$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json) Hash identifier: uXshghAOfVmGp194lyeCQ5WGLIdadHfeT4oBzXjm8Yo= Subject key identifier: 5A:EC:2E:97:7C:BB:78:F2:54:62:B7:4F:19:CE:64:AF:F3:3A:82:B8 Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Certificate serial: 641C110896874B2EF8E61321374D70FCC8DD8532 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft Manifest number: 0120 Signing time: Tue 21 Apr 2026 06:32:41 +0000 Manifest this update: Tue 21 Apr 2026 06:27:41 +0000 Manifest next update: Fri 24 Apr 2026 11:45:41 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=) 2: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: bSYCv2VJ6nM+PFwa0WAnMCLlqX2OE+73s8QKSVRMV1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 11:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1c:11:08:96:87:4b:2e:f8:e6:13:21:37:4d:70:fc:c8:dd:85:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Validity Not Before: Apr 21 06:27:41 2026 GMT Not After : Apr 24 11:45:41 2026 GMT Subject: CN=5AEC2E977CBB78F25462B74F19CE64AFF33A82B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:1b:85:f7:56:99:ca:4b:31:c6:f0:d8:28: 5f:e1:4f:c6:6c:0c:10:f4:be:fd:31:cd:b4:17:85: 00:81:26:06:8e:ad:6e:1d:4b:18:01:29:76:6b:aa: 87:93:ea:ff:29:5a:11:9d:01:de:6d:bc:a0:24:43: 1b:72:38:a6:3b:51:8a:a4:d8:be:5b:f3:d2:24:bf: b1:e4:11:fa:df:5c:aa:40:c1:c1:4c:da:2f:3e:4d: 5c:ee:c8:1f:d0:c4:a8:26:cc:a3:7f:94:94:8f:2d: 17:ca:e1:f9:81:85:87:76:d4:0c:25:93:35:85:5f: a0:f8:af:df:8b:82:40:76:24:fe:73:6c:91:01:d9: a3:ff:18:5d:85:31:71:1b:36:7c:21:ec:08:85:9d: 91:5a:c2:0d:05:08:64:f6:44:18:78:56:f7:01:08: 3b:4c:51:15:33:c0:81:6d:0a:e3:59:32:cc:ac:8c: 4e:91:f1:63:72:c8:cd:95:8d:c4:81:ce:3b:dd:fe: 7c:6e:cf:1c:09:f1:76:89:ed:0d:a5:a6:ac:c9:ee: 0d:9e:b8:6a:2b:74:c5:df:e9:7f:f0:85:65:4a:be: 91:90:18:bd:00:41:27:c8:ad:3f:4d:0f:4c:36:c2: 18:c8:41:4f:b9:86:55:6b:0d:38:49:31:82:a3:cd: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:2E:97:7C:BB:78:F2:54:62:B7:4F:19:CE:64:AF:F3:3A:82:B8 X509v3 Authority Key Identifier: keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4d:58:c7:32:5a:24:ae:ce:fa:39:e0:2d:4c:b1:87:9c:09: 0a:44:2b:e1:16:1b:c3:92:d4:fd:b6:c3:3a:08:3e:8b:02:b6: c8:ca:6a:18:91:8a:2f:c9:f3:e1:a1:fb:67:a4:85:a4:b8:27: 92:67:84:4f:3c:d8:23:60:43:ef:ed:f7:cf:d2:36:5a:f0:ca: f6:19:b1:a9:5b:05:0d:c6:6b:eb:78:ff:39:f0:5b:77:09:b7: e8:06:da:4d:d1:ae:b7:56:22:fb:98:48:25:85:92:5c:ea:34: e8:b2:56:6b:4a:7a:2b:dc:37:8b:eb:f9:da:45:5d:d2:e5:77: bc:ef:38:36:f2:e8:ea:dc:f3:9f:e9:4d:ce:ad:c7:60:f1:ed: 8a:e5:a9:25:7c:f4:7f:03:d2:27:af:3e:7a:9d:0c:44:55:41: 10:1c:73:05:d3:f5:77:d9:64:01:f6:23:2f:5d:58:6c:a7:7b: 69:73:89:df:cb:ab:ae:e6:d0:5e:88:40:70:62:f2:c2:14:dc: 30:02:30:6a:3c:6f:65:ca:27:34:0e:ee:94:91:1a:ac:a9:cb: 1e:0d:5a:7b:75:00:2d:dd:f6:77:11:c2:84:1a:4e:63:36:1c: 53:1d:7f:9e:ec:72:6c:d2:a2:fb:6d:3f:86:ef:bd:07:ac:59: 2e:1b:19:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBwRCJaHSy745hMhN01w/MjdhTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3 NjY4MEFFRjAeFw0yNjA0MjEwNjI3NDFaFw0yNjA0MjQxMTQ1NDFaMDMxMTAvBgNV BAMTKDVBRUMyRTk3N0NCQjc4RjI1NDYyQjc0RjE5Q0U2NEFGRjMzQTgyQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72huF91aZyksxxvDYKF/hT8Zs DBD0vv0xzbQXhQCBJgaOrW4dSxgBKXZrqoeT6v8pWhGdAd5tvKAkQxtyOKY7UYqk 2L5b89Ikv7HkEfrfXKpAwcFM2i8+TVzuyB/QxKgmzKN/lJSPLRfK4fmBhYd21Awl kzWFX6D4r9+LgkB2JP5zbJEB2aP/GF2FMXEbNnwh7AiFnZFawg0FCGT2RBh4VvcB CDtMURUzwIFtCuNZMsysjE6R8WNyyM2VjcSBzjvd/nxuzxwJ8XaJ7Q2lpqzJ7g2e uGordMXf6X/whWVKvpGQGL0AQSfIrT9ND0w2whjIQU+5hlVrDThJMYKjzbhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuwul3y7ePJUYrdPGc5kr/M6grgwHwYDVR0j BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1 QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4 MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0 OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtNWMcyWiSuzvo54C1MsYecCQpEK+EWG8OS 1P22wzoIPosCtsjKahiRii/J8+Gh+2ekhaS4J5JnhE882CNgQ+/t98/SNlrwyvYZ salbBQ3Ga+t4/znwW3cJt+gG2k3RrrdWIvuYSCWFklzqNOiyVmtKeivcN4vr+dpF XdLld7zvODby6Orc85/pTc6tx2Dx7YrlqSV89H8D0ievPnqdDERVQRAccwXT9XfZ ZAH2Iy9dWGyne2lzid/Lq67m0F6IQHBi8sIU3DACMGo8b2XKJzQO7pSRGqypyx4N Wnt1AC3d9ncRwoQaTmM2HFMdf57scmzSovttP4bvvQesWS4bGcc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client