$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft File: 990382439FFA8C086A4458B338B52CCD0D54CFA8.mft (raw, json) Hash identifier: j2Wzd8PPeONH00Qf0reWA10MYmKglFNPjSjHjYNHBI8= Subject key identifier: 34:10:02:04:42:93:7A:41:6B:86:15:46:EF:C2:A1:E0:0A:C4:5F:62 Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 Certificate issuer: /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Certificate serial: 15FA954F2ECC3E63F70FD330587472FFDBB0F957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft Manifest number: 1C Signing time: Mon 20 Apr 2026 01:41:48 +0000 Manifest this update: Mon 20 Apr 2026 01:36:48 +0000 Manifest next update: Thu 23 Apr 2026 07:09:48 +0000 Files and hashes: 1: 990382439FFA8C086A4458B338B52CCD0D54CFA8.crl (hash: zfM4LFpNJYdAfPuyM62Cuo9aqTJvFzhrsZP3Oc9o31w=) 2: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: 6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 07:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fa:95:4f:2e:cc:3e:63:f7:0f:d3:30:58:74:72:ff:db:b0:f9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Validity Not Before: Apr 20 01:36:48 2026 GMT Not After : Apr 23 07:09:48 2026 GMT Subject: CN=3410020442937A416B861546EFC2A1E00AC45F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:26:59:14:82:ee:f5:ca:9a:30:f8:b8:5a: 3f:57:ec:4f:fe:5e:35:a8:3f:44:34:4f:1d:2b:32: 96:87:32:68:96:a3:d7:bd:42:d5:8f:a5:a2:67:ea: 3d:8d:1e:79:e8:68:cd:d2:5f:35:c7:df:1b:be:bc: 86:57:29:24:8f:5c:e1:69:ce:9e:d8:ce:74:6a:d9: 28:a9:6d:76:96:4d:13:61:40:58:43:c4:71:b6:3a: 49:7b:a7:83:90:b7:34:74:15:3b:d1:57:d1:6c:27: e2:5e:f1:e2:b1:3b:e4:e5:2d:ed:5d:7e:2f:57:b8: 33:80:2b:1e:36:53:ac:ca:06:cd:fe:94:28:b0:58: 59:a0:2b:b8:1e:d6:7e:59:1f:e4:24:3f:60:e0:09: f4:5e:ab:34:9b:34:82:19:ae:55:e5:80:5f:1c:4a: e1:13:e1:23:6c:98:c8:89:20:3c:0e:d7:90:05:a4: b4:f1:59:5e:8a:1c:78:7d:cf:73:64:58:03:94:3c: a3:7c:05:30:23:cf:6d:75:ae:84:e9:0c:12:d9:73: cb:29:0a:49:29:b9:fc:01:4c:4f:23:ed:0c:e0:e9: ce:5f:21:e6:66:3a:21:15:af:86:b0:bc:4c:0c:bc: 76:8e:5a:04:2b:4b:c3:b6:44:ea:cc:c2:81:c6:ab: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:02:04:42:93:7A:41:6B:86:15:46:EF:C2:A1:E0:0A:C4:5F:62 X509v3 Authority Key Identifier: keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:ab:ab:57:0e:e6:84:55:be:df:52:37:b1:e1:35:df:e3: 66:1a:7a:3a:0a:97:3c:13:27:c0:37:0d:d8:4c:b1:a5:51:37: 2a:c5:25:6f:80:67:6e:f3:17:ed:d2:fa:cd:53:db:d9:3b:ca: 71:d0:3e:d2:17:97:f3:5b:86:56:a0:43:e5:c7:9a:0f:dc:ad: 21:25:fe:54:5e:76:c7:7b:7f:e8:de:c2:13:6b:d9:7a:f3:97: d1:27:17:d0:5f:f5:62:ba:04:ec:84:85:b7:5b:03:ba:53:65: d0:21:a2:fb:34:0e:2f:a0:42:21:ac:2d:11:22:a6:5a:d1:f7: ba:50:6d:b8:4b:fb:bc:62:1e:e2:1c:ee:f4:76:83:18:cc:00: 8d:3d:b8:32:4c:9f:ac:ba:2e:85:f7:8e:3a:71:88:f5:0c:93: 40:22:11:42:87:97:81:71:f4:c0:6a:0a:a1:12:d4:e5:54:41: 58:39:b9:5f:1a:ef:9f:a6:dc:28:ad:6d:19:1e:7c:56:a9:85: c7:fd:79:25:72:aa:04:8f:e4:32:50:4d:d7:f4:0d:50:66:29: 98:c1:1b:d9:23:bb:03:aa:23:a3:56:c9:cd:62:9c:89:61:5d: 21:0e:dc:34:ab:85:a3:7d:95:d8:d8:90:59:72:82:71:fd:89: 00:32:1b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfqVTy7MPmP3D9MwWHRy/9uw+VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0Qw RDU0Q0ZBODAeFw0yNjA0MjAwMTM2NDhaFw0yNjA0MjMwNzA5NDhaMDMxMTAvBgNV BAMTKDM0MTAwMjA0NDI5MzdBNDE2Qjg2MTU0NkVGQzJBMUUwMEFDNDVGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCSZZFILu9cqaMPi4Wj9X7E/+ XjWoP0Q0Tx0rMpaHMmiWo9e9QtWPpaJn6j2NHnnoaM3SXzXH3xu+vIZXKSSPXOFp zp7YznRq2SipbXaWTRNhQFhDxHG2Okl7p4OQtzR0FTvRV9FsJ+Je8eKxO+TlLe1d fi9XuDOAKx42U6zKBs3+lCiwWFmgK7ge1n5ZH+QkP2DgCfReqzSbNIIZrlXlgF8c SuET4SNsmMiJIDwO15AFpLTxWV6KHHh9z3NkWAOUPKN8BTAjz211roTpDBLZc8sp CkkpufwBTE8j7Qzg6c5fIeZmOiEVr4awvEwMvHaOWgQrS8O2ROrMwoHGq669AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBACBEKTekFrhhVG78Kh4ArEX2IwHwYDVR0j BBgwFoAUmQOCQ5/6jAhqRFizOLUszQ1Uz6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMC85OTAzODI0MzlG RkE4QzA4NkE0NDU4QjMzOEI1MkNDRDBENTRDRkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0QwRDU0 Q0ZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJD Q0QwRDU0Q0ZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3+q6tXDuaEVb7fUjex4TXf42YaejoKlzwT J8A3DdhMsaVRNyrFJW+AZ27zF+3S+s1T29k7ynHQPtIXl/NbhlagQ+XHmg/crSEl /lRedsd7f+jewhNr2Xrzl9EnF9Bf9WK6BOyEhbdbA7pTZdAhovs0Di+gQiGsLREi plrR97pQbbhL+7xiHuIc7vR2gxjMAI09uDJMn6y6LoX3jjpxiPUMk0AiEUKHl4Fx 9MBqCqES1OVUQVg5uV8a75+m3CitbRkefFaphcf9eSVyqgSP5DJQTdf0DVBmKZjB G9kjuwOqI6NWyc1inIlhXSEO3DSrhaN9ldjYkFlygnH9iQAyG+M= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:24 2026 by rpki-client