$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: 2IRjp/aY3eKLClWR9aJEb4y6Hbn1ejwY6glwKJ+CJNs= Subject key identifier: BD:F0:50:C4:9F:3D:5F:12:1C:67:66:87:ED:92:F4:2F:65:73:B3:F0 Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 3319B855EA80FBB99D6FB7BC9135F1CE7E7E1DE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: 0127 Signing time: Fri 17 Apr 2026 12:41:26 +0000 Manifest this update: Fri 17 Apr 2026 12:36:26 +0000 Manifest next update: Mon 20 Apr 2026 23:54:26 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 2: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) 3: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) 4: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: 48WQ/BtunbNPOBnpCJHuxxFwsdJMJ+HlgVrPF1T2tt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:19:b8:55:ea:80:fb:b9:9d:6f:b7:bc:91:35:f1:ce:7e:7e:1d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Apr 17 12:36:26 2026 GMT Not After : Apr 20 23:54:26 2026 GMT Subject: CN=BDF050C49F3D5F121C676687ED92F42F6573B3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:97:f5:1b:11:61:fe:72:aa:d7:13:5b:0c: ea:37:92:5e:b4:b9:0e:e4:6f:cd:ee:b3:e5:e3:7f: ef:07:c9:74:a0:67:f5:7e:c9:69:aa:db:52:90:2c: 9c:1b:c2:f6:93:f6:7e:9c:c6:d4:19:7f:e8:ed:40: 1b:79:70:cb:d3:63:61:df:70:d1:6a:ae:70:23:26: a9:84:bb:fe:31:c6:48:7f:a0:65:ff:78:7c:3a:88: 18:50:91:0c:65:8d:26:ad:bc:82:19:ad:4e:9a:6c: 16:cc:57:64:f0:a3:ae:70:76:e3:e8:d8:de:77:0c: b3:e2:9e:10:7b:94:4b:62:fb:7d:94:51:63:dd:64: 95:1d:d1:17:42:6b:8d:c1:5f:12:04:7f:60:14:3d: c2:d2:27:bd:01:6a:13:15:18:94:e6:de:5e:9e:5e: 24:b5:bb:5d:d3:63:79:ec:17:02:84:80:4b:bd:bd: 9e:ba:0c:8e:0f:b8:81:18:88:a0:08:95:bd:7a:4f: 0e:e3:93:cc:89:2b:c4:4c:22:f5:27:ad:56:a1:66: 3d:62:d9:8f:48:c2:f7:2c:e5:12:8b:e2:65:8a:20: b5:60:ad:fe:95:56:75:c2:30:b0:60:43:1b:2e:02: 50:7c:e8:dd:7d:06:ed:cc:14:86:64:46:6d:a7:da: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F0:50:C4:9F:3D:5F:12:1C:67:66:87:ED:92:F4:2F:65:73:B3:F0 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4a:50:54:fc:e1:cd:14:6f:77:ed:1e:a1:f7:d4:83:59:00: 0d:0c:b9:71:1c:fc:a3:27:e3:09:69:00:77:d3:58:bf:46:37: 5e:72:2f:c4:44:b5:47:b0:6a:62:e5:54:da:b8:9d:30:ec:e7: 4a:18:bf:d6:66:85:c2:5f:2e:b1:7b:2e:00:de:3d:66:4e:6a: b2:42:2c:48:d3:31:11:3d:4b:9c:b1:47:ee:d2:a6:9e:46:4b: 6a:41:be:63:31:c4:48:66:70:30:0c:d1:16:78:12:70:02:31: 32:de:d5:6c:49:17:49:26:84:7a:05:7f:e9:cf:8a:4f:bb:17: 81:8f:a2:5c:b4:9a:2d:fd:dd:cb:1d:4a:2d:41:16:73:63:36: be:67:93:84:c1:eb:81:52:86:fa:ca:44:57:4a:e0:aa:fe:d7: 02:4d:8b:16:ba:6d:5a:4d:53:6f:c0:67:98:6b:92:c8:8b:db: 17:cf:51:f7:dd:96:51:9c:37:96:bf:3b:6f:f3:8b:2d:9e:aa: 57:e1:36:db:6a:82:06:72:2c:ff:5b:67:1d:c7:1a:39:84:1e: 5c:51:88:c9:62:bb:07:89:c1:5e:a8:4d:e4:04:d1:d1:42:9d: a7:29:50:e0:19:e9:2e:5a:4c:56:6c:36:d1:02:dd:9b:9a:15: f6:b3:5a:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxm4VeqA+7mdb7e8kTXxzn5+HekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNjA0MTcxMjM2MjZaFw0yNjA0MjAyMzU0MjZaMDMxMTAvBgNV BAMTKEJERjA1MEM0OUYzRDVGMTIxQzY3NjY4N0VEOTJGNDJGNjU3M0IzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmZf1GxFh/nKq1xNbDOo3kl60 uQ7kb83us+Xjf+8HyXSgZ/V+yWmq21KQLJwbwvaT9n6cxtQZf+jtQBt5cMvTY2Hf cNFqrnAjJqmEu/4xxkh/oGX/eHw6iBhQkQxljSatvIIZrU6abBbMV2Two65wduPo 2N53DLPinhB7lEti+32UUWPdZJUd0RdCa43BXxIEf2AUPcLSJ70BahMVGJTm3l6e XiS1u13TY3nsFwKEgEu9vZ66DI4PuIEYiKAIlb16Tw7jk8yJK8RMIvUnrVahZj1i 2Y9Iwvcs5RKL4mWKILVgrf6VVnXCMLBgQxsuAlB86N19Bu3MFIZkRm2n2meDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfBQxJ89XxIcZ2aH7ZL0L2Vzs/AwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdKUFT84c0Ub3ftHqH31INZAA0MuXEc/KMn 4wlpAHfTWL9GN15yL8REtUewamLlVNq4nTDs50oYv9ZmhcJfLrF7LgDePWZOarJC LEjTMRE9S5yxR+7Spp5GS2pBvmMxxEhmcDAM0RZ4EnACMTLe1WxJF0kmhHoFf+nP ik+7F4GPoly0mi393csdSi1BFnNjNr5nk4TB64FShvrKRFdK4Kr+1wJNixa6bVpN U2/AZ5hrksiL2xfPUffdllGcN5a/O2/ziy2eqlfhNttqggZyLP9bZx3HGjmEHlxR iMliuweJwV6oTeQE0dFCnacpUOAZ6S5aTFZsNtEC3ZuaFfazWpY= -----END CERTIFICATE-----Generated at Sat Apr 18 02:09:27 2026 by rpki-client