$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: k8u1NtsXOD/le0IWVxe8o0Xgc3Kwm3dBFtf94GJQsWQ= Subject key identifier: 60:48:64:C6:27:AC:F2:A1:A9:34:1D:F2:6F:D1:18:C2:03:9B:8E:09 Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 788488422DED91FEC1D839134B670EE13730A60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: 011B Signing time: Tue 21 Apr 2026 14:30:43 +0000 Manifest this update: Tue 21 Apr 2026 14:25:43 +0000 Manifest next update: Sat 25 Apr 2026 00:00:43 +0000 Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: u1+ICddQo1WC8txOzQ09CVuwouEmJ7cOq2Q9l/y8UMc=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:84:88:42:2d:ed:91:fe:c1:d8:39:13:4b:67:0e:e1:37:30:a6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Apr 21 14:25:43 2026 GMT Not After : Apr 25 00:00:43 2026 GMT Subject: CN=604864C627ACF2A1A9341DF26FD118C2039B8E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:cd:a3:e6:ac:92:04:1c:4e:af:49:96:93: a0:e9:c5:97:5e:8a:db:c5:df:08:36:6a:0b:aa:8b: e0:d0:52:f7:c4:e0:28:89:b8:12:89:30:1f:98:16: 48:e7:ff:e0:65:3b:c9:c8:38:39:f4:b3:bd:17:c1: 56:49:db:64:ac:ac:6b:aa:44:43:73:a6:2a:9f:cd: 31:8a:85:07:85:8d:fd:05:80:75:e5:16:c5:fe:61: 02:f9:53:56:4e:aa:97:2d:17:03:2e:fe:dc:0f:8f: f9:e1:a0:ff:76:c2:fe:9c:6f:9c:23:25:90:94:c9: 81:5f:7b:a5:03:32:d8:ae:c7:a9:f6:49:50:95:28: 82:0a:4f:ef:07:19:3c:a7:bc:61:db:06:15:07:bd: 6f:76:6d:da:1c:34:e6:1c:d3:78:40:40:ad:70:03: c4:4b:b6:ca:cd:e2:37:8a:64:bb:9d:5b:af:0b:ed: 3f:1f:a3:e4:4b:38:f7:38:cc:66:47:6a:3e:f2:ef: 58:92:48:ee:1f:13:c5:8a:f5:46:48:3a:aa:4f:ec: 40:ad:7d:7a:e2:d4:9d:08:52:b4:f2:ee:cd:37:2d: 7e:d0:84:f3:7a:90:21:80:28:87:dd:20:09:f5:c0: db:3d:65:e2:76:1f:42:54:b6:bd:cf:36:f1:a0:a0: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:64:C6:27:AC:F2:A1:A9:34:1D:F2:6F:D1:18:C2:03:9B:8E:09 X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3e:53:ff:40:7f:41:b6:fc:10:f8:5d:5a:0c:5c:50:c9:5f: 66:a3:ea:3b:27:39:fe:cb:1f:ad:01:f2:14:99:ac:57:93:a0: 09:1c:c3:48:98:49:a5:56:e5:53:90:bc:82:6f:18:89:95:3b: d3:43:83:8a:14:22:d6:cd:57:16:e1:38:f8:77:a0:65:41:a9: eb:48:8a:23:e8:9e:2d:5e:89:ab:d1:fc:ff:b5:0e:48:4a:29: 36:e8:e1:e4:48:33:58:af:a8:49:e1:52:5f:c8:4d:54:3d:fc: e0:3f:e1:13:cb:09:f0:32:6d:c2:7e:4c:dd:42:63:ce:de:0c: 0b:d6:88:f4:65:c5:5c:55:c8:72:71:2d:86:ef:ea:0d:57:bf: 42:f4:57:bb:96:7d:f1:99:f1:ca:d7:69:e2:e0:77:1d:f9:79: 38:4c:f1:62:50:9e:bf:57:61:f9:cd:5d:d1:d2:1b:4b:d0:67: 3d:2f:19:f7:b6:ce:57:a3:cd:b0:85:d4:a0:55:03:25:36:fc: 5c:57:29:ea:de:39:16:cb:9b:20:cd:76:4c:76:07:3d:de:18: be:30:d1:75:3a:99:28:cf:9f:bf:1e:8b:23:c4:5c:5f:b2:3e: 08:53:a0:55:a6:a6:5b:35:52:b5:58:25:16:8f:41:5b:0b:e1: c1:b7:b9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeISIQi3tkf7B2DkTS2cO4TcwpgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNjA0MjExNDI1NDNaFw0yNjA0MjUwMDAwNDNaMDMxMTAvBgNV BAMTKDYwNDg2NEM2MjdBQ0YyQTFBOTM0MURGMjZGRDExOEMyMDM5QjhFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvc2j5qySBBxOr0mWk6DpxZde itvF3wg2aguqi+DQUvfE4CiJuBKJMB+YFkjn/+BlO8nIODn0s70XwVZJ22SsrGuq RENzpiqfzTGKhQeFjf0FgHXlFsX+YQL5U1ZOqpctFwMu/twPj/nhoP92wv6cb5wj JZCUyYFfe6UDMtiux6n2SVCVKIIKT+8HGTynvGHbBhUHvW92bdocNOYc03hAQK1w A8RLtsrN4jeKZLudW68L7T8fo+RLOPc4zGZHaj7y71iSSO4fE8WK9UZIOqpP7ECt fXri1J0IUrTy7s03LX7QhPN6kCGAKIfdIAn1wNs9ZeJ2H0JUtr3PNvGgoF7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEhkxies8qGpNB3yb9EYwgObjgkwHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw+U/9Af0G2/BD4XVoMXFDJX2aj6jsnOf7L H60B8hSZrFeToAkcw0iYSaVW5VOQvIJvGImVO9NDg4oUItbNVxbhOPh3oGVBqetI iiPoni1eiavR/P+1DkhKKTbo4eRIM1ivqEnhUl/ITVQ9/OA/4RPLCfAybcJ+TN1C Y87eDAvWiPRlxVxVyHJxLYbv6g1Xv0L0V7uWffGZ8crXaeLgdx35eThM8WJQnr9X YfnNXdHSG0vQZz0vGfe2zlejzbCF1KBVAyU2/FxXKereORbLmyDNdkx2Bz3eGL4w 0XU6mSjPn78eiyPEXF+yPghToFWmpls1UrVYJRaPQVsL4cG3uYE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:21 2026 by rpki-client