$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: x8VznqF4PeyNNmElHm37scfg1uFTVvZ2qXawObvwImA= Subject key identifier: 45:D0:12:A8:C9:BF:43:60:03:6F:03:34:EC:07:B9:66:7C:DE:D6:AA Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 11239C74B4616215B4EC3DBD2C68BE61CEC3FB98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 013C Signing time: Wed 22 Apr 2026 00:51:23 +0000 Manifest this update: Wed 22 Apr 2026 00:46:23 +0000 Manifest next update: Sat 25 Apr 2026 08:45:23 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: iuAv/UaFFKrVUGSGL5PWp9D2W6/vC4UW88o2fSNFOM4=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: nI+smvHEvssx+IPNLm2ah/gpIStaaXW8L0zBujMu72k=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: JW2y4bSiPzDa57yfaBUJmXIx1LPnCEOpddrHM3xkrR0=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: 8TXKICwT8dIf+BWgcGR3HNuwgXa2m57AHbNnxJIYs1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:23:9c:74:b4:61:62:15:b4:ec:3d:bd:2c:68:be:61:ce:c3:fb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Apr 22 00:46:23 2026 GMT Not After : Apr 25 08:45:23 2026 GMT Subject: CN=45D012A8C9BF4360036F0334EC07B9667CDED6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:f4:19:21:65:fc:70:3f:93:94:e6:79:b4: 3d:58:af:4f:75:67:56:d8:62:66:9c:85:4e:e5:74: 22:df:e0:ce:8d:63:89:9f:1d:97:8c:01:33:56:e0: 1c:a7:72:ac:0e:8c:a6:cf:ed:32:58:ca:bf:3e:1c: 21:bb:f6:d7:3e:51:43:d5:cc:bf:ef:4b:0e:a4:09: 82:6d:93:20:1e:59:4e:b6:b0:34:0e:3f:c9:7c:78: ff:1c:66:6a:3b:cf:fe:63:e8:da:c6:c8:6b:e1:2d: 78:55:bd:92:23:2f:39:a4:53:6b:87:0a:d3:1b:ec: 86:d8:5a:22:5f:51:ec:a5:b3:73:00:3c:32:a2:8a: 7f:dd:8c:c4:4c:97:e0:4b:79:d9:c5:58:91:29:c8: 56:6d:e7:d0:c6:9d:e4:64:6b:8c:82:7e:1e:c5:f1: 07:9a:3b:8d:f0:a6:49:f8:77:48:39:28:37:84:b6: 71:62:8a:2b:dc:d9:ea:40:fb:5a:bf:6b:01:27:6b: 50:bc:80:5a:b9:01:05:71:52:5e:1f:e5:71:ba:4e: a8:51:a8:46:22:f6:53:bf:60:73:ea:c2:38:b8:7c: b3:47:71:9c:fb:68:15:f6:84:81:3a:e3:28:0a:1c: cf:d2:1a:54:82:3f:99:b8:e4:ff:1f:a6:80:58:4a: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D0:12:A8:C9:BF:43:60:03:6F:03:34:EC:07:B9:66:7C:DE:D6:AA X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:49:a3:d7:bc:89:2f:f5:74:cf:19:78:63:10:c1:f6:6e:93: 7d:59:b5:0b:f2:c3:b8:8b:59:73:74:3a:80:d7:2f:d4:c2:1e: 56:46:95:2b:a3:f5:dc:e8:20:13:ae:86:44:a5:60:2f:b5:f3: f8:32:e2:23:3a:a9:e9:f3:57:6c:32:7a:15:52:32:d3:39:fe: 07:0f:fb:41:2d:e3:3b:c2:a6:53:fc:5c:bc:20:a4:fe:3b:d7: b5:49:b1:b8:b4:32:cc:8c:49:2c:33:3a:e5:ec:45:bd:ef:5b: 1e:7e:36:ac:7b:37:28:5a:cb:72:b8:f0:d0:26:a9:3a:fb:fd: b6:52:95:25:21:50:b6:34:72:ad:4d:8c:5f:07:6a:e2:30:d1: cc:1d:05:6e:d3:fb:d0:94:ab:88:75:75:e3:85:0b:81:3f:d5: a8:ba:4c:37:d8:5f:8f:d9:47:4c:dd:d8:8f:54:53:ca:b4:a3: e8:44:58:49:56:9e:04:a6:8f:1c:0a:42:b7:3f:e1:55:f5:2d: 7e:7d:81:8f:16:0f:53:c9:3a:be:e5:7f:e9:46:61:76:51:a0: a9:62:2c:c0:77:a2:95:af:a3:15:ed:a1:ef:a3:a7:58:59:dd: 8c:9e:ff:74:e7:30:2b:dd:d3:d0:e3:40:c1:55:b2:0e:6e:50: 44:3a:34:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESOcdLRhYhW07D29LGi+Yc7D+5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNjA0MjIwMDQ2MjNaFw0yNjA0MjUwODQ1MjNaMDMxMTAvBgNV BAMTKDQ1RDAxMkE4QzlCRjQzNjAwMzZGMDMzNEVDMDdCOTY2N0NERUQ2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyfQZIWX8cD+TlOZ5tD1Yr091 Z1bYYmachU7ldCLf4M6NY4mfHZeMATNW4ByncqwOjKbP7TJYyr8+HCG79tc+UUPV zL/vSw6kCYJtkyAeWU62sDQOP8l8eP8cZmo7z/5j6NrGyGvhLXhVvZIjLzmkU2uH CtMb7IbYWiJfUeyls3MAPDKiin/djMRMl+BLednFWJEpyFZt59DGneRka4yCfh7F 8QeaO43wpkn4d0g5KDeEtnFiiivc2epA+1q/awEna1C8gFq5AQVxUl4f5XG6TqhR qEYi9lO/YHPqwji4fLNHcZz7aBX2hIE64ygKHM/SGlSCP5m45P8fpoBYSoPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdASqMm/Q2ADbwM07Ae5Znze1qowHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxJo9e8iS/1dM8ZeGMQwfZuk31ZtQvyw7iL WXN0OoDXL9TCHlZGlSuj9dzoIBOuhkSlYC+18/gy4iM6qenzV2wyehVSMtM5/gcP +0Et4zvCplP8XLwgpP4717VJsbi0MsyMSSwzOuXsRb3vWx5+Nqx7Nyhay3K48NAm qTr7/bZSlSUhULY0cq1NjF8HauIw0cwdBW7T+9CUq4h1deOFC4E/1ai6TDfYX4/Z R0zd2I9UU8q0o+hEWElWngSmjxwKQrc/4VX1LX59gY8WD1PJOr7lf+lGYXZRoKli LMB3opWvoxXtoe+jp1hZ3Yye/3TnMCvd09DjQMFVsg5uUEQ6NPY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:15 2026 by rpki-client