$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: Y6AMxVvDGdqZOc5KElTj0bgUj8JaAV10Pj+jKwIL20E= Subject key identifier: 1F:40:05:B3:9F:F9:30:50:19:7D:6F:5F:EA:E3:96:DC:25:33:82:44 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 7F3CE6B8E9A12AE6B9FAB235CD0B524E3C94DD6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 012F Signing time: Sun 19 Apr 2026 17:52:13 +0000 Manifest this update: Sun 19 Apr 2026 17:47:13 +0000 Manifest next update: Thu 23 Apr 2026 05:04:13 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: SgVA03EFFTlY9P/rsYgg1QOUixsYhfwlOUPHctPDKTE=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dLduW7MXdnSJllFKIvUDcjg3JCfw8pw/axVHyf0p8mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3c:e6:b8:e9:a1:2a:e6:b9:fa:b2:35:cd:0b:52:4e:3c:94:dd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Apr 19 17:47:13 2026 GMT Not After : Apr 23 05:04:13 2026 GMT Subject: CN=1F4005B39FF93050197D6F5FEAE396DC25338244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:2c:b2:f8:9a:51:60:70:5c:40:91:1f:e4: 14:e7:80:8f:0e:b5:8e:8a:a6:c0:05:24:b1:76:ed: e8:e1:16:44:23:9c:00:fd:e2:21:cd:46:54:63:01: 0d:0e:d2:4b:a5:70:66:b9:a9:f9:5f:51:c4:a5:7c: b7:1f:a5:48:71:94:f6:d0:c2:bf:dc:54:db:7d:56: a2:68:f5:59:2f:e8:0a:90:ad:51:46:20:26:ba:4a: 41:d0:31:65:63:70:47:60:5a:cc:da:14:3f:b2:d3: 96:9a:f2:fc:b3:60:92:00:fd:c8:2d:13:2d:19:eb: 97:0a:dc:2b:84:c1:b6:f7:da:3e:d0:44:8f:1b:d7: 6e:96:59:7a:32:d9:ee:8f:74:e1:c9:bb:47:c8:68: 7a:20:e2:3d:7e:2f:1c:76:7f:f0:65:e3:35:e9:87: 27:e8:0b:00:ff:4e:66:67:31:92:5c:ff:9e:63:0b: 9c:68:90:00:2f:97:79:cb:39:9b:37:98:e1:e7:33: a3:06:a3:08:66:d5:ff:ae:0e:10:58:62:d6:3b:1e: ee:8d:6f:c3:86:06:8b:bc:ec:22:28:34:03:16:b9: 27:a0:94:ec:3b:68:cf:11:b3:c3:63:21:fa:29:e6: 04:1b:a2:e7:12:ae:26:c6:a7:21:63:ab:31:9a:59: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:40:05:B3:9F:F9:30:50:19:7D:6F:5F:EA:E3:96:DC:25:33:82:44 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:c7:b4:e1:0e:28:64:ae:97:a4:85:0e:e7:5e:11:f0:91: 79:1f:1b:a4:24:21:91:68:6e:d4:31:ad:3c:9c:6d:71:67:3b: 96:1b:7a:28:e8:34:9a:11:0f:5e:46:df:8c:db:b3:dc:d3:d4: b1:0e:e7:12:c0:6e:d1:4e:09:ab:73:63:74:bc:02:09:c4:49: ef:75:a7:2d:c4:a0:3f:82:e9:5f:66:96:d9:28:7c:05:b5:54: 19:6c:f5:0d:d4:c6:e5:df:00:9a:26:07:d6:78:16:78:20:ba: 8e:d2:9b:7f:7b:d5:20:ab:22:16:cd:39:1e:23:29:d7:3f:f9: a2:96:a8:ce:18:77:84:ad:0a:70:ed:d7:93:11:e9:26:ea:4f: 3b:3a:5c:7b:28:35:0a:56:3e:19:a6:e0:2b:4b:d2:35:a8:ee: 39:10:27:9b:ec:ff:ce:b4:4d:1e:bb:fd:e9:68:79:c4:39:c7: f2:36:fb:ba:54:41:85:de:53:61:b8:92:bc:a1:c0:2b:af:63: 3e:e2:79:1a:a0:07:17:0f:d7:fe:37:a7:b1:73:7a:99:ca:42: dc:21:fd:42:2d:1f:c4:d9:9d:0d:1f:37:19:50:87:7e:45:79: e0:46:3f:99:31:e7:dc:32:ed:19:1c:fe:0a:7b:3d:a0:64:f0: e2:7b:b3:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzzmuOmhKua5+rI1zQtSTjyU3WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNjA0MTkxNzQ3MTNaFw0yNjA0MjMwNTA0MTNaMDMxMTAvBgNV BAMTKDFGNDAwNUIzOUZGOTMwNTAxOTdENkY1RkVBRTM5NkRDMjUzMzgyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gCyy+JpRYHBcQJEf5BTngI8O tY6KpsAFJLF27ejhFkQjnAD94iHNRlRjAQ0O0kulcGa5qflfUcSlfLcfpUhxlPbQ wr/cVNt9VqJo9Vkv6AqQrVFGICa6SkHQMWVjcEdgWszaFD+y05aa8vyzYJIA/cgt Ey0Z65cK3CuEwbb32j7QRI8b126WWXoy2e6PdOHJu0fIaHog4j1+Lxx2f/Bl4zXp hyfoCwD/TmZnMZJc/55jC5xokAAvl3nLOZs3mOHnM6MGowhm1f+uDhBYYtY7Hu6N b8OGBou87CIoNAMWuSeglOw7aM8Rs8NjIfop5gQboucSribGpyFjqzGaWUKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0AFs5/5MFAZfW9f6uOW3CUzgkQwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEyx7ThDihkrpekhQ7nXhHwkXkfG6QkIZFo btQxrTycbXFnO5YbeijoNJoRD15G34zbs9zT1LEO5xLAbtFOCatzY3S8AgnESe91 py3EoD+C6V9mltkofAW1VBls9Q3UxuXfAJomB9Z4Fngguo7Sm3971SCrIhbNOR4j Kdc/+aKWqM4Yd4StCnDt15MR6SbqTzs6XHsoNQpWPhmm4CtL0jWo7jkQJ5vs/860 TR67/eloecQ5x/I2+7pUQYXeU2G4kryhwCuvYz7ieRqgBxcP1/43p7FzepnKQtwh /UItH8TZnQ0fNxlQh35FeeBGP5kx59wy7Rkc/gp7PaBk8OJ7s2E= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client