$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: 6Dijsz8r0NHsNwWCsRkeuGMDqRASyEgkNivqZ2SO3GY= Subject key identifier: 9C:93:02:38:74:2B:F5:86:E7:6D:46:9F:54:AE:A2:56:D7:26:0F:1A Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 71F0678265F0136BBEE397F9CCD36F7F5619914A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 012E Signing time: Fri 17 Apr 2026 03:42:43 +0000 Manifest this update: Fri 17 Apr 2026 03:37:43 +0000 Manifest next update: Mon 20 Apr 2026 03:43:43 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: E1t92eCCA0K5YE8ixQAa9ICN2HuojBT+vynz5XXJhec=) 2: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: oEcb4eQGAXUTd/q1D5HUdHRJpR43+s1W7vOFJb+Mcfk=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: 58o8xpIjp/oK6y5/vK0zJIBaCvI36zLpQOrEy+WjU/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f0:67:82:65:f0:13:6b:be:e3:97:f9:cc:d3:6f:7f:56:19:91:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Apr 17 03:37:43 2026 GMT Not After : Apr 20 03:43:43 2026 GMT Subject: CN=9C930238742BF586E76D469F54AEA256D7260F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:eb:ec:20:9a:ba:40:74:bb:83:3b:9a:ca: 40:5a:e0:18:4c:1c:d3:15:3d:b6:44:c2:77:6a:85: 14:bb:0a:62:77:0e:10:64:4d:96:f8:3d:17:a2:4f: 15:34:1f:71:b6:2f:d7:c3:70:46:ac:6e:72:14:dc: 94:ca:8d:a7:a3:97:6c:f3:3d:8a:0d:31:2e:f6:09: 78:44:7b:96:7c:67:36:b6:d0:05:b2:2c:dc:d6:45: 5b:5f:d6:5f:73:3b:19:4f:dd:5b:5e:83:21:55:0a: 27:56:1e:c1:60:05:48:2f:b6:b3:2a:df:87:a5:bb: c9:68:11:11:66:04:39:f8:53:37:76:01:f6:f4:53: 51:99:a8:85:bf:34:70:61:d6:da:a3:21:f8:17:0b: c6:53:40:6a:1c:dc:49:d1:0d:e4:53:95:21:ea:14: 2f:6c:03:1f:cb:84:8a:47:be:cf:23:9c:6e:dc:f7: a1:95:fc:97:94:3a:96:25:28:cc:6d:7a:32:97:c3: 84:af:76:f3:45:13:fb:03:96:cf:3f:08:b1:91:17: 53:12:85:7d:9f:cb:64:80:f7:05:7e:6f:ed:94:41: 7c:7a:62:08:72:25:dc:03:41:d4:49:ae:d8:ef:50: 7c:ed:48:6a:b1:a4:4b:04:60:8d:4c:be:1b:39:71: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:02:38:74:2B:F5:86:E7:6D:46:9F:54:AE:A2:56:D7:26:0F:1A X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:92:3d:68:65:4b:71:fd:06:a2:ad:b6:9d:d6:08:11:4a:dc: aa:e6:b8:20:5d:75:76:25:86:39:7c:49:6e:13:0a:71:89:49: 82:6f:a6:ac:d5:d0:ae:2e:a8:59:b5:d1:eb:4d:ef:12:1e:68: 28:fb:38:3e:38:b7:bb:e0:12:fc:74:af:dc:60:b4:1f:b2:71: 52:e4:ef:f5:d6:4b:8a:59:1f:f9:65:94:db:b5:9f:07:c2:7c: b6:8a:e0:6a:11:5a:da:7c:aa:5c:5d:f4:a1:f3:8b:87:26:70: f6:1d:cf:d5:7f:66:ff:23:8a:93:c4:38:4d:ea:f7:ad:d7:e1: 33:cb:fd:bb:41:38:12:a9:16:77:3a:39:ec:75:d9:d6:50:03: 65:12:9e:59:6e:de:db:4e:3c:5f:3e:b9:29:ef:67:91:f5:a2: c0:9b:40:7c:a8:53:ec:77:20:81:97:d5:76:fe:3f:bf:3c:ba: a9:47:4c:98:36:ca:d8:ba:b5:c3:13:69:9e:d2:00:82:16:90: 38:33:00:e5:ab:e2:a8:f8:75:10:22:a4:21:01:d7:7f:d7:8b: 09:0b:9b:f8:c5:0c:0b:93:66:02:ac:47:0b:3b:24:f4:29:40: 53:f0:cb:f6:3a:0f:91:16:02:f6:30:eb:24:1e:a4:6c:11:04: 30:ae:cc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfBngmXwE2u+45f5zNNvf1YZkUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNjA0MTcwMzM3NDNaFw0yNjA0MjAwMzQzNDNaMDMxMTAvBgNV BAMTKDlDOTMwMjM4NzQyQkY1ODZFNzZENDY5RjU0QUVBMjU2RDcyNjBGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8evsIJq6QHS7gzuaykBa4BhM HNMVPbZEwndqhRS7CmJ3DhBkTZb4PReiTxU0H3G2L9fDcEasbnIU3JTKjaejl2zz PYoNMS72CXhEe5Z8Zza20AWyLNzWRVtf1l9zOxlP3VtegyFVCidWHsFgBUgvtrMq 34elu8loERFmBDn4Uzd2Afb0U1GZqIW/NHBh1tqjIfgXC8ZTQGoc3EnRDeRTlSHq FC9sAx/LhIpHvs8jnG7c96GV/JeUOpYlKMxtejKXw4SvdvNFE/sDls8/CLGRF1MS hX2fy2SA9wV+b+2UQXx6YghyJdwDQdRJrtjvUHztSGqxpEsEYI1Mvhs5cUH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnJMCOHQr9YbnbUafVK6iVtcmDxowHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGSPWhlS3H9BqKttp3WCBFK3KrmuCBddXYl hjl8SW4TCnGJSYJvpqzV0K4uqFm10etN7xIeaCj7OD44t7vgEvx0r9xgtB+ycVLk 7/XWS4pZH/lllNu1nwfCfLaK4GoRWtp8qlxd9KHzi4cmcPYdz9V/Zv8jipPEOE3q 963X4TPL/btBOBKpFnc6Oex12dZQA2USnllu3ttOPF8+uSnvZ5H1osCbQHyoU+x3 IIGX1Xb+P788uqlHTJg2yti6tcMTaZ7SAIIWkDgzAOWr4qj4dRAipCEB13/XiwkL m/jFDAuTZgKsRws7JPQpQFPwy/Y6D5EWAvYw6yQepGwRBDCuzG0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:58 2026 by rpki-client