$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: HF6ZFDXbE6LF/lfqdYjT5FKmGcQvLw5NEgbyWw7KH80= Subject key identifier: 94:5E:88:E2:03:E7:0C:36:D4:88:F9:1B:44:13:7A:B6:C1:8B:AF:25 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 0A4D5567DBD4558EEE0BE3153F00E2483F5AD9A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 0125 Signing time: Fri 17 Apr 2026 11:31:29 +0000 Manifest this update: Fri 17 Apr 2026 11:26:29 +0000 Manifest next update: Mon 20 Apr 2026 12:02:29 +0000 Files and hashes: 1: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 2: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: XtPw01bbHMOVkA3EL1ZWf4QcHDPTI7lOJWlH7fT7tcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4d:55:67:db:d4:55:8e:ee:0b:e3:15:3f:00:e2:48:3f:5a:d9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Apr 17 11:26:29 2026 GMT Not After : Apr 20 12:02:29 2026 GMT Subject: CN=945E88E203E70C36D488F91B44137AB6C18BAF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:4c:0f:39:61:94:fd:36:dd:e9:f7:dc:e2: b2:36:12:b0:8e:17:11:87:be:de:11:79:58:5e:ab: 0f:6e:58:e8:3b:5b:c0:85:90:1d:11:2c:e4:38:45: 5e:41:05:56:8b:2d:ea:18:25:c1:c5:77:31:03:80: 55:9f:fc:cd:9c:9e:7a:55:ee:e6:66:44:45:06:94: ce:f2:da:6d:8e:b4:3b:da:0f:81:79:49:11:ad:dd: a8:bc:c9:e0:df:1a:44:b7:b5:df:a3:0d:9f:c3:96: 4b:a4:cd:b7:02:cc:8e:d2:fa:13:74:f4:02:9e:77: b3:87:0a:90:f5:80:b4:0c:23:c7:2b:9c:00:5f:b9: 52:de:b8:77:ac:6e:00:50:0a:1e:b1:02:2e:eb:02: 6a:bc:30:6d:87:ad:71:17:ad:64:8d:ee:c8:f1:d9: 0e:25:51:6f:9c:47:07:37:8b:b0:9b:62:e0:64:16: 71:32:b5:2d:75:14:e6:c8:77:00:10:79:c7:82:fb: 38:0c:98:61:93:93:5d:b9:52:a8:ee:ba:56:e1:08: 3a:c1:30:1d:39:12:83:1b:36:c2:42:39:35:d7:6f: 58:9d:ce:2b:88:95:bf:08:ea:fe:65:d5:78:70:6e: 04:18:36:39:b7:f6:9d:e3:c3:06:87:25:fa:a7:c2: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5E:88:E2:03:E7:0C:36:D4:88:F9:1B:44:13:7A:B6:C1:8B:AF:25 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:db:a5:f1:d8:24:39:1f:6b:a7:af:32:aa:53:c7:ed:b2: 62:36:66:b9:47:c3:93:be:60:d1:e1:e5:7f:4b:2d:b3:88:af: 8a:53:87:e0:13:a4:4f:a2:f6:82:21:2d:46:06:0c:32:f4:7a: a6:98:79:96:24:6c:59:ec:61:23:1f:42:9f:99:8f:71:f6:fa: 8a:60:da:1d:bd:41:c1:d7:e4:d9:dc:56:76:4a:91:df:a3:c1: 25:7e:3f:45:62:db:61:ea:8a:3c:87:54:48:52:09:fd:6a:c7: ff:32:17:45:58:cd:94:df:d4:eb:c0:54:9c:27:4f:81:62:f4: 8a:25:5c:e4:c6:b0:69:4c:a3:03:dc:23:eb:fc:75:d5:9c:4a: ed:ac:08:18:2d:bf:67:04:bc:c9:f9:96:db:d2:10:70:d4:ce: ec:80:b9:8c:76:10:69:9c:5c:5b:19:74:b0:5d:5c:a0:0f:e6: bc:12:63:20:4e:bf:83:4b:8e:60:0a:67:00:92:51:1f:10:c2: 5d:b2:95:b7:17:16:4a:a4:35:0f:d5:56:98:f1:a7:1f:57:b8: 53:d1:48:fa:7e:e0:ae:bc:eb:20:41:2c:30:0b:06:f2:36:6a: 29:e0:6a:59:c6:f8:19:6a:8e:59:b6:32:af:94:c3:28:6c:49: 63:f2:44:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk1VZ9vUVY7uC+MVPwDiSD9a2aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNjA0MTcxMTI2MjlaFw0yNjA0MjAxMjAyMjlaMDMxMTAvBgNV BAMTKDk0NUU4OEUyMDNFNzBDMzZENDg4RjkxQjQ0MTM3QUI2QzE4QkFGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjkwPOWGU/Tbd6ffc4rI2ErCO FxGHvt4ReVheqw9uWOg7W8CFkB0RLOQ4RV5BBVaLLeoYJcHFdzEDgFWf/M2cnnpV 7uZmREUGlM7y2m2OtDvaD4F5SRGt3ai8yeDfGkS3td+jDZ/DlkukzbcCzI7S+hN0 9AKed7OHCpD1gLQMI8crnABfuVLeuHesbgBQCh6xAi7rAmq8MG2HrXEXrWSN7sjx 2Q4lUW+cRwc3i7CbYuBkFnEytS11FObIdwAQeceC+zgMmGGTk125UqjuulbhCDrB MB05EoMbNsJCOTXXb1idziuIlb8I6v5l1XhwbgQYNjm39p3jwwaHJfqnwhLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlF6I4gPnDDbUiPkbRBN6tsGLryUwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxm26Xx2CQ5H2unrzKqU8ftsmI2ZrlHw5O+ YNHh5X9LLbOIr4pTh+ATpE+i9oIhLUYGDDL0eqaYeZYkbFnsYSMfQp+Zj3H2+opg 2h29QcHX5NncVnZKkd+jwSV+P0Vi22HqijyHVEhSCf1qx/8yF0VYzZTf1OvAVJwn T4Fi9IolXOTGsGlMowPcI+v8ddWcSu2sCBgtv2cEvMn5ltvSEHDUzuyAuYx2EGmc XFsZdLBdXKAP5rwSYyBOv4NLjmAKZwCSUR8Qwl2ylbcXFkqkNQ/VVpjxpx9XuFPR SPp+4K686yBBLDALBvI2aingalnG+Blqjlm2Mq+UwyhsSWPyRAE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:23:32 2026 by rpki-client