$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: Kcu4+lOMWf2IrHdMdQhqUJTR18XA5vzCvYbx0juDEyU= Subject key identifier: 78:10:23:74:58:EF:30:3A:52:9F:51:B0:5D:53:E4:BF:DB:55:84:E7 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 16264A2EF39E742AD33532DE6F4CA3C372D23C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 027C Signing time: Wed 22 Apr 2026 05:40:03 +0000 Manifest this update: Wed 22 Apr 2026 05:35:03 +0000 Manifest next update: Sat 25 Apr 2026 11:08:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=) 2: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: 73uMunZ0H+XjEhxkQg6sDPTc6/hcSiLB+cS0WVnkU48=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: qtEscO6Ss1ZidJKujaFpouGEgWx2zLweILJixQSY1+s=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: dPESLlDldiPlxlzMP4pyOofDIOVuijVKtCZRkw6hNwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 11:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:26:4a:2e:f3:9e:74:2a:d3:35:32:de:6f:4c:a3:c3:72:d2:3c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Apr 22 05:35:03 2026 GMT Not After : Apr 25 11:08:03 2026 GMT Subject: CN=7810237458EF303A529F51B05D53E4BFDB5584E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:3c:72:4e:6a:89:b8:6e:8b:f8:92:91:35: 63:00:7d:bb:68:8a:ed:ec:4c:56:e6:12:ed:7c:78: 79:48:a1:88:a3:db:97:33:3c:d3:e2:b3:0a:40:5a: 75:a4:3d:b8:e8:4c:eb:22:a2:cd:cb:51:25:17:39: 1a:19:9a:00:dc:5a:7c:4f:3f:4d:3b:a2:f2:81:91: 73:52:85:c8:f9:02:2a:06:be:ad:e8:44:d4:16:f1: f5:30:d1:c9:a8:a2:fc:66:26:03:f5:6e:cf:5d:de: b4:1a:37:a1:65:58:46:d5:ea:f9:95:cd:59:9c:3a: f1:c7:91:a4:9d:21:3c:75:92:85:bc:e7:86:38:93: 4c:a7:67:16:5e:41:b0:52:ca:1f:85:72:29:2b:97: 3e:52:2f:04:26:c0:e7:dc:d1:7d:41:86:45:d0:a8: 74:17:30:06:b7:71:a6:00:71:29:1b:b1:2d:6a:09: 96:cc:76:e7:9b:91:a5:df:1f:cf:40:fa:72:d5:27: 25:ac:4e:7b:11:2a:5b:00:7b:12:8e:03:16:56:a5: a9:d8:8d:a1:69:24:9c:f8:e9:2b:5d:39:76:89:e8: 52:58:55:56:06:03:26:e8:d8:5b:5e:8f:97:e1:17: f8:69:07:ac:d0:77:8a:54:f0:76:67:5d:d5:94:ea: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:23:74:58:EF:30:3A:52:9F:51:B0:5D:53:E4:BF:DB:55:84:E7 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8b:ad:bf:39:9f:90:89:4c:1f:83:6b:f4:eb:c1:76:6f:ce: f3:a2:4d:d3:68:d4:4d:73:42:61:0a:1f:98:99:9a:54:5d:1e: e4:6c:a5:c3:ca:d3:d2:25:e2:40:70:87:13:e3:8a:1d:53:7d: dc:04:dc:fa:1e:af:23:16:a0:69:0a:e3:e9:a2:5a:d5:9a:f4: d1:67:e7:a0:b8:75:47:93:ee:53:18:b7:10:6e:c5:5d:97:38: af:76:45:48:c6:13:26:a4:e3:17:07:05:b1:2d:e8:f9:6a:17: 0c:97:b3:4a:a5:55:36:93:ad:ea:b9:4f:1a:c5:5f:41:e5:97: b9:33:cf:dd:38:05:25:2e:f7:5c:c5:a6:86:d5:f3:c1:d4:73: 1f:ca:49:7b:1d:f3:79:60:6c:78:e4:25:fa:41:51:88:5f:5c: 14:84:7e:1b:d4:64:05:73:51:77:80:a5:3d:bf:17:0c:26:64: 57:62:d4:0b:a1:b7:32:e8:a5:58:17:1c:b0:6f:6f:d7:c5:61: 58:18:ad:9c:de:c0:38:0c:f3:28:3f:55:e0:16:fa:9c:29:4c: 5d:58:2d:d7:c8:26:e7:c7:10:39:64:27:f0:32:fa:13:b6:d1: b9:29:1e:a0:40:e2:4f:a2:9f:a8:29:81:6f:d9:77:94:b5:94: 34:ff:bb:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiZKLvOedCrTNTLeb0yjw3LSPDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNjA0MjIwNTM1MDNaFw0yNjA0MjUxMTA4MDNaMDMxMTAvBgNV BAMTKDc4MTAyMzc0NThFRjMwM0E1MjlGNTFCMDVENTNFNEJGREI1NTg0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8DxyTmqJuG6L+JKRNWMAfbto iu3sTFbmEu18eHlIoYij25czPNPiswpAWnWkPbjoTOsios3LUSUXORoZmgDcWnxP P007ovKBkXNShcj5AioGvq3oRNQW8fUw0cmoovxmJgP1bs9d3rQaN6FlWEbV6vmV zVmcOvHHkaSdITx1koW854Y4k0ynZxZeQbBSyh+Fcikrlz5SLwQmwOfc0X1BhkXQ qHQXMAa3caYAcSkbsS1qCZbMduebkaXfH89A+nLVJyWsTnsRKlsAexKOAxZWpanY jaFpJJz46StdOXaJ6FJYVVYGAybo2Ftej5fhF/hpB6zQd4pU8HZnXdWU6uvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBAjdFjvMDpSn1GwXVPkv9tVhOcwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOLrb85n5CJTB+Da/TrwXZvzvOiTdNo1E1z QmEKH5iZmlRdHuRspcPK09Il4kBwhxPjih1TfdwE3PoeryMWoGkK4+miWtWa9NFn 56C4dUeT7lMYtxBuxV2XOK92RUjGEyak4xcHBbEt6PlqFwyXs0qlVTaTreq5TxrF X0Hll7kzz904BSUu91zFpobV88HUcx/KSXsd83lgbHjkJfpBUYhfXBSEfhvUZAVz UXeApT2/FwwmZFdi1AuhtzLopVgXHLBvb9fFYVgYrZzewDgM8yg/VeAW+pwpTF1Y LdfIJufHEDlkJ/Ay+hO20bkpHqBA4k+in6gpgW/Zd5S1lDT/u8M= -----END CERTIFICATE-----Generated at Wed Apr 22 09:54:06 2026 by rpki-client