$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: QjVSEBwloYYaIVHUMJH3LGI0MjXy9Kjd0qDEoE+WOv4= Subject key identifier: F8:FC:E1:98:6E:82:10:90:DF:B1:D6:71:50:F3:83:B8:F1:63:F8:AE Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 29F8530CF025791B60AA0C2CEC0F2DE33ECC42DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0137 Signing time: Mon 20 Apr 2026 01:22:38 +0000 Manifest this update: Mon 20 Apr 2026 01:17:38 +0000 Manifest next update: Thu 23 Apr 2026 06:01:38 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: JLWE6h6NXLY9WSoLd4bmAbVPL3LIXrW+e/qj82i23rA=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: aBnBiM/MEhKqQ7n4gX23Mkjy/VKocVmrbAAfq1Psf+A=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: tjCEDGhTf9wmSOKlBozB/Eo2tA4qOdCJKD0rSKbbsgo=) 4: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: 7cSRi8Lz3iaz8SknzLzqK/ZkH+MVGK8K1PrrLksvK9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f8:53:0c:f0:25:79:1b:60:aa:0c:2c:ec:0f:2d:e3:3e:cc:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Apr 20 01:17:38 2026 GMT Not After : Apr 23 06:01:38 2026 GMT Subject: CN=F8FCE1986E821090DFB1D67150F383B8F163F8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:ef:32:5d:d6:08:81:cd:0f:86:b8:48:30: e0:87:63:c8:82:aa:ca:1c:9c:cf:62:5e:bc:ec:3b: 00:9e:75:11:c1:b2:99:8d:66:e3:d3:95:c2:0f:80: 79:26:cc:ec:ad:ea:cb:b8:dd:af:8f:fa:ff:2a:4b: fd:92:ac:af:99:3c:17:71:e5:1c:db:1e:49:9d:5f: 14:a6:18:59:5a:c8:87:90:84:9e:ad:7a:6c:0b:07: 86:68:65:3c:94:11:b0:a2:2e:c7:2d:ea:82:0d:b9: 19:0d:7a:86:ae:6a:bd:05:6b:d3:75:df:66:17:4e: 41:47:eb:a5:00:53:54:b7:ae:bd:03:2f:d5:79:ba: 4b:f0:f5:11:76:2d:7d:5a:3d:9c:f7:7d:5e:4c:95: 4e:c4:09:7e:ff:01:1d:7b:03:c4:92:33:e2:6f:ab: 19:32:bd:a7:48:3b:52:65:47:59:08:26:78:04:0a: d0:6c:2f:d0:96:f2:be:f9:24:a6:cc:64:5c:34:b2: b0:a3:ff:eb:4a:2a:2b:21:de:53:5f:d5:56:95:f7: 01:ab:17:db:84:b6:a9:98:d6:d2:44:a9:6d:2d:30: 46:47:e3:6e:c9:cf:d0:42:d4:95:01:b7:51:16:28: 0a:cc:89:3e:f3:d9:11:86:42:1b:fa:7e:f8:ad:d5: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:E1:98:6E:82:10:90:DF:B1:D6:71:50:F3:83:B8:F1:63:F8:AE X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:0f:23:f2:93:b1:af:be:20:23:44:fe:40:a4:46:89:91: 20:8c:3a:97:9e:02:a1:52:f4:11:77:4e:8b:c4:7e:d4:6f:23: 0d:a4:7d:b5:f8:d8:3d:6e:64:7e:16:99:6c:21:4f:91:89:3f: 43:ee:38:f7:2e:5f:bc:90:2c:e3:6d:24:38:03:03:58:c9:30: 4b:cc:0d:65:b3:13:3a:13:ef:1d:bc:de:33:67:95:24:04:17: 62:15:85:dd:18:e8:3a:6c:c1:f1:eb:5b:c4:08:a1:51:99:ec: 8c:cb:7e:d8:dc:63:ef:03:ec:d5:62:7e:78:48:a4:42:34:5f: 6b:42:bf:c8:fa:c4:87:e5:7f:50:8f:25:b8:8d:b8:fb:e5:c5: 3e:3a:4e:83:51:20:96:02:05:4e:42:c5:87:67:16:cc:24:e2: 1b:0d:b2:26:e0:2d:b6:8a:9d:15:19:48:10:5a:cb:89:4f:e7: b6:d6:f8:49:d6:3a:53:c2:b7:4f:fd:8e:20:9a:56:a1:4d:7a: 56:2a:58:80:68:50:66:aa:88:c3:67:5b:3a:57:16:e8:95:f5: 2a:6c:e4:0e:aa:b1:5e:5a:c0:69:fa:2d:0e:20:e6:fe:c6:75: ee:97:5b:14:75:a5:60:08:57:9e:9b:1e:6f:18:44:bc:c0:92: d5:87:8e:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfhTDPAleRtgqgws7A8t4z7MQt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjA0MjAwMTE3MzhaFw0yNjA0MjMwNjAxMzhaMDMxMTAvBgNV BAMTKEY4RkNFMTk4NkU4MjEwOTBERkIxRDY3MTUwRjM4M0I4RjE2M0Y4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv+8yXdYIgc0PhrhIMOCHY8iC qsocnM9iXrzsOwCedRHBspmNZuPTlcIPgHkmzOyt6su43a+P+v8qS/2SrK+ZPBdx 5RzbHkmdXxSmGFlayIeQhJ6temwLB4ZoZTyUEbCiLsct6oINuRkNeoauar0Fa9N1 32YXTkFH66UAU1S3rr0DL9V5ukvw9RF2LX1aPZz3fV5MlU7ECX7/AR17A8SSM+Jv qxkyvadIO1JlR1kIJngECtBsL9CW8r75JKbMZFw0srCj/+tKKish3lNf1VaV9wGr F9uEtqmY1tJEqW0tMEZH427Jz9BC1JUBt1EWKArMiT7z2RGGQhv6fvit1RgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PzhmG6CEJDfsdZxUPODuPFj+K4wHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZyDyPyk7GvviAjRP5ApEaJkSCMOpeeAqFS 9BF3TovEftRvIw2kfbX42D1uZH4WmWwhT5GJP0PuOPcuX7yQLONtJDgDA1jJMEvM DWWzEzoT7x283jNnlSQEF2IVhd0Y6DpswfHrW8QIoVGZ7IzLftjcY+8D7NVifnhI pEI0X2tCv8j6xIflf1CPJbiNuPvlxT46ToNRIJYCBU5CxYdnFswk4hsNsibgLbaK nRUZSBBay4lP57bW+EnWOlPCt0/9jiCaVqFNelYqWIBoUGaqiMNnWzpXFuiV9Sps 5A6qsV5awGn6LQ4g5v7Gde6XWxR1pWAIV56bHm8YRLzAktWHjrw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client