$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: opTDyW30hIIiVXJbX4WLnSQ3Ada3YM2BJliefpWsp2w= Subject key identifier: E3:BC:56:E5:DD:EC:88:42:60:CB:F1:B9:FF:69:3F:CD:27:3A:DF:B8 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 3A2E7BB0A0ABDEB09042D8FEC905E8E890C03F48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: 0124 Signing time: Tue 21 Apr 2026 11:41:13 +0000 Manifest this update: Tue 21 Apr 2026 11:36:12 +0000 Manifest next update: Fri 24 Apr 2026 20:22:12 +0000 Files and hashes: 1: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: I+B2xyCq2gKeBs5io4L4xkiExv2UduWKZyp/tUNCVmY=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2e:7b:b0:a0:ab:de:b0:90:42:d8:fe:c9:05:e8:e8:90:c0:3f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Apr 21 11:36:12 2026 GMT Not After : Apr 24 20:22:12 2026 GMT Subject: CN=E3BC56E5DDEC884260CBF1B9FF693FCD273ADFB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:7f:7a:ac:30:d0:26:00:43:22:7c:a5:5e: b5:a4:3e:10:3e:0c:38:27:b4:21:36:be:2c:f2:73: f5:94:66:75:49:5d:0a:58:8e:a8:aa:27:08:d1:ae: 05:32:29:1b:25:84:9f:c9:ed:75:c3:69:3d:5a:4f: c1:13:4f:0e:29:9b:06:5e:e6:7b:d4:9f:ea:1c:7e: 8c:e7:d8:58:6d:b7:0d:b3:2d:37:d3:39:b0:23:b0: f6:64:f9:2c:fb:78:8a:12:0e:0c:ba:65:f1:c9:2b: 9c:73:60:d6:5e:39:fb:01:06:ed:4e:ec:19:11:43: e8:5d:33:68:f7:5f:b3:8e:ba:fe:54:47:64:88:55: 0e:b5:1c:c6:39:94:14:49:2e:da:14:c1:26:55:d8: 53:90:f2:f7:8e:54:a0:80:a2:68:e8:06:57:fe:aa: b7:02:d1:3d:67:b1:9e:de:9d:66:22:6b:8f:7b:3e: 2c:5c:37:2e:72:af:bc:ad:71:6c:c1:a8:0a:b6:79: eb:6f:0a:9f:8d:4a:83:5e:b3:3b:b1:85:9c:ca:55: de:4f:60:e9:2f:2b:dd:fa:2c:8e:f6:93:53:cc:c9: 9f:78:df:f1:2a:0d:d1:47:f9:1b:01:b0:4d:39:bb: 27:5d:89:88:9d:16:38:bc:ae:e5:f2:dc:62:34:7a: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BC:56:E5:DD:EC:88:42:60:CB:F1:B9:FF:69:3F:CD:27:3A:DF:B8 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f9:04:43:43:3a:f3:8d:79:5e:d4:a3:01:ee:94:26:39:96: 45:8b:9d:f2:6d:86:a6:01:cf:99:5d:f6:54:74:a3:aa:97:ad: a4:d3:1d:02:dd:2f:1d:d2:b4:cf:01:bc:a7:32:dd:8f:1a:35: 05:d0:f0:5e:d8:27:d2:6e:24:c1:83:fa:a6:9e:14:de:6f:c2: a1:1f:65:56:01:d9:2f:e6:77:f1:fa:12:4c:a1:46:7e:f8:73: 3f:fc:e6:16:27:64:9f:c8:7d:5a:02:28:1d:0d:74:51:c5:b6: 86:3c:a4:33:12:3f:37:1f:f9:0e:a3:88:a8:7d:d6:93:62:f7: e8:93:14:c9:47:67:5c:5f:39:d3:89:9b:df:48:78:a6:13:57: 66:41:32:90:ce:a9:cc:b8:e0:d7:65:c3:1c:0a:b4:31:6e:36: 5f:a1:1d:3d:06:ec:23:33:45:ac:4a:5c:d4:35:db:57:23:bf: 08:db:ef:d1:c5:65:18:5a:91:4e:8b:44:26:1c:c4:8c:65:7b: 56:99:c1:38:d5:5c:cf:fc:0a:38:fe:8c:8b:62:56:92:d8:74: 2c:16:9f:64:23:a5:85:85:cc:a5:43:b9:97:1b:18:7f:6e:dd: b7:06:f1:9c:c9:e9:80:5f:7c:89:29:5e:b2:0e:dc:08:f8:11: 89:62:21:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOi57sKCr3rCQQtj+yQXo6JDAP0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNjA0MjExMTM2MTJaFw0yNjA0MjQyMDIyMTJaMDMxMTAvBgNV BAMTKEUzQkM1NkU1RERFQzg4NDI2MENCRjFCOUZGNjkzRkNEMjczQURGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfn96rDDQJgBDInylXrWkPhA+ DDgntCE2vizyc/WUZnVJXQpYjqiqJwjRrgUyKRslhJ/J7XXDaT1aT8ETTw4pmwZe 5nvUn+ocfozn2Fhttw2zLTfTObAjsPZk+Sz7eIoSDgy6ZfHJK5xzYNZeOfsBBu1O 7BkRQ+hdM2j3X7OOuv5UR2SIVQ61HMY5lBRJLtoUwSZV2FOQ8veOVKCAomjoBlf+ qrcC0T1nsZ7enWYia497PixcNy5yr7ytcWzBqAq2eetvCp+NSoNeszuxhZzKVd5P YOkvK936LI72k1PMyZ943/EqDdFH+RsBsE05uyddiYidFji8ruXy3GI0ekyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47xW5d3siEJgy/G5/2k/zSc637gwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH5BENDOvONeV7UowHulCY5lkWLnfJthqYB z5ld9lR0o6qXraTTHQLdLx3StM8BvKcy3Y8aNQXQ8F7YJ9JuJMGD+qaeFN5vwqEf ZVYB2S/md/H6EkyhRn74cz/85hYnZJ/IfVoCKB0NdFHFtoY8pDMSPzcf+Q6jiKh9 1pNi9+iTFMlHZ1xfOdOJm99IeKYTV2ZBMpDOqcy44NdlwxwKtDFuNl+hHT0G7CMz RaxKXNQ121cjvwjb79HFZRhakU6LRCYcxIxle1aZwTjVXM/8Cjj+jItiVpLYdCwW n2QjpYWFzKVDuZcbGH9u3bcG8ZzJ6YBffIkpXrIO3Aj4EYliIdM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client