$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: F/TdHL3TsRZeaPW7Gqxu+2roJP0byHY0GTkVPcARgxU= Subject key identifier: 7D:14:A1:D6:C8:1B:0A:60:4E:23:A9:33:D8:C5:A0:E2:06:9B:9F:47 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 3585653361A03D63C6AFCAA52748F51170430242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 018B Signing time: Sat 18 Apr 2026 06:01:34 +0000 Manifest this update: Sat 18 Apr 2026 05:56:34 +0000 Manifest next update: Tue 21 Apr 2026 17:15:34 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 2: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=) 3: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=) 4: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: NQM6QSrO0KjTH20xkvGPp2//MiqafKF37NzAz2dQVI8=) 5: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 6: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 7: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=) 8: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 17:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:85:65:33:61:a0:3d:63:c6:af:ca:a5:27:48:f5:11:70:43:02:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Apr 18 05:56:34 2026 GMT Not After : Apr 21 17:15:34 2026 GMT Subject: CN=7D14A1D6C81B0A604E23A933D8C5A0E2069B9F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:1b:56:32:ae:db:83:4f:bc:04:05:bf:e0: 17:88:ba:93:3a:0a:48:e2:a5:b1:3d:55:4c:cc:74: 7e:1d:e5:14:4b:9d:2c:59:f4:91:14:ec:5f:a2:e8: 2e:ea:23:5a:d8:82:f2:ab:7b:01:fc:a6:19:f9:bb: 24:8b:53:81:be:07:1c:3d:09:25:d5:70:94:b3:49: 3b:8e:79:77:9a:ad:e0:0a:5f:67:14:ed:c8:d0:43: ff:ec:69:b3:a6:aa:e5:cf:91:d3:53:86:68:99:07: b5:75:98:6f:3a:f7:b7:0a:45:00:d4:24:f7:e0:44: 95:20:4b:4c:3e:c7:0d:0c:61:9c:bb:92:f3:fb:5d: 8b:8c:1c:9a:57:84:19:95:8f:6b:0e:12:52:57:90: f2:fa:43:bb:63:09:84:e1:81:d6:39:ee:f1:b3:4a: e3:53:54:ea:10:5c:48:ae:77:30:40:66:48:6e:68: fc:e8:34:9d:5c:bb:54:48:d2:25:70:ff:6a:a8:55: 48:30:a1:34:87:d9:17:d4:11:fb:4b:e3:57:83:5e: 47:e8:f1:62:7e:b5:c7:b4:4a:a9:76:31:87:8a:dd: ef:76:5e:51:eb:87:0c:20:0d:30:27:cd:f9:e6:45: 7c:2d:c3:63:36:06:27:72:95:27:fe:c3:b4:ac:d4: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:A1:D6:C8:1B:0A:60:4E:23:A9:33:D8:C5:A0:E2:06:9B:9F:47 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9a:a0:58:12:dc:23:d5:b6:4b:2a:40:20:25:01:fb:47:1a: 28:5a:09:5e:a5:1e:44:0f:4e:bf:7b:c6:ba:a3:31:97:21:00: f3:96:e5:04:30:df:fe:aa:82:9d:f9:72:0c:ec:e0:87:c9:3d: 3d:7f:27:29:bf:f1:5d:66:eb:f9:52:cb:56:b1:61:6b:08:ee: aa:4a:08:9e:10:b3:95:8b:db:90:c0:36:6e:07:ed:e1:4b:f1: e5:55:c4:84:e3:1c:06:5c:a5:af:90:ce:57:b7:79:59:52:da: e9:a1:4c:8c:9b:29:04:ef:3f:04:d6:59:2c:15:6b:ab:63:a5: 70:79:fa:50:e0:3e:61:7d:d0:59:41:72:20:a6:e2:99:4a:fd: 69:39:e4:04:74:7a:ce:eb:09:1d:44:f9:40:cd:03:6d:ba:04: 0c:46:a1:8d:82:ef:e2:a4:2e:ce:28:b0:bf:1b:30:44:ee:65: 19:a4:9d:4d:2f:10:f6:4d:88:43:3f:a7:bd:62:e8:c1:2b:81: 6e:b6:58:de:82:af:e1:d0:79:c3:dd:34:ce:7a:93:99:88:1c: 51:2f:0c:07:9f:27:6b:b5:26:94:43:31:f2:89:84:68:99:94: dc:19:bd:e0:87:24:59:43:b0:df:55:16:6f:48:46:5e:04:31: 7b:dd:73:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYVlM2GgPWPGr8qlJ0j1EXBDAkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNjA0MTgwNTU2MzRaFw0yNjA0MjExNzE1MzRaMDMxMTAvBgNV BAMTKDdEMTRBMUQ2QzgxQjBBNjA0RTIzQTkzM0Q4QzVBMEUyMDY5QjlGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7htWMq7bg0+8BAW/4BeIupM6 CkjipbE9VUzMdH4d5RRLnSxZ9JEU7F+i6C7qI1rYgvKrewH8phn5uySLU4G+Bxw9 CSXVcJSzSTuOeXeareAKX2cU7cjQQ//sabOmquXPkdNThmiZB7V1mG8697cKRQDU JPfgRJUgS0w+xw0MYZy7kvP7XYuMHJpXhBmVj2sOElJXkPL6Q7tjCYThgdY57vGz SuNTVOoQXEiudzBAZkhuaPzoNJ1cu1RI0iVw/2qoVUgwoTSH2RfUEftL41eDXkfo 8WJ+tce0Sql2MYeK3e92XlHrhwwgDTAnzfnmRXwtw2M2BidylSf+w7Ss1Cd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfRSh1sgbCmBOI6kz2MWg4gabn0cwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKaoFgS3CPVtksqQCAlAftHGihaCV6lHkQP Tr97xrqjMZchAPOW5QQw3/6qgp35cgzs4IfJPT1/Jym/8V1m6/lSy1axYWsI7qpK CJ4Qs5WL25DANm4H7eFL8eVVxITjHAZcpa+Qzle3eVlS2umhTIybKQTvPwTWWSwV a6tjpXB5+lDgPmF90FlBciCm4plK/Wk55AR0es7rCR1E+UDNA226BAxGoY2C7+Kk Ls4osL8bMETuZRmknU0vEPZNiEM/p71i6MErgW62WN6Cr+HQecPdNM56k5mIHFEv DAefJ2u1JpRDMfKJhGiZlNwZveCHJFlDsN9VFm9IRl4EMXvdc2c= -----END CERTIFICATE-----Generated at Mon Apr 20 04:58:18 2026 by rpki-client