$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: UkMr3m0K/mbwJU4l+jrVUVOG8i9BO7aqko2gs9oBCZA= Subject key identifier: 82:88:16:5B:CA:3A:94:B3:3C:83:4A:69:89:72:C1:AC:EC:28:95:6C Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 6C05EA01F718959088F3DF2E8D00406740FBAE47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0139 Signing time: Mon 20 Apr 2026 19:02:42 +0000 Manifest this update: Mon 20 Apr 2026 18:57:42 +0000 Manifest next update: Thu 23 Apr 2026 19:37:42 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 2: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 3: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 4: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: uwimCtg7fu2yfoSpU1rSuQX82+IdHtKhkI3vSpCEfOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:05:ea:01:f7:18:95:90:88:f3:df:2e:8d:00:40:67:40:fb:ae:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Apr 20 18:57:42 2026 GMT Not After : Apr 23 19:37:42 2026 GMT Subject: CN=8288165BCA3A94B33C834A698972C1ACEC28956C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:13:29:2d:31:d1:39:74:a5:8a:2a:30:d4: 1c:79:aa:a2:25:ba:0d:e5:92:a9:b9:6c:95:8a:62: ca:73:a8:df:cb:1f:0b:73:05:ce:6a:97:c9:8e:82: 8f:b8:2a:c2:fb:cc:fd:59:ed:20:5a:05:3a:36:18: ba:8b:76:93:cd:f6:f4:73:7b:63:2f:54:8c:3d:41: a0:dc:92:97:fa:fc:8d:40:74:51:62:5a:23:75:63: 32:13:0b:f1:af:d8:95:d2:f4:56:89:11:7f:7c:99: 39:30:3b:35:19:68:6c:02:e6:70:0e:5a:11:47:12: f5:c4:d4:7a:91:df:53:c0:28:c5:96:0e:36:7a:19: cd:ec:04:f3:f7:b7:4b:d9:25:f5:fc:1e:e3:c7:80: 4f:f8:bb:9e:fc:c1:5c:2a:a1:b2:4b:1e:1a:18:37: 3d:15:03:4f:63:81:7d:b0:63:2b:fb:35:c9:40:8f: 97:76:07:b0:06:62:34:2b:59:8b:30:21:67:3a:71: 92:09:e1:3c:ec:9e:cb:a0:0b:b7:fe:74:9e:d2:86: bd:20:07:da:c8:2d:06:c6:b5:e6:d6:3e:22:5a:df: 97:c8:cd:4c:13:78:bb:e0:49:a5:1b:71:c8:08:28: f2:ec:ed:63:5a:db:fb:7c:78:3d:a0:65:9c:c0:d3: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:88:16:5B:CA:3A:94:B3:3C:83:4A:69:89:72:C1:AC:EC:28:95:6C X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c0:c8:3b:cb:10:21:87:22:be:b6:7e:e4:da:7e:ed:b0:77: ba:c5:70:2e:01:df:44:9c:02:0e:c1:7f:f2:2b:02:68:d2:54: e8:9f:d9:81:2e:62:21:ed:fe:ca:7f:98:22:f7:06:7b:53:ab: ae:bd:c0:05:33:0c:aa:65:5b:14:ea:8d:2d:a4:25:5b:bf:80: c6:b2:26:f1:56:7d:cd:a8:d8:70:82:64:2a:c5:47:50:af:e3: e5:15:b4:fe:91:44:6b:94:a5:b4:6f:d9:1f:34:1a:0e:17:58: 66:17:4f:5b:46:3b:37:7a:e3:44:3c:74:88:73:5b:6c:18:ec: e5:09:e6:c9:52:82:d2:dc:15:38:89:f0:70:e8:fd:e0:94:d9: 32:7d:3e:26:8d:7d:01:d6:57:6c:b3:a4:5a:1b:d4:f0:fa:3c: c7:b1:85:46:d6:8d:65:7a:f3:8b:a2:ed:f7:df:27:58:ed:b7: bf:43:fa:6e:d6:57:bb:c0:69:9e:0b:06:51:4b:39:e2:4b:bd: b5:21:8b:e8:1d:83:7f:ed:ec:fe:68:db:cc:24:a9:4b:5f:76: 9d:fd:d6:89:90:42:fd:77:ae:ea:a3:59:0b:77:7c:0a:31:fd: bf:f2:11:6a:7c:fb:46:84:0d:d3:13:a4:dc:de:7e:40:1e:b7: da:0c:fa:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAXqAfcYlZCI898ujQBAZ0D7rkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjA0MjAxODU3NDJaFw0yNjA0MjMxOTM3NDJaMDMxMTAvBgNV BAMTKDgyODgxNjVCQ0EzQTk0QjMzQzgzNEE2OTg5NzJDMUFDRUMyODk1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4RMpLTHROXSliiow1Bx5qqIl ug3lkqm5bJWKYspzqN/LHwtzBc5ql8mOgo+4KsL7zP1Z7SBaBTo2GLqLdpPN9vRz e2MvVIw9QaDckpf6/I1AdFFiWiN1YzITC/Gv2JXS9FaJEX98mTkwOzUZaGwC5nAO WhFHEvXE1HqR31PAKMWWDjZ6Gc3sBPP3t0vZJfX8HuPHgE/4u578wVwqobJLHhoY Nz0VA09jgX2wYyv7NclAj5d2B7AGYjQrWYswIWc6cZIJ4TzsnsugC7f+dJ7Shr0g B9rILQbGtebWPiJa35fIzUwTeLvgSaUbccgIKPLs7WNa2/t8eD2gZZzA02BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgogWW8o6lLM8g0ppiXLBrOwolWwwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/AyDvLECGHIr62fuTafu2wd7rFcC4B30Sc Ag7Bf/IrAmjSVOif2YEuYiHt/sp/mCL3BntTq669wAUzDKplWxTqjS2kJVu/gMay JvFWfc2o2HCCZCrFR1Cv4+UVtP6RRGuUpbRv2R80Gg4XWGYXT1tGOzd640Q8dIhz W2wY7OUJ5slSgtLcFTiJ8HDo/eCU2TJ9PiaNfQHWV2yzpFob1PD6PMexhUbWjWV6 84ui7fffJ1jtt79D+m7WV7vAaZ4LBlFLOeJLvbUhi+gdg3/t7P5o28wkqUtfdp39 1omQQv13ruqjWQt3fAox/b/yEWp8+0aEDdMTpNzefkAet9oM+tU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:33 2026 by rpki-client