$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: 4l1Y5DI0QA3Bdn1vMDsCIC6rf0SJ7HmCKB3TJKzj+v4= Subject key identifier: 63:4D:1F:F5:99:84:5E:96:FF:A8:F2:12:F3:AB:90:31:85:FE:13:63 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 4486D5A172BC4BDF65B7E4A0EF30452E22F67C76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: 0152 Signing time: Sun 19 Apr 2026 03:22:05 +0000 Manifest this update: Sun 19 Apr 2026 03:17:05 +0000 Manifest next update: Wed 22 Apr 2026 09:23:05 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: HU+nyr3PqveZ9b1Udi723Yz3y6pa5/2vqoRVioXa7Gc=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: Xv8kcXDJ6WYMmWOyH4eBz+tykqWc30YT1h8G2TY977E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:86:d5:a1:72:bc:4b:df:65:b7:e4:a0:ef:30:45:2e:22:f6:7c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Apr 19 03:17:05 2026 GMT Not After : Apr 22 09:23:05 2026 GMT Subject: CN=634D1FF599845E96FFA8F212F3AB903185FE1363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:10:40:eb:37:51:a4:eb:4f:fd:76:d2:54: e0:a1:82:a3:41:6a:28:ab:41:7f:6b:07:79:5c:0a: 40:b6:20:1b:ef:bb:35:d9:c1:c2:c5:10:cc:68:96: 29:f5:61:f3:c2:6d:da:e0:87:bb:2f:4a:3f:1c:b7: 3f:ff:9c:1c:f5:80:60:00:db:6d:74:a7:0c:f8:48: 6a:a6:82:0b:54:c6:7f:3b:8b:c1:4b:78:50:5c:26: 4a:2c:c8:05:4d:8c:d7:e4:87:26:42:e9:8d:60:3c: 6e:d4:be:f5:99:f6:2b:94:f8:e2:a1:49:3e:84:fd: 9a:81:55:35:cb:29:c3:fb:13:f9:c5:57:62:4f:28: de:7e:56:7a:fc:f0:f2:a8:e2:d2:80:38:df:8f:25: 62:58:4b:83:8e:ca:55:19:6f:af:18:d7:c2:29:a0: 93:bd:3d:b7:c0:74:76:48:74:44:95:d5:fc:ee:45: 97:31:c5:86:61:c0:8d:9d:0b:e9:93:85:80:9c:ef: 35:95:15:a7:1b:be:50:45:cc:ac:55:3e:13:fa:fd: 25:bb:71:15:06:3e:c2:03:26:2c:22:44:76:22:78: 90:c3:51:f2:60:49:57:06:88:33:0e:fe:55:0d:cd: 8a:94:2e:41:87:2a:dd:b6:8a:19:c5:8b:44:07:bc: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:1F:F5:99:84:5E:96:FF:A8:F2:12:F3:AB:90:31:85:FE:13:63 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f3:14:8a:17:6c:bf:4c:32:95:90:d4:cc:2f:3c:1e:b8:6c: 8c:cc:e4:27:92:b2:ca:f9:63:6a:83:07:72:eb:e1:95:6b:11: e3:3e:16:2b:f1:8e:51:3a:87:e9:93:45:49:a5:3c:9d:dc:20: 42:b8:ab:b8:aa:cc:f1:39:46:d7:62:03:0e:3b:bf:8d:ce:02: ff:a9:e7:a3:49:4e:2c:b7:85:28:ee:3b:68:d2:12:22:7c:26: e1:33:73:6c:2a:99:32:f5:c2:52:ae:bd:5e:2e:60:cb:e9:2e: da:1c:bb:65:a4:50:91:72:64:34:ae:c0:43:8f:54:b3:19:f8: 6f:fa:25:36:cd:c5:bd:76:e5:00:e9:f0:44:87:9f:f3:6c:cc: 10:f4:31:24:7e:f5:38:63:e7:3d:01:4a:1b:70:69:e2:5e:dd: e1:e9:ed:ab:e6:92:d8:52:c2:bb:4d:83:92:58:a3:92:ea:10: b0:0b:ec:2a:4c:e9:4b:31:54:af:ac:cf:76:8b:61:69:06:49: 27:a0:98:38:31:93:5d:50:84:4e:ff:73:b7:6f:9e:b4:d4:e9: 16:6f:47:6f:d5:22:c0:98:6b:51:ba:ad:9b:df:4b:f3:6f:82: fb:85:21:1f:85:fa:9c:78:b0:70:45:f9:5c:3f:c9:1b:86:40: 8e:52:20:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIbVoXK8S99lt+Sg7zBFLiL2fHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNjA0MTkwMzE3MDVaFw0yNjA0MjIwOTIzMDVaMDMxMTAvBgNV BAMTKDYzNEQxRkY1OTk4NDVFOTZGRkE4RjIxMkYzQUI5MDMxODVGRTEzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6RBA6zdRpOtP/XbSVOChgqNB aiirQX9rB3lcCkC2IBvvuzXZwcLFEMxolin1YfPCbdrgh7svSj8ctz//nBz1gGAA 2210pwz4SGqmggtUxn87i8FLeFBcJkosyAVNjNfkhyZC6Y1gPG7UvvWZ9iuU+OKh ST6E/ZqBVTXLKcP7E/nFV2JPKN5+Vnr88PKo4tKAON+PJWJYS4OOylUZb68Y18Ip oJO9PbfAdHZIdESV1fzuRZcxxYZhwI2dC+mThYCc7zWVFacbvlBFzKxVPhP6/SW7 cRUGPsIDJiwiRHYieJDDUfJgSVcGiDMO/lUNzYqULkGHKt22ihnFi0QHvAZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY00f9ZmEXpb/qPIS86uQMYX+E2MwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvzFIoXbL9MMpWQ1MwvPB64bIzM5CeSssr5 Y2qDB3Lr4ZVrEeM+FivxjlE6h+mTRUmlPJ3cIEK4q7iqzPE5RtdiAw47v43OAv+p 56NJTiy3hSjuO2jSEiJ8JuEzc2wqmTL1wlKuvV4uYMvpLtocu2WkUJFyZDSuwEOP VLMZ+G/6JTbNxb125QDp8ESHn/NszBD0MSR+9Thj5z0BShtwaeJe3eHp7avmkthS wrtNg5JYo5LqELAL7CpM6UsxVK+sz3aLYWkGSSegmDgxk11QhE7/c7dvnrTU6RZv R2/VIsCYa1G6rZvfS/NvgvuFIR+F+px4sHBF+Vw/yRuGQI5SIK0= -----END CERTIFICATE-----Generated at Sun Apr 19 13:16:44 2026 by rpki-client