$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: foDD+0ynr0Es6st8uaBfJi5wLRBDzTnnCm7EjYaxoSY= Subject key identifier: 27:1A:E5:6B:12:5D:A7:6A:6B:A3:B7:AB:FC:7B:59:D4:78:BC:04:4E Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 0F590BBE188694C86FC5921AB99D0D61AC5E61CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: 0141 Signing time: Thu 16 Apr 2026 07:51:12 +0000 Manifest this update: Thu 16 Apr 2026 07:46:12 +0000 Manifest next update: Sun 19 Apr 2026 17:28:12 +0000 Files and hashes: 1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) 2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: O5uJEpO5oilAXqiR31tNYgCroCKbL1/bMOK5Er+Qs0U=) 3: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: 1TB3SHhtnLY6quaYt4qpVV0kDfEnxIe3iADTymiDjM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:59:0b:be:18:86:94:c8:6f:c5:92:1a:b9:9d:0d:61:ac:5e:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Apr 16 07:46:12 2026 GMT Not After : Apr 19 17:28:12 2026 GMT Subject: CN=271AE56B125DA76A6BA3B7ABFC7B59D478BC044E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:e6:b2:2b:aa:21:7e:5f:cf:c5:4f:e5:75: d3:a1:5a:8b:b5:e1:f8:64:26:91:b9:bc:48:4e:62: ad:fb:1f:3b:2a:ab:3c:77:b0:89:50:21:97:0f:94: b5:93:9d:bb:bb:d0:c7:15:cb:12:cf:e3:12:37:38: 6b:ef:11:f4:ee:f9:da:1d:64:3f:0e:dc:93:f5:c1: 11:6a:e3:9c:ca:c5:c6:ad:56:ff:3c:96:ee:28:61: e9:62:82:2a:80:04:1b:ce:43:2e:f0:0f:2a:ca:02: db:87:bc:fa:56:a3:37:8f:c7:3f:2a:25:d7:c1:1b: 7c:18:67:35:4c:75:35:21:58:c7:2c:0d:89:bf:d8: 2a:4c:b7:2d:77:45:76:e5:b6:28:59:01:a3:01:9c: 8d:d4:c4:e0:f6:d7:2b:d4:8d:80:48:f5:bb:1e:fa: 25:aa:33:3a:4a:64:2d:ac:08:0b:22:63:52:1f:ab: cb:ee:fc:8f:9a:d0:ec:f9:1b:6b:b8:fd:19:25:c7: c8:76:30:91:38:3d:ae:e0:b9:39:a1:f0:58:2c:bd: f9:02:31:ce:79:4e:73:a5:1a:bd:6d:f4:af:91:f7: 63:1b:69:62:df:50:6d:b7:9f:e1:4d:18:27:38:9f: 6b:55:db:d3:39:08:bc:a6:2d:c4:5f:ec:4d:e7:29: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1A:E5:6B:12:5D:A7:6A:6B:A3:B7:AB:FC:7B:59:D4:78:BC:04:4E X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:8c:cd:1d:fd:73:09:47:6f:a9:d6:8f:fa:08:43:22:5d: 1f:0c:9f:ab:dd:90:e7:e7:72:f5:0a:7f:43:8f:19:c0:7c:2a: c9:8f:7a:ac:53:59:6d:5c:1e:a3:4c:16:80:6f:15:d6:0a:1e: 26:ea:92:77:6c:2d:db:1d:1b:78:03:bf:cf:69:dd:b2:af:70: d9:de:1b:12:79:60:08:6c:31:d0:d4:d3:a5:8c:a7:cb:ae:17: 6e:84:c0:e8:ad:e5:26:b1:9a:a4:e7:74:7f:1a:8b:c5:6f:2b: 1e:c0:03:1a:6d:d4:32:11:53:74:db:1d:9d:63:ec:b0:1a:dd: 89:a1:31:5b:c1:6e:c8:0c:b2:50:2a:d9:5c:4a:2e:7a:e3:6c: a7:47:da:34:aa:3c:52:bd:b0:e6:19:74:21:1b:01:c2:84:86: 7b:fc:af:51:00:24:c8:92:db:6b:64:fe:8f:9b:a1:ea:13:12: 73:ea:de:d1:48:58:ca:f9:44:5b:85:33:a2:9d:a3:79:7b:5e: 17:94:f8:4d:7a:db:79:6a:8c:5d:9a:f6:3b:d5:b6:f5:a0:90: 57:e9:13:f0:fc:db:91:68:7a:a5:94:ae:b6:7a:ae:78:13:16: 8a:d8:a6:a4:80:dc:2b:2a:a0:aa:c3:d8:03:30:95:8a:e5:91: a8:1a:59:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1kLvhiGlMhvxZIauZ0NYaxeYcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNjA0MTYwNzQ2MTJaFw0yNjA0MTkxNzI4MTJaMDMxMTAvBgNV BAMTKDI3MUFFNTZCMTI1REE3NkE2QkEzQjdBQkZDN0I1OUQ0NzhCQzA0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fOayK6ohfl/PxU/lddOhWou1 4fhkJpG5vEhOYq37Hzsqqzx3sIlQIZcPlLWTnbu70McVyxLP4xI3OGvvEfTu+dod ZD8O3JP1wRFq45zKxcatVv88lu4oYeligiqABBvOQy7wDyrKAtuHvPpWozePxz8q JdfBG3wYZzVMdTUhWMcsDYm/2CpMty13RXbltihZAaMBnI3UxOD21yvUjYBI9bse +iWqMzpKZC2sCAsiY1Ifq8vu/I+a0Oz5G2u4/Rklx8h2MJE4Pa7guTmh8FgsvfkC Mc55TnOlGr1t9K+R92MbaWLfUG23n+FNGCc4n2tV29M5CLymLcRf7E3nKWBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxrlaxJdp2pro7er/HtZ1Hi8BE4wHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrBjM0d/XMJR2+p1o/6CEMiXR8Mn6vdkOfn cvUKf0OPGcB8KsmPeqxTWW1cHqNMFoBvFdYKHibqkndsLdsdG3gDv89p3bKvcNne GxJ5YAhsMdDU06WMp8uuF26EwOit5SaxmqTndH8ai8VvKx7AAxpt1DIRU3TbHZ1j 7LAa3YmhMVvBbsgMslAq2VxKLnrjbKdH2jSqPFK9sOYZdCEbAcKEhnv8r1EAJMiS 22tk/o+boeoTEnPq3tFIWMr5RFuFM6Kdo3l7XheU+E1623lqjF2a9jvVtvWgkFfp E/D825FoeqWUrrZ6rngTForYpqSA3CsqoKrD2AMwlYrlkagaWbs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:27:22 2026 by rpki-client