$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: N3e2hKZJwlQeXgy2xPW03UWSQW3N7290O88A6xhGWVw= Subject key identifier: 10:63:9A:9A:87:C0:5E:14:DA:CD:17:ED:1B:2C:31:FF:BD:91:DD:2E Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 661FB959B3C6DA44402F7635FC7EECD075D0F71E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0574 Signing time: Mon 20 Apr 2026 09:41:13 +0000 Manifest this update: Mon 20 Apr 2026 09:36:13 +0000 Manifest next update: Thu 23 Apr 2026 17:35:13 +0000 Files and hashes: 1: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: GcUNnhC8gR77UwW7Ice3bzQy7SYYh5QHOYdChp2ZyTM=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 3: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: 2OHD4uzXRRC+UwdGonPOMWJEcqOJBkhkj3qw69Y3hzs=) 4: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 5: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: lt8611+icqcOlcb0vp3/L3lkdrCllwLsjssGKj3PZL0=) 6: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 7: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1f:b9:59:b3:c6:da:44:40:2f:76:35:fc:7e:ec:d0:75:d0:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Apr 20 09:36:13 2026 GMT Not After : Apr 23 17:35:13 2026 GMT Subject: CN=10639A9A87C05E14DACD17ED1B2C31FFBD91DD2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:08:f4:60:33:1b:c2:ec:8f:5f:5a:ed:68: a8:b5:06:85:27:e2:1f:9f:d2:f7:ad:75:07:8a:46: d1:e8:f3:36:3d:bc:c7:c7:d7:2c:37:d7:b3:27:2b: 94:a2:39:10:82:6a:49:db:76:5f:77:ed:aa:b4:29: 2f:b3:ad:45:44:77:e8:88:f9:10:01:c1:e9:be:44: 5a:94:66:e5:5a:c8:81:5f:5b:ea:5c:d1:f7:15:96: 32:55:ed:2e:db:39:f3:8f:75:fe:62:85:6e:56:bc: c1:e1:a8:48:fb:63:b7:37:e8:ec:10:bd:17:65:ba: 48:9a:e7:c0:0a:cf:77:78:5b:30:cb:91:86:0c:59: 08:65:7c:90:21:dd:67:c5:ab:74:12:09:1d:ab:a5: 89:30:61:e5:ea:e6:fb:79:73:84:e0:52:76:c8:70: eb:d6:4c:73:fa:76:3a:4e:fc:ed:87:22:c5:47:b2: e0:7c:5d:9f:13:ab:39:05:7b:e1:37:66:fa:f4:36: 4b:28:6b:45:8e:7c:44:fd:64:47:e3:b7:a6:c6:02: 11:88:1d:47:25:66:42:f3:b7:8a:41:ef:2a:30:ee: a7:1d:e1:8b:22:87:b1:2c:c8:4c:37:be:09:ba:78: db:e7:6c:32:b5:02:8a:8b:56:10:c5:13:c2:33:1e: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:63:9A:9A:87:C0:5E:14:DA:CD:17:ED:1B:2C:31:FF:BD:91:DD:2E X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c2:28:d5:d5:e0:d1:63:85:49:1a:2d:f4:79:9a:83:92:c7: c8:a1:ab:0d:81:87:b6:d4:a0:e7:d7:80:2c:a5:dd:a6:ca:7e: 68:64:19:75:73:99:2b:96:5e:e0:23:24:05:d6:37:09:d9:52: 42:fc:73:80:a3:a1:fd:af:16:0e:8f:2e:e6:b5:87:1c:28:35: 8b:80:a6:d8:43:40:60:17:7e:1a:92:8f:9d:72:45:aa:98:3b: 7e:68:3e:18:23:bd:82:c5:8a:4c:d3:46:9f:e4:5e:96:29:a0: 10:b2:24:94:70:36:a7:29:70:3d:d6:91:c5:78:fd:1a:39:1c: f3:b0:35:2f:8a:8f:2d:7e:be:55:35:0c:68:aa:2b:b6:88:ac: e6:b1:f4:dc:23:34:61:52:7a:f2:4b:70:ac:20:39:8f:a3:d1: 55:76:09:d0:7f:8f:2b:00:d3:ac:cc:b8:af:6e:ec:9d:37:d0: 74:d9:cd:e9:3b:ae:be:a2:28:b9:ae:6c:b1:af:5d:80:33:84: 1c:8a:4f:05:b5:76:3c:f8:34:dc:48:61:e1:70:21:0c:f9:17: b8:c0:5e:95:6f:ba:1f:3f:20:9a:82:1b:49:bb:4c:9e:fa:03: bb:98:66:2a:10:da:3b:fa:30:41:ad:3f:89:57:29:b7:67:cd: c8:fb:d2:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZh+5WbPG2kRAL3Y1/H7s0HXQ9x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNjA0MjAwOTM2MTNaFw0yNjA0MjMxNzM1MTNaMDMxMTAvBgNV BAMTKDEwNjM5QTlBODdDMDVFMTREQUNEMTdFRDFCMkMzMUZGQkQ5MUREMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtwj0YDMbwuyPX1rtaKi1BoUn 4h+f0vetdQeKRtHo8zY9vMfH1yw317MnK5SiORCCaknbdl937aq0KS+zrUVEd+iI +RABwem+RFqUZuVayIFfW+pc0fcVljJV7S7bOfOPdf5ihW5WvMHhqEj7Y7c36OwQ vRdlukia58AKz3d4WzDLkYYMWQhlfJAh3WfFq3QSCR2rpYkwYeXq5vt5c4TgUnbI cOvWTHP6djpO/O2HIsVHsuB8XZ8TqzkFe+E3Zvr0Nksoa0WOfET9ZEfjt6bGAhGI HUclZkLzt4pB7yow7qcd4Ysih7EsyEw3vgm6eNvnbDK1AoqLVhDFE8IzHpLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGOamofAXhTazRftGywx/72R3S4wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfCKNXV4NFjhUkaLfR5moOSx8ihqw2Bh7bU oOfXgCyl3abKfmhkGXVzmSuWXuAjJAXWNwnZUkL8c4Cjof2vFg6PLua1hxwoNYuA pthDQGAXfhqSj51yRaqYO35oPhgjvYLFikzTRp/kXpYpoBCyJJRwNqcpcD3WkcV4 /Ro5HPOwNS+Kjy1+vlU1DGiqK7aIrOax9NwjNGFSevJLcKwgOY+j0VV2CdB/jysA 06zMuK9u7J030HTZzek7rr6iKLmubLGvXYAzhByKTwW1djz4NNxIYeFwIQz5F7jA XpVvuh8/IJqCG0m7TJ76A7uYZioQ2jv6MEGtP4lXKbdnzcj70qY= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:06 2026 by rpki-client