$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: J+sB79Q3r59SXV1L+AHmGYtCGckSThssEor58kwMcEA= Subject key identifier: 42:07:7F:A4:82:6D:4C:75:92:91:1A:BB:17:19:CB:18:79:74:7F:08 Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 21A79058DBD67A8082315D39D2D8781C5F7F4173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 0265 Signing time: Wed 15 Apr 2026 21:11:34 +0000 Manifest this update: Wed 15 Apr 2026 21:06:34 +0000 Manifest next update: Sat 18 Apr 2026 23:48:34 +0000 Files and hashes: 1: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=) 2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: SQEisBhY0DV53zHr/sBQtcOCDd0Bbr0+fAzbajSxd3s=) 3: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: 3Nr1/yDzsWNG+8b7d+5CLGX6awmlcqSV/BEH35b+E9A=) 4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: O62FaU7sfJ7WBpQAG4VOlHgoxy59qAGq0CxPAvacDkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:90:58:db:d6:7a:80:82:31:5d:39:d2:d8:78:1c:5f:7f:41:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Apr 15 21:06:34 2026 GMT Not After : Apr 18 23:48:34 2026 GMT Subject: CN=42077FA4826D4C7592911ABB1719CB1879747F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:aa:dc:ef:4d:66:99:26:34:78:b1:21:86: ed:05:e0:a2:03:2a:47:46:12:1c:ae:b3:d2:1f:6e: 7b:5a:de:b0:7e:e5:70:57:7c:50:f9:4d:98:7d:13: 81:55:84:a4:05:cd:f3:d9:d6:bf:c1:72:94:8b:da: e9:ae:e2:ec:c0:b6:a1:5f:0b:8a:f6:9d:49:ee:29: 13:be:41:e6:66:30:50:24:10:d3:76:d5:01:c7:c6: d1:f5:19:c3:f4:2f:57:96:81:70:e6:46:37:94:1c: cd:c1:d4:66:4c:4d:b2:5b:8e:66:ca:26:3f:5a:b2: 94:ca:a0:a6:1d:d1:c5:7f:c3:57:6b:5a:49:fd:0b: 9d:b5:88:60:7c:83:ee:0e:aa:3b:a6:ac:25:65:24: 87:7d:53:d4:74:80:31:8b:9b:92:61:13:bf:f9:6b: 71:a6:0a:63:d8:d5:b9:13:0e:7c:b3:a3:83:3b:17: 67:69:b7:f4:63:20:80:19:be:45:cd:40:a8:3a:ef: 58:ba:1b:14:28:a8:f3:30:86:5a:b1:cc:1b:23:b4: 13:64:96:0d:25:6a:8a:ab:d3:06:12:96:c1:64:5c: ce:c9:0b:0b:df:c6:6c:98:1e:2c:a8:8a:ea:ff:04: 45:7e:44:b9:34:99:bf:70:79:0f:5f:ac:89:72:9b: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:7F:A4:82:6D:4C:75:92:91:1A:BB:17:19:CB:18:79:74:7F:08 X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:1d:9c:19:6e:af:bd:c2:9c:9b:24:0a:7e:3d:ae:78:68: ef:f7:ad:33:81:c0:24:18:a9:ee:74:01:c6:3c:c2:b8:39:5f: b2:6f:ab:6f:76:17:65:ab:5a:5e:a3:dd:86:88:5d:be:d0:4b: 56:21:c4:03:c2:1d:8e:88:de:7b:b5:e3:ae:ac:ee:90:ea:d7: 40:fb:54:de:45:88:3f:95:24:c4:25:04:b7:74:44:ea:ec:b5: cb:b8:6b:62:ed:c3:96:4b:aa:80:08:6b:6c:53:b9:92:ae:72: ba:7c:8a:7b:be:ae:46:fa:54:2b:1e:ad:6d:73:8d:87:a8:03: 1a:2f:74:25:42:d9:f4:58:87:1f:83:8f:26:95:e3:b9:f1:d1: fd:49:1b:06:66:a0:49:a5:e5:ac:f2:4a:4c:c7:d6:43:ee:bb: c7:66:3e:d6:83:d1:8e:db:e3:79:3d:63:f2:9e:c1:33:56:ee: 9a:ae:23:6e:4e:f6:2d:91:35:da:6a:9a:44:54:6e:37:90:ca: bb:f4:90:c5:e4:ae:28:80:73:5b:22:1c:0b:d2:a6:8c:31:5e: 59:1a:bc:25:8c:b3:d5:eb:ad:c4:fe:ea:fd:d2:cd:48:ea:5f: d5:9e:ed:64:8f:74:ff:c1:ba:27:a5:62:9b:c5:75:c1:8e:ad: 2f:de:6c:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaeQWNvWeoCCMV050th4HF9/QXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNjA0MTUyMTA2MzRaFw0yNjA0MTgyMzQ4MzRaMDMxMTAvBgNV BAMTKDQyMDc3RkE0ODI2RDRDNzU5MjkxMUFCQjE3MTlDQjE4Nzk3NDdGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYqrc701mmSY0eLEhhu0F4KID KkdGEhyus9Ifbnta3rB+5XBXfFD5TZh9E4FVhKQFzfPZ1r/BcpSL2umu4uzAtqFf C4r2nUnuKRO+QeZmMFAkENN21QHHxtH1GcP0L1eWgXDmRjeUHM3B1GZMTbJbjmbK Jj9aspTKoKYd0cV/w1drWkn9C521iGB8g+4OqjumrCVlJId9U9R0gDGLm5JhE7/5 a3GmCmPY1bkTDnyzo4M7F2dpt/RjIIAZvkXNQKg671i6GxQoqPMwhlqxzBsjtBNk lg0laoqr0wYSlsFkXM7JCwvfxmyYHiyoiur/BEV+RLk0mb9weQ9frIlym9+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgd/pIJtTHWSkRq7FxnLGHl0fwgwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo7HZwZbq+9wpybJAp+Pa54aO/3rTOBwCQY qe50AcY8wrg5X7Jvq292F2WrWl6j3YaIXb7QS1YhxAPCHY6I3nu1466s7pDq10D7 VN5FiD+VJMQlBLd0ROrstcu4a2Ltw5ZLqoAIa2xTuZKucrp8inu+rkb6VCserW1z jYeoAxovdCVC2fRYhx+DjyaV47nx0f1JGwZmoEml5azySkzH1kPuu8dmPtaD0Y7b 43k9Y/KewTNW7pquI25O9i2RNdpqmkRUbjeQyrv0kMXkriiAc1siHAvSpowxXlka vCWMs9XrrcT+6v3SzUjqX9We7WSPdP/BuielYpvFdcGOrS/ebNs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:16 2026 by rpki-client