$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json) Hash identifier: pWeJ2nFNA9Pb/5KsXgoO0iaDcVcc0ECaDQ+ZD87l0fg= Subject key identifier: 90:86:DD:E7:83:CE:BB:D5:F4:43:03:03:20:6B:4F:97:B9:58:53:E6 Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Certificate serial: 6C29A48FE953624FD185112C21508D4401BD589E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft Manifest number: 0152 Signing time: Tue 21 Apr 2026 09:31:04 +0000 Manifest this update: Tue 21 Apr 2026 09:26:04 +0000 Manifest next update: Fri 24 Apr 2026 17:51:04 +0000 Files and hashes: 1: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: 4HEnURFX1hQSuRbmCKioRMn9cXm7KyCSSOCdtNL81nA=) 2: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: 9iKGYhoHZm1j8E+hEFHd/BOT/2BZuahs4I484DtJZSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:29:a4:8f:e9:53:62:4f:d1:85:11:2c:21:50:8d:44:01:bd:58:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Validity Not Before: Apr 21 09:26:04 2026 GMT Not After : Apr 24 17:51:04 2026 GMT Subject: CN=9086DDE783CEBBD5F4430303206B4F97B95853E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:e6:ea:e5:e7:5f:e2:6d:9d:30:c0:20:c9: 43:57:c9:5b:2e:94:d8:2c:5c:58:76:ee:a4:f8:ba: 2d:61:b7:f6:74:18:6f:0b:75:ca:ec:2d:db:77:77: b7:d0:5a:b5:e6:74:cf:0b:47:c3:aa:fd:ae:ae:e0: d2:03:e5:b6:3f:c6:4b:1b:40:d2:fe:7c:26:ce:0a: 51:bd:50:d7:af:12:b8:e2:10:84:00:8d:fa:b3:cc: 4e:8e:98:ea:36:28:ec:a8:74:6d:e5:8d:60:87:46: a9:12:f2:a6:11:85:e1:24:df:13:b3:dc:6f:23:03: c4:e6:1c:94:21:f4:f2:0e:56:6d:4d:3a:96:50:72: 80:f7:6c:92:29:53:3f:1b:cd:b3:7c:ce:40:46:68: de:4b:de:b6:f1:0b:18:92:62:e0:50:f3:4a:38:5d: 7f:02:e0:5d:d0:76:82:0d:e4:bb:80:fc:7f:53:ca: f2:0c:f4:6f:6b:3f:cd:47:7d:2f:0a:a3:fe:97:52: 67:8e:a3:49:13:41:60:3f:5f:bf:d1:68:fe:c4:4c: cc:41:ff:7b:9b:fb:b3:60:e5:ac:5a:df:ec:98:46: c9:54:74:2f:9f:d8:1b:27:8c:a4:38:91:aa:43:20: c7:00:ab:e2:df:98:52:fc:e7:a7:94:a9:fa:61:a5: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:86:DD:E7:83:CE:BB:D5:F4:43:03:03:20:6B:4F:97:B9:58:53:E6 X509v3 Authority Key Identifier: keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:93:c1:1c:9c:a4:7d:12:d3:49:7d:cf:25:b4:a2:64:ce:55: a1:b6:4d:fc:49:0f:5c:3c:71:22:ef:fd:d5:2c:08:bd:5f:1b: 56:f4:12:98:b8:cf:85:3d:0d:63:67:5c:1a:98:a4:7b:28:e5: 95:ec:f9:f2:56:67:f5:7a:33:57:da:aa:c2:81:2b:64:6e:53: be:be:a9:c7:45:5b:42:6a:e1:77:0d:88:e5:8d:46:43:a0:ec: 7d:57:40:c9:3a:e5:74:d4:d6:21:63:04:f9:fc:27:24:54:69: f5:2f:c2:52:a5:5b:3d:27:9e:7e:92:a2:4f:8e:19:e3:b3:5d: 4a:c6:05:8a:ea:bc:30:b2:36:9f:0a:49:f8:de:1f:fa:87:75: 97:75:ba:42:91:b6:bc:8e:96:55:3e:6f:f4:b9:f8:74:a7:9d: 10:78:22:52:18:a2:20:66:f7:df:2a:7b:36:72:6e:71:f6:3f: 60:c8:09:61:45:f2:67:40:26:db:a2:b6:52:06:0a:5b:61:3e: 23:d1:08:55:13:1c:be:c0:d6:bc:d6:d1:14:a2:2e:da:ab:0a: 70:28:2f:38:4b:d7:90:48:00:12:5c:fd:c1:d2:85:40:53:a6: 44:4b:2f:bf:5b:b6:2b:2a:a8:fd:15:4f:a6:6a:f1:71:35:ee: 88:ee:a1:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCmkj+lTYk/RhREsIVCNRAG9WJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3 RUUxNzMwQTAeFw0yNjA0MjEwOTI2MDRaFw0yNjA0MjQxNzUxMDRaMDMxMTAvBgNV BAMTKDkwODZEREU3ODNDRUJCRDVGNDQzMDMwMzIwNkI0Rjk3Qjk1ODUzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPebq5edf4m2dMMAgyUNXyVsu lNgsXFh27qT4ui1ht/Z0GG8LdcrsLdt3d7fQWrXmdM8LR8Oq/a6u4NID5bY/xksb QNL+fCbOClG9UNevErjiEIQAjfqzzE6OmOo2KOyodG3ljWCHRqkS8qYRheEk3xOz 3G8jA8TmHJQh9PIOVm1NOpZQcoD3bJIpUz8bzbN8zkBGaN5L3rbxCxiSYuBQ80o4 XX8C4F3QdoIN5LuA/H9TyvIM9G9rP81HfS8Ko/6XUmeOo0kTQWA/X7/RaP7ETMxB /3ub+7Ng5axa3+yYRslUdC+f2BsnjKQ4kapDIMcAq+LfmFL856eUqfphpfIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIbd54POu9X0QwMDIGtPl7lYU+YwHwYDVR0j BBgwFoAUJgiBgj8oBLynplrJO9Pcmn7hcwowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTM2OGFlMy1kZDEyLTRhYTMtODk0OC01NDZkZTA0YzUxZTQvMC8yNjA4ODE4MjNG MjgwNEJDQTdBNjVBQzkzQkQzREM5QTdFRTE3MzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3RUUx NzMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RD OUE3RUUxNzMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKTwRycpH0S00l9zyW0omTOVaG2TfxJD1w8 cSLv/dUsCL1fG1b0Epi4z4U9DWNnXBqYpHso5ZXs+fJWZ/V6M1faqsKBK2RuU76+ qcdFW0Jq4XcNiOWNRkOg7H1XQMk65XTU1iFjBPn8JyRUafUvwlKlWz0nnn6Sok+O GeOzXUrGBYrqvDCyNp8KSfjeH/qHdZd1ukKRtryOllU+b/S5+HSnnRB4IlIYoiBm 998qezZybnH2P2DICWFF8mdAJtuitlIGClthPiPRCFUTHL7A1rzW0RSiLtqrCnAo LzhL15BIABJc/cHShUBTpkRLL79btisqqP0VT6Zq8XE17ojuoWE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:21 2026 by rpki-client