$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: SydXUhI9GhJZhINV30F3usKaA3aByy02S2SmiLFO084= Subject key identifier: 42:80:5D:37:77:99:59:56:7D:C1:04:A2:FB:3C:62:5A:39:D5:EA:1B Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 7A2061A60873680B8F0098A443153520B4FECD0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0240 Signing time: Tue 21 Apr 2026 23:52:02 +0000 Manifest this update: Tue 21 Apr 2026 23:47:02 +0000 Manifest next update: Sat 25 Apr 2026 01:03:02 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: sdu71b6LmfuowESVEOL7OT2+9I3MvA3tjAEgQXoR2xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 01:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:20:61:a6:08:73:68:0b:8f:00:98:a4:43:15:35:20:b4:fe:cd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Apr 21 23:47:02 2026 GMT Not After : Apr 25 01:03:02 2026 GMT Subject: CN=42805D37779959567DC104A2FB3C625A39D5EA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:62:63:63:74:fc:82:cb:8a:5e:ff:9e:4c: 55:94:0d:58:f9:de:2d:e7:42:2c:4a:01:8e:d0:25: 32:e3:a5:c9:0c:ec:29:2b:37:c3:60:b9:3f:b2:87: 7e:25:54:32:70:92:61:34:83:f6:36:73:a9:67:cf: ff:b4:da:2c:2d:97:ec:d9:5a:85:1f:4a:97:78:18: c6:3f:e9:f8:fe:99:76:29:1c:68:80:b0:1c:60:b8: 97:de:bf:cd:19:2c:0e:e3:e9:03:67:52:23:f4:48: ec:68:17:f6:48:5d:23:04:be:3b:1f:1f:b7:8b:8e: be:f1:82:42:a7:2d:24:9b:5d:08:15:33:81:6f:02: 3f:b6:fa:6b:a5:3d:96:17:20:63:e9:b1:55:f3:f5: c6:55:68:d2:66:fa:ce:56:aa:9e:7d:7e:4f:8d:33: b5:d9:7d:ce:12:0b:02:64:4a:cd:cf:a4:48:fa:d1: 8c:a1:98:b6:58:a4:72:f3:a4:18:7a:fb:b3:89:c6: 57:6d:95:2a:50:ba:b3:d8:86:d0:89:b4:15:f4:c4: 05:55:ba:68:d6:21:b4:97:f4:14:b3:11:4a:13:ea: ae:eb:22:0f:f7:6b:87:56:ad:24:21:d5:81:be:e1: 6c:68:49:c1:e4:10:cf:ef:6a:e3:77:16:7e:99:52: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:5D:37:77:99:59:56:7D:C1:04:A2:FB:3C:62:5A:39:D5:EA:1B X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a8:0a:b0:4f:c2:48:30:33:47:aa:64:8b:96:2b:bf:0c:64: 5e:1b:da:a9:53:b5:5a:0e:33:fb:91:d1:37:a0:4e:a7:c9:3b: 0c:fd:3e:13:c7:da:c9:8c:10:6a:11:c1:f3:f7:9c:24:aa:e2: 10:65:b3:32:6b:2b:db:c8:c9:0d:ae:3d:f4:34:fe:af:f3:bb: 3b:e9:23:37:ae:f2:03:36:ee:a0:83:1d:3c:0e:e1:a9:fd:e5: 50:d4:26:df:0f:05:4c:88:99:78:1e:8c:0d:d9:8d:29:06:a7: 53:1c:0a:63:d8:eb:e0:8b:04:4a:79:ac:46:54:6a:e4:1d:25: 6a:82:dd:38:0a:6c:e9:cd:62:33:69:f6:4b:5e:27:00:35:f8: ed:f9:89:09:9c:c6:a4:4e:38:aa:66:b3:99:bf:01:88:e3:2b: 6c:52:9d:e4:56:64:34:a0:ee:ed:44:46:13:7d:f1:2a:fc:bc: 2d:43:90:4e:a3:57:a0:89:3a:7c:70:ce:c9:7e:25:ee:67:b5: 2d:e7:92:35:26:c8:c4:0e:33:cd:b2:18:c7:f7:05:14:28:e1: da:5b:14:a4:33:bb:b6:fb:25:b3:ad:be:d8:0a:26:21:8c:42: 02:ea:c4:99:30:e9:c9:30:55:b0:4a:b9:f3:62:08:ca:f4:84: 1c:91:88:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiBhpghzaAuPAJikQxU1ILT+zQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjA0MjEyMzQ3MDJaFw0yNjA0MjUwMTAzMDJaMDMxMTAvBgNV BAMTKDQyODA1RDM3Nzc5OTU5NTY3REMxMDRBMkZCM0M2MjVBMzlENUVBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSmJjY3T8gsuKXv+eTFWUDVj5 3i3nQixKAY7QJTLjpckM7CkrN8NguT+yh34lVDJwkmE0g/Y2c6lnz/+02iwtl+zZ WoUfSpd4GMY/6fj+mXYpHGiAsBxguJfev80ZLA7j6QNnUiP0SOxoF/ZIXSMEvjsf H7eLjr7xgkKnLSSbXQgVM4FvAj+2+mulPZYXIGPpsVXz9cZVaNJm+s5Wqp59fk+N M7XZfc4SCwJkSs3PpEj60YyhmLZYpHLzpBh6+7OJxldtlSpQurPYhtCJtBX0xAVV umjWIbSX9BSzEUoT6q7rIg/3a4dWrSQh1YG+4WxoScHkEM/vauN3Fn6ZUsapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoBdN3eZWVZ9wQSi+zxiWjnV6hswHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACoCrBPwkgwM0eqZIuWK78MZF4b2qlTtVoO M/uR0TegTqfJOwz9PhPH2smMEGoRwfP3nCSq4hBlszJrK9vIyQ2uPfQ0/q/zuzvp Izeu8gM27qCDHTwO4an95VDUJt8PBUyImXgejA3ZjSkGp1McCmPY6+CLBEp5rEZU auQdJWqC3TgKbOnNYjNp9kteJwA1+O35iQmcxqROOKpms5m/AYjjK2xSneRWZDSg 7u1ERhN98Sr8vC1DkE6jV6CJOnxwzsl+Je5ntS3nkjUmyMQOM82yGMf3BRQo4dpb FKQzu7b7JbOtvtgKJiGMQgLqxJkw6ckwVbBKufNiCMr0hByRiK8= -----END CERTIFICATE-----Generated at Wed Apr 22 09:51:31 2026 by rpki-client