$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: DW5Ko4QH2kOy2cSkEBn1tKOsYkYWLNm/OqpN75OSKLw= Subject key identifier: 41:D8:63:5C:CC:5A:43:FD:FF:BE:BD:D2:2E:CA:77:41:DA:95:59:CD Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 7A8FAA71221A35BC6869D7A2FE6562C204B253E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 0224 Signing time: Mon 20 Apr 2026 23:31:45 +0000 Manifest this update: Mon 20 Apr 2026 23:26:45 +0000 Manifest next update: Fri 24 Apr 2026 02:01:45 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: Djraq3jY5PTjg4Gm8365tvrZxscoiZv9YaYzp8auc84=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8f:aa:71:22:1a:35:bc:68:69:d7:a2:fe:65:62:c2:04:b2:53:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Apr 20 23:26:45 2026 GMT Not After : Apr 24 02:01:45 2026 GMT Subject: CN=41D8635CCC5A43FDFFBEBDD22ECA7741DA9559CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:10:c6:4c:25:f8:c4:43:ac:7c:3c:bb:10: 2a:24:48:07:22:2a:f0:3a:18:26:15:1a:69:5f:9f: 02:77:06:e8:6c:8c:69:74:00:7d:88:7b:ad:b4:5a: 30:46:12:28:8e:36:fa:f1:11:2d:6e:2e:c7:f8:db: 06:dd:78:df:71:1d:2d:e9:61:db:1b:14:1e:47:fe: 8c:16:52:ac:d6:07:d9:40:60:b2:20:61:ba:93:5b: 7f:23:af:ff:49:42:47:7d:18:da:77:36:de:f6:21: 17:77:d5:40:84:86:91:31:98:9b:48:5a:e0:68:48: 63:13:a5:c9:2b:8f:60:6e:74:37:53:01:11:64:ec: 3f:69:7b:55:9f:d5:54:c4:0e:9b:07:c8:61:90:83: b3:1d:48:30:82:75:7d:51:7a:0f:1c:82:a4:e1:0a: 59:02:93:96:f0:c1:f1:e3:ad:83:d1:7d:66:f6:56: 34:f5:f9:0b:fe:05:6d:48:74:c8:b2:eb:e7:4c:f8: 43:71:54:05:b8:6d:98:64:1a:a5:e0:56:ca:eb:21: fb:7a:9b:5d:eb:55:06:3a:f7:ce:e1:96:a3:0e:02: e1:ee:e3:34:9d:eb:53:4c:5a:f8:64:4f:7e:e3:01: 7f:cc:c7:35:88:b3:ab:7b:7d:2f:96:63:ab:77:d2: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D8:63:5C:CC:5A:43:FD:FF:BE:BD:D2:2E:CA:77:41:DA:95:59:CD X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:4c:f9:70:51:fa:1c:10:44:da:95:20:83:34:a7:4c:4e: 09:1b:f0:1f:8a:ab:4c:81:38:26:2e:f1:19:93:38:0f:84:79: bd:9b:6d:46:55:62:b4:08:eb:a0:fb:ac:4c:3d:0f:9e:1c:c4: 4d:d1:c0:1e:f0:de:31:6f:aa:96:30:d5:de:61:32:14:c9:65: c4:c7:19:1b:b2:61:ef:bd:a6:49:d2:3c:20:3c:55:54:6d:de: 7b:38:03:07:85:61:2b:b4:5f:00:50:ff:9f:14:be:a0:cd:9a: e2:0e:5c:22:48:5e:87:c4:46:e8:69:80:9c:6c:23:de:2c:4f: 18:f6:24:0a:00:05:cd:63:ec:dd:37:e0:6d:38:de:36:8d:50: 3d:8f:80:b3:f1:b4:24:0f:7b:1a:14:ad:b7:0f:3d:fd:33:7e: 15:c6:bb:a9:3a:e0:b2:64:a5:ec:77:77:a0:6f:27:b8:a0:ae: c7:bc:86:72:e0:4b:e4:d6:c2:68:0f:b6:52:1c:60:21:15:3e: d4:a2:30:1b:85:38:56:52:3a:00:45:67:67:7b:81:64:a3:ec: fd:7a:09:22:5f:19:cb:ed:1b:66:62:3f:95:a8:24:8d:ca:29: ac:a5:70:dc:ec:30:dd:5b:90:a3:d2:a5:93:69:36:e4:d6:ad: 5f:07:e9:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeo+qcSIaNbxoadei/mViwgSyU+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNjA0MjAyMzI2NDVaFw0yNjA0MjQwMjAxNDVaMDMxMTAvBgNV BAMTKDQxRDg2MzVDQ0M1QTQzRkRGRkJFQkREMjJFQ0E3NzQxREE5NTU5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQRDGTCX4xEOsfDy7ECokSAci KvA6GCYVGmlfnwJ3BuhsjGl0AH2Ie620WjBGEiiONvrxES1uLsf42wbdeN9xHS3p YdsbFB5H/owWUqzWB9lAYLIgYbqTW38jr/9JQkd9GNp3Nt72IRd31UCEhpExmJtI WuBoSGMTpckrj2BudDdTARFk7D9pe1Wf1VTEDpsHyGGQg7MdSDCCdX1Reg8cgqTh ClkCk5bwwfHjrYPRfWb2VjT1+Qv+BW1IdMiy6+dM+ENxVAW4bZhkGqXgVsrrIft6 m13rVQY6987hlqMOAuHu4zSd61NMWvhkT37jAX/MxzWIs6t7fS+WY6t30t6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQdhjXMxaQ/3/vr3SLsp3QdqVWc0wHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpETPlwUfocEETalSCDNKdMTgkb8B+Kq0yB OCYu8RmTOA+Eeb2bbUZVYrQI66D7rEw9D54cxE3RwB7w3jFvqpYw1d5hMhTJZcTH GRuyYe+9pknSPCA8VVRt3ns4AweFYSu0XwBQ/58UvqDNmuIOXCJIXofERuhpgJxs I94sTxj2JAoABc1j7N034G043jaNUD2PgLPxtCQPexoUrbcPPf0zfhXGu6k64LJk pex3d6BvJ7igrse8hnLgS+TWwmgPtlIcYCEVPtSiMBuFOFZSOgBFZ2d7gWSj7P16 CSJfGcvtG2ZiP5WoJI3KKaylcNzsMN1bkKPSpZNpNuTWrV8H6f0= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:50 2026 by rpki-client