$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: ssCo/lBiRjO9rLBIIMH10HeDj5jem/Z2IzLDsNlTQ2A= Subject key identifier: E2:70:73:F9:4E:81:B2:84:C2:B3:E2:E6:58:C9:C5:A1:E8:8A:93:FB Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 79B1EC49D7D2E77341A4E902FCB056928E5ECB56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 0244 Signing time: Wed 15 Apr 2026 19:51:01 +0000 Manifest this update: Wed 15 Apr 2026 19:46:01 +0000 Manifest next update: Sun 19 Apr 2026 06:49:01 +0000 Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: nXCTckK6A6We9QNZdDsNMyHVicLwI8rqIMphWbU2RL0=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b1:ec:49:d7:d2:e7:73:41:a4:e9:02:fc:b0:56:92:8e:5e:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Apr 15 19:46:01 2026 GMT Not After : Apr 19 06:49:01 2026 GMT Subject: CN=E27073F94E81B284C2B3E2E658C9C5A1E88A93FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:f9:74:e3:04:66:fa:fb:a1:b2:1b:a7:e6: 9f:a1:25:8a:f4:58:7a:67:7a:7a:d1:1f:f7:38:fd: e8:96:ff:03:9b:bb:eb:4c:02:24:62:31:96:9e:52: 73:46:1d:59:4b:ee:f3:c6:48:eb:d5:b9:06:1c:32: 85:be:e7:60:f4:16:ae:82:e9:43:69:a0:bb:4e:ac: f4:11:1d:72:1e:aa:e2:a4:9c:2a:07:b6:d1:2a:7a: a4:44:61:7c:e6:c8:b1:48:c7:a6:f1:af:28:ac:9b: 4a:e0:6d:a5:ce:48:5d:f9:7a:c9:b6:dd:d6:f6:9e: 6c:95:09:0b:97:07:53:91:33:4d:84:dd:60:a8:77: c5:eb:be:57:7a:dc:30:a6:7b:00:01:60:eb:ed:37: 78:1d:e0:7d:40:ea:f1:b1:2a:a6:31:29:48:3d:0d: 6a:8e:86:2e:75:4e:4b:24:2a:5e:7b:92:05:3a:99: 89:8d:15:06:e3:8f:7c:75:f9:a9:6c:0f:87:0a:42: b9:7b:25:17:5d:a2:e6:8b:f6:33:af:a2:4d:cb:3e: 42:3a:bf:7a:64:40:bf:e8:5a:07:96:94:63:9a:2a: 88:61:38:1d:78:15:42:71:30:80:97:95:43:6f:03: 47:48:34:b6:aa:5c:1a:d0:f2:83:4c:0c:b4:b2:e8: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:73:F9:4E:81:B2:84:C2:B3:E2:E6:58:C9:C5:A1:E8:8A:93:FB X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fe:12:1c:0c:4b:96:37:28:ee:7b:43:11:62:6d:47:18:72: 7e:b7:e5:ab:e4:1c:d5:36:4d:27:4f:c6:e4:f9:24:41:2f:64: 38:19:31:47:9f:3c:d9:e0:ac:19:e3:40:be:1f:8c:48:3b:a9: 70:15:62:46:62:b6:a7:a3:5e:35:62:70:1b:69:53:13:57:5b: ba:2e:06:ed:a1:a8:0b:da:51:a5:6c:b7:57:4b:5e:0f:32:72: 5e:79:8f:79:f6:c3:f3:42:d4:3e:f3:98:23:d1:e8:33:3f:23: 6a:98:1f:c4:c7:b1:39:9a:ca:47:25:4e:63:0a:56:d8:57:54: 55:40:7c:83:02:ec:5d:3c:59:4a:38:1e:b2:be:08:0a:b5:28: de:59:bb:d1:84:75:b1:ed:70:16:65:42:08:19:f9:db:0f:e5: 1c:fd:64:5a:ad:79:a7:67:e6:dc:22:5f:40:58:4e:e6:d7:6a: 27:16:3e:bd:70:a3:d3:8f:67:c3:3a:6c:a8:ed:17:bb:99:c9: 77:f9:5a:64:24:2a:9d:73:bc:e0:3a:38:96:17:e3:e0:53:0a: f9:0e:5a:02:61:e7:95:64:21:45:bf:07:75:0c:49:5e:94:11: 69:f7:76:c8:ca:ee:a5:be:92:a3:37:90:36:f4:fc:bd:b6:31: de:6f:0f:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebHsSdfS53NBpOkC/LBWko5ey1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNjA0MTUxOTQ2MDFaFw0yNjA0MTkwNjQ5MDFaMDMxMTAvBgNV BAMTKEUyNzA3M0Y5NEU4MUIyODRDMkIzRTJFNjU4QzlDNUExRTg4QTkzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVPl04wRm+vuhshun5p+hJYr0 WHpnenrRH/c4/eiW/wObu+tMAiRiMZaeUnNGHVlL7vPGSOvVuQYcMoW+52D0Fq6C 6UNpoLtOrPQRHXIequKknCoHttEqeqREYXzmyLFIx6bxryism0rgbaXOSF35esm2 3db2nmyVCQuXB1ORM02E3WCod8Xrvld63DCmewABYOvtN3gd4H1A6vGxKqYxKUg9 DWqOhi51TkskKl57kgU6mYmNFQbjj3x1+alsD4cKQrl7JRddouaL9jOvok3LPkI6 v3pkQL/oWgeWlGOaKohhOB14FUJxMICXlUNvA0dINLaqXBrQ8oNMDLSy6GcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4nBz+U6BsoTCs+LmWMnFoeiKk/swHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv+EhwMS5Y3KO57QxFibUcYcn635avkHNU2 TSdPxuT5JEEvZDgZMUefPNngrBnjQL4fjEg7qXAVYkZitqejXjVicBtpUxNXW7ou Bu2hqAvaUaVst1dLXg8ycl55j3n2w/NC1D7zmCPR6DM/I2qYH8THsTmaykclTmMK VthXVFVAfIMC7F08WUo4HrK+CAq1KN5Zu9GEdbHtcBZlQggZ+dsP5Rz9ZFqteadn 5twiX0BYTubXaicWPr1wo9OPZ8M6bKjtF7uZyXf5WmQkKp1zvOA6OJYX4+BTCvkO WgJh55VkIUW/B3UMSV6UEWn3dsjK7qW+kqM3kDb0/L22Md5vD9c= -----END CERTIFICATE-----Generated at Sat Apr 18 07:15:56 2026 by rpki-client