$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: J52BF1+eRnoKpra+/WrQS2akrSFqHM+00t3aUWwCQUM= Subject key identifier: E6:28:CB:33:CE:A7:70:0A:A8:DE:F0:4F:E0:A0:CD:1E:0B:4A:22:05 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 0EFA568B8A78B19D2A13FB48173B087D5C345D2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: 016B Signing time: Thu 16 Apr 2026 10:31:50 +0000 Manifest this update: Thu 16 Apr 2026 10:26:50 +0000 Manifest next update: Sun 19 Apr 2026 12:50:50 +0000 Files and hashes: 1: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: zCYjwxgZ867W/EI9SnSmu6GjUVsEp2wVBcfDMkUB7j0=) 2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: dKAQ7C0ejSS/pW7vi3oLf2YR24YhwQ14FSlo/cqZ5U0=) 3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: 3XW5v6NcQz8RKPweviOYY6B66bC0rE9q/PzBCcjDk6M=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: 8wVvZn6TdyEta8KM95M6qxv5XCPK3Bm1E8tMF9AMcYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fa:56:8b:8a:78:b1:9d:2a:13:fb:48:17:3b:08:7d:5c:34:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Apr 16 10:26:50 2026 GMT Not After : Apr 19 12:50:50 2026 GMT Subject: CN=E628CB33CEA7700AA8DEF04FE0A0CD1E0B4A2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:06:9f:0e:e9:b4:a6:f4:83:63:5f:f9:6d: a7:a6:a0:ea:29:9c:db:88:9b:06:4a:48:43:86:b2: 98:1d:a9:d4:14:39:6a:c6:00:f2:f3:33:f7:35:84: af:ea:5a:3a:a7:3f:95:40:ef:7e:c3:f4:78:ba:a9: 02:91:fa:66:a6:a5:85:48:26:1b:18:0e:92:4f:90: 2b:40:ae:f0:8c:d3:93:36:f7:7b:2d:1f:4e:3e:4b: 61:0c:37:8e:1f:82:6e:d8:01:19:c2:e1:33:68:5b: 26:81:e7:d1:66:79:e1:9b:b9:12:3a:f4:c7:fa:ce: 3a:98:e6:2a:df:2e:5e:ac:25:b4:0a:a4:a4:85:51: 7e:4e:e8:da:70:3e:0a:c2:e4:86:3a:49:dd:40:db: 3a:d8:0c:ff:41:28:fd:60:8a:ad:5d:b5:26:3c:4a: 1c:24:ab:36:85:09:6b:ff:bb:be:17:b7:74:5e:a3: a4:c7:98:fc:dc:95:8e:6c:6a:66:22:82:94:d9:d9: e7:f2:01:00:47:fa:d2:3c:98:2d:27:c5:ad:a5:05: 96:53:73:43:b8:ad:3d:52:8c:ab:be:67:61:ad:f7: a1:90:05:6a:26:b3:73:d4:60:8a:69:83:b0:89:76: 4b:ef:56:44:49:4e:37:b0:05:c9:9d:2f:ca:9e:01: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:CB:33:CE:A7:70:0A:A8:DE:F0:4F:E0:A0:CD:1E:0B:4A:22:05 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c4:2f:43:9e:fe:3a:8f:8e:fc:46:0c:a9:b3:15:ce:d4:37: 79:1c:8e:43:96:89:5e:1b:71:19:b3:c8:5f:69:f4:0a:e6:55: 89:60:62:5d:7a:85:f6:92:c7:6b:a4:b0:3e:a6:1f:e4:72:c2: af:f9:db:d9:10:8e:87:d0:12:ad:09:0e:18:b0:5a:6e:10:d3: bf:96:9a:21:6e:e3:53:e5:fa:8e:6f:02:79:59:cd:5b:ff:03: a4:be:c3:8e:07:7e:16:f2:64:7a:f1:5e:a2:f1:54:5c:0b:b4: 4f:13:76:43:6c:6b:48:4d:64:6f:5c:43:89:b3:a8:b6:c6:1f: e2:3a:15:2c:30:47:e9:a4:17:dd:84:57:63:f9:31:ff:b7:b0: f5:55:6c:28:19:c8:0b:82:cf:2b:ee:59:9b:13:0a:9c:d8:3f: 9c:17:66:39:76:53:6e:19:9d:3f:a7:5d:d5:2e:ea:c3:2a:4f: 55:84:01:5b:ff:b2:71:d2:73:d5:af:51:01:2a:b0:1c:95:0d: 26:34:a4:5d:8d:e2:06:72:cc:cd:7a:99:57:ab:67:9d:68:96: 96:e0:48:84:7b:ee:ce:93:cf:d3:7f:37:1c:63:71:ab:d5:d3: f9:f5:d6:66:47:c9:0b:fa:83:85:1a:98:09:5c:ea:1b:35:c6: 4f:5d:dd:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvpWi4p4sZ0qE/tIFzsIfVw0XSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNjA0MTYxMDI2NTBaFw0yNjA0MTkxMjUwNTBaMDMxMTAvBgNV BAMTKEU2MjhDQjMzQ0VBNzcwMEFBOERFRjA0RkUwQTBDRDFFMEI0QTIyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzgafDum0pvSDY1/5baemoOop nNuImwZKSEOGspgdqdQUOWrGAPLzM/c1hK/qWjqnP5VA737D9Hi6qQKR+mampYVI JhsYDpJPkCtArvCM05M293stH04+S2EMN44fgm7YARnC4TNoWyaB59FmeeGbuRI6 9Mf6zjqY5irfLl6sJbQKpKSFUX5O6NpwPgrC5IY6Sd1A2zrYDP9BKP1giq1dtSY8 ShwkqzaFCWv/u74Xt3Reo6THmPzclY5samYigpTZ2efyAQBH+tI8mC0nxa2lBZZT c0O4rT1SjKu+Z2Gt96GQBWoms3PUYIppg7CJdkvvVkRJTjewBcmdL8qeAWNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ijLM86ncAqo3vBP4KDNHgtKIgUwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzEL0Oe/jqPjvxGDKmzFc7UN3kcjkOWiV4b cRmzyF9p9ArmVYlgYl16hfaSx2uksD6mH+Rywq/529kQjofQEq0JDhiwWm4Q07+W miFu41Pl+o5vAnlZzVv/A6S+w44HfhbyZHrxXqLxVFwLtE8TdkNsa0hNZG9cQ4mz qLbGH+I6FSwwR+mkF92EV2P5Mf+3sPVVbCgZyAuCzyvuWZsTCpzYP5wXZjl2U24Z nT+nXdUu6sMqT1WEAVv/snHSc9WvUQEqsByVDSY0pF2N4gZyzM16mVerZ51olpbg SIR77s6Tz9N/NxxjcavV0/n11mZHyQv6g4UamAlc6hs1xk9d3Yk= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:15 2026 by rpki-client