$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: Wpq0uYNBIKQ5pjkivVeyrCxdP+kyu7lhlpRcptOzDmQ= Subject key identifier: 00:C0:73:81:0D:5E:C2:F0:85:3F:55:BC:D1:DF:3B:18:E2:A1:6E:DE Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 1B41E5C12A09F78EAF47BA011CE395179C214AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 0124 Signing time: Thu 16 Apr 2026 21:21:20 +0000 Manifest this update: Thu 16 Apr 2026 21:16:20 +0000 Manifest next update: Mon 20 Apr 2026 04:40:20 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: ZYaNWF2hz9ZuzJNtUn9qnOFyky0SPNayJJQBfuhFXiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:41:e5:c1:2a:09:f7:8e:af:47:ba:01:1c:e3:95:17:9c:21:4a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Apr 16 21:16:20 2026 GMT Not After : Apr 20 04:40:20 2026 GMT Subject: CN=00C073810D5EC2F0853F55BCD1DF3B18E2A16EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:a6:98:51:02:97:1d:4d:8b:a1:ea:10:65: 4a:e9:8b:20:06:4b:38:da:eb:25:d7:70:f1:89:62: bf:24:65:70:a4:0f:6d:54:8e:a8:ad:7a:62:a3:0d: da:21:3d:dc:ff:a1:85:c5:db:bd:5a:9e:06:0f:00: 31:76:a4:9c:76:85:cf:25:b5:a8:12:75:65:36:ad: 59:37:b2:8a:3d:67:b0:5f:62:f1:71:3a:1b:95:1d: 60:b4:64:47:ba:16:f5:b1:39:a3:b8:a6:ea:1b:12: c4:32:76:87:7f:26:d5:85:83:a1:4d:a0:ba:f4:73: 6a:ea:63:69:df:b4:42:c1:20:2a:fa:6c:7c:a2:f7: 16:cd:a7:88:86:bb:a9:91:42:b5:9e:ff:de:d7:a1: c3:44:6d:8b:fc:24:cb:40:ba:54:58:e0:51:df:a6: 36:d0:b0:f6:5a:16:92:b5:79:9a:9f:73:c3:2d:f3: a0:db:de:59:b4:83:ff:64:9d:d7:32:c4:9a:bc:ed: ef:11:88:7e:e0:4e:51:e6:32:02:c5:7e:cb:45:7d: 64:9c:b5:1e:4c:b3:b4:b9:0a:c6:93:55:32:8c:1f: b6:e5:e6:d7:07:2b:bb:56:84:6c:39:a6:ed:6a:c2: cf:3e:10:98:77:1f:4b:ab:d0:88:a3:41:e9:2e:d1: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:73:81:0D:5E:C2:F0:85:3F:55:BC:D1:DF:3B:18:E2:A1:6E:DE X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:c1:8a:5f:96:2d:98:c0:60:04:63:e7:81:8b:a4:96:ae: 73:d6:25:2e:60:76:b9:8d:ee:01:6c:25:59:30:b0:87:04:1d: 03:74:6c:43:09:24:fb:82:99:1e:be:49:16:92:11:ed:5f:5f: 59:cb:86:e4:98:6d:59:5d:01:4b:75:75:51:38:9c:dc:79:3a: 9e:0b:6b:9e:6c:46:fd:1a:87:8e:12:a4:b5:af:03:f7:b2:5f: 67:18:9e:93:75:cc:a7:3f:4a:a1:14:8d:b3:c0:0d:30:7a:cd: 5f:fe:8f:4b:2c:8e:c3:ec:a5:c4:11:4e:bf:3e:3f:1c:9d:b6: 49:37:69:27:53:0d:09:37:1d:5b:f7:73:b9:97:fd:32:51:fe: d7:25:47:99:c3:ca:2f:76:6b:15:39:48:b5:e2:bf:4c:74:e5: 99:b5:9d:1c:99:41:05:bc:c7:e1:cd:7c:e6:cb:ef:2e:44:35: fe:ff:c6:38:45:66:45:22:9c:42:72:7c:d2:54:f5:c1:18:69: 8b:7b:5e:fe:6d:51:31:75:34:ae:b1:97:30:88:c8:01:24:6c: 7e:89:7a:76:ca:46:8e:27:1f:0e:99:4d:07:06:f1:a9:cc:32: 98:e5:30:ea:cc:d0:f0:fa:fc:7e:0a:3a:c8:6b:05:01:27:53: 3b:52:1c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0HlwSoJ946vR7oBHOOVF5whStIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNjA0MTYyMTE2MjBaFw0yNjA0MjAwNDQwMjBaMDMxMTAvBgNV BAMTKDAwQzA3MzgxMEQ1RUMyRjA4NTNGNTVCQ0QxREYzQjE4RTJBMTZFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzKaYUQKXHU2LoeoQZUrpiyAG Szja6yXXcPGJYr8kZXCkD21UjqitemKjDdohPdz/oYXF271angYPADF2pJx2hc8l tagSdWU2rVk3soo9Z7BfYvFxOhuVHWC0ZEe6FvWxOaO4puobEsQydod/JtWFg6FN oLr0c2rqY2nftELBICr6bHyi9xbNp4iGu6mRQrWe/97XocNEbYv8JMtAulRY4FHf pjbQsPZaFpK1eZqfc8Mt86Db3lm0g/9kndcyxJq87e8RiH7gTlHmMgLFfstFfWSc tR5Ms7S5CsaTVTKMH7bl5tcHK7tWhGw5pu1qws8+EJh3H0ur0IijQeku0WgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMBzgQ1ewvCFP1W80d87GOKhbt4wHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTEwYpfli2YwGAEY+eBi6SWrnPWJS5gdrmN 7gFsJVkwsIcEHQN0bEMJJPuCmR6+SRaSEe1fX1nLhuSYbVldAUt1dVE4nNx5Op4L a55sRv0ah44SpLWvA/eyX2cYnpN1zKc/SqEUjbPADTB6zV/+j0ssjsPspcQRTr8+ Pxydtkk3aSdTDQk3HVv3c7mX/TJR/tclR5nDyi92axU5SLXiv0x05Zm1nRyZQQW8 x+HNfObL7y5ENf7/xjhFZkUinEJyfNJU9cEYaYt7Xv5tUTF1NK6xlzCIyAEkbH6J enbKRo4nHw6ZTQcG8anMMpjlMOrM0PD6/H4KOshrBQEnUztSHCo= -----END CERTIFICATE-----Generated at Fri Apr 17 20:22:47 2026 by rpki-client