$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json) Hash identifier: 6tBR3Zc4/Azohgj7kDlASKVEsUaUM4Gl6+px2ritLL0= Subject key identifier: DE:D2:23:07:65:2D:CF:89:45:BF:5E:BC:79:AA:E2:A4:62:E2:AD:E0 Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 3D6A7FBEE6E0808ED23F45B533D76A80DE775E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft Manifest number: 04D2 Signing time: Tue 21 Apr 2026 22:20:52 +0000 Manifest this update: Tue 21 Apr 2026 22:15:52 +0000 Manifest next update: Sat 25 Apr 2026 03:03:52 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=) 2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: 4ga18Ey1GnSLLBB9F3DAWlyQ3PihuFII8PeRzL6fw1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 03:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6a:7f:be:e6:e0:80:8e:d2:3f:45:b5:33:d7:6a:80:de:77:5e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Apr 21 22:15:52 2026 GMT Not After : Apr 25 03:03:52 2026 GMT Subject: CN=DED22307652DCF8945BF5EBC79AAE2A462E2ADE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:59:1b:ee:e8:09:9d:76:3c:10:07:34:cf: 8e:d1:a9:df:75:3f:72:d7:0b:b2:a0:97:2a:a4:d2: f3:04:da:6d:01:61:02:9d:f7:83:f9:c6:e0:e9:34: 82:55:d7:08:e7:1b:8f:ad:ad:d2:2a:fb:e0:f8:da: 0b:34:8a:c1:cc:49:85:d3:ba:cd:ea:5e:ba:a3:76: 6f:92:8d:39:cb:f6:5d:bd:43:91:1c:48:2c:12:16: 57:c2:60:06:0f:3b:19:cb:69:1e:62:0e:86:6d:95: 2e:98:4d:f0:2a:27:fa:ce:c0:5b:3e:7a:dc:6b:cd: 0a:a3:a2:73:37:18:83:69:39:34:d3:46:a8:90:b2: 19:b8:ab:13:39:c8:63:eb:5c:ed:b7:88:7a:e4:f6: e8:67:95:de:1b:69:b2:ce:ed:1d:de:2b:72:5f:77: 32:d3:7a:15:7b:1b:ea:92:1c:36:94:92:42:ee:85: b9:ca:b2:69:44:6f:ce:1a:8f:2a:a6:de:ab:72:8f: f0:26:28:e6:73:f2:83:50:06:85:ac:26:27:4a:02: 09:f6:6d:d6:9a:20:f5:83:9f:a2:a7:40:8d:d8:4c: 12:b4:12:e5:ca:85:ed:bd:e0:bd:00:a3:86:08:e0: 0f:7c:9c:65:d7:fc:86:4f:c8:a0:68:b1:02:74:71: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:23:07:65:2D:CF:89:45:BF:5E:BC:79:AA:E2:A4:62:E2:AD:E0 X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:c1:1a:1c:da:54:b5:cc:5b:21:cd:5c:55:c7:b7:b9:87: c0:9c:c2:89:b3:ef:19:c3:9f:dd:01:68:a8:f7:80:a2:56:24: 80:17:95:f6:6d:b5:00:ea:35:24:6c:f3:3b:6f:12:0f:03:b7: 60:fe:ef:59:6f:3c:1b:63:2e:c7:a2:2d:44:f9:e4:5b:ae:d5: 1d:06:39:95:29:78:4e:c5:4c:44:9c:06:ce:93:78:c5:31:95: 32:3d:6e:36:22:ba:34:a7:24:5c:ef:31:4d:4a:e0:4f:f2:0a: 34:52:8e:ab:0f:8e:0e:90:15:9a:5e:0e:7a:10:74:3f:fb:14: f2:16:84:a8:b6:9a:ad:60:16:58:7a:cb:07:b0:ed:30:21:a2: e8:74:5e:4d:86:66:51:1a:ba:14:de:4d:fd:41:8e:2f:f2:85: 54:d5:e4:0c:f6:7e:2c:c5:1f:cc:1b:fb:aa:aa:e3:8c:ee:b8: b3:f1:f8:63:1d:c3:90:ef:fb:0a:07:96:fa:7b:0f:de:4e:e8: 6e:0f:8a:0b:c7:a1:78:7a:ce:50:96:f9:21:80:5e:fa:90:c4: 1f:76:0d:86:7f:e8:25:3d:61:48:06:20:e3:a3:e4:f5:86:26: 40:1d:15:9f:c5:11:17:b5:0e:72:1f:1b:41:2c:2d:ee:68:8e: 0e:fc:a9:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWp/vubggI7SP0W1M9dqgN53XgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNjA0MjEyMjE1NTJaFw0yNjA0MjUwMzAzNTJaMDMxMTAvBgNV BAMTKERFRDIyMzA3NjUyRENGODk0NUJGNUVCQzc5QUFFMkE0NjJFMkFERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh6Fkb7ugJnXY8EAc0z47Rqd91 P3LXC7Kglyqk0vME2m0BYQKd94P5xuDpNIJV1wjnG4+trdIq++D42gs0isHMSYXT us3qXrqjdm+SjTnL9l29Q5EcSCwSFlfCYAYPOxnLaR5iDoZtlS6YTfAqJ/rOwFs+ etxrzQqjonM3GINpOTTTRqiQshm4qxM5yGPrXO23iHrk9uhnld4babLO7R3eK3Jf dzLTehV7G+qSHDaUkkLuhbnKsmlEb84ajyqm3qtyj/AmKOZz8oNQBoWsJidKAgn2 bdaaIPWDn6KnQI3YTBK0EuXKhe294L0Ao4YI4A98nGXX/IZPyKBosQJ0cRq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tIjB2Utz4lFv168earipGLireAwHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1 OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTcwRoc2lS1zFshzVxVx7e5h8Ccwomz7xnD n90BaKj3gKJWJIAXlfZttQDqNSRs8ztvEg8Dt2D+71lvPBtjLseiLUT55Fuu1R0G OZUpeE7FTEScBs6TeMUxlTI9bjYiujSnJFzvMU1K4E/yCjRSjqsPjg6QFZpeDnoQ dD/7FPIWhKi2mq1gFlh6ywew7TAhouh0Xk2GZlEauhTeTf1Bji/yhVTV5Az2fizF H8wb+6qq44zuuLPx+GMdw5Dv+woHlvp7D95O6G4PigvHoXh6zlCW+SGAXvqQxB92 DYZ/6CU9YUgGIOOj5PWGJkAdFZ/FERe1DnIfG0EsLe5ojg78qYQ= -----END CERTIFICATE-----Generated at Wed Apr 22 07:26:58 2026 by rpki-client