$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: nzmv5ir/LzFaV1afIGxpUcJ4xMjypQIrfnfXr4dWn7k= Subject key identifier: 19:FD:07:31:E5:70:9E:97:A0:9D:16:80:0E:A5:A8:45:D2:EA:30:09 Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 0A266011064E2829DC796F60268D11B58E81F19B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 01C3 Signing time: Thu 16 Apr 2026 01:45:09 +0000 Manifest this update: Thu 16 Apr 2026 01:40:09 +0000 Manifest next update: Sun 19 Apr 2026 07:20:09 +0000 Files and hashes: 1: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: osT7c5vLwJUfWifXs+6ibZSHuwjWTrWQ9W0tQRsw6iw=) 2: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) 3: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:26:60:11:06:4e:28:29:dc:79:6f:60:26:8d:11:b5:8e:81:f1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Apr 16 01:40:09 2026 GMT Not After : Apr 19 07:20:09 2026 GMT Subject: CN=19FD0731E5709E97A09D16800EA5A845D2EA3009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:71:1d:6d:bb:9f:fc:34:72:df:8e:ca:14: b1:d1:69:70:c9:71:ac:04:31:70:f1:d8:87:5a:84: 0e:a6:3f:6a:14:79:aa:f1:f8:68:14:5c:86:86:77: 18:af:f1:4c:ae:62:53:79:97:0b:f1:5e:00:6c:89: 56:9f:b4:5f:70:c6:2f:b4:2d:ae:e8:d1:7e:08:30: 7f:d9:ec:c0:5b:0c:1c:5c:96:47:0b:58:67:83:f2: 99:4b:7b:96:fb:c4:d4:1d:db:a4:4d:78:b1:ef:49: af:72:d2:82:ae:bd:a3:db:7c:34:1b:bc:89:8d:7f: 39:0b:31:aa:45:86:48:32:4c:ce:78:6c:38:a3:84: 1c:91:cc:62:c2:c5:28:3f:3f:84:a4:a4:0e:cc:87: e9:0f:40:ab:3b:1a:0e:d9:f4:e8:ff:a8:a0:bd:f0: d4:8d:93:3d:35:55:f2:08:d2:74:ef:fc:fe:ca:8f: 77:94:af:51:f5:9f:f8:d3:ed:47:2f:72:14:3c:25: 06:b8:55:86:b2:29:dd:9c:fb:9b:40:d4:69:d0:11: 6b:04:21:db:b9:87:c7:08:a3:da:20:a7:75:3e:d0: 94:83:c2:ee:61:d9:74:e3:9f:6b:dd:32:54:b4:17: 15:68:9c:66:d9:56:13:21:6c:cf:fa:59:51:40:6c: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FD:07:31:E5:70:9E:97:A0:9D:16:80:0E:A5:A8:45:D2:EA:30:09 X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:62:7c:63:67:ff:31:72:e3:4e:42:e4:3a:2d:43:ae:ef:94: 52:32:05:8e:04:20:29:95:ae:18:61:98:4c:94:9e:34:de:50: 37:b1:a9:23:e1:c0:d3:c0:f9:38:d0:61:40:fa:60:1e:d2:48: cd:d6:99:6d:ea:6e:83:61:44:82:58:dd:8c:9f:5a:b9:c4:3a: fe:60:33:9d:f3:9d:c1:91:b6:af:da:4a:4c:eb:3f:9e:fa:d1: a0:ac:cd:8d:df:90:cf:70:b5:f2:41:39:df:05:3f:ca:0f:ca: 20:07:d5:e5:2c:64:9e:71:27:ee:42:4d:d5:5e:a2:5f:68:94: 40:69:85:7c:5a:59:cc:03:56:de:11:ae:32:e7:29:c7:5c:d7: 7a:6f:39:b0:8e:af:19:e0:08:e5:bd:3c:81:8e:5a:48:7e:53: d0:f8:dc:21:27:59:72:ba:39:e0:34:ea:ad:d7:d5:8f:c3:78: 6b:a2:c2:b4:08:c7:78:f4:62:e5:bc:2d:6e:4f:c4:f8:aa:0f: 50:e1:62:4d:e5:ef:43:cd:bd:46:4b:c5:94:0c:19:e1:48:77: ee:62:1a:d3:52:a9:89:73:76:7e:21:e4:3d:a8:81:79:df:58: fa:b8:7d:39:30:11:a8:07:b3:8c:50:55:d3:f1:09:1c:ef:90: 93:42:8b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiZgEQZOKCnceW9gJo0RtY6B8ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNjA0MTYwMTQwMDlaFw0yNjA0MTkwNzIwMDlaMDMxMTAvBgNV BAMTKDE5RkQwNzMxRTU3MDlFOTdBMDlEMTY4MDBFQTVBODQ1RDJFQTMwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOXEdbbuf/DRy347KFLHRaXDJ cawEMXDx2IdahA6mP2oUearx+GgUXIaGdxiv8UyuYlN5lwvxXgBsiVaftF9wxi+0 La7o0X4IMH/Z7MBbDBxclkcLWGeD8plLe5b7xNQd26RNeLHvSa9y0oKuvaPbfDQb vImNfzkLMapFhkgyTM54bDijhByRzGLCxSg/P4SkpA7Mh+kPQKs7Gg7Z9Oj/qKC9 8NSNkz01VfII0nTv/P7Kj3eUr1H1n/jT7UcvchQ8JQa4VYayKd2c+5tA1GnQEWsE Idu5h8cIo9ogp3U+0JSDwu5h2XTjn2vdMlS0FxVonGbZVhMhbM/6WVFAbBiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGf0HMeVwnpegnRaADqWoRdLqMAkwHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1ifGNn/zFy405C5DotQ67vlFIyBY4EICmV rhhhmEyUnjTeUDexqSPhwNPA+TjQYUD6YB7SSM3WmW3qboNhRIJY3YyfWrnEOv5g M53zncGRtq/aSkzrP5760aCszY3fkM9wtfJBOd8FP8oPyiAH1eUsZJ5xJ+5CTdVe ol9olEBphXxaWcwDVt4RrjLnKcdc13pvObCOrxngCOW9PIGOWkh+U9D43CEnWXK6 OeA06q3X1Y/DeGuiwrQIx3j0YuW8LW5PxPiqD1DhYk3l70PNvUZLxZQMGeFId+5i GtNSqYlzdn4h5D2ogXnfWPq4fTkwEagHs4xQVdPxCRzvkJNCi5k= -----END CERTIFICATE-----Generated at Fri Apr 17 16:04:50 2026 by rpki-client