$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: I+TCLQoYnAbdC2bfl+ILtKZbO7ReVUoTnysn5JVjD8w= Subject key identifier: 39:E1:B9:8E:D8:E2:D7:A9:8C:52:58:66:22:24:D0:32:D0:D3:56:5E Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 42460F772C5670ACA5C9CD85344E32EC4A831F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 012F Signing time: Wed 22 Apr 2026 00:32:35 +0000 Manifest this update: Wed 22 Apr 2026 00:27:35 +0000 Manifest next update: Sat 25 Apr 2026 10:16:35 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: Dh7Q0KdQgEwX0SKcvgNoQWpZTQuD5KQF6b2UdxNzWBk=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: tkpPHAuUAZrCZWFCn3LxtzxW3xPGzYHKSLAXxbUQi2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:46:0f:77:2c:56:70:ac:a5:c9:cd:85:34:4e:32:ec:4a:83:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Apr 22 00:27:35 2026 GMT Not After : Apr 25 10:16:35 2026 GMT Subject: CN=39E1B98ED8E2D7A98C5258662224D032D0D3565E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:da:71:6d:70:e7:d6:8c:0d:ad:a3:1a:e1: be:ac:46:97:c7:d4:9e:e1:e0:91:5f:2c:57:4e:51: 70:a6:ea:25:36:ee:6b:95:7f:da:b6:c0:8a:44:6a: a9:3e:a8:c4:f5:45:bb:91:c5:82:57:c0:34:1e:a7: 21:0a:6b:be:b8:88:f6:f5:b3:96:e2:ae:50:91:20: 21:64:84:34:a7:0f:e6:79:84:ba:13:1e:fe:5f:cc: 6a:1f:1a:fe:2f:f8:bd:ae:53:e3:b9:92:03:55:3f: 63:ba:c6:0d:eb:05:7e:b7:90:28:35:31:1d:1d:e8: 6c:8c:ec:2f:53:39:96:b5:b1:09:f2:42:74:98:eb: 96:7f:87:b0:bb:0a:89:20:46:33:17:08:52:19:43: 25:80:a1:1c:1e:44:3f:bd:0b:38:5e:8f:47:62:b5: 8a:f3:1c:4f:f3:3e:64:fe:23:08:4f:50:60:3f:55: 45:c4:7d:aa:1c:53:cb:fd:de:5a:22:fb:03:51:5a: de:87:85:57:da:0b:4d:1f:7d:ea:b6:ff:54:21:08: 9e:46:6f:db:2b:42:95:0b:7a:c6:be:68:bd:fd:d0: d9:de:06:b1:fe:71:ba:a1:b5:36:4c:3b:83:4d:ca: c8:4f:c6:29:55:1c:54:62:d8:af:2d:5f:21:2d:dd: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E1:B9:8E:D8:E2:D7:A9:8C:52:58:66:22:24:D0:32:D0:D3:56:5E X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:20:d0:c0:ad:bd:8e:e1:af:3d:29:6c:9b:22:7b:e7:41: 98:10:7c:7f:68:0a:ba:a6:53:3d:3f:94:ca:2c:c1:a6:a8:1b: a4:ec:a9:b1:88:a9:21:38:49:ed:6e:7a:cf:92:37:b6:05:99: ec:f2:6a:94:b2:49:22:ef:cb:aa:8b:d4:f0:55:68:af:09:fb: 2f:27:18:dc:0f:a3:4b:1f:f6:73:45:93:7f:44:80:6f:bd:5d: fd:a9:38:82:73:bb:6d:88:8f:12:5d:0e:7f:9a:52:8d:28:5d: 90:56:0c:6c:f6:9f:30:53:a2:b3:8a:e5:62:9a:1f:2a:b8:55: f2:75:31:89:2a:95:3b:5e:1d:eb:c2:fa:7f:c0:0f:6f:c9:48: 6d:88:d0:2e:f9:26:1b:73:f1:07:3e:0c:3d:d1:b8:aa:61:20: d3:40:71:e5:db:8a:d1:44:f8:a0:bb:9b:20:06:3f:36:06:49: db:cc:0a:20:c3:7b:98:42:b7:4e:95:87:36:82:c7:05:ed:d6: c7:c2:a2:05:a7:ed:b2:9c:d1:6c:9c:af:c8:19:5e:25:12:f4: c2:57:28:8d:3b:a7:72:2b:c4:22:2e:2f:56:23:36:e7:7e:0f: 5b:d1:61:04:7b:3d:ea:49:0a:29:31:de:48:ac:3f:35:79:cc: 7a:5f:a2:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkYPdyxWcKylyc2FNE4y7EqDH0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNjA0MjIwMDI3MzVaFw0yNjA0MjUxMDE2MzVaMDMxMTAvBgNV BAMTKDM5RTFCOThFRDhFMkQ3QTk4QzUyNTg2NjIyMjREMDMyRDBEMzU2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCe9pxbXDn1owNraMa4b6sRpfH 1J7h4JFfLFdOUXCm6iU27muVf9q2wIpEaqk+qMT1RbuRxYJXwDQepyEKa764iPb1 s5birlCRICFkhDSnD+Z5hLoTHv5fzGofGv4v+L2uU+O5kgNVP2O6xg3rBX63kCg1 MR0d6GyM7C9TOZa1sQnyQnSY65Z/h7C7CokgRjMXCFIZQyWAoRweRD+9Czhej0di tYrzHE/zPmT+IwhPUGA/VUXEfaocU8v93loi+wNRWt6HhVfaC00ffeq2/1QhCJ5G b9srQpULesa+aL390NneBrH+cbqhtTZMO4NNyshPxilVHFRi2K8tXyEt3UyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOeG5jtji16mMUlhmIiTQMtDTVl4wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjlINDArb2O4a89KWybInvnQZgQfH9oCrqm Uz0/lMoswaaoG6TsqbGIqSE4Se1ues+SN7YFmezyapSySSLvy6qL1PBVaK8J+y8n GNwPo0sf9nNFk39EgG+9Xf2pOIJzu22IjxJdDn+aUo0oXZBWDGz2nzBTorOK5WKa Hyq4VfJ1MYkqlTteHevC+n/AD2/JSG2I0C75Jhtz8Qc+DD3RuKphINNAceXbitFE +KC7myAGPzYGSdvMCiDDe5hCt06VhzaCxwXt1sfCogWn7bKc0Wycr8gZXiUS9MJX KI07p3IrxCIuL1YjNud+D1vRYQR7PepJCikx3kisPzV5zHpfom4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client