$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: ttr6E+CObUoakKwG/WdkCIuzB6T3ohbd2gNMUuv8dr0= Subject key identifier: 82:61:05:60:D0:AE:88:AE:38:95:4C:F7:1D:01:20:87:AE:C8:8B:24 Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 678FD5CD549791D90B3EB03D9AC2BF3D2FFAF11B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: 0136 Signing time: Mon 20 Apr 2026 08:01:06 +0000 Manifest this update: Mon 20 Apr 2026 07:56:06 +0000 Manifest next update: Thu 23 Apr 2026 13:44:06 +0000 Files and hashes: 1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: utYg8TZBWhX6Pa6rmg+WJYdWRjog86f1vYLxXIrGy1U=) 2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: XPXFi+CrXb0szqqz/lxrVfC4rUp40i81Qh+YMvkij4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8f:d5:cd:54:97:91:d9:0b:3e:b0:3d:9a:c2:bf:3d:2f:fa:f1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Apr 20 07:56:06 2026 GMT Not After : Apr 23 13:44:06 2026 GMT Subject: CN=82610560D0AE88AE38954CF71D012087AEC88B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:ab:15:5e:30:ba:cb:49:ce:8b:36:0e:6c: d8:ee:26:bf:c5:18:6f:db:76:7a:a7:e5:44:cc:9d: 02:f7:ec:ba:ff:db:12:39:2f:fb:a1:28:07:6d:41: 35:8f:5f:5a:8d:07:18:6c:ab:05:dd:ac:0b:cf:19: 6c:44:3e:af:dd:6c:f7:f5:75:12:37:bc:88:a5:fb: 37:30:3e:d8:27:0c:9d:a4:30:56:3b:84:7c:6f:50: 26:75:92:26:2d:12:48:9b:cd:e4:16:78:9e:dd:95: b1:cf:2e:f6:16:ff:22:8d:81:03:1b:10:73:46:53: ce:ed:bc:19:40:3f:bf:fb:c1:0f:36:88:da:05:1b: 4d:6a:50:3c:cf:2b:90:65:a4:cb:85:c4:ab:17:2e: 97:07:99:37:5b:46:d8:0e:ab:87:26:9e:32:00:6c: 7b:53:c4:7d:11:2b:f8:28:b4:25:0d:f6:7a:e4:f0: 01:76:f0:b1:b4:57:f0:5e:29:7c:90:d7:eb:f1:f8: 8a:8d:f0:d2:11:60:1a:66:de:5c:5f:04:77:01:f8: 66:f3:e8:b5:2a:d5:bc:1b:cb:57:c9:01:4d:21:be: 3b:d3:f6:97:e4:e5:d0:0a:8f:80:07:fe:bd:af:25: 50:60:9b:6c:8f:0e:f6:bb:79:a3:b2:96:8c:11:d4: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:05:60:D0:AE:88:AE:38:95:4C:F7:1D:01:20:87:AE:C8:8B:24 X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:50:f2:ce:89:f2:05:1f:04:69:ea:db:67:25:02:d5:eb:61: 83:f9:8b:9b:96:9a:8f:a1:9f:ab:5b:06:14:a1:dd:44:03:6e: 86:ee:ff:ff:3c:ae:3a:38:5e:92:6d:f6:49:8c:69:5e:f2:f8: 88:3c:9a:b9:87:17:a4:31:ed:2b:a5:d3:dd:5a:e0:26:d2:d6: 74:f4:40:70:c3:4e:e4:70:c3:1a:73:9a:75:9a:26:f7:0d:11: 55:03:e1:5b:f7:f1:b9:85:47:37:4a:2f:63:d2:f7:92:e9:f9: c8:bc:86:a8:cd:b3:85:9f:e2:99:96:e2:d5:35:7b:d8:f4:1c: 0d:0d:e9:b3:28:9a:1a:b2:f4:d6:29:9e:30:b6:45:91:96:ff: 18:db:98:f6:59:3a:30:43:29:58:c4:e7:31:08:93:5a:67:9e: b1:54:9e:2d:16:3d:2b:32:8f:92:0c:e0:50:dd:c5:00:50:b2: 1d:49:af:4f:73:c0:09:a3:31:85:0c:07:98:23:9b:f1:5a:73: da:48:ba:54:8a:df:a4:5e:37:61:ea:be:b6:60:c1:16:11:a6: 82:53:da:30:c1:e6:7b:47:70:4c:91:72:0d:d8:76:8d:2d:81: 94:26:9c:e1:f4:1c:2b:1d:3e:92:e2:36:01:42:aa:7b:15:4a: 8c:6e:67:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4/VzVSXkdkLPrA9msK/PS/68RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNjA0MjAwNzU2MDZaFw0yNjA0MjMxMzQ0MDZaMDMxMTAvBgNV BAMTKDgyNjEwNTYwRDBBRTg4QUUzODk1NENGNzFEMDEyMDg3QUVDODhCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlT6sVXjC6y0nOizYObNjuJr/F GG/bdnqn5UTMnQL37Lr/2xI5L/uhKAdtQTWPX1qNBxhsqwXdrAvPGWxEPq/dbPf1 dRI3vIil+zcwPtgnDJ2kMFY7hHxvUCZ1kiYtEkibzeQWeJ7dlbHPLvYW/yKNgQMb EHNGU87tvBlAP7/7wQ82iNoFG01qUDzPK5BlpMuFxKsXLpcHmTdbRtgOq4cmnjIA bHtTxH0RK/gotCUN9nrk8AF28LG0V/BeKXyQ1+vx+IqN8NIRYBpm3lxfBHcB+Gbz 6LUq1bwby1fJAU0hvjvT9pfk5dAKj4AH/r2vJVBgm2yPDva7eaOylowR1EotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmEFYNCuiK44lUz3HQEgh67IiyQwHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFQ8s6J8gUfBGnq22clAtXrYYP5i5uWmo+h n6tbBhSh3UQDbobu//88rjo4XpJt9kmMaV7y+Ig8mrmHF6Qx7Sul091a4CbS1nT0 QHDDTuRwwxpzmnWaJvcNEVUD4Vv38bmFRzdKL2PS95Lp+ci8hqjNs4Wf4pmW4tU1 e9j0HA0N6bMomhqy9NYpnjC2RZGW/xjbmPZZOjBDKVjE5zEIk1pnnrFUni0WPSsy j5IM4FDdxQBQsh1Jr09zwAmjMYUMB5gjm/Fac9pIulSK36ReN2HqvrZgwRYRpoJT 2jDB5ntHcEyRcg3Ydo0tgZQmnOH0HCsdPpLiNgFCqnsVSoxuZ5w= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:21 2026 by rpki-client