$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: BSH6+tNe2fXneLkYXZbi6+7HaYd5XIidNdIHBvgK4gM= Subject key identifier: 8D:D8:66:A6:63:64:46:A1:51:4F:B1:F3:23:38:34:27:ED:9C:6D:9D Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 71ED112912B4A356C595C15F0E24849FB165C364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0139 Signing time: Sat 18 Apr 2026 07:52:12 +0000 Manifest this update: Sat 18 Apr 2026 07:47:12 +0000 Manifest next update: Tue 21 Apr 2026 13:39:12 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: uDBpr7O+iFMubPyltbc8ulM5s/26ABsK5CVCQ3JckaU=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: cVFzdmzLJEI/fSd97t0ozR5701iz99V95s98wkuB7V8=) 4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: xnzNxjiwyzQgUAMiY3OR/9KW8se+moMaAF4wlGztJ1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ed:11:29:12:b4:a3:56:c5:95:c1:5f:0e:24:84:9f:b1:65:c3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Apr 18 07:47:12 2026 GMT Not After : Apr 21 13:39:12 2026 GMT Subject: CN=8DD866A6636446A1514FB1F323383427ED9C6D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:81:0c:27:7c:12:c4:fc:0e:0a:c8:0e:e9: 56:2d:1b:e8:4f:55:47:b0:1b:93:44:e6:d9:30:ee: 62:a3:6b:2e:40:6b:86:98:0e:d4:af:79:68:57:dc: c9:aa:3b:5a:03:5c:c7:14:07:1f:4a:52:b5:67:27: 80:07:e7:26:d0:62:db:00:83:47:47:23:80:57:62: cd:8d:e5:0c:67:2c:30:ef:bd:de:46:42:91:23:49: 76:d6:6a:a8:84:a9:02:ba:aa:9e:22:8b:92:35:09: c3:00:09:29:18:c4:73:69:4a:c2:2b:74:4d:e9:29: e6:42:dd:72:8a:86:f5:27:d3:6b:62:55:c6:5c:5e: 69:dc:1c:9a:e0:69:07:d0:66:14:34:0f:4f:49:1e: 3f:3b:c0:f0:6f:e5:30:74:f5:e3:ff:97:e7:12:9b: f4:f2:a2:f7:36:28:e2:79:a2:81:8d:1a:d4:c5:77: 22:c5:46:6a:a7:18:8a:e4:f8:9d:25:bc:3c:62:a6: 58:13:56:69:1a:d6:55:92:ae:19:09:f0:80:be:9c: 43:e7:f8:67:52:82:d3:2d:72:6e:87:2c:6f:2d:d2: 5a:2b:64:b4:b7:76:d5:b1:b1:9f:6b:3c:8f:9c:ac: b0:3e:3e:56:ea:5c:d7:21:05:f2:e1:e2:6e:ac:a1: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D8:66:A6:63:64:46:A1:51:4F:B1:F3:23:38:34:27:ED:9C:6D:9D X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4b:e6:fc:d8:79:c5:93:cd:f4:29:5b:24:fd:5b:9f:ca:c4: e4:be:18:33:72:c5:47:21:6f:ef:c0:47:28:9a:6f:a5:6c:6c: 33:1d:cd:70:57:30:75:61:39:07:30:4b:17:b7:26:31:d0:91: aa:4c:d3:3a:1b:9b:d3:c3:3c:1a:68:02:2d:19:4a:11:82:eb: 5e:95:c0:5c:df:db:97:21:e7:b0:bc:dc:4d:f5:f4:bd:f1:53: 49:aa:68:d0:0e:08:f6:40:c9:ae:33:83:08:e6:df:bb:2a:84: 1e:2a:db:cd:c4:46:23:c4:35:ad:b2:1c:ec:3a:c3:31:40:1d: 2c:78:98:93:29:47:d1:78:1c:40:e1:42:ed:23:bf:1b:2e:4e: 14:52:ad:cc:16:e0:d6:3f:c8:af:72:d6:32:3e:b8:07:ef:25: eb:32:27:44:33:84:ca:c3:73:a4:f9:b0:1f:0c:5d:40:0c:a7: 10:33:fb:b3:58:c4:27:44:3d:4d:83:d9:0d:4c:dd:2f:ca:70: 14:8a:3c:ef:8d:c6:84:56:a0:0f:1f:60:3b:79:53:61:0b:ef: 97:77:4e:1e:16:7d:70:29:62:8a:95:3c:80:3e:0e:da:ee:87: b4:09:57:c2:8b:8c:45:d4:77:d8:0c:a2:c9:90:ca:42:15:06: ac:5b:f0:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUce0RKRK0o1bFlcFfDiSEn7Flw2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjA0MTgwNzQ3MTJaFw0yNjA0MjExMzM5MTJaMDMxMTAvBgNV BAMTKDhERDg2NkE2NjM2NDQ2QTE1MTRGQjFGMzIzMzgzNDI3RUQ5QzZEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/F4EMJ3wSxPwOCsgO6VYtG+hP VUewG5NE5tkw7mKjay5Aa4aYDtSveWhX3MmqO1oDXMcUBx9KUrVnJ4AH5ybQYtsA g0dHI4BXYs2N5QxnLDDvvd5GQpEjSXbWaqiEqQK6qp4ii5I1CcMACSkYxHNpSsIr dE3pKeZC3XKKhvUn02tiVcZcXmncHJrgaQfQZhQ0D09JHj87wPBv5TB09eP/l+cS m/Tyovc2KOJ5ooGNGtTFdyLFRmqnGIrk+J0lvDxiplgTVmka1lWSrhkJ8IC+nEPn +GdSgtMtcm6HLG8t0lorZLS3dtWxsZ9rPI+crLA+PlbqXNchBfLh4m6soZyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdhmpmNkRqFRT7HzIzg0J+2cbZ0wHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9L5vzYecWTzfQpWyT9W5/KxOS+GDNyxUch b+/ARyiab6VsbDMdzXBXMHVhOQcwSxe3JjHQkapM0zobm9PDPBpoAi0ZShGC616V wFzf25ch57C83E319L3xU0mqaNAOCPZAya4zgwjm37sqhB4q283ERiPENa2yHOw6 wzFAHSx4mJMpR9F4HEDhQu0jvxsuThRSrcwW4NY/yK9y1jI+uAfvJesyJ0QzhMrD c6T5sB8MXUAMpxAz+7NYxCdEPU2D2Q1M3S/KcBSKPO+NxoRWoA8fYDt5U2EL75d3 Th4WfXApYoqVPIA+Dtruh7QJV8KLjEXUd9gMosmQykIVBqxb8GA= -----END CERTIFICATE-----Generated at Sat Apr 18 19:45:22 2026 by rpki-client