$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: ljlkmeQFnEu5XRGKZe6AFCxxrc5D7ZDxG6s50vEv/Oo= Subject key identifier: 4C:7E:92:5F:B8:A0:75:85:39:27:DB:E4:F7:E3:2B:25:4C:9C:0A:47 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 79B4AF76C49A555F54084D94669DB67DB7D0AE7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 029F Signing time: Mon 20 Apr 2026 05:01:32 +0000 Manifest this update: Mon 20 Apr 2026 04:56:32 +0000 Manifest next update: Thu 23 Apr 2026 13:25:32 +0000 Files and hashes: 1: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: vaNded0vCKMgphXIKwq+a/qSFp4MIIpjYIlPFiBUrg0=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: sx7oZBs7estL7aNZUmO9oRk1EPlXA/zCFyzUOngOWfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b4:af:76:c4:9a:55:5f:54:08:4d:94:66:9d:b6:7d:b7:d0:ae:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Apr 20 04:56:32 2026 GMT Not After : Apr 23 13:25:32 2026 GMT Subject: CN=4C7E925FB8A075853927DBE4F7E32B254C9C0A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:92:e1:35:56:b8:e4:d5:ae:ce:74:11:be: 03:66:e9:5f:bc:6a:a7:3b:55:99:21:75:18:4a:ed: ba:8a:25:9b:43:34:b9:4a:e3:65:94:51:ad:f7:00: e5:5a:a0:f6:33:ab:2a:35:2d:e7:85:52:b7:87:73: 62:99:5b:fc:41:86:45:cb:34:2b:2c:3c:f8:45:0b: fb:e2:1b:ca:6f:e0:bf:e6:7c:9a:06:9a:b6:96:09: 20:39:cd:b6:76:cc:9b:e6:d9:c6:dc:23:2d:9b:94: e2:72:b1:f0:4a:15:8a:08:5d:ec:92:a9:58:1e:1b: 75:ec:0a:7d:0e:b6:d2:ed:33:8d:7d:1a:49:06:9b: c6:3a:a6:4d:91:27:f5:e5:2b:29:86:0f:9f:6a:d3: a1:2c:70:67:9f:98:f9:5e:a6:cc:87:bb:de:d2:cb: a8:5d:c3:bc:60:ea:bc:0e:fe:89:6e:86:9b:4c:5a: 68:6d:d2:df:a5:ba:da:60:1f:bf:c0:d6:3e:17:df: d7:7b:78:ea:ae:2b:1b:a6:fc:5d:9e:6d:38:e8:52: 56:44:74:3d:0c:a4:4e:02:79:ed:12:42:be:30:53: 5b:20:73:7b:5f:e7:aa:55:0d:59:27:c5:26:82:28: 5d:f2:06:fe:45:67:de:83:65:58:4e:0a:09:ef:6d: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7E:92:5F:B8:A0:75:85:39:27:DB:E4:F7:E3:2B:25:4C:9C:0A:47 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:44:f6:e4:c5:43:d0:ac:6c:b5:a8:e7:6a:4d:83:61:b1:b5: 66:9b:b9:b1:28:6e:74:37:4c:fb:aa:ce:d6:7f:95:1f:1e:0b: d9:a1:4a:1e:d7:6b:20:ce:69:a8:2e:44:72:3e:b2:05:e8:83: 03:e7:6e:85:2a:16:48:d8:d4:ff:22:ab:ed:d7:ce:85:44:89: 25:20:9b:30:3c:a9:69:c6:60:44:e1:e7:d3:86:b4:7c:1a:9a: 97:e4:2b:81:26:4e:c1:2c:8d:98:27:9e:26:fb:96:70:a2:a7: 91:a4:6b:4a:b0:7f:b1:5d:a6:af:a8:70:9b:81:18:7b:2a:f9: a0:4d:ab:41:45:6a:df:1b:a6:6f:58:08:30:b0:51:6e:3f:b7: db:02:86:4c:d5:db:63:b8:29:7a:32:75:7b:e8:02:63:95:7a: 23:f9:cc:54:b6:34:bf:ee:31:a8:7c:f4:49:30:78:84:ff:08: 65:dc:f6:f5:22:b5:25:93:84:c5:37:e0:dd:f8:99:12:5e:89: e4:93:a6:89:94:ec:4a:38:14:8a:ab:87:8f:32:6f:94:37:ab: c3:96:28:7e:7d:61:0c:0a:a5:32:72:e0:96:be:8b:28:f4:5a: af:03:ee:68:98:79:88:d1:59:13:5a:f1:87:9b:96:de:c5:f6: 88:e6:55:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebSvdsSaVV9UCE2UZp22fbfQrnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjA0MjAwNDU2MzJaFw0yNjA0MjMxMzI1MzJaMDMxMTAvBgNV BAMTKDRDN0U5MjVGQjhBMDc1ODUzOTI3REJFNEY3RTMyQjI1NEM5QzBBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRJLhNVa45NWuznQRvgNm6V+8 aqc7VZkhdRhK7bqKJZtDNLlK42WUUa33AOVaoPYzqyo1LeeFUreHc2KZW/xBhkXL NCssPPhFC/viG8pv4L/mfJoGmraWCSA5zbZ2zJvm2cbcIy2blOJysfBKFYoIXeyS qVgeG3XsCn0OttLtM419GkkGm8Y6pk2RJ/XlKymGD59q06EscGefmPlepsyHu97S y6hdw7xg6rwO/oluhptMWmht0t+lutpgH7/A1j4X39d7eOquKxum/F2ebTjoUlZE dD0MpE4Cee0SQr4wU1sgc3tf56pVDVknxSaCKF3yBv5FZ96DZVhOCgnvbQ8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTH6SX7igdYU5J9vk9+MrJUycCkcwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRE9uTFQ9CsbLWo52pNg2GxtWabubEobnQ3 TPuqztZ/lR8eC9mhSh7XayDOaaguRHI+sgXogwPnboUqFkjY1P8iq+3XzoVEiSUg mzA8qWnGYETh59OGtHwampfkK4EmTsEsjZgnnib7lnCip5Gka0qwf7Fdpq+ocJuB GHsq+aBNq0FFat8bpm9YCDCwUW4/t9sChkzV22O4KXoydXvoAmOVeiP5zFS2NL/u Mah89EkweIT/CGXc9vUitSWThMU34N34mRJeieSTpomU7Eo4FIqrh48yb5Q3q8OW KH59YQwKpTJy4Ja+iyj0Wq8D7miYeYjRWRNa8Yeblt7F9ojmVZo= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:23 2026 by rpki-client