$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: PF3+n8C/N1GEhAWcaWrGI3o/o1gjNGuh1yJIwLn0nJU= Subject key identifier: 25:FF:B1:47:99:3B:12:86:6F:B0:20:B6:C6:96:0B:3C:FA:83:31:CF Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 0AB201087AD39FF7BDA470B78E010BB2BC5A01AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 032B Signing time: Tue 21 Apr 2026 16:02:40 +0000 Manifest this update: Tue 21 Apr 2026 15:57:40 +0000 Manifest next update: Sat 25 Apr 2026 01:21:40 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 2: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 4: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: zLxpnHBfNHSqL534qO3vEzDePAX/aJg0UnHVBRsnkrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 01:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:01:08:7a:d3:9f:f7:bd:a4:70:b7:8e:01:0b:b2:bc:5a:01:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Apr 21 15:57:40 2026 GMT Not After : Apr 25 01:21:40 2026 GMT Subject: CN=25FFB147993B12866FB020B6C6960B3CFA8331CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9f:45:6e:94:99:28:63:b4:e9:4b:92:85:37: 4f:01:b9:28:cc:91:b5:ad:d1:5f:d0:8a:b4:87:fd: 34:c9:dd:59:c5:52:21:c4:11:ca:1b:b5:d0:4b:4a: 82:46:45:77:f6:47:a1:2b:97:83:be:3c:b0:af:cc: e8:bc:ce:8c:46:a1:52:f2:32:fc:16:d0:94:d0:cd: 22:a5:45:43:5a:6a:f0:f7:f5:23:0c:a8:a5:38:91: d7:6a:ab:e8:98:5f:5a:61:54:d7:b6:a4:1a:23:43: ee:12:df:c9:a3:0c:e8:84:5a:e8:c7:19:f5:a7:3e: 5d:67:46:89:2c:4f:83:96:65:33:a5:1e:fb:b8:ce: da:57:4b:27:bd:d4:49:ba:5c:7b:f4:28:fc:2b:29: f6:d2:aa:fb:91:34:33:08:ba:ff:9f:ed:02:1e:e6: 8d:5b:8d:02:28:bb:4b:c7:e6:6a:8f:8a:30:20:65: 73:04:33:c7:2a:8d:d3:26:91:0e:10:5a:1f:d0:2d: 6e:24:20:81:99:eb:99:22:67:50:36:fd:6a:5e:b7: 64:9e:c3:f7:f7:9f:b2:ee:75:94:b4:3b:68:14:f3: 41:63:21:31:0a:86:29:a4:dc:08:53:ac:0a:12:a8: 9e:52:96:b0:a3:80:50:9c:b2:12:4b:3a:33:7c:37: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FF:B1:47:99:3B:12:86:6F:B0:20:B6:C6:96:0B:3C:FA:83:31:CF X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:26:e7:b7:04:52:f2:70:b2:c1:5e:f7:28:6f:25:34:ee: 16:08:39:9a:40:dd:e0:f0:05:36:c4:ac:2c:33:45:5d:34:89: 15:ec:a3:cc:e8:54:aa:90:84:cc:57:65:3a:94:92:0d:1a:21: cb:28:f1:e1:f6:d2:0d:d0:cd:29:93:e9:be:53:f2:04:c3:bd: 10:c4:0e:88:41:18:f2:36:2b:87:bb:a6:3a:ed:1e:fc:27:62: 9d:4b:45:40:dd:5f:f9:03:c2:60:f7:63:0e:ee:00:9c:5e:a2: a0:60:71:1c:93:20:32:3b:ba:f9:d4:fb:39:16:cd:24:9b:55: 6e:5d:43:d4:ac:13:f0:e9:1f:92:a1:10:1b:ca:e3:6f:40:12: d8:62:7b:9c:d1:a3:e8:4c:a6:81:cc:1c:5b:ae:b9:90:48:75: 9d:d6:4c:42:54:3c:8c:fd:f3:f0:b1:fd:6b:b8:62:a3:e4:c7: 35:97:09:6e:cd:b8:d0:f9:b4:1f:5d:7a:b6:49:6a:91:d9:a2: 7f:e7:ae:36:d5:ec:75:e6:f2:c3:e6:30:8d:e5:bc:86:c0:30: 22:89:59:d5:86:eb:0e:1b:c7:6f:df:08:ae:3b:d2:c5:b3:1e: ae:10:87:61:e5:20:1e:d1:b2:c5:4f:cb:49:ce:cb:f6:1b:e1: b1:6a:b0:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrIBCHrTn/e9pHC3jgELsrxaAa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjA0MjExNTU3NDBaFw0yNjA0MjUwMTIxNDBaMDMxMTAvBgNV BAMTKDI1RkZCMTQ3OTkzQjEyODY2RkIwMjBCNkM2OTYwQjNDRkE4MzMxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnn0VulJkoY7TpS5KFN08BuSjM kbWt0V/QirSH/TTJ3VnFUiHEEcobtdBLSoJGRXf2R6Erl4O+PLCvzOi8zoxGoVLy MvwW0JTQzSKlRUNaavD39SMMqKU4kddqq+iYX1phVNe2pBojQ+4S38mjDOiEWujH GfWnPl1nRoksT4OWZTOlHvu4ztpXSye91Em6XHv0KPwrKfbSqvuRNDMIuv+f7QIe 5o1bjQIou0vH5mqPijAgZXMEM8cqjdMmkQ4QWh/QLW4kIIGZ65kiZ1A2/Wpet2Se w/f3n7LudZS0O2gU80FjITEKhimk3AhTrAoSqJ5SlrCjgFCcshJLOjN8NzhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJf+xR5k7EoZvsCC2xpYLPPqDMc8wHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKAJue3BFLycLLBXvcobyU07hYIOZpA3eDw BTbErCwzRV00iRXso8zoVKqQhMxXZTqUkg0aIcso8eH20g3QzSmT6b5T8gTDvRDE DohBGPI2K4e7pjrtHvwnYp1LRUDdX/kDwmD3Yw7uAJxeoqBgcRyTIDI7uvnU+zkW zSSbVW5dQ9SsE/DpH5KhEBvK429AEthie5zRo+hMpoHMHFuuuZBIdZ3WTEJUPIz9 8/Cx/Wu4YqPkxzWXCW7NuND5tB9derZJapHZon/nrjbV7HXm8sPmMI3lvIbAMCKJ WdWG6w4bx2/fCK470sWzHq4Qh2HlIB7RssVPy0nOy/Yb4bFqsKo= -----END CERTIFICATE-----Generated at Wed Apr 22 07:26:51 2026 by rpki-client