$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: ww5lRw9FzXG0yl/rR04avjuM8IyVm+Cbdz3xd5NotDI= Subject key identifier: C3:2B:40:90:8F:FA:07:0D:2C:80:16:99:33:E3:14:5A:57:44:C8:FC Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 5FACB98B8DB7FAE3AD12D37C3F0AD4A3CC81C746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 08:02:43 +0000 Manifest this update: Fri 17 Apr 2026 07:57:43 +0000 Manifest next update: Mon 20 Apr 2026 11:39:43 +0000 Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) 2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: a68HzjP7eBftSVbZIxn9H9mXLpVfUZ3mJN2lgo0Olak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ac:b9:8b:8d:b7:fa:e3:ad:12:d3:7c:3f:0a:d4:a3:cc:81:c7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Apr 17 07:57:43 2026 GMT Not After : Apr 20 11:39:43 2026 GMT Subject: CN=C32B40908FFA070D2C80169933E3145A5744C8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:c3:78:da:67:f3:87:7d:54:e6:d2:15:14: 68:67:b3:1a:2a:6a:7d:1a:3d:29:ed:12:96:b4:6c: a6:d8:a1:f5:54:a0:e3:46:44:1e:b8:7c:f3:5d:4e: df:f2:5b:16:c6:23:c8:4f:32:4f:c7:f0:44:b0:55: 76:18:8e:8a:09:88:15:64:83:0a:da:db:cf:b3:64: 56:7f:cf:52:73:67:75:93:6c:0f:83:43:a6:ac:80: f1:19:81:f6:1e:02:da:9c:d7:e8:ac:db:82:19:b9: 17:a7:fb:e6:a4:43:02:38:b4:4c:74:3c:f7:1a:04: 60:0d:68:d6:f7:bd:9c:21:0a:b4:ec:41:95:92:79: 50:f8:27:fa:6b:11:86:b9:06:dd:79:1c:34:b6:f6: e2:c9:54:de:c9:0e:eb:34:0b:36:b3:46:23:50:7c: 0b:13:03:ac:08:c0:7b:13:48:aa:62:5e:e2:81:d7: a8:8e:1f:2d:60:29:9a:f2:09:d8:b3:a4:63:85:31: e9:a3:5a:5a:66:cc:81:d9:48:a5:88:05:a0:36:67: fb:44:dc:13:00:46:69:a1:78:e2:79:76:e6:10:cb: 71:3a:c9:73:28:8e:0e:db:4c:59:97:45:5e:f8:c0: 64:55:c5:b2:de:92:8a:64:ec:af:25:02:49:c3:ec: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:40:90:8F:FA:07:0D:2C:80:16:99:33:E3:14:5A:57:44:C8:FC X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:90:00:da:98:f1:40:41:16:0d:a0:1f:02:44:bd:ad:d9: fa:07:28:b6:ac:fe:52:04:41:66:30:d7:dd:8e:68:ed:7c:18: 21:68:29:c9:b4:de:4c:8f:b4:0c:b7:5c:c9:5c:17:16:51:c4: cd:b8:a5:c8:f7:d0:f0:2f:9e:dc:31:27:ff:83:ba:0a:e3:00: c9:ee:63:b2:33:22:71:26:08:1d:1c:1e:fb:87:fc:17:d5:52: 54:e8:a3:b0:f0:b0:c7:85:e9:50:b1:c0:36:34:3d:24:ea:02: 53:7b:2d:58:cc:ce:d0:58:ef:7d:7b:76:81:bf:9c:97:dc:d5: f6:fc:36:60:d7:ed:f3:d3:49:22:0d:62:b9:4e:ef:9c:b7:39: a3:54:35:1d:6d:7d:d3:38:c6:b7:07:25:80:a4:5f:4b:34:ca: ac:ef:1f:23:70:a0:05:7f:8b:9e:b8:86:75:e9:88:b7:51:7d: 04:e4:8e:34:8d:c7:26:b8:cb:9c:60:14:28:b6:95:1f:73:14: 52:c5:ac:ad:94:8b:1f:9b:c7:f0:33:a4:83:fe:2c:91:cd:00: 50:7f:3c:80:03:74:3d:09:4f:cc:01:16:06:df:a6:44:5b:2d: 9b:37:33:2b:8d:eb:0a:e4:cd:7d:0a:92:be:19:79:5f:9f:3a: e6:ca:ab:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6y5i423+uOtEtN8PwrUo8yBx0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNjA0MTcwNzU3NDNaFw0yNjA0MjAxMTM5NDNaMDMxMTAvBgNV BAMTKEMzMkI0MDkwOEZGQTA3MEQyQzgwMTY5OTMzRTMxNDVBNTc0NEM4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgMN42mfzh31U5tIVFGhnsxoq an0aPSntEpa0bKbYofVUoONGRB64fPNdTt/yWxbGI8hPMk/H8ESwVXYYjooJiBVk gwra28+zZFZ/z1JzZ3WTbA+DQ6asgPEZgfYeAtqc1+is24IZuRen++akQwI4tEx0 PPcaBGANaNb3vZwhCrTsQZWSeVD4J/prEYa5Bt15HDS29uLJVN7JDus0CzazRiNQ fAsTA6wIwHsTSKpiXuKB16iOHy1gKZryCdizpGOFMemjWlpmzIHZSKWIBaA2Z/tE 3BMARmmheOJ5duYQy3E6yXMojg7bTFmXRV74wGRVxbLekopk7K8lAknD7JLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwytAkI/6Bw0sgBaZM+MUWldEyPwwHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ21kADamPFAQRYNoB8CRL2t2foHKLas/lIE QWYw192OaO18GCFoKcm03kyPtAy3XMlcFxZRxM24pcj30PAvntwxJ/+DugrjAMnu Y7IzInEmCB0cHvuH/BfVUlToo7DwsMeF6VCxwDY0PSTqAlN7LVjMztBY7317doG/ nJfc1fb8NmDX7fPTSSINYrlO75y3OaNUNR1tfdM4xrcHJYCkX0s0yqzvHyNwoAV/ i564hnXpiLdRfQTkjjSNxya4y5xgFCi2lR9zFFLFrK2Uix+bx/AzpIP+LJHNAFB/ PIADdD0JT8wBFgbfpkRbLZs3MyuN6wrkzX0Kkr4ZeV+fOubKq3Y= -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:59 2026 by rpki-client