$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: TLg+A7ocu/9W2rWIf3mxVcm8BtLgyD8FFbJvYZYdxts= Subject key identifier: FA:71:A1:2C:DA:80:1D:E1:36:40:88:28:A5:AF:3D:FE:86:19:D8:29 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 5F60CCBA4DCD368F467D7C7316B128C9A9F5817F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 056A Signing time: Tue 21 Apr 2026 11:02:01 +0000 Manifest this update: Tue 21 Apr 2026 10:57:01 +0000 Manifest next update: Fri 24 Apr 2026 17:44:01 +0000 Files and hashes: 1: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: njF+0dAl2pHr0RKqsz1ggKpXELW5P3lHs0y09FBuFz0=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: kgZKXciouqYxyaCb3pkVMZtcXFuR5UYLlu1bj1dZn8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 17:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:60:cc:ba:4d:cd:36:8f:46:7d:7c:73:16:b1:28:c9:a9:f5:81:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Apr 21 10:57:01 2026 GMT Not After : Apr 24 17:44:01 2026 GMT Subject: CN=FA71A12CDA801DE136408828A5AF3DFE8619D829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:3e:c3:92:ba:fe:88:f6:85:86:96:d5:b0: 03:b7:18:66:e2:82:53:5b:9f:80:bf:85:44:ac:ff: fe:1d:97:7e:63:db:96:fd:e0:99:59:57:d3:38:39: 7a:29:ab:ec:59:a4:88:dc:ec:c6:ac:96:c8:1b:dd: 17:ab:56:07:d7:3f:98:8c:0d:5b:9c:9b:94:1b:ad: f0:bd:ad:a8:76:d6:11:08:bf:7c:8e:d7:a9:db:3f: 3a:b7:76:75:a1:1b:4d:cb:a7:ca:93:52:71:68:ff: 4c:96:1d:56:a3:9d:e2:f6:32:7f:65:42:78:39:01: 34:63:15:31:74:49:db:38:eb:10:34:c6:ec:fd:c2: 35:ac:f9:25:a4:da:44:1a:96:43:28:6b:c4:23:5c: b0:52:5b:92:74:27:b9:9a:ec:c7:dc:00:44:1d:47: da:ca:ee:68:0e:bb:bb:d3:62:9c:8c:40:63:58:4c: fe:86:7f:57:f6:10:7d:a7:f2:21:c0:42:e2:f8:8f: 91:e1:39:39:22:df:6f:36:d1:43:9c:ad:9f:92:37: b8:41:a1:5e:b6:42:3c:38:89:cf:e8:2a:14:02:9b: 3d:26:f0:88:e0:ee:5e:ce:eb:7c:d1:32:f2:63:1c: 16:66:16:7e:b2:78:be:92:75:ad:8c:b7:e8:97:e8: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:71:A1:2C:DA:80:1D:E1:36:40:88:28:A5:AF:3D:FE:86:19:D8:29 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:80:04:7d:bb:42:5f:1f:e6:14:d8:3e:b9:31:f7:d5:ed: 8d:f4:04:4c:bb:56:53:27:52:a6:a2:3e:70:f2:de:bb:a6:c2: cc:cb:00:3c:cd:5d:69:67:12:88:e9:cb:ee:0d:58:03:92:51: 4d:c2:cc:53:1b:a0:84:b7:9a:a5:5a:95:7b:02:da:d1:19:6a: 4f:fc:05:68:87:68:d7:7a:2c:32:3a:99:42:52:e6:58:71:b7: 92:0b:e3:60:6f:32:e8:6e:85:dc:3e:c3:1a:65:1e:f0:66:60: 55:86:eb:8c:46:17:81:d4:8b:fd:d1:d2:1e:e1:22:76:85:32: 31:e1:75:16:c3:4b:3c:84:a4:b0:5d:90:a2:4d:16:cb:56:a3: ef:9d:45:8a:63:32:7e:1e:93:13:c8:11:02:bc:18:c3:e1:79: 76:2d:43:13:29:bb:08:9b:c3:43:19:ce:8e:fe:51:3a:e6:6b: b8:ee:f4:93:8a:17:5f:a7:c2:41:54:c5:b9:02:a3:72:4b:3b: 90:aa:9a:53:a1:e4:b0:a0:2c:2c:a1:f6:f3:9a:e8:a4:41:7b: ca:a4:c9:1a:f4:c4:29:a6:70:1f:20:34:be:23:de:b9:69:ba: 68:d0:86:0d:a6:65:1f:b1:9e:03:b9:c8:07:c3:71:e9:db:60: ba:7c:47:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2DMuk3NNo9GfXxzFrEoyan1gX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNjA0MjExMDU3MDFaFw0yNjA0MjQxNzQ0MDFaMDMxMTAvBgNV BAMTKEZBNzFBMTJDREE4MDFERTEzNjQwODgyOEE1QUYzREZFODYxOUQ4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksT7Dkrr+iPaFhpbVsAO3GGbi glNbn4C/hUSs//4dl35j25b94JlZV9M4OXopq+xZpIjc7Maslsgb3RerVgfXP5iM DVucm5QbrfC9rah21hEIv3yO16nbPzq3dnWhG03Lp8qTUnFo/0yWHVajneL2Mn9l Qng5ATRjFTF0Sds46xA0xuz9wjWs+SWk2kQalkMoa8QjXLBSW5J0J7ma7MfcAEQd R9rK7mgOu7vTYpyMQGNYTP6Gf1f2EH2n8iHAQuL4j5HhOTki32820UOcrZ+SN7hB oV62Qjw4ic/oKhQCmz0m8Ijg7l7O63zRMvJjHBZmFn6yeL6Sda2Mt+iX6LKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+nGhLNqAHeE2QIgopa89/oYZ2CkwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfMgAR9u0JfH+YU2D65MffV7Y30BEy7VlMn UqaiPnDy3rumwszLADzNXWlnEojpy+4NWAOSUU3CzFMboIS3mqValXsC2tEZak/8 BWiHaNd6LDI6mUJS5lhxt5IL42BvMuhuhdw+wxplHvBmYFWG64xGF4HUi/3R0h7h InaFMjHhdRbDSzyEpLBdkKJNFstWo++dRYpjMn4ekxPIEQK8GMPheXYtQxMpuwib w0MZzo7+UTrma7ju9JOKF1+nwkFUxbkCo3JLO5CqmlOh5LCgLCyh9vOa6KRBe8qk yRr0xCmmcB8gNL4j3rlpumjQhg2mZR+xngO5yAfDcenbYLp8R1Q= -----END CERTIFICATE-----Generated at Wed Apr 22 16:09:36 2026 by rpki-client