$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: OjO1E8x1rwPdrFHdZfs4zvwfsHb0YGGFTu8xzyRMFmg= Subject key identifier: 33:8F:98:76:35:D3:02:BD:CD:72:35:FF:76:2D:6B:75:50:44:8D:49 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 1FD95F5358799507B81F40D07D6EE8EEB725CAE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0564 Signing time: Fri 17 Apr 2026 11:10:52 +0000 Manifest this update: Fri 17 Apr 2026 11:05:52 +0000 Manifest next update: Mon 20 Apr 2026 14:51:52 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: 2O84pKGGrjc4pZauhUlSU4FvKU1O5FB7+/rcEHisTSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d9:5f:53:58:79:95:07:b8:1f:40:d0:7d:6e:e8:ee:b7:25:ca:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Apr 17 11:05:52 2026 GMT Not After : Apr 20 14:51:52 2026 GMT Subject: CN=338F987635D302BDCD7235FF762D6B7550448D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:c8:29:5e:d9:9c:b1:40:4e:79:61:5f:22: 8b:10:5f:5d:14:be:4b:b5:bf:10:b5:7e:a9:95:1d: 42:6d:2d:28:bc:80:6c:f4:6b:74:79:19:97:e2:ad: 36:66:5a:7e:54:bb:6a:c6:1d:e3:55:8c:62:a5:ad: 64:e0:cd:9e:95:1e:e6:07:38:a6:16:0f:e6:2f:33: ee:e5:95:a8:36:ea:bd:fd:d4:21:e5:b0:2a:39:22: 23:73:c1:30:13:43:b7:53:11:38:1c:50:fd:00:0b: 54:16:97:4b:45:78:81:2f:b0:16:e4:ab:b7:fc:90: 2d:b9:fb:f3:49:9f:c9:46:b2:a0:77:29:af:f3:30: c4:8a:2c:4b:7f:0e:ee:2e:5f:f3:a2:d8:5b:8c:1d: 10:18:21:b3:e0:1e:8a:1d:84:ba:69:01:a4:be:f4: b5:97:c4:86:36:68:18:fc:9c:b6:be:49:cc:ce:b1: ab:4b:0a:be:f4:6f:b6:06:eb:fd:22:4c:54:8c:92: ac:ca:95:14:63:38:b4:68:e9:97:d9:48:bb:41:28: 3f:cf:ff:bf:62:ac:aa:05:76:d6:45:6a:b2:1b:8b: 12:7b:f3:f2:bd:1e:4a:0f:16:36:cd:b2:7c:b3:33: 70:e0:81:48:66:8a:32:a5:d0:84:2b:6c:a8:6c:a2: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:98:76:35:D3:02:BD:CD:72:35:FF:76:2D:6B:75:50:44:8D:49 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b2:c5:c8:11:02:21:6b:15:1f:c5:16:6d:6e:8d:28:55:47: b2:2c:d9:86:0b:4c:6e:19:b6:33:ce:5e:29:af:69:e9:8a:08: 53:1a:ae:f1:b1:f8:6c:55:c9:e4:7c:8a:57:a5:04:d5:a8:c7: 60:2f:d8:bf:7a:4b:f4:6e:bb:00:be:45:d8:50:64:aa:4d:2d: d4:6c:66:16:59:71:b8:23:db:45:d2:b0:4f:7e:2d:f8:c1:fb: 9b:1d:c5:c7:5a:69:16:92:91:20:3d:ab:50:f9:24:16:9b:a3: d0:8b:33:40:f6:39:29:51:29:56:2b:32:e4:fe:a5:0e:60:0b: 53:28:a9:4c:97:87:dd:9e:90:41:05:1a:3b:9f:b3:26:54:4d: 71:a9:c0:74:ca:fa:4a:26:f4:e0:33:f1:f5:56:66:ba:2a:b1: 4b:f7:a1:9d:c4:bf:64:8f:7e:47:0f:e6:da:be:4c:e3:05:77: 5c:89:cc:7d:c2:26:06:52:f9:5f:7b:16:01:5e:89:4c:53:56: 37:88:1e:52:0a:31:8e:42:c9:b5:ce:3d:23:9e:d9:87:57:32: 37:d5:dd:10:d7:e0:b2:6b:bf:88:be:5d:3f:47:2a:33:6d:b8: 36:26:9e:a4:72:09:f7:6f:e7:cb:b5:a8:7c:98:e2:f8:99:46: e7:f3:9d:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9lfU1h5lQe4H0DQfW7o7rclyuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNjA0MTcxMTA1NTJaFw0yNjA0MjAxNDUxNTJaMDMxMTAvBgNV BAMTKDMzOEY5ODc2MzVEMzAyQkRDRDcyMzVGRjc2MkQ2Qjc1NTA0NDhENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FMgpXtmcsUBOeWFfIosQX10U vku1vxC1fqmVHUJtLSi8gGz0a3R5GZfirTZmWn5Uu2rGHeNVjGKlrWTgzZ6VHuYH OKYWD+YvM+7llag26r391CHlsCo5IiNzwTATQ7dTETgcUP0AC1QWl0tFeIEvsBbk q7f8kC25+/NJn8lGsqB3Ka/zMMSKLEt/Du4uX/Oi2FuMHRAYIbPgHoodhLppAaS+ 9LWXxIY2aBj8nLa+SczOsatLCr70b7YG6/0iTFSMkqzKlRRjOLRo6ZfZSLtBKD/P /79irKoFdtZFarIbixJ78/K9HkoPFjbNsnyzM3DggUhmijKl0IQrbKhsovGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4+YdjXTAr3NcjX/di1rdVBEjUkwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSyxcgRAiFrFR/FFm1ujShVR7Is2YYLTG4Z tjPOXimvaemKCFMarvGx+GxVyeR8ilelBNWox2Av2L96S/RuuwC+RdhQZKpNLdRs ZhZZcbgj20XSsE9+LfjB+5sdxcdaaRaSkSA9q1D5JBabo9CLM0D2OSlRKVYrMuT+ pQ5gC1MoqUyXh92ekEEFGjufsyZUTXGpwHTK+kom9OAz8fVWZroqsUv3oZ3Ev2SP fkcP5tq+TOMFd1yJzH3CJgZS+V97FgFeiUxTVjeIHlIKMY5CybXOPSOe2YdXMjfV 3RDX4LJrv4i+XT9HKjNtuDYmnqRyCfdv58u1qHyY4viZRufznRY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:56 2026 by rpki-client