$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: 2tLRAJa7hNEuEbTjQv2gCVvBuig9X8zP1Uo9bHD7c6M= Subject key identifier: 6E:BA:FE:5F:10:83:46:80:78:68:BD:FC:54:7C:3E:00:D6:ED:A6:FF Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 788336E88CAAD85CBDAEFCE27DB67C8EA070F559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 01F8 Signing time: Sun 19 Apr 2026 06:31:17 +0000 Manifest this update: Sun 19 Apr 2026 06:26:17 +0000 Manifest next update: Wed 22 Apr 2026 10:41:17 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: FOuRTprVW2mpZNqt583SZ3InArSMarqECWOK414L2cg=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 9r/fIJNoD09qny38IiAFcFrWjS1Aw4+KEidppvqnxCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:83:36:e8:8c:aa:d8:5c:bd:ae:fc:e2:7d:b6:7c:8e:a0:70:f5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Apr 19 06:26:17 2026 GMT Not After : Apr 22 10:41:17 2026 GMT Subject: CN=6EBAFE5F108346807868BDFC547C3E00D6EDA6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:26:b3:ef:58:e8:ef:d9:5b:92:24:9d:6a: 4c:54:55:7f:fc:a4:f7:df:2b:5e:f4:ee:59:7a:89: e4:c9:35:0a:7e:ff:1b:33:24:9d:ed:56:63:3c:80: 46:9b:3d:ea:a0:15:d5:b2:84:da:ce:a6:b7:4e:a5: 89:cb:39:e0:a4:ef:86:f5:7f:be:08:cc:4d:51:74: 21:6b:76:64:5f:c0:d5:40:62:4d:ac:80:95:8c:0b: 67:31:ea:83:ad:28:a0:a7:e8:2d:a8:5e:8a:65:5e: 98:75:9d:14:41:ea:d7:48:23:fa:cf:36:2e:a9:99: ea:4b:08:47:35:87:8a:32:e1:0e:bf:1a:0a:cd:63: 68:40:94:45:ed:73:94:07:bd:90:ec:81:c1:b2:ad: fa:e1:cf:ef:e5:55:d9:7d:a3:67:85:26:f3:6d:33: 76:a6:56:5f:2f:d3:f3:dc:cf:a6:0f:20:e3:cc:6b: 8b:65:b1:a6:be:83:4e:34:d9:13:b1:0b:da:77:47: d4:88:33:c8:5f:7f:ea:76:8e:fe:c6:7d:31:3c:e5: 6e:56:97:d3:84:bd:a1:68:e7:5c:5f:5e:78:bd:81: 19:de:dd:00:b6:7a:9d:0a:b1:1a:99:fd:0b:fb:7d: d7:81:81:b2:27:5c:61:36:69:eb:8b:6e:55:44:96: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BA:FE:5F:10:83:46:80:78:68:BD:FC:54:7C:3E:00:D6:ED:A6:FF X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1b:00:ba:0f:4f:3a:fc:e1:b2:af:4e:16:60:07:2e:2a:a6: a4:ec:d1:6c:b6:30:35:9b:68:eb:ee:af:c8:74:fb:27:55:cf: d5:87:fa:c7:27:5c:64:f4:2b:67:98:e1:17:f0:50:a4:ab:5c: 76:c6:03:1a:42:cc:65:71:f2:15:44:8b:33:01:7e:94:f6:d9: a6:fe:a2:55:f4:a0:28:92:f1:41:eb:e2:46:da:46:db:3f:7c: f8:59:28:9c:6a:f5:3b:00:aa:57:c6:1c:32:0d:65:84:67:49: 6a:a4:d2:d5:0a:de:b5:d2:41:26:15:6a:df:86:66:a1:b6:5b: 3a:35:97:5d:56:71:f2:b3:ed:15:6a:da:cc:b6:12:ef:ef:9a: d6:8b:d6:bc:de:df:03:b3:4d:29:42:bd:9d:59:11:d7:1c:81: b5:e5:c7:e8:02:21:85:e9:18:07:6c:f3:72:58:e3:10:2b:75: fd:fb:18:18:29:6c:5b:4c:eb:58:97:a6:c0:e6:e5:99:5e:15: 43:75:1d:34:6f:16:ec:f9:94:55:9e:9b:fa:b0:5b:48:df:bd: 45:59:34:3c:a2:08:f1:d3:ac:97:d6:bc:eb:88:cc:46:b3:e0: ab:66:de:a2:eb:21:97:21:ac:ca:68:6b:58:85:4b:0a:13:e8: d0:dc:46:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIM26Iyq2Fy9rvzifbZ8jqBw9VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNjA0MTkwNjI2MTdaFw0yNjA0MjIxMDQxMTdaMDMxMTAvBgNV BAMTKDZFQkFGRTVGMTA4MzQ2ODA3ODY4QkRGQzU0N0MzRTAwRDZFREE2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiSaz71jo79lbkiSdakxUVX/8 pPffK1707ll6ieTJNQp+/xszJJ3tVmM8gEabPeqgFdWyhNrOprdOpYnLOeCk74b1 f74IzE1RdCFrdmRfwNVAYk2sgJWMC2cx6oOtKKCn6C2oXoplXph1nRRB6tdII/rP Ni6pmepLCEc1h4oy4Q6/GgrNY2hAlEXtc5QHvZDsgcGyrfrhz+/lVdl9o2eFJvNt M3amVl8v0/Pcz6YPIOPMa4tlsaa+g0402ROxC9p3R9SIM8hff+p2jv7GfTE85W5W l9OEvaFo51xfXni9gRne3QC2ep0KsRqZ/Qv7fdeBgbInXGE2aeuLblVElspbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbrr+XxCDRoB4aL38VHw+ANbtpv8wHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgbALoPTzr84bKvThZgBy4qpqTs0Wy2MDWb aOvur8h0+ydVz9WH+scnXGT0K2eY4RfwUKSrXHbGAxpCzGVx8hVEizMBfpT22ab+ olX0oCiS8UHr4kbaRts/fPhZKJxq9TsAqlfGHDINZYRnSWqk0tUK3rXSQSYVat+G ZqG2Wzo1l11WcfKz7RVq2sy2Eu/vmtaL1rze3wOzTSlCvZ1ZEdccgbXlx+gCIYXp GAds83JY4xArdf37GBgpbFtM61iXpsDm5ZleFUN1HTRvFuz5lFWem/qwW0jfvUVZ NDyiCPHTrJfWvOuIzEaz4Ktm3qLrIZchrMpoa1iFSwoT6NDcRjM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:37 2026 by rpki-client