$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: ddJWUwl547HU7O4kyHz7UmhYQm8LuZU55iFLFgLwxH8= Subject key identifier: FE:6A:5F:64:F1:44:78:24:5B:36:6B:C6:97:F4:BF:92:43:B5:E1:EA Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 78BE006C1021423F413096F220F8472156A4B229 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 0139 Signing time: Mon 20 Apr 2026 00:32:03 +0000 Manifest this update: Mon 20 Apr 2026 00:27:03 +0000 Manifest next update: Thu 23 Apr 2026 04:56:03 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: lIUEbJC9CctoXZT3wQ14d0emV/Z5kJ9geBHJjSnZgGw=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: W7+rLjAHn3ggG1D8iSWbq2IpWjTzO3zcHJZ2VL1ip1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 04:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:be:00:6c:10:21:42:3f:41:30:96:f2:20:f8:47:21:56:a4:b2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Apr 20 00:27:03 2026 GMT Not After : Apr 23 04:56:03 2026 GMT Subject: CN=FE6A5F64F14478245B366BC697F4BF9243B5E1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:69:19:b4:2c:41:86:92:c0:b6:12:d8:c8: c8:ae:5e:f3:48:a4:f1:1f:a1:36:a0:cf:b8:53:cd: 92:be:53:93:c7:62:42:bb:ac:a3:d8:14:bd:b9:6e: 63:a3:ff:c8:73:6c:27:d4:e9:65:b4:1d:3d:41:09: 7d:56:aa:11:02:d9:43:99:74:91:e7:e2:8e:d2:23: c6:c6:42:e4:7e:6a:ad:09:39:c0:9b:cd:ea:5d:3d: 4b:83:5b:4a:e6:e2:6c:7f:c2:23:32:75:86:31:ce: 10:fb:c3:d2:44:2f:cd:49:bf:97:aa:5f:21:68:7a: 7d:72:61:72:1b:82:d6:ec:47:db:ff:e4:39:6f:d4: de:30:bf:42:1e:be:18:3a:84:76:99:da:bd:06:a2: 50:d7:c6:d5:10:c2:e1:c9:5f:db:c2:23:08:f1:a9: 33:db:da:de:aa:26:c4:60:26:b0:40:f3:fe:c3:bf: bb:4e:84:88:2f:c3:f0:28:24:9c:1a:f7:0f:80:33: c3:c3:b3:6b:e7:d8:50:7d:11:d9:3d:0b:d0:62:5b: 04:34:04:32:fd:8a:6a:50:2c:fd:f6:e5:e0:73:64: c3:1f:e4:0a:35:6d:1e:7b:70:c5:7c:47:0b:8e:cd: b9:84:f0:55:8c:f6:a3:07:27:24:95:6f:52:1e:3f: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6A:5F:64:F1:44:78:24:5B:36:6B:C6:97:F4:BF:92:43:B5:E1:EA X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ae:e5:3b:47:d7:08:1c:98:ad:af:7d:24:10:c3:3b:18:69: 7a:63:2f:53:1c:f1:aa:93:20:55:66:74:2c:be:31:57:4a:da: e1:f2:49:60:fd:8c:9e:0d:15:cb:b0:f6:6e:63:0b:85:1e:b6: 3c:86:96:d5:77:a7:df:ee:d1:9e:f1:4b:c8:d3:f2:32:e5:1c: f3:38:26:7f:3f:da:53:8c:87:18:4e:42:a1:1e:28:10:95:ed: 10:e3:3a:a7:d3:9b:cf:ce:0c:38:6d:74:4a:a5:cd:94:f8:02: 6d:3f:c9:fb:10:01:bb:ea:ce:9f:60:ee:0c:d6:cf:11:48:3c: 15:ea:17:49:69:2a:a8:10:f6:3e:d9:80:09:46:8a:dd:f1:a0: 40:d8:95:e3:7d:a6:55:13:b8:87:70:e0:49:ea:4d:45:15:89: c2:23:3b:5e:e0:37:74:34:bd:cc:e7:bd:f5:dd:80:33:b9:12: 24:dd:bd:3b:bd:15:1b:40:0b:93:58:a2:06:0f:ca:7f:88:ca: bc:ca:c7:28:19:ca:20:9b:ce:5b:55:ff:e6:a5:5d:46:24:ab: 98:5d:b2:60:96:05:4c:df:34:ea:51:60:96:ab:b4:bf:04:df: 70:49:e2:1a:cd:f5:68:99:5e:21:52:72:26:e0:70:7e:f7:81: 50:9b:97:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeL4AbBAhQj9BMJbyIPhHIVaksikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjA0MjAwMDI3MDNaFw0yNjA0MjMwNDU2MDNaMDMxMTAvBgNV BAMTKEZFNkE1RjY0RjE0NDc4MjQ1QjM2NkJDNjk3RjRCRjkyNDNCNUUxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nGkZtCxBhpLAthLYyMiuXvNI pPEfoTagz7hTzZK+U5PHYkK7rKPYFL25bmOj/8hzbCfU6WW0HT1BCX1WqhEC2UOZ dJHn4o7SI8bGQuR+aq0JOcCbzepdPUuDW0rm4mx/wiMydYYxzhD7w9JEL81Jv5eq XyFoen1yYXIbgtbsR9v/5Dlv1N4wv0Ievhg6hHaZ2r0GolDXxtUQwuHJX9vCIwjx qTPb2t6qJsRgJrBA8/7Dv7tOhIgvw/AoJJwa9w+AM8PDs2vn2FB9Edk9C9BiWwQ0 BDL9impQLP325eBzZMMf5Ao1bR57cMV8RwuOzbmE8FWM9qMHJySVb1IePy/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mpfZPFEeCRbNmvGl/S/kkO14eowHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWu5TtH1wgcmK2vfSQQwzsYaXpjL1Mc8aqT IFVmdCy+MVdK2uHySWD9jJ4NFcuw9m5jC4UetjyGltV3p9/u0Z7xS8jT8jLlHPM4 Jn8/2lOMhxhOQqEeKBCV7RDjOqfTm8/ODDhtdEqlzZT4Am0/yfsQAbvqzp9g7gzW zxFIPBXqF0lpKqgQ9j7ZgAlGit3xoEDYleN9plUTuIdw4EnqTUUVicIjO17gN3Q0 vcznvfXdgDO5EiTdvTu9FRtAC5NYogYPyn+IyrzKxygZyiCbzltV/+alXUYkq5hd smCWBUzfNOpRYJartL8E33BJ4hrN9WiZXiFScibgcH73gVCbl2k= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:47 2026 by rpki-client