$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft File: 251859FA726E84EB8EF1585C6B1F3D925581A938.mft (raw, json) Hash identifier: cSP20W/PqDU51IYxhigIo1zzTjh/AvQJOtrqxgp00iI= Subject key identifier: B1:6B:BA:E3:14:24:59:30:CE:88:83:65:0B:A7:EE:32:45:96:DE:FC Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Certificate serial: 3CF44BF6F2348768EDB1200F3D8A1C84CE1EB9B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft Manifest number: 0502 Signing time: Mon 20 Apr 2026 22:21:22 +0000 Manifest this update: Mon 20 Apr 2026 22:16:22 +0000 Manifest next update: Fri 24 Apr 2026 10:07:22 +0000 Files and hashes: 1: 251859FA726E84EB8EF1585C6B1F3D925581A938.crl (hash: AmX79P5GeVfMvnJAkjo/0tTmzvOD18qDhaVwzdpFqe8=) 2: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: pCMyJ/CDctVRd1Fs9qRQyHuJ7biOZTx5YqB4FZP9gKI=) 3: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: 3Wg0mB5oHwLpsEMqAQx7as9h65XA7qZSRMYaxMWHy8s=) 4: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: fOtgd90l6YKA0pJYOUhs+MVJ6TtfFnXek+6jELFm240=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f4:4b:f6:f2:34:87:68:ed:b1:20:0f:3d:8a:1c:84:ce:1e:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Validity Not Before: Apr 20 22:16:22 2026 GMT Not After : Apr 24 10:07:22 2026 GMT Subject: CN=B16BBAE314245930CE8883650BA7EE324596DEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:27:4d:d9:ac:66:41:34:1e:eb:d0:09:c3: 26:63:5c:35:f0:80:2b:a8:2d:57:f8:5d:65:22:44: 46:85:84:ef:87:4d:fd:18:29:bc:58:92:c3:8c:1f: 8e:bf:20:f5:51:80:2d:77:3d:7c:f8:6f:6e:0b:13: 05:aa:75:be:b1:1c:23:9a:86:0a:bc:d1:8e:a3:0c: 91:0e:19:4c:cd:40:06:74:e9:44:ee:9a:d0:d3:d5: e5:05:70:74:ec:ce:94:48:74:cb:dd:46:f1:b2:17: bc:77:9c:54:fd:51:2a:2e:14:55:b7:8e:28:c9:d8: 56:5f:23:78:79:21:80:cf:18:07:36:4d:0f:08:4a: fa:32:62:6d:3b:ef:fd:3c:79:16:57:bb:6d:a4:ec: 23:ab:8c:e2:78:7e:7a:50:5b:bc:7a:7e:ac:13:fd: e8:e7:9a:42:3b:5c:92:3b:43:b8:4a:2b:a2:30:a8: cc:9b:43:24:bc:47:10:38:2f:d5:ea:c7:01:fd:67: 44:ee:c2:4c:fa:69:47:11:79:f3:aa:53:bd:f7:ae: 21:cb:db:0f:23:52:64:25:d2:11:75:70:c3:24:b2: 7c:92:65:07:58:fc:d5:f7:33:a1:ea:8b:98:04:76: 83:7a:ad:bb:38:e9:1f:2e:34:b1:5c:37:fe:f9:de: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6B:BA:E3:14:24:59:30:CE:88:83:65:0B:A7:EE:32:45:96:DE:FC X509v3 Authority Key Identifier: keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:24:e5:db:b6:aa:da:b6:74:94:a5:94:ca:1a:eb:04:78:23: 71:80:d1:2c:94:20:42:cf:2d:b5:4f:c5:aa:84:64:29:4e:cc: 84:6f:78:39:b3:d3:2b:49:5a:23:a7:34:25:ea:50:89:8e:5e: 70:03:a6:f8:87:59:6c:38:05:5f:62:03:e2:ae:53:5f:a2:3e: fa:6c:d7:54:a0:34:5a:ab:7b:fb:2a:48:41:af:d7:33:a0:ca: 14:b2:c0:c7:ef:94:78:63:c4:20:7d:17:ed:f9:61:57:04:1e: e7:9e:8b:db:a7:ac:ac:71:d8:1c:e1:dd:21:32:c1:c6:76:26: 10:88:11:11:82:0c:cc:74:f8:c4:1e:c6:a3:38:00:2b:50:8e: b5:c7:90:9b:e4:b1:ff:0f:93:2a:9e:2e:ae:18:d1:b2:74:c0: e3:30:5d:7f:9d:34:09:45:32:3f:dd:2b:aa:f0:c0:40:35:47: 73:c9:ac:83:9a:77:88:96:7f:2b:82:3b:42:9b:0e:f2:f2:c7: 9e:ea:87:73:0a:5a:96:aa:4e:b7:5d:d3:17:65:c6:37:2a:79: 1b:c5:af:19:ba:bf:f9:ca:d0:cc:49:45:fa:6e:5a:73:94:e3: 82:21:e2:b6:8e:ee:39:22:22:f9:7e:12:26:1a:ea:6d:3f:54: ae:c0:bd:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPRL9vI0h2jtsSAPPYochM4eubEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1 NTgxQTkzODAeFw0yNjA0MjAyMjE2MjJaFw0yNjA0MjQxMDA3MjJaMDMxMTAvBgNV BAMTKEIxNkJCQUUzMTQyNDU5MzBDRTg4ODM2NTBCQTdFRTMyNDU5NkRFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/USdN2axmQTQe69AJwyZjXDXw gCuoLVf4XWUiREaFhO+HTf0YKbxYksOMH46/IPVRgC13PXz4b24LEwWqdb6xHCOa hgq80Y6jDJEOGUzNQAZ06UTumtDT1eUFcHTszpRIdMvdRvGyF7x3nFT9USouFFW3 jijJ2FZfI3h5IYDPGAc2TQ8ISvoyYm077/08eRZXu22k7COrjOJ4fnpQW7x6fqwT /ejnmkI7XJI7Q7hKK6IwqMybQyS8RxA4L9XqxwH9Z0Tuwkz6aUcRefOqU733riHL 2w8jUmQl0hF1cMMksnySZQdY/NX3M6Hqi5gEdoN6rbs46R8uNLFcN/753rNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWu64xQkWTDOiINlC6fuMkWW3vwwHwYDVR0j BBgwFoAUJRhZ+nJuhOuO8Vhcax89klWBqTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTM2NzRhNi0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC8yNTE4NTlGQTcy NkU4NEVCOEVGMTU4NUM2QjFGM0Q5MjU1ODFBOTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1NTgx QTkzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNE OTI1NTgxQTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABok5du2qtq2dJSllMoa6wR4I3GA0SyUIELP LbVPxaqEZClOzIRveDmz0ytJWiOnNCXqUImOXnADpviHWWw4BV9iA+KuU1+iPvps 11SgNFqre/sqSEGv1zOgyhSywMfvlHhjxCB9F+35YVcEHueei9unrKxx2Bzh3SEy wcZ2JhCIERGCDMx0+MQexqM4ACtQjrXHkJvksf8PkyqeLq4Y0bJ0wOMwXX+dNAlF Mj/dK6rwwEA1R3PJrIOad4iWfyuCO0KbDvLyx57qh3MKWpaqTrdd0xdlxjcqeRvF rxm6v/nK0MxJRfpuWnOU44Ih4raO7jkiIvl+EiYa6m0/VK7AvcM= -----END CERTIFICATE-----Generated at Wed Apr 22 08:51:21 2026 by rpki-client