$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft File: 104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json) Hash identifier: Vz2c9CXUmOwNaqwLMIldOXSFmG/sMkZokh4xP+B42S0= Subject key identifier: 19:68:7E:48:E2:9E:91:11:43:FE:CF:0D:3C:0B:4E:EF:1D:25:1C:30 Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC Certificate issuer: /CN=104563E8068F3AE19631B1F43A5C9A47466100AC Certificate serial: 02E9C4662307949525B7899CC8CCF8A87B57820D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft Manifest number: 0391 Signing time: Mon 20 Apr 2026 14:21:31 +0000 Manifest this update: Mon 20 Apr 2026 14:16:31 +0000 Manifest next update: Thu 23 Apr 2026 22:00:31 +0000 Files and hashes: 1: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=) 2: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=) 3: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=) 4: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: i+UHSUP8o3zoYZS1vUVN4wTBaNb5HEu+eCnvhOBTE88=) 5: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=) 6: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e9:c4:66:23:07:94:95:25:b7:89:9c:c8:cc:f8:a8:7b:57:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC Validity Not Before: Apr 20 14:16:31 2026 GMT Not After : Apr 23 22:00:31 2026 GMT Subject: CN=19687E48E29E911143FECF0D3C0B4EEF1D251C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:2f:58:89:d1:78:4a:6b:de:98:f5:a1:c3: 93:8e:26:f3:b8:c9:54:31:96:f5:61:ca:5c:36:16: d3:39:a0:7a:58:48:8e:de:d4:c6:80:39:24:87:63: 48:13:c3:44:5c:e7:64:f6:07:15:e7:3b:9e:fa:84: 8e:1e:3a:9b:77:23:24:db:8a:92:51:35:93:88:ea: 41:1b:a0:b6:22:f8:5a:4d:27:7e:56:38:00:b2:6c: 74:f4:b1:82:e0:88:1a:c3:fc:f6:c3:dd:71:d5:ad: b4:5d:15:60:1d:f1:82:7d:ad:64:e9:f6:5a:fb:86: 1b:7f:b4:73:4d:1f:25:77:33:93:86:45:5f:0d:11: 59:ea:07:ff:53:ee:e1:61:44:6a:88:e3:06:07:f3: 6d:f5:5c:2b:3b:bd:bd:9c:85:ef:84:07:6e:74:07: 38:90:8b:c3:01:25:f8:02:92:8e:40:14:81:98:a8: 7d:f5:74:40:68:ba:89:0c:db:53:47:9d:e6:c9:fb: cb:53:2f:3a:23:77:12:66:a9:b7:a8:32:a1:41:54: 09:5d:52:75:ba:38:a0:25:cb:d1:a9:ca:84:ab:92: 2b:5c:8a:fa:22:d0:43:d3:5d:88:ba:5a:41:7e:f0: cc:9e:9a:b4:ae:2a:af:cc:6d:d1:5d:1c:d9:04:98: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:7E:48:E2:9E:91:11:43:FE:CF:0D:3C:0B:4E:EF:1D:25:1C:30 X509v3 Authority Key Identifier: keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ed:b8:e2:df:d3:e6:3d:b4:27:0c:be:7c:2b:d4:8a:3d:f8: 94:e0:60:79:40:a3:67:8f:f7:b2:0b:49:c2:14:b8:83:12:f0: 8a:1d:cc:cf:16:89:98:2a:de:65:50:f9:d5:5c:c5:f8:93:de: 88:42:70:fd:a9:64:15:3c:ba:c9:91:69:79:5b:34:1d:59:22: 55:47:36:28:3c:66:58:21:8d:62:c1:a0:e4:88:cc:7e:0f:cb: 4f:eb:d0:1c:1e:83:83:61:64:ef:80:38:55:6b:46:7f:02:58: 44:af:0c:4f:82:d0:2a:e1:be:e4:6c:f7:04:b6:0c:58:3c:55: bd:aa:93:ae:fe:74:1a:19:91:25:9b:3b:90:46:5f:34:3d:27: 22:33:31:83:75:1d:eb:21:e3:df:18:90:54:78:99:7d:2a:b3: a7:3c:47:32:ef:c0:09:f3:58:60:a6:74:f7:f7:5e:69:f4:01: 78:81:4d:39:49:22:d1:c3:6b:7e:38:96:88:e4:e2:50:f2:49: 2d:90:a9:a8:27:3a:13:4f:1f:02:f2:ed:b9:5c:ac:f4:85:9c: c8:91:12:10:84:f8:fa:21:72:4b:84:84:c6:04:7c:9e:b9:f1: 78:4b:41:b2:62:5c:16:a0:d4:2a:ac:03:35:3b:00:b3:70:ec: e1:1c:15:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAunEZiMHlJUlt4mcyMz4qHtXgg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0 NjYxMDBBQzAeFw0yNjA0MjAxNDE2MzFaFw0yNjA0MjMyMjAwMzFaMDMxMTAvBgNV BAMTKDE5Njg3RTQ4RTI5RTkxMTE0M0ZFQ0YwRDNDMEI0RUVGMUQyNTFDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Di9YidF4SmvemPWhw5OOJvO4 yVQxlvVhylw2FtM5oHpYSI7e1MaAOSSHY0gTw0Rc52T2BxXnO576hI4eOpt3IyTb ipJRNZOI6kEboLYi+FpNJ35WOACybHT0sYLgiBrD/PbD3XHVrbRdFWAd8YJ9rWTp 9lr7hht/tHNNHyV3M5OGRV8NEVnqB/9T7uFhRGqI4wYH8231XCs7vb2che+EB250 BziQi8MBJfgCko5AFIGYqH31dEBouokM21NHnebJ+8tTLzojdxJmqbeoMqFBVAld UnW6OKAly9GpyoSrkitcivoi0EPTXYi6WkF+8MyemrSuKq/MbdFdHNkEmJDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWh+SOKekRFD/s8NPAtO7x0lHDAwHwYDVR0j BBgwFoAUEEVj6AaPOuGWMbH0OlyaR0ZhAKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2Q4MDY0My1kNWU5LTQxYWYtOTRkZi02ZDk0ZmJmNDY0ODcvMC8xMDQ1NjNFODA2 OEYzQUUxOTYzMUIxRjQzQTVDOUE0NzQ2NjEwMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0NjYx MDBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0 ZGYtNmQ5NGZiZjQ2NDg3LzAvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlB NDc0NjYxMDBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/tuOLf0+Y9tCcMvnwr1Io9+JTgYHlAo2eP 97ILScIUuIMS8IodzM8WiZgq3mVQ+dVcxfiT3ohCcP2pZBU8usmRaXlbNB1ZIlVH Nig8ZlghjWLBoOSIzH4Py0/r0Bweg4NhZO+AOFVrRn8CWESvDE+C0CrhvuRs9wS2 DFg8Vb2qk67+dBoZkSWbO5BGXzQ9JyIzMYN1Hesh498YkFR4mX0qs6c8RzLvwAnz WGCmdPf3Xmn0AXiBTTlJItHDa344lojk4lDySS2QqagnOhNPHwLy7blcrPSFnMiR EhCE+PohckuEhMYEfJ658XhLQbJiXBag1CqsAzU7ALNw7OEcFWE= -----END CERTIFICATE-----Generated at Mon Apr 20 22:51:20 2026 by rpki-client