$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: /00AYjjAmpMMjiAVLVFxcoRU6d1SagR/g508FUgFdEA= Subject key identifier: 61:9D:20:E6:F8:C1:3E:2B:95:F9:2C:0B:AD:C4:F3:87:82:24:53:E2 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 23CA330DDB84B61345155A0BB45985EAA184F963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 028F Signing time: Wed 15 Apr 2026 18:30:55 +0000 Manifest this update: Wed 15 Apr 2026 18:25:55 +0000 Manifest next update: Sun 19 Apr 2026 05:52:55 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=) 2: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=) 3: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: PrRzpWk88dnc5V9BFjzTOKYGUlC+Pk/OtnDrB4soY7Q=) 4: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ca:33:0d:db:84:b6:13:45:15:5a:0b:b4:59:85:ea:a1:84:f9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Apr 15 18:25:55 2026 GMT Not After : Apr 19 05:52:55 2026 GMT Subject: CN=619D20E6F8C13E2B95F92C0BADC4F387822453E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:03:42:1a:57:e0:09:b4:a2:46:2a:06:f0: cc:b6:8b:f7:65:58:75:dd:4e:ba:1c:6f:05:5e:06: 21:e0:2f:ce:43:f4:b8:52:fa:ed:57:84:d4:3d:f1: 65:9f:6d:ab:b7:12:69:60:f5:06:82:0d:4c:5f:b1: cc:dd:40:ad:f5:82:bb:3a:e2:ba:96:98:24:f7:53: 04:fb:8d:7a:c5:55:e8:10:84:d5:46:b4:f8:2c:32: ce:23:17:ba:f9:64:4e:92:70:d6:ab:0b:a6:f9:86: c8:df:48:eb:4f:23:ae:3c:64:d7:7b:a9:e1:45:bc: 1a:6a:6a:da:df:0a:9a:03:37:75:de:68:0b:a8:66: e0:94:ce:1f:dd:29:59:53:73:41:85:5a:1a:e5:33: 6c:8b:9e:df:02:79:0c:3a:9e:5f:ac:de:05:f8:3a: a9:31:2f:7d:db:24:12:c6:ca:b3:a1:53:2b:41:02: 99:8e:41:7c:08:c4:05:d3:cf:f2:49:df:9b:9d:9e: 94:4a:a7:d8:ab:0c:54:44:aa:f0:ca:4b:41:b8:10: f6:10:9f:43:dd:f4:7d:89:4f:9b:bb:eb:fb:b0:0d: 42:a6:45:dc:48:ef:3c:1d:5e:4d:65:0a:0a:89:e5: 78:79:40:7a:a3:44:0b:99:e0:42:09:78:b9:85:c8: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:20:E6:F8:C1:3E:2B:95:F9:2C:0B:AD:C4:F3:87:82:24:53:E2 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0e:2d:51:67:93:e2:0c:63:e9:a1:c7:c5:43:4f:24:0e:20: fe:7e:17:74:3b:da:8d:89:57:93:5b:f1:8e:31:38:d4:f7:74: 7d:6a:dd:75:01:7d:9d:d0:aa:f7:d0:ce:b7:de:3c:08:51:77: 00:9a:1c:9e:da:3d:e7:96:52:38:c8:37:13:d1:da:e1:99:d3: 06:38:43:cf:54:db:b1:ae:ef:79:fe:21:60:2a:e2:4d:38:6e: b4:02:df:8d:f8:89:11:f1:88:e6:d6:be:52:d4:d0:6e:a7:cc: b9:d1:3f:79:01:41:2a:18:1a:93:94:81:71:2b:d6:3a:17:7d: a0:cc:aa:0e:e8:00:2f:4c:58:cd:bf:fa:3b:bd:22:b5:32:f8: d4:8f:bd:44:e5:c1:58:19:19:33:e7:7a:a9:95:f0:89:08:87: 72:6e:a3:7c:34:a4:2d:b6:92:b2:4f:b3:4a:51:ce:16:cc:9a: e5:23:f8:22:87:83:2f:f0:52:5a:ec:04:08:cf:c2:cb:ec:ce: 0f:31:f9:32:1c:0e:ff:3c:78:1b:ef:d7:40:5d:0b:87:32:bd: 7f:66:7a:ee:3b:95:f6:40:3c:e1:99:d4:12:d7:cd:89:81:19: 96:c8:0e:73:1e:b7:b4:da:bc:07:0e:8d:df:9d:f6:fe:0c:6b: 25:d5:ec:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8ozDduEthNFFVoLtFmF6qGE+WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNjA0MTUxODI1NTVaFw0yNjA0MTkwNTUyNTVaMDMxMTAvBgNV BAMTKDYxOUQyMEU2RjhDMTNFMkI5NUY5MkMwQkFEQzRGMzg3ODIyNDUzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHANCGlfgCbSiRioG8My2i/dl WHXdTrocbwVeBiHgL85D9LhS+u1XhNQ98WWfbau3Emlg9QaCDUxfsczdQK31grs6 4rqWmCT3UwT7jXrFVegQhNVGtPgsMs4jF7r5ZE6ScNarC6b5hsjfSOtPI648ZNd7 qeFFvBpqatrfCpoDN3XeaAuoZuCUzh/dKVlTc0GFWhrlM2yLnt8CeQw6nl+s3gX4 OqkxL33bJBLGyrOhUytBApmOQXwIxAXTz/JJ35udnpRKp9irDFREqvDKS0G4EPYQ n0Pd9H2JT5u76/uwDUKmRdxI7zwdXk1lCgqJ5Xh5QHqjRAuZ4EIJeLmFyBOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZ0g5vjBPiuV+SwLrcTzh4IkU+IwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8OLVFnk+IMY+mhx8VDTyQOIP5+F3Q72o2J V5Nb8Y4xONT3dH1q3XUBfZ3QqvfQzrfePAhRdwCaHJ7aPeeWUjjINxPR2uGZ0wY4 Q89U27Gu73n+IWAq4k04brQC3434iRHxiObWvlLU0G6nzLnRP3kBQSoYGpOUgXEr 1joXfaDMqg7oAC9MWM2/+ju9IrUy+NSPvUTlwVgZGTPneqmV8IkIh3Juo3w0pC22 krJPs0pRzhbMmuUj+CKHgy/wUlrsBAjPwsvszg8x+TIcDv88eBvv10BdC4cyvX9m eu47lfZAPOGZ1BLXzYmBGZbIDnMet7TavAcOjd+d9v4MayXV7O0= -----END CERTIFICATE-----Generated at Sat Apr 18 06:34:44 2026 by rpki-client