$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: i1TfVJwpn60JrdKPgXXLKQ6K+n7fqOtjEen11nCQv6E= Subject key identifier: 67:4B:C2:BD:82:CE:62:7A:2A:72:7C:68:10:A1:C7:69:D2:F4:71:22 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 74DC6D6163CEA87F50F9B0CE97FEA6EDD8E906BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01F9 Signing time: Sat 18 Apr 2026 09:40:53 +0000 Manifest this update: Sat 18 Apr 2026 09:35:53 +0000 Manifest next update: Tue 21 Apr 2026 14:52:53 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: fp/oWSUeXGTrPiTprsbkQ9UXZFAnoLEYMcQ89AiXon8=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: 6I9GPWl+rRCqBp2/TN+CK/YWzioOPweH/u42sPBV0Ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dc:6d:61:63:ce:a8:7f:50:f9:b0:ce:97:fe:a6:ed:d8:e9:06:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Apr 18 09:35:53 2026 GMT Not After : Apr 21 14:52:53 2026 GMT Subject: CN=674BC2BD82CE627A2A727C6810A1C769D2F47122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:63:9b:ca:9d:2d:32:ff:cc:da:20:ec:b7: 3e:9a:17:39:5c:8c:53:c7:c7:0f:97:22:d0:d0:99: 33:e2:5f:76:0c:2f:1c:66:94:9f:65:e1:08:62:c6: a1:cf:2c:bf:75:62:28:08:41:f7:23:cd:89:06:5d: a3:6a:b1:56:cb:1e:ea:b5:19:f8:2f:14:24:fb:37: 6d:7d:45:3c:e4:98:a6:24:7a:cc:2f:b0:c8:69:fa: 6d:f6:ee:27:f9:e8:92:a8:15:d8:d0:60:c5:0b:22: 11:3d:ee:ca:6e:da:45:54:00:4c:40:e9:86:d2:b5: a7:d4:1c:b3:2a:fe:31:fa:25:c8:cd:e7:bf:a9:15: 6b:63:c2:93:43:81:76:c0:2e:3d:6e:9d:4c:8e:26: f1:59:0c:0e:7c:91:b6:ca:4f:48:06:b2:99:3f:06: 24:ac:ef:a1:3c:94:e9:01:20:ce:c7:75:ca:22:9c: 84:72:15:5a:13:c1:b7:f9:3d:0e:54:56:08:e8:d6: ad:8c:4a:6a:5e:a1:ed:3b:52:ff:e3:97:bb:c8:59: 83:09:e7:8b:31:c8:74:51:41:8b:6e:bd:fe:b1:cc: 7c:eb:f7:21:b6:38:9e:2b:76:6c:1b:33:a0:f8:d8: af:cb:13:21:e4:f0:7c:15:84:c5:c8:ea:18:57:86: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:C2:BD:82:CE:62:7A:2A:72:7C:68:10:A1:C7:69:D2:F4:71:22 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e8:ad:e7:71:6a:a5:1d:a9:03:6e:d1:3a:3f:b0:b0:cf:47: 04:39:28:91:11:5b:69:da:35:9e:35:e6:1c:27:32:ca:e4:1e: 91:ee:f9:5c:86:57:fc:b5:c7:b6:8c:c6:9b:99:9c:30:b2:fe: 0a:a3:24:17:71:e5:60:02:7b:2f:e8:79:9a:35:cd:97:65:58: da:84:70:7e:12:19:3c:66:e8:a2:aa:16:48:01:6d:7d:01:2a: a5:fc:f8:ef:46:15:27:e9:31:9b:7b:93:3c:fc:af:45:2f:97: 1b:8f:f5:3c:3c:e2:ba:75:0b:09:8f:a0:48:7c:d7:b3:3d:62: 9a:b8:37:5a:48:20:50:02:e3:53:91:ff:cb:3d:d5:ac:d8:5f: ab:e4:30:d1:4a:d9:10:1a:fa:d9:c6:ab:01:64:9a:f1:c8:a8: 32:dc:2a:51:8e:c8:7d:2f:09:c9:32:0c:31:41:09:1f:11:fd: 75:fe:90:65:f3:07:f3:e3:a9:92:0b:7f:e6:cc:6c:e4:14:98: d2:48:e9:f0:af:1f:9a:f4:e1:5f:7a:cf:c0:76:69:25:94:4e: 16:39:f0:3e:29:a3:ef:da:dd:76:e0:8e:8f:34:b6:21:b3:a1: 3f:e1:4f:1a:d6:2c:23:48:3a:ca:f3:f0:26:06:60:5c:bd:13: 01:2a:2d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNxtYWPOqH9Q+bDOl/6m7djpBr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNjA0MTgwOTM1NTNaFw0yNjA0MjExNDUyNTNaMDMxMTAvBgNV BAMTKDY3NEJDMkJEODJDRTYyN0EyQTcyN0M2ODEwQTFDNzY5RDJGNDcxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bWObyp0tMv/M2iDstz6aFzlc jFPHxw+XItDQmTPiX3YMLxxmlJ9l4QhixqHPLL91YigIQfcjzYkGXaNqsVbLHuq1 GfgvFCT7N219RTzkmKYkeswvsMhp+m327if56JKoFdjQYMULIhE97spu2kVUAExA 6YbStafUHLMq/jH6JcjN57+pFWtjwpNDgXbALj1unUyOJvFZDA58kbbKT0gGspk/ BiSs76E8lOkBIM7HdcoinIRyFVoTwbf5PQ5UVgjo1q2MSmpeoe07Uv/jl7vIWYMJ 54sxyHRRQYtuvf6xzHzr9yG2OJ4rdmwbM6D42K/LEyHk8HwVhMXI6hhXhk8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ0vCvYLOYnoqcnxoEKHHadL0cSIwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/oredxaqUdqQNu0To/sLDPRwQ5KJERW2na NZ415hwnMsrkHpHu+VyGV/y1x7aMxpuZnDCy/gqjJBdx5WACey/oeZo1zZdlWNqE cH4SGTxm6KKqFkgBbX0BKqX8+O9GFSfpMZt7kzz8r0UvlxuP9Tw84rp1CwmPoEh8 17M9Ypq4N1pIIFAC41OR/8s91azYX6vkMNFK2RAa+tnGqwFkmvHIqDLcKlGOyH0v CckyDDFBCR8R/XX+kGXzB/PjqZILf+bMbOQUmNJI6fCvH5r04V96z8B2aSWUThY5 8D4po+/a3Xbgjo80tiGzoT/hTxrWLCNIOsrz8CYGYFy9EwEqLbI= -----END CERTIFICATE-----Generated at Sun Apr 19 14:23:41 2026 by rpki-client