$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: 9dvOInyk5JRc7zwxDneU8obNGG06Dmzpf4P3MLx1Kn8= Subject key identifier: FD:59:28:01:AC:4E:0B:95:A4:6D:FE:5D:C8:45:3F:9D:15:43:62:BC Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 68961C279A1A54533D2345E69CC1C790A4E72A0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 028B Signing time: Fri 17 Apr 2026 01:51:30 +0000 Manifest this update: Fri 17 Apr 2026 01:46:30 +0000 Manifest next update: Mon 20 Apr 2026 13:03:30 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: f+VfdZoaxJszHAfL7e+GCIPWXoXAxGWoRW+b2z6XrBs=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: amGg2X/e259yYVIAXgMMcb+ASupbTD2+EIvh0Q1tcnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:96:1c:27:9a:1a:54:53:3d:23:45:e6:9c:c1:c7:90:a4:e7:2a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Apr 17 01:46:30 2026 GMT Not After : Apr 20 13:03:30 2026 GMT Subject: CN=FD592801AC4E0B95A46DFE5DC8453F9D154362BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:07:4b:53:00:53:b7:1c:20:58:59:1f:9b: ae:c8:ab:cd:fe:4e:a4:de:12:a4:7f:75:0a:ff:aa: c8:80:c5:95:1c:4e:19:c4:7f:72:d1:88:e5:c0:4d: 06:e9:4c:2c:b1:33:00:36:8c:2f:50:1b:17:ae:55: 4f:fe:98:c9:a8:81:ef:b3:29:f4:8f:2a:32:5e:d3: 56:ab:23:59:e7:44:9d:9c:2b:57:5b:dc:48:f0:02: be:f8:33:a6:42:db:c7:c2:db:bb:3f:6a:4b:37:fe: f2:5c:3e:05:27:88:ec:fa:ae:55:a6:77:43:dd:54: d7:fd:99:b2:93:32:eb:76:f2:fc:d0:53:a7:f1:35: c7:98:be:29:d5:70:55:66:76:a0:3e:ce:ce:e4:55: 3e:f2:93:0a:85:9a:4f:ad:c9:2a:2c:83:0c:b2:6a: 00:73:01:29:b6:52:ce:e0:43:1d:13:58:9e:8b:f7: da:e6:c7:7e:25:eb:93:b3:64:af:46:7a:b8:18:dc: 1f:76:8e:2a:29:67:b0:13:ff:da:06:fc:05:97:d1: e5:19:f2:f1:ea:9d:00:27:e0:b1:3a:26:f2:9b:89: 24:de:38:f6:67:a0:dc:aa:bf:4d:33:96:78:54:ae: dd:d5:1d:55:b1:67:73:91:ff:64:5b:94:f9:71:64: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:28:01:AC:4E:0B:95:A4:6D:FE:5D:C8:45:3F:9D:15:43:62:BC X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ce:69:2b:27:3e:c8:f5:e9:d7:68:20:42:35:9c:6e:e1:a7: 47:8c:08:12:a6:ec:cd:0e:5d:6e:21:f1:7b:12:88:2b:99:00: c0:23:2c:be:1c:6e:35:4d:15:be:ed:9b:63:8d:89:99:f9:85: df:e7:81:4b:c9:5f:55:75:c2:12:68:9b:9b:55:03:39:06:75: e2:5a:0f:58:01:85:5c:f1:82:d3:12:8e:11:47:43:96:a7:52: 81:0a:67:70:68:45:c9:c1:5f:f0:92:d9:8b:56:ae:cf:5c:09: 91:1a:4d:fa:3e:86:4f:85:d8:05:87:d4:e6:01:66:be:ee:e9: 08:78:a7:65:34:a1:6d:79:61:50:50:9f:20:fd:66:ba:c0:5b: 14:28:dd:80:d7:17:52:c1:a7:8f:45:8a:1c:79:d7:a8:5d:2f: aa:83:26:5b:66:d3:7e:91:d0:6e:fe:e9:9d:dd:b8:de:45:43: 19:7e:96:3f:e4:02:bf:b2:c7:86:92:fa:91:f9:4b:6b:25:ba: a2:f4:bc:44:ab:44:9f:55:0b:2b:ae:4c:93:3c:79:00:2e:d5: c0:f3:16:22:c8:5c:41:1a:91:e0:18:b5:bd:a6:51:0c:b9:27: 21:e0:84:48:23:a1:cf:58:c8:f1:31:9c:67:01:33:cd:4e:e6: 3b:53:10:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJYcJ5oaVFM9I0XmnMHHkKTnKg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNjA0MTcwMTQ2MzBaFw0yNjA0MjAxMzAzMzBaMDMxMTAvBgNV BAMTKEZENTkyODAxQUM0RTBCOTVBNDZERkU1REM4NDUzRjlEMTU0MzYyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PQdLUwBTtxwgWFkfm67Iq83+ TqTeEqR/dQr/qsiAxZUcThnEf3LRiOXATQbpTCyxMwA2jC9QGxeuVU/+mMmoge+z KfSPKjJe01arI1nnRJ2cK1db3EjwAr74M6ZC28fC27s/aks3/vJcPgUniOz6rlWm d0PdVNf9mbKTMut28vzQU6fxNceYvinVcFVmdqA+zs7kVT7ykwqFmk+tySosgwyy agBzASm2Us7gQx0TWJ6L99rmx34l65OzZK9GergY3B92jiopZ7AT/9oG/AWX0eUZ 8vHqnQAn4LE6JvKbiSTeOPZnoNyqv00zlnhUrt3VHVWxZ3OR/2RblPlxZCIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VkoAaxOC5Wkbf5dyEU/nRVDYrwwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTOaSsnPsj16ddoIEI1nG7hp0eMCBKm7M0O XW4h8XsSiCuZAMAjLL4cbjVNFb7tm2ONiZn5hd/ngUvJX1V1whJom5tVAzkGdeJa D1gBhVzxgtMSjhFHQ5anUoEKZ3BoRcnBX/CS2YtWrs9cCZEaTfo+hk+F2AWH1OYB Zr7u6Qh4p2U0oW15YVBQnyD9ZrrAWxQo3YDXF1LBp49Fihx516hdL6qDJltm036R 0G7+6Z3duN5FQxl+lj/kAr+yx4aS+pH5S2sluqL0vESrRJ9VCyuuTJM8eQAu1cDz FiLIXEEakeAYtb2mUQy5JyHghEgjoc9YyPExnGcBM81O5jtTEGs= -----END CERTIFICATE-----Generated at Fri Apr 17 14:22:32 2026 by rpki-client