$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: o7Mribx7pmpNyGaHBZCVCf7cxiDL6dCopDnGqYFosnI= Subject key identifier: F0:66:5F:1D:B3:B1:C5:11:5B:B6:FF:29:78:42:A1:81:1E:3E:B8:F3 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 79EBAD12B28F89BF8B80B0E05961AAD893920EA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 02A2 Signing time: Sat 18 Apr 2026 16:50:05 +0000 Manifest this update: Sat 18 Apr 2026 16:45:05 +0000 Manifest next update: Tue 21 Apr 2026 23:47:05 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: xRobZnUv0Q3DH1sctLAoZIvlSMJcNWZ0m8d6geiEVaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:ad:12:b2:8f:89:bf:8b:80:b0:e0:59:61:aa:d8:93:92:0e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Apr 18 16:45:05 2026 GMT Not After : Apr 21 23:47:05 2026 GMT Subject: CN=F0665F1DB3B1C5115BB6FF297842A1811E3EB8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:d0:df:6e:48:fc:f6:9e:78:ab:57:3d:f7: 97:27:08:9b:1e:47:65:eb:ac:fa:6a:ef:92:3e:ac: 01:ed:5a:da:3d:d4:1a:6a:ab:27:63:42:d8:c9:78: 2a:d7:82:10:ed:2a:53:93:8a:08:f1:21:d6:bd:2b: 09:98:2b:62:c1:ff:53:96:dd:d2:9d:b3:35:9f:c2: 1c:13:b9:d8:28:6c:20:c3:47:ca:2c:24:c7:66:ef: 1a:b8:1a:40:03:bd:60:95:be:a7:ed:fd:d0:bd:24: bd:ee:99:95:b5:53:71:80:32:49:8d:2f:e6:ae:44: 4f:03:f0:0f:4d:1f:24:1c:2a:d3:0a:5f:a2:ef:18: 79:a3:22:03:81:12:d7:bc:58:81:e9:4f:6a:65:f7: 2a:eb:5d:94:35:e5:f1:65:79:72:63:42:42:b9:25: 44:a9:0a:b6:4e:51:2e:b4:63:6f:5c:cb:6c:78:d8: 48:45:a7:0a:72:1c:74:a2:ef:44:52:41:ee:15:4a: 62:1a:9c:44:b8:27:07:96:19:18:5d:2e:28:19:cb: 62:60:da:24:1a:c1:52:d5:af:42:af:d3:58:cd:05: 92:6b:b6:42:fc:90:bb:72:cd:33:9b:6a:36:58:9d: 95:1f:12:c3:db:cd:14:85:44:1a:b0:ff:94:5c:41: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:5F:1D:B3:B1:C5:11:5B:B6:FF:29:78:42:A1:81:1E:3E:B8:F3 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:12:c9:6f:3f:14:11:9b:a4:45:d9:36:d6:7f:9c:ec:48: b8:6a:7c:62:8b:13:26:2a:e5:2e:a5:79:ac:51:57:c5:11:e6: 09:1f:90:9a:c3:41:2c:6c:7c:b1:03:ff:75:e8:25:91:25:8e: 7e:72:c7:0c:b5:f0:03:a9:25:5f:af:05:80:56:d8:4a:f5:3e: f7:c3:e1:12:02:d4:b7:e3:20:e0:10:2b:f6:b3:8e:66:dd:91: 07:ec:b4:6b:1b:53:e4:64:07:e6:db:ec:ee:51:e4:53:f9:b2: 1f:18:d5:76:6d:a7:cb:89:0b:2f:0e:1e:1f:d8:dd:41:fd:ae: 0d:8f:7d:4e:61:fc:d6:4f:cd:b8:cf:80:48:8e:e4:5d:16:ea: bc:0f:08:f4:7b:1e:18:b8:d2:dd:95:75:71:96:2b:39:06:c5: 89:11:cb:d5:a5:83:e9:85:04:35:8e:84:28:a7:cb:73:df:6d: b6:84:70:50:02:fb:4f:cf:cb:38:ea:f6:4e:82:aa:d7:2d:35: d8:da:ba:7f:21:09:9d:d1:0e:e9:31:72:73:c0:b2:08:7f:b0: 24:1a:f1:b8:18:e7:01:97:cd:3a:e8:4f:5a:27:c3:15:24:75: fb:47:c1:b5:08:b4:56:36:fe:a1:8b:8f:64:53:73:43:58:19: 90:04:1b:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeutErKPib+LgLDgWWGq2JOSDqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNjA0MTgxNjQ1MDVaFw0yNjA0MjEyMzQ3MDVaMDMxMTAvBgNV BAMTKEYwNjY1RjFEQjNCMUM1MTE1QkI2RkYyOTc4NDJBMTgxMUUzRUI4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ytDfbkj89p54q1c995cnCJse R2XrrPpq75I+rAHtWto91BpqqydjQtjJeCrXghDtKlOTigjxIda9KwmYK2LB/1OW 3dKdszWfwhwTudgobCDDR8osJMdm7xq4GkADvWCVvqft/dC9JL3umZW1U3GAMkmN L+auRE8D8A9NHyQcKtMKX6LvGHmjIgOBEte8WIHpT2pl9yrrXZQ15fFleXJjQkK5 JUSpCrZOUS60Y29cy2x42EhFpwpyHHSi70RSQe4VSmIanES4JweWGRhdLigZy2Jg 2iQawVLVr0Kv01jNBZJrtkL8kLtyzTObajZYnZUfEsPbzRSFRBqw/5RcQTAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GZfHbOxxRFbtv8peEKhgR4+uPMwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ0EslvPxQRm6RF2TbWf5zsSLhqfGKLEyYq 5S6leaxRV8UR5gkfkJrDQSxsfLED/3XoJZEljn5yxwy18AOpJV+vBYBW2Er1PvfD 4RIC1LfjIOAQK/azjmbdkQfstGsbU+RkB+bb7O5R5FP5sh8Y1XZtp8uJCy8OHh/Y 3UH9rg2PfU5h/NZPzbjPgEiO5F0W6rwPCPR7Hhi40t2VdXGWKzkGxYkRy9Wlg+mF BDWOhCiny3PfbbaEcFAC+0/Pyzjq9k6CqtctNdjaun8hCZ3RDukxcnPAsgh/sCQa 8bgY5wGXzTroT1onwxUkdftHwbUItFY2/qGLj2RTc0NYGZAEG8k= -----END CERTIFICATE-----Generated at Sun Apr 19 12:39:07 2026 by rpki-client