/L81FUQcV6+LR2K IBDEQSUdNtVH91kSomrSMfMZLi2YSeakRC6dckvnA2IUGMJLu/OPxyvhhX3gQ6Vq HP0Xlqd4k+BF9ozRKDJHxgYIbE0cx9CC7QPnqgt1eI4hGKEBsdY= -----END CERTIFICATE-----Generated at Mon Apr 6 14:15:06 2026 by rpki-client