$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: TaQUtyy9S0W8IcDulT2OUWNF442Y3ANo60CVIYIfQ5s= Subject key identifier: 1A:33:61:87:A4:39:68:53:0A:C7:13:E9:5A:D9:D4:57:53:ED:0E:50 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 2C732B7BC09A037EC73E88994465EF6B132B0797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 0564 Signing time: Thu 16 Apr 2026 03:21:25 +0000 Manifest this update: Thu 16 Apr 2026 03:16:25 +0000 Manifest next update: Sun 19 Apr 2026 12:29:25 +0000 Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 2: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 3: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: /kEKJt+Wy6C7vSAH5xixkQIR3/YcAULFoDPlYCe+tR0=) 4: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 5: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 6: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 7: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:73:2b:7b:c0:9a:03:7e:c7:3e:88:99:44:65:ef:6b:13:2b:07:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Apr 16 03:16:25 2026 GMT Not After : Apr 19 12:29:25 2026 GMT Subject: CN=1A336187A43968530AC713E95AD9D45753ED0E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:7d:d0:70:b4:25:29:79:25:3d:22:f3:bc: b8:f8:0b:ff:38:a1:5a:dd:45:10:37:d6:9c:3e:74: f9:82:4a:cb:83:33:1a:8a:6b:21:f1:a5:ad:24:28: 59:f4:c7:74:26:59:75:8c:95:01:26:58:b1:e9:48: 58:eb:fd:25:20:c0:86:fc:93:4a:f0:a9:69:bd:56: 48:23:bf:b6:f5:64:2e:1a:ab:60:ea:96:fe:dc:35: 18:d4:d1:e0:84:38:85:34:7f:05:3f:9f:c1:fb:a7: ac:95:cd:75:f0:43:12:77:f7:5b:5c:87:e2:d0:5d: ba:4f:4d:18:6d:f8:3d:80:08:06:30:3b:c1:ef:b1: 17:60:47:aa:61:96:02:4c:d2:3c:82:6c:0a:d6:d2: 3f:2e:09:29:4c:36:a1:e7:f3:93:21:c0:d1:84:7f: f2:78:0c:06:56:a6:43:f3:2c:fc:02:91:c5:38:01: be:67:c3:15:26:88:b1:b9:b2:49:f2:ee:31:3a:b6: e5:37:17:94:13:44:20:6b:fc:7b:37:62:1a:6c:1e: 1c:e0:dd:36:ab:8c:30:b5:5d:4a:14:e4:fe:4e:c2: 66:70:54:f4:a6:b7:7d:cf:34:08:7d:02:66:b2:c8: 34:06:fc:7a:35:5d:d3:1b:22:4d:0d:92:e2:46:49: ce:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:61:87:A4:39:68:53:0A:C7:13:E9:5A:D9:D4:57:53:ED:0E:50 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6f:c7:3a:68:cf:d1:51:0a:40:19:5f:34:7d:bb:48:0e:2b: 01:62:d2:de:4e:20:2c:92:3d:ef:0a:1a:e3:47:1c:37:b1:88: f2:5e:6e:83:f9:ca:73:e9:2c:ed:21:21:aa:d0:9c:18:0d:62: 14:25:c8:97:05:14:d8:fc:e6:03:62:4d:39:86:6a:4d:90:bf: 42:47:80:77:90:9e:72:d3:59:e5:d0:8f:23:a8:e2:9c:a3:56: 41:22:a3:a3:e7:ce:a1:90:52:3e:cb:3d:dd:13:e2:00:6a:c2: 1a:88:56:ed:ab:2b:8b:6b:97:d4:59:bc:fb:bf:88:14:43:f0: a0:d9:b7:d2:68:57:b2:02:9d:3b:85:56:b0:b3:5d:22:fe:8e: 89:39:44:1e:5f:58:3b:70:9e:41:72:2c:99:f1:eb:e7:14:e2: 91:51:2a:bb:5e:8e:17:b4:65:1d:04:eb:e7:a6:f4:af:c6:8b: e0:bd:31:8b:0c:b0:ba:74:fd:63:a0:a3:19:0e:bc:05:6c:22: 80:a5:75:2d:25:15:5c:ce:d3:25:a4:30:65:5c:75:89:46:2c: 5b:19:cf:e7:79:ef:61:d9:eb:b9:1e:38:b3:dd:43:8b:90:c1: 79:56:58:d5:2e:88:6a:e0:b1:9c:33:1b:f8:e5:3a:b3:af:48: 8c:8a:db:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHMre8CaA37HPoiZRGXvaxMrB5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNjA0MTYwMzE2MjVaFw0yNjA0MTkxMjI5MjVaMDMxMTAvBgNV BAMTKDFBMzM2MTg3QTQzOTY4NTMwQUM3MTNFOTVBRDlENDU3NTNFRDBFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqH3QcLQlKXklPSLzvLj4C/84 oVrdRRA31pw+dPmCSsuDMxqKayHxpa0kKFn0x3QmWXWMlQEmWLHpSFjr/SUgwIb8 k0rwqWm9Vkgjv7b1ZC4aq2Dqlv7cNRjU0eCEOIU0fwU/n8H7p6yVzXXwQxJ391tc h+LQXbpPTRht+D2ACAYwO8HvsRdgR6phlgJM0jyCbArW0j8uCSlMNqHn85MhwNGE f/J4DAZWpkPzLPwCkcU4Ab5nwxUmiLG5skny7jE6tuU3F5QTRCBr/Hs3YhpsHhzg 3TarjDC1XUoU5P5OwmZwVPSmt33PNAh9AmayyDQG/Ho1XdMbIk0NkuJGSc65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjNhh6Q5aFMKxxPpWtnUV1PtDlAwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5vxzpoz9FRCkAZXzR9u0gOKwFi0t5OICyS Pe8KGuNHHDexiPJeboP5ynPpLO0hIarQnBgNYhQlyJcFFNj85gNiTTmGak2Qv0JH gHeQnnLTWeXQjyOo4pyjVkEio6PnzqGQUj7LPd0T4gBqwhqIVu2rK4trl9RZvPu/ iBRD8KDZt9JoV7ICnTuFVrCzXSL+jok5RB5fWDtwnkFyLJnx6+cU4pFRKrtejhe0 ZR0E6+em9K/Gi+C9MYsMsLp0/WOgoxkOvAVsIoCldS0lFVzO0yWkMGVcdYlGLFsZ z+d572HZ67keOLPdQ4uQwXlWWNUuiGrgsZwzG/jlOrOvSIyK2yU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:51 2026 by rpki-client