$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: QJK6+atph033FmuykZQ9mQq6a1b1/KnBTDtJq9m7TjI= Subject key identifier: 59:9A:8B:47:B3:D8:B5:39:B3:27:BB:6C:53:47:03:F7:EC:14:3B:65 Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 52E806C245A0FF9B9A45C2AAE72EACBB6D6B5924 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 03DF Signing time: Mon 20 Apr 2026 02:11:42 +0000 Manifest this update: Mon 20 Apr 2026 02:06:42 +0000 Manifest next update: Thu 23 Apr 2026 06:49:42 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: bFimiAzva9LShsHLA11pXQ0Ytb437eF/rz76mDmBlA0=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: 6LEpQtzTusE3X/G0UzGxkROnMew5Kmv8P8CjyzpKliQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e8:06:c2:45:a0:ff:9b:9a:45:c2:aa:e7:2e:ac:bb:6d:6b:59:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Apr 20 02:06:42 2026 GMT Not After : Apr 23 06:49:42 2026 GMT Subject: CN=599A8B47B3D8B539B327BB6C534703F7EC143B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:26:13:c5:00:69:7e:8d:ed:ee:93:ad:34: d2:c7:81:52:2e:50:10:30:90:5d:f7:74:6a:e1:1d: d8:ab:a1:df:45:a0:9a:4d:3e:ef:c7:d9:b4:ac:96: 18:ba:c5:94:27:b4:4a:db:0f:4f:cc:65:81:69:a7: d4:a8:34:05:9c:99:1a:b2:83:58:59:ba:79:3d:e0: 2d:10:9d:2e:64:c6:8e:6f:12:33:4b:c4:1b:9e:40: 2d:45:ee:ee:9e:16:c9:c4:21:4c:32:4d:02:9e:f2: 8b:b9:d7:c2:eb:53:43:fb:04:64:17:11:79:8f:6a: e1:cf:4c:24:40:89:63:45:85:fe:93:a7:88:4e:4b: 8b:d0:22:dd:92:5e:19:80:11:df:45:d5:00:b5:9a: db:03:e0:36:ef:18:e7:04:64:84:1b:82:b6:a3:ca: b6:f9:98:29:8a:b1:ad:7d:ac:ac:8e:ac:7c:d8:28: d2:d5:4c:fb:6e:84:6c:30:a4:d1:eb:37:e5:f3:df: 63:87:17:f4:63:a4:db:33:c1:35:a4:18:25:bc:dd: 3f:4c:b5:d6:73:02:79:2a:76:10:65:b2:16:08:9c: ba:6b:2a:6f:6a:d9:ae:5c:2f:8a:c6:0a:86:ec:f8: 29:b8:31:47:cf:84:f7:e6:7a:e7:ce:93:db:e2:41: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9A:8B:47:B3:D8:B5:39:B3:27:BB:6C:53:47:03:F7:EC:14:3B:65 X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:42:34:7e:2c:25:50:fd:b6:2b:cb:ca:ad:6b:63:bf:24:77: b8:3e:23:84:a7:6c:cf:fa:60:0c:59:c9:90:f6:d6:a2:c4:69: d3:2d:d6:7c:d0:17:6c:9e:1b:d0:82:9e:4c:e0:2e:c7:85:02: 6e:c9:a1:16:f2:b9:f4:8d:67:98:f7:eb:1e:7a:d9:d4:71:25: 1a:34:f8:7a:39:8f:10:ef:94:1d:0a:97:f8:b0:b7:47:df:fa: c9:9f:95:93:7c:8e:7c:11:eb:fc:f4:83:2f:19:6e:fc:51:0c: a2:e5:53:d4:77:9a:7c:ef:3d:4b:c4:2c:a8:73:53:02:d4:00: 1f:27:6b:d6:1f:23:48:56:44:87:1d:f6:d0:fe:59:59:ad:4f: 4e:78:13:42:c4:66:eb:71:70:90:b0:5b:e5:13:bd:bd:3d:6c: 9c:73:89:b8:9c:9d:83:e4:fb:1a:b3:84:79:fd:9a:03:8a:f6: 0e:d4:26:15:82:be:d9:8e:3b:e7:f9:98:04:37:b6:7e:16:c9: 2d:26:0d:e6:db:21:72:39:cc:37:5c:14:93:df:a6:f5:75:7f: fa:7b:02:9d:56:2c:a2:8d:49:e7:91:0d:ca:11:ea:c4:58:16: e8:c3:5b:6f:60:0c:a6:38:92:e1:33:41:12:71:fa:ec:40:cb: 67:04:35:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUugGwkWg/5uaRcKq5y6su21rWSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNjA0MjAwMjA2NDJaFw0yNjA0MjMwNjQ5NDJaMDMxMTAvBgNV BAMTKDU5OUE4QjQ3QjNEOEI1MzlCMzI3QkI2QzUzNDcwM0Y3RUMxNDNCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+iYTxQBpfo3t7pOtNNLHgVIu UBAwkF33dGrhHdirod9FoJpNPu/H2bSslhi6xZQntErbD0/MZYFpp9SoNAWcmRqy g1hZunk94C0QnS5kxo5vEjNLxBueQC1F7u6eFsnEIUwyTQKe8ou518LrU0P7BGQX EXmPauHPTCRAiWNFhf6Tp4hOS4vQIt2SXhmAEd9F1QC1mtsD4DbvGOcEZIQbgraj yrb5mCmKsa19rKyOrHzYKNLVTPtuhGwwpNHrN+Xz32OHF/RjpNszwTWkGCW83T9M tdZzAnkqdhBlshYInLprKm9q2a5cL4rGCobs+Cm4MUfPhPfmeufOk9viQVD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZqLR7PYtTmzJ7tsU0cD9+wUO2UwHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNCNH4sJVD9tivLyq1rY78kd7g+I4SnbM/6 YAxZyZD21qLEadMt1nzQF2yeG9CCnkzgLseFAm7JoRbyufSNZ5j36x562dRxJRo0 +Ho5jxDvlB0Kl/iwt0ff+smflZN8jnwR6/z0gy8ZbvxRDKLlU9R3mnzvPUvELKhz UwLUAB8na9YfI0hWRIcd9tD+WVmtT054E0LEZutxcJCwW+UTvb09bJxzibicnYPk +xqzhHn9mgOK9g7UJhWCvtmOO+f5mAQ3tn4WyS0mDebbIXI5zDdcFJPfpvV1f/p7 Ap1WLKKNSeeRDcoR6sRYFujDW29gDKY4kuEzQRJx+uxAy2cENVc= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:32 2026 by rpki-client