$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: PVLWwCM7kGCeUI/qNyuk6Gi2g1+/ZIY0/TgxXYkAqxE= Subject key identifier: 04:FA:CA:95:D7:49:23:C3:A1:04:A9:9A:6D:03:0B:F4:CD:11:F8:80 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 0CA7E8F2613CF4EE25A32CA57F97532AE88251F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 0139 Signing time: Mon 20 Apr 2026 14:51:18 +0000 Manifest this update: Mon 20 Apr 2026 14:46:18 +0000 Manifest next update: Fri 24 Apr 2026 02:40:18 +0000 Files and hashes: 1: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: MJL8y+ts+SbyKe25GsmK72wYgCtd/uW/JEQbAsHkr0s=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: e0KMuAk3wKVRfXy4hiXD02tyuukRyMl2I0WHnvKBFvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a7:e8:f2:61:3c:f4:ee:25:a3:2c:a5:7f:97:53:2a:e8:82:51:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Apr 20 14:46:18 2026 GMT Not After : Apr 24 02:40:18 2026 GMT Subject: CN=04FACA95D74923C3A104A99A6D030BF4CD11F880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:5c:6a:d1:ed:42:ec:90:0c:81:03:9c:98: 3f:70:33:8a:20:5b:4f:1b:bb:4d:54:18:fd:d9:e0: 80:80:ba:7c:37:4c:6d:bc:fa:4f:4b:98:ec:68:a6: 66:d9:e7:1b:19:b7:9a:49:b1:90:92:18:1f:8b:7d: 50:6f:f6:19:be:e1:e7:5c:1e:70:9b:f8:bc:22:80: ab:47:f0:6d:76:2f:92:64:6a:63:cb:66:ff:29:b1: d1:3e:69:95:b7:fe:ff:ae:90:f6:9b:8f:df:c4:57: ed:f2:55:a7:fb:c5:18:ed:3f:d5:08:1c:fe:33:cc: a6:c0:8c:b1:5a:1a:b9:f5:69:fd:80:72:c4:b2:8e: 47:6f:1b:64:5b:5a:ac:af:c5:89:64:32:d3:58:1f: 3f:03:b2:8f:a2:64:43:1f:2f:27:e9:b4:4b:ba:93: d2:2c:ec:ef:3d:ce:8f:2b:b6:50:88:e9:35:32:b9: a7:94:b1:f9:dd:99:8f:0b:81:7c:3b:bf:20:23:f3: f5:19:b2:f1:44:ac:09:36:04:84:41:b1:22:2e:d6: 8b:e8:b1:1e:ff:eb:3e:ad:a3:5f:ab:35:1f:d6:6c: 2a:f7:68:3e:6d:bd:56:26:51:49:57:e1:a3:27:af: 3e:ee:22:db:74:d7:46:83:5d:25:26:47:26:a6:0b: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FA:CA:95:D7:49:23:C3:A1:04:A9:9A:6D:03:0B:F4:CD:11:F8:80 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:54:52:1e:53:88:62:a6:17:80:7e:8b:5f:18:52:e7:b3:82: 11:0c:a7:6c:d9:2c:54:0d:ef:76:24:6b:fa:7d:ab:18:42:97: 77:6a:1a:91:db:07:ef:a6:05:c5:36:1d:33:6e:61:86:1d:ed: 28:12:9c:7c:c4:50:61:d6:79:f2:cd:9b:2b:8b:2a:25:86:c7: c1:e1:d7:26:35:6a:95:13:0e:c6:a5:b0:0e:66:5e:fc:57:f5: b9:47:2a:26:2b:59:3e:a1:d9:83:5e:1e:a2:83:de:15:91:e8: 78:fe:fc:a3:85:88:17:93:aa:e0:0b:6e:0a:18:e8:ff:c9:1c: 3b:e1:33:2e:d7:ee:09:ff:0a:5d:95:86:8b:5d:23:bc:12:16: 00:b9:28:f4:8e:79:5c:90:e5:7a:77:17:d6:9f:8a:15:6b:8c: bc:c0:5e:65:24:4f:c4:47:ae:c6:e9:b9:39:8b:7a:8a:a6:fc: d0:86:42:86:97:5b:46:5b:fa:ca:3d:0d:20:22:35:e6:3f:aa: b9:3e:48:6d:c6:19:8b:29:8c:e3:56:10:db:43:0a:3e:3c:24: 4f:01:2a:a8:1e:b6:bf:5d:44:8a:a2:4d:a8:09:1b:53:d7:00: 99:b6:ad:32:25:5d:19:77:a3:ec:57:b6:4f:45:3f:6b:0c:06: f3:08:09:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKfo8mE89O4loyylf5dTKuiCUfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNjA0MjAxNDQ2MThaFw0yNjA0MjQwMjQwMThaMDMxMTAvBgNV BAMTKDA0RkFDQTk1RDc0OTIzQzNBMTA0QTk5QTZEMDMwQkY0Q0QxMUY4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SVxq0e1C7JAMgQOcmD9wM4og W08bu01UGP3Z4ICAunw3TG28+k9LmOxopmbZ5xsZt5pJsZCSGB+LfVBv9hm+4edc HnCb+LwigKtH8G12L5JkamPLZv8psdE+aZW3/v+ukPabj9/EV+3yVaf7xRjtP9UI HP4zzKbAjLFaGrn1af2AcsSyjkdvG2RbWqyvxYlkMtNYHz8Dso+iZEMfLyfptEu6 k9Is7O89zo8rtlCI6TUyuaeUsfndmY8LgXw7vyAj8/UZsvFErAk2BIRBsSIu1ovo sR7/6z6to1+rNR/WbCr3aD5tvVYmUUlX4aMnrz7uItt010aDXSUmRyamC4o/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPrKlddJI8OhBKmabQML9M0R+IAwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINUUh5TiGKmF4B+i18YUuezghEMp2zZLFQN 73Yka/p9qxhCl3dqGpHbB++mBcU2HTNuYYYd7SgSnHzEUGHWefLNmyuLKiWGx8Hh 1yY1apUTDsalsA5mXvxX9blHKiYrWT6h2YNeHqKD3hWR6Hj+/KOFiBeTquALbgoY 6P/JHDvhMy7X7gn/Cl2VhotdI7wSFgC5KPSOeVyQ5Xp3F9afihVrjLzAXmUkT8RH rsbpuTmLeoqm/NCGQoaXW0Zb+so9DSAiNeY/qrk+SG3GGYspjONWENtDCj48JE8B Kqgetr9dRIqiTagJG1PXAJm2rTIlXRl3o+xXtk9FP2sMBvMICVM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client