$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: U83ANx9F3lCY8MJKTmIWodb2ClDim1IeMFHa7kgGCyQ= Subject key identifier: 0D:93:75:4E:ED:ED:D8:67:18:2E:5F:05:50:87:6B:7A:B7:83:68:45 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 42E43DDAFD07CE88731F2046524814FB8C4764AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 0349 Signing time: Sun 19 Apr 2026 11:51:00 +0000 Manifest this update: Sun 19 Apr 2026 11:46:00 +0000 Manifest next update: Wed 22 Apr 2026 20:54:00 +0000 Files and hashes: 1: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: DZhIHh+Q1/lFglHPCtQYtJARiOU+Khz/cuUC8LvdiAk=) 2: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: SaglbTs2Sm97iqGUTpHLhK4uFUxx2JxCBReDItgEQOA=) 3: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: ta8cyJGAuX8M5px06fD7ixeqP65bXdztJIzRgtjjUTw=) 4: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: SqB0PYwjOoh9ZPXmjrvrMi8MN9worX0q5PgJyxMcXj0=) 5: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: uFvJDDnE+LzWscDNPWULjpdUKOX2mvB/YxTyjJbL490=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e4:3d:da:fd:07:ce:88:73:1f:20:46:52:48:14:fb:8c:47:64:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Apr 19 11:46:00 2026 GMT Not After : Apr 22 20:54:00 2026 GMT Subject: CN=0D93754EEDEDD867182E5F0550876B7AB7836845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:d2:2b:5d:be:42:7f:0d:dc:56:02:26:05: e6:75:96:1e:d7:73:93:e9:27:02:9f:68:b5:a5:07: fa:8f:5c:d7:6d:89:ac:f4:98:78:72:89:ce:ed:b3: 5b:03:6f:ca:b5:c2:4a:08:ff:19:84:bd:91:32:bf: 1f:d4:3e:8a:6a:14:31:cd:20:95:e2:10:3b:84:1b: c2:dc:4a:40:66:b5:a2:25:ea:9e:da:0f:50:b2:01: a0:2f:5c:e8:3b:14:bc:5b:0b:ff:60:ca:d6:c3:4d: 6d:fb:07:24:c6:f1:79:0b:65:33:24:a6:5c:39:77: 8e:f9:a8:b6:eb:40:49:9f:3b:fe:a8:42:3f:8b:a7: e9:09:77:8c:77:a3:a4:f0:3d:e0:9d:75:7c:83:15: c7:ea:bb:1f:a9:1d:11:17:b3:e0:53:86:45:9c:df: 2e:be:e4:30:9f:47:bd:13:57:d7:f6:b2:56:08:66: 2c:5b:c6:19:12:2d:c3:cd:06:25:9c:8a:b1:71:83: 87:9f:44:1f:06:ab:46:21:49:da:34:b9:56:f9:00: 96:bc:eb:c0:90:75:12:31:e2:4b:9c:f2:9f:cd:73: 5e:dd:05:21:8b:9e:df:ad:91:aa:78:87:28:1a:4e: 97:65:dd:57:60:8d:28:f1:6f:47:ce:05:85:77:dd: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:75:4E:ED:ED:D8:67:18:2E:5F:05:50:87:6B:7A:B7:83:68:45 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:9f:b7:65:4d:15:f3:dd:5a:b8:53:61:a7:3c:2f:ab:1b: 66:41:6b:b4:56:4e:b9:dd:6b:2c:79:a0:b5:5e:07:e2:e5:d7: 17:d2:b5:cb:33:d5:bb:83:a0:b6:1f:b8:02:1b:c4:05:d8:02: 83:a1:23:8f:3c:77:38:8f:75:4c:cd:e2:15:6f:79:d7:2b:9c: 29:d6:98:8a:bc:db:c7:6b:31:0f:dd:0f:db:51:58:a0:1e:12: 7d:58:ef:8a:ef:3c:a5:ba:b4:7f:b0:0a:76:5b:66:43:ce:78: a2:ff:5f:6b:96:6e:64:ed:05:d7:a9:7d:81:61:d2:c0:1f:91: 5d:67:ea:68:dc:04:86:b6:32:8d:d6:72:d5:33:7f:7a:ed:d8: d9:84:ab:2c:ca:8f:f1:2f:cc:f5:1b:bf:ee:96:8d:d9:78:a9: 7a:cc:47:98:47:85:01:b9:f7:90:16:68:48:73:2d:33:18:31: 26:25:06:8c:4e:06:68:d2:c7:a4:f6:ab:96:27:74:b4:a8:30: 91:94:5e:d2:6b:9b:93:f9:03:34:52:7b:2f:88:60:90:5b:87: 6e:23:75:a2:8c:b8:67:a2:16:ae:b4:64:db:20:59:c5:06:a7: 94:c7:09:43:04:e4:4c:16:c6:e9:b0:b2:e1:c9:80:3d:91:bc: a9:e1:33:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuQ92v0HzohzHyBGUkgU+4xHZK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNjA0MTkxMTQ2MDBaFw0yNjA0MjIyMDU0MDBaMDMxMTAvBgNV BAMTKDBEOTM3NTRFRURFREQ4NjcxODJFNUYwNTUwODc2QjdBQjc4MzY4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3tIrXb5Cfw3cVgImBeZ1lh7X c5PpJwKfaLWlB/qPXNdtiaz0mHhyic7ts1sDb8q1wkoI/xmEvZEyvx/UPopqFDHN IJXiEDuEG8LcSkBmtaIl6p7aD1CyAaAvXOg7FLxbC/9gytbDTW37ByTG8XkLZTMk plw5d475qLbrQEmfO/6oQj+Lp+kJd4x3o6TwPeCddXyDFcfqux+pHREXs+BThkWc 3y6+5DCfR70TV9f2slYIZixbxhkSLcPNBiWcirFxg4efRB8Gq0YhSdo0uVb5AJa8 68CQdRIx4kuc8p/Nc17dBSGLnt+tkap4hygaTpdl3VdgjSjxb0fOBYV33aPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZN1Tu3t2GcYLl8FUIdrereDaEUwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgSn7dlTRXz3Vq4U2GnPC+rG2ZBa7RWTrnd ayx5oLVeB+Ll1xfStcsz1buDoLYfuAIbxAXYAoOhI488dziPdUzN4hVvedcrnCnW mIq828drMQ/dD9tRWKAeEn1Y74rvPKW6tH+wCnZbZkPOeKL/X2uWbmTtBdepfYFh 0sAfkV1n6mjcBIa2Mo3WctUzf3rt2NmEqyzKj/EvzPUbv+6Wjdl4qXrMR5hHhQG5 95AWaEhzLTMYMSYlBoxOBmjSx6T2q5YndLSoMJGUXtJrm5P5AzRSey+IYJBbh24j daKMuGeiFq60ZNsgWcUGp5THCUME5EwWxumwsuHJgD2RvKnhM7s= -----END CERTIFICATE-----Generated at Sun Apr 19 13:43:50 2026 by rpki-client