$ rpki-client -vvf repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft File: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft (raw, json) Hash identifier: OVczUSwxtDMRlZp96uLPTUDgMFzBU5R30abp9uLBf6k= Subject key identifier: D5:6D:1B:DE:D0:D7:39:22:E3:8F:3B:89:35:69:BD:37:9B:55:C8:CE Authority key identifier: 0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD Certificate issuer: /CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Certificate serial: 0F4DCCA8BAEC2F48A78861AE420DDD7576FD9512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft Manifest number: 18 Signing time: Sat 18 Apr 2026 12:41:27 +0000 Manifest this update: Sat 18 Apr 2026 12:36:27 +0000 Manifest next update: Tue 21 Apr 2026 17:30:27 +0000 Files and hashes: 1: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl (hash: oxfEObCSWIl6AagyXnhJQ8AD1sVQeIhMo4KhBHm/B/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 17:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4d:cc:a8:ba:ec:2f:48:a7:88:61:ae:42:0d:dd:75:76:fd:95:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Validity Not Before: Apr 18 12:36:27 2026 GMT Not After : Apr 21 17:30:27 2026 GMT Subject: CN=D56D1BDED0D73922E38F3B893569BD379B55C8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:d8:35:7b:0c:5f:68:c7:ee:24:93:2b:72: 4f:0a:6e:7d:d6:ae:b5:4b:b3:49:6e:ca:4d:d6:ca: f7:74:da:93:fe:90:de:bc:95:5b:70:1a:86:a6:f0: 94:3b:71:ef:87:d7:4d:61:f3:ea:14:a0:f8:38:9f: 12:98:88:f6:00:d9:8e:15:d7:76:77:78:13:2a:7b: 2b:db:69:98:b1:c5:2c:d8:04:26:ba:a7:11:96:17: 95:d9:56:d5:9d:8b:46:12:76:41:e0:ca:2f:1b:64: f9:fe:42:fc:37:d8:06:20:db:e6:c2:81:27:cb:f5: 27:fc:b1:f0:1b:43:21:0c:de:1c:ab:fb:d3:83:db: 3e:2c:e2:d9:65:89:c7:74:99:76:88:52:cf:b4:d2: 81:c1:db:d2:3d:fc:2b:99:d5:1a:b0:b0:1f:4c:24: b5:6d:a3:22:d9:c9:ad:44:f9:cb:37:8c:32:d0:87: b3:dc:09:c8:fb:5e:fd:b5:68:79:e8:c1:73:ba:0d: 16:fd:a1:8c:4b:47:f8:01:34:2a:38:93:e3:f9:eb: 96:5a:17:27:31:de:eb:e7:d2:d2:80:04:10:c3:bc: 24:94:93:31:24:a1:26:04:34:11:17:a1:fc:c4:db: fe:93:d1:7c:ca:85:ea:af:ca:41:c6:b8:89:be:dd: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:1B:DE:D0:D7:39:22:E3:8F:3B:89:35:69:BD:37:9B:55:C8:CE X509v3 Authority Key Identifier: keyid:0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:ed:5a:f1:9e:77:68:88:50:34:81:a1:26:df:44:45:7c:f4: ac:c3:ae:0d:20:ab:d5:83:38:35:f9:cc:30:c7:36:2d:30:8e: 04:d4:92:31:18:22:64:b4:c1:1f:c2:29:41:44:da:99:90:4b: 8d:47:c6:4f:79:68:1a:40:2c:68:28:b2:aa:00:b1:a7:16:ff: e3:31:17:78:0e:b7:48:d5:26:df:e0:e9:ca:46:52:b8:e1:ac: a8:4e:c9:45:39:87:79:e8:c4:d6:55:79:3d:41:d6:ee:21:76: 06:a4:87:c9:58:3d:71:cb:76:d7:c2:fe:1e:7d:a1:88:93:80: 28:5d:92:7a:e2:fb:cb:04:6b:ee:e8:e1:de:7d:70:d6:53:74: 41:27:df:69:60:a1:4c:62:85:ae:53:23:a6:63:32:6e:77:f3: 03:a2:b4:a5:09:8a:7d:dc:a9:f4:72:8c:eb:fe:8e:7e:2c:08: f4:2e:62:d8:9a:86:59:64:9e:04:86:b0:71:55:85:cd:33:03: 75:38:ac:26:04:07:28:a5:97:e2:5b:01:03:94:ad:ea:63:4f: 74:11:27:10:5f:ab:83:79:36:1c:d6:fe:d1:98:98:e1:b3:ef: 40:39:df:32:ff:c7:62:1a:14:89:66:29:15:c6:7f:f5:8d:7a: ee:f6:2a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD03MqLrsL0iniGGuQg3ddXb9lRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3 MzFFNUNDRDAeFw0yNjA0MTgxMjM2MjdaFw0yNjA0MjExNzMwMjdaMDMxMTAvBgNV BAMTKEQ1NkQxQkRFRDBENzM5MjJFMzhGM0I4OTM1NjlCRDM3OUI1NUM4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDNg1ewxfaMfuJJMrck8Kbn3W rrVLs0luyk3Wyvd02pP+kN68lVtwGoam8JQ7ce+H101h8+oUoPg4nxKYiPYA2Y4V 13Z3eBMqeyvbaZixxSzYBCa6pxGWF5XZVtWdi0YSdkHgyi8bZPn+Qvw32AYg2+bC gSfL9Sf8sfAbQyEM3hyr+9OD2z4s4tllicd0mXaIUs+00oHB29I9/CuZ1RqwsB9M JLVtoyLZya1E+cs3jDLQh7PcCcj7Xv21aHnowXO6DRb9oYxLR/gBNCo4k+P565Za Fycx3uvn0tKABBDDvCSUkzEkoSYENBEXofzE2/6T0XzKheqvykHGuIm+3RalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1W0b3tDXOSLjjzuJNWm9N5tVyM4wHwYDVR0j BBgwFoAUDz29lBl81FgJV7Tz0Ju2WHMeXM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTgwNmQzMC1lZTA1LTQ1MGYtOTQ2Ni03ZjkwOGU5Y2M3ZTQvMC8wRjNEQkQ5NDE5 N0NENDU4MDk1N0I0RjNEMDlCQjY1ODczMUU1Q0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3MzFF NUNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU4MDZkMzAtZWUwNS00NTBmLTk0 NjYtN2Y5MDhlOWNjN2U0LzAvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2 NTg3MzFFNUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANrtWvGed2iIUDSBoSbfREV89KzDrg0gq9WD ODX5zDDHNi0wjgTUkjEYImS0wR/CKUFE2pmQS41Hxk95aBpALGgosqoAsacW/+Mx F3gOt0jVJt/g6cpGUrjhrKhOyUU5h3noxNZVeT1B1u4hdgakh8lYPXHLdtfC/h59 oYiTgChdknri+8sEa+7o4d59cNZTdEEn32lgoUxiha5TI6ZjMm538wOitKUJin3c qfRyjOv+jn4sCPQuYtiahllkngSGsHFVhc0zA3U4rCYEByill+JbAQOUrepjT3QR JxBfq4N5NhzW/tGYmOGz70A53zL/x2IaFIlmKRXGf/WNeu72Kl8= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:22 2026 by rpki-client