$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: tDkYxWUPVbLNqzJwfmN5s/U48PapxGDZPppNmXuio5Y= Subject key identifier: C8:1B:17:66:A8:CE:DA:43:0C:9B:3F:44:52:B6:DB:11:0C:29:0E:0F Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 517F81112D80C78A585BF0D447A0390369FDC418 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 02C0 Signing time: Sun 26 Apr 2026 20:51:54 +0000 Manifest this update: Sun 26 Apr 2026 20:46:54 +0000 Manifest next update: Thu 30 Apr 2026 07:57:54 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: XmF406YkvuZrw5Zy6a4MgzJU/FVviQhxyigXdQyInXU=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) 4: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 07:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:81:11:2d:80:c7:8a:58:5b:f0:d4:47:a0:39:03:69:fd:c4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Apr 26 20:46:54 2026 GMT Not After : Apr 30 07:57:54 2026 GMT Subject: CN=C81B1766A8CEDA430C9B3F4452B6DB110C290E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:f2:a4:2c:97:97:ee:ac:39:87:6f:e4:ad: d7:57:f1:ef:59:ba:4b:03:51:0d:d1:64:c9:d3:15: b4:0d:51:08:21:f9:85:45:2a:82:7d:f1:e8:ce:27: 52:66:cb:6b:bf:46:aa:4d:3f:cc:71:c5:cc:f6:99: 29:37:31:c2:bf:70:c4:80:7b:96:a5:82:0a:b8:c7: 37:70:d3:fc:b3:2d:3e:34:f0:d6:1b:98:d1:73:82: 9f:a3:2f:5a:e2:37:2e:8c:23:a8:42:0a:97:9f:59: 64:9a:9c:0d:2f:36:2f:47:d2:40:87:ce:a4:eb:9c: bd:71:02:52:08:bf:c4:11:bd:9b:38:49:f4:7d:48: a7:55:40:79:5c:a1:fd:a6:49:67:f0:0b:fc:62:d8: 2b:25:b4:5d:fc:c3:b3:38:fa:3a:ff:86:f0:84:e7: f7:58:12:ec:ee:df:a6:0f:21:84:c6:4c:d7:0a:92: f3:bf:26:70:83:e0:ad:14:e2:e6:7e:ea:8c:3e:f5: 8b:e0:7d:aa:e3:7b:12:48:24:28:c2:80:85:58:2b: ac:9d:88:f9:34:15:de:79:75:7a:13:9e:ad:da:4e: ea:5c:61:a9:10:c4:f6:2b:38:7a:93:31:64:2e:7f: c7:ab:ed:c2:30:02:01:33:81:eb:9a:ff:ea:f0:2d: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1B:17:66:A8:CE:DA:43:0C:9B:3F:44:52:B6:DB:11:0C:29:0E:0F X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0e:71:e9:15:4e:c1:df:01:5c:8c:82:9c:5e:bd:16:97:61: 68:2e:8c:ae:93:bf:8c:e9:ce:cb:02:8e:bc:e9:35:10:7a:d6: 7f:0c:b8:70:a3:9e:ea:1b:6b:ef:12:5c:a4:b5:52:da:1c:6d: c0:3d:13:ea:24:6c:0f:22:37:c3:da:3b:85:87:31:2e:eb:65: 34:44:00:9c:2a:64:d7:50:af:35:b6:46:6b:3f:e3:22:f0:cc: f6:76:d3:06:91:35:a8:9e:b9:dc:c0:9b:c2:5c:20:1b:b8:73: fa:87:49:ef:e3:0c:0b:40:58:6d:27:68:17:eb:e8:6d:1d:0e: 76:dc:fa:f5:98:af:12:27:06:1c:ef:fd:fb:d6:a1:39:e2:1d: a6:fc:00:f4:d3:bd:50:82:3a:9e:f1:d4:82:c9:a0:66:e0:8a: 84:11:48:39:4e:d4:f5:a8:f0:10:ed:39:99:3c:43:68:59:63: 16:1b:a9:ea:0c:0c:c4:46:a8:1f:fe:34:0f:8a:17:55:cf:d9: 8a:4e:12:43:d1:0e:4a:70:90:88:43:9d:9a:b8:b0:b2:d4:e3: a1:3f:4f:e9:48:4b:59:bc:c8:2f:57:d0:7d:18:10:69:fd:28: 6c:8c:30:cf:66:b0:16:d9:2b:72:bc:de:9b:b7:34:82:9b:53: db:2a:35:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUX+BES2Ax4pYW/DUR6A5A2n9xBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNjA0MjYyMDQ2NTRaFw0yNjA0MzAwNzU3NTRaMDMxMTAvBgNV BAMTKEM4MUIxNzY2QThDRURBNDMwQzlCM0Y0NDUyQjZEQjExMEMyOTBFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMPKkLJeX7qw5h2/krddX8e9Z uksDUQ3RZMnTFbQNUQgh+YVFKoJ98ejOJ1Jmy2u/RqpNP8xxxcz2mSk3McK/cMSA e5alggq4xzdw0/yzLT408NYbmNFzgp+jL1riNy6MI6hCCpefWWSanA0vNi9H0kCH zqTrnL1xAlIIv8QRvZs4SfR9SKdVQHlcof2mSWfwC/xi2CsltF38w7M4+jr/hvCE 5/dYEuzu36YPIYTGTNcKkvO/JnCD4K0U4uZ+6ow+9YvgfarjexJIJCjCgIVYK6yd iPk0Fd55dXoTnq3aTupcYakQxPYrOHqTMWQuf8er7cIwAgEzgeua/+rwLau7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBsXZqjO2kMMmz9EUrbbEQwpDg8wHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQOcekVTsHfAVyMgpxevRaXYWgujK6Tv4zp zssCjrzpNRB61n8MuHCjnuoba+8SXKS1UtocbcA9E+okbA8iN8PaO4WHMS7rZTRE AJwqZNdQrzW2Rms/4yLwzPZ20waRNaieudzAm8JcIBu4c/qHSe/jDAtAWG0naBfr 6G0dDnbc+vWYrxInBhzv/fvWoTniHab8APTTvVCCOp7x1ILJoGbgioQRSDlO1PWo 8BDtOZk8Q2hZYxYbqeoMDMRGqB/+NA+KF1XP2YpOEkPRDkpwkIhDnZq4sLLU46E/ T+lIS1m8yC9X0H0YEGn9KGyMMM9msBbZK3K83pu3NIKbU9sqNfg= -----END CERTIFICATE-----Generated at Mon Apr 27 23:09:01 2026 by rpki-client