$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: wAT5deOhyOw+TxMUU3yb9GsKMuLHnl5unuxIP1EbdFc= Subject key identifier: A9:CF:48:5D:91:AA:3A:73:B7:B6:9E:F2:38:72:11:E1:C3:82:47:DC Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 14EE085D6918899A85AB1A4919ED569D1EE7B9B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 21:10:04 +0000 Manifest this update: Thu 16 Apr 2026 21:05:04 +0000 Manifest next update: Mon 20 Apr 2026 01:21:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 3: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: yZXQq1AsbvVqsIpt8X61N4yo3oIwRlVFOr0RHwfGuds=) 4: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: ZCxtMFrg5/q5ECYXF6JUoQV5UjO9T/kuC5ei2Fky2po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ee:08:5d:69:18:89:9a:85:ab:1a:49:19:ed:56:9d:1e:e7:b9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Apr 16 21:05:04 2026 GMT Not After : Apr 20 01:21:04 2026 GMT Subject: CN=A9CF485D91AA3A73B7B69EF2387211E1C38247DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:5b:4e:78:2d:a7:8e:d8:06:23:51:61:e8: ed:ee:da:62:f8:76:71:da:06:ee:4f:8d:12:a6:65: fb:85:5e:54:39:74:6b:ed:e2:aa:59:ed:a7:40:04: c5:60:ec:4a:f4:5f:3d:dc:35:ec:c6:92:69:3d:5f: 24:c8:23:6e:b3:80:b0:90:67:4c:2d:04:15:24:08: e5:07:6e:6a:5b:be:15:6c:b6:32:93:4c:2b:43:c9: d0:46:71:1f:28:0c:1a:01:96:57:fd:5c:c4:be:d0: 62:c3:f3:54:08:23:e8:51:90:79:bb:77:7d:f1:58: 5c:6c:50:7f:d2:30:da:52:e7:c8:73:e5:dc:d0:03: 1b:0a:51:54:d3:a3:92:89:ae:d6:2b:65:b1:17:17: ba:fe:1c:be:10:eb:b6:ec:9a:17:26:df:78:75:d4: 6a:82:e5:d3:7d:34:98:92:9b:e9:e1:24:f8:6a:a5: af:1a:fa:24:0e:d7:c8:2c:a4:31:95:8c:32:c5:c6: 2b:40:71:6b:22:61:33:25:b5:d0:68:d6:be:f4:24: 34:dc:e2:9f:2f:17:5c:b3:53:7e:88:0e:22:02:32: 54:d6:ce:f8:ed:a2:2e:31:32:87:0c:a7:66:c1:ed: 75:d2:21:b5:35:39:59:58:3d:43:03:bc:ab:62:b4: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:48:5D:91:AA:3A:73:B7:B6:9E:F2:38:72:11:E1:C3:82:47:DC X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:00:bd:ef:35:7d:1d:65:f4:91:7b:b9:72:84:dd:00:62: c3:c6:7b:04:2c:93:aa:14:80:b5:3c:50:18:26:94:bf:94:04: 49:2c:c7:b3:f5:04:72:5d:0c:fd:20:74:8a:06:35:08:9f:db: 52:15:ba:13:7b:69:60:3d:66:c4:f7:b6:15:d7:ec:71:99:79: da:36:82:bc:bd:0e:8f:45:c9:ba:d9:27:bc:eb:e1:11:66:46: 91:dd:a4:9a:c3:f9:80:e5:1d:58:f2:1e:4f:56:13:3e:69:74: 4c:3b:5c:1c:d3:b3:54:1d:69:b1:b4:66:50:71:22:ee:a3:bd: 02:ef:f1:9b:8d:2b:94:03:ee:39:2c:16:8e:ff:c9:38:f3:b7: 4a:e9:68:2c:1d:4b:59:4a:5e:50:28:9e:c6:3f:33:bb:6b:ea: 73:dd:a8:37:b8:c0:9a:9e:9d:f1:73:71:0a:85:cb:f4:5a:fb: dd:05:29:1a:c5:8f:46:e1:23:b7:f2:19:7e:59:cb:87:c5:32: d9:32:f1:18:91:3e:43:de:58:82:63:fa:74:83:54:9c:ce:ca: c9:e7:73:25:01:fe:f5:b8:4f:07:93:40:30:46:fb:36:05:6f: c2:b4:bf:7a:1e:7a:19:87:16:d5:a2:31:bb:77:a9:1f:bd:99: 6e:28:01:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFO4IXWkYiZqFqxpJGe1WnR7nubgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNjA0MTYyMTA1MDRaFw0yNjA0MjAwMTIxMDRaMDMxMTAvBgNV BAMTKEE5Q0Y0ODVEOTFBQTNBNzNCN0I2OUVGMjM4NzIxMUUxQzM4MjQ3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEVtOeC2njtgGI1Fh6O3u2mL4 dnHaBu5PjRKmZfuFXlQ5dGvt4qpZ7adABMVg7Er0Xz3cNezGkmk9XyTII26zgLCQ Z0wtBBUkCOUHbmpbvhVstjKTTCtDydBGcR8oDBoBllf9XMS+0GLD81QII+hRkHm7 d33xWFxsUH/SMNpS58hz5dzQAxsKUVTTo5KJrtYrZbEXF7r+HL4Q67bsmhcm33h1 1GqC5dN9NJiSm+nhJPhqpa8a+iQO18gspDGVjDLFxitAcWsiYTMltdBo1r70JDTc 4p8vF1yzU36IDiICMlTWzvjtoi4xMocMp2bB7XXSIbU1OVlYPUMDvKtitG+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqc9IXZGqOnO3tp7yOHIR4cOCR9wwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEREAL3vNX0dZfSRe7lyhN0AYsPGewQsk6oU gLU8UBgmlL+UBEksx7P1BHJdDP0gdIoGNQif21IVuhN7aWA9ZsT3thXX7HGZedo2 gry9Do9FybrZJ7zr4RFmRpHdpJrD+YDlHVjyHk9WEz5pdEw7XBzTs1QdabG0ZlBx Iu6jvQLv8ZuNK5QD7jksFo7/yTjzt0rpaCwdS1lKXlAonsY/M7tr6nPdqDe4wJqe nfFzcQqFy/Ra+90FKRrFj0bhI7fyGX5Zy4fFMtky8RiRPkPeWIJj+nSDVJzOysnn cyUB/vW4TweTQDBG+zYFb8K0v3oeehmHFtWiMbt3qR+9mW4oAW0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:45 2026 by rpki-client