$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: EYSs9AvUkkiWBbodGQ6Q0MGSwPgiUI7XLitL9f9JLY4= Subject key identifier: F1:0D:CC:2E:88:EA:D7:5C:2E:B2:05:C9:0D:42:0C:8E:38:27:CB:83 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 7D49080990E4510BD9D81C2B9C9F40D4F4226E64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 04C5 Signing time: Sun 19 Apr 2026 03:10:03 +0000 Manifest this update: Sun 19 Apr 2026 03:05:03 +0000 Manifest next update: Wed 22 Apr 2026 12:27:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: Q/fyXpLVrjjYVjqssRRDBCn3fDT1VIyQCBnBBhQPRrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:49:08:09:90:e4:51:0b:d9:d8:1c:2b:9c:9f:40:d4:f4:22:6e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Apr 19 03:05:03 2026 GMT Not After : Apr 22 12:27:03 2026 GMT Subject: CN=F10DCC2E88EAD75C2EB205C90D420C8E3827CB83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:af:f6:47:4c:24:b0:20:bf:28:92:2f:a4: 57:b0:ae:74:19:2b:77:77:09:f6:e9:59:84:fc:f1: 35:e5:43:bf:da:78:36:00:76:90:6c:9c:67:b7:d8: ef:01:83:4e:94:91:28:ef:2d:b8:99:58:1b:a8:2d: d9:93:71:74:51:9f:cd:93:d0:87:d0:f3:14:2c:08: 21:48:70:98:c2:01:a8:45:ef:ba:01:75:a1:46:ec: b4:52:b2:ad:bc:80:85:38:b0:85:94:d1:bd:d3:07: d8:4e:fe:a7:60:b1:72:5c:1f:0a:c0:a5:64:d8:b9: 97:a3:52:43:b9:3d:2c:12:62:37:45:ce:99:72:01: 9d:a8:ab:5a:fa:15:c4:05:be:eb:2e:5d:6d:a4:51: e6:f7:33:78:97:26:59:95:bb:cb:d1:b1:ba:e8:d1: a2:9b:06:f6:e0:77:a4:b0:52:66:f0:40:ec:ff:38: 68:da:11:7e:6f:0a:10:15:c5:b8:4e:67:3c:6f:f6: 7e:dc:3e:84:c4:3f:6d:e1:68:7c:31:99:72:a6:2a: 33:a0:a0:16:76:ba:df:50:11:d8:44:51:34:6e:d0: 2f:ff:5e:ca:02:1b:5e:21:65:df:e6:7f:ab:23:cf: bc:a0:89:1e:1d:bc:93:c7:08:65:84:7a:70:d7:42: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:CC:2E:88:EA:D7:5C:2E:B2:05:C9:0D:42:0C:8E:38:27:CB:83 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ad:ec:68:78:3a:dc:84:26:43:cd:c4:fe:30:48:a7:70:f9: 89:28:a0:4d:4e:17:e8:d0:7d:e5:34:ad:eb:55:1f:b3:9c:60: 9a:43:83:96:db:be:19:54:88:e9:82:6c:32:98:b1:8d:01:68: 1b:7f:c6:25:93:e6:29:8d:48:68:a6:60:a8:e1:81:b8:38:ef: f3:71:60:d2:6d:71:21:80:3e:8d:9c:fa:f8:41:da:92:2e:a3: e0:32:b9:c7:72:5e:90:de:e0:ff:f5:0b:93:aa:4e:ae:97:b5: 7a:97:d9:27:83:6f:4f:32:eb:de:36:5e:03:50:ae:b7:c9:c5: 9c:76:ea:c1:a0:1b:17:36:7c:c9:ff:a2:2a:17:55:08:ba:be: 8b:3c:fc:09:2f:5f:81:39:c1:8c:68:03:96:a8:e9:66:f9:83: 91:c6:7c:70:05:0a:47:f4:5d:2c:69:6f:5d:a1:66:a1:e0:96: 66:fe:7c:02:93:eb:f5:97:0c:f2:bb:42:ec:da:45:6c:b5:fa: be:23:0c:de:d5:52:a1:57:dd:25:5c:92:b5:fe:7e:6f:1f:47: 60:77:0c:50:1a:fe:31:cf:2f:12:71:f3:ed:6f:ef:73:db:41: d4:f4:7a:63:9b:24:5d:0e:13:a8:64:f5:98:00:60:60:eb:a5: 88:97:9d:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUkICZDkUQvZ2BwrnJ9A1PQibmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNjA0MTkwMzA1MDNaFw0yNjA0MjIxMjI3MDNaMDMxMTAvBgNV BAMTKEYxMERDQzJFODhFQUQ3NUMyRUIyMDVDOTBENDIwQzhFMzgyN0NCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSN6/2R0wksCC/KJIvpFewrnQZ K3d3CfbpWYT88TXlQ7/aeDYAdpBsnGe32O8Bg06UkSjvLbiZWBuoLdmTcXRRn82T 0IfQ8xQsCCFIcJjCAahF77oBdaFG7LRSsq28gIU4sIWU0b3TB9hO/qdgsXJcHwrA pWTYuZejUkO5PSwSYjdFzplyAZ2oq1r6FcQFvusuXW2kUeb3M3iXJlmVu8vRsbro 0aKbBvbgd6SwUmbwQOz/OGjaEX5vChAVxbhOZzxv9n7cPoTEP23haHwxmXKmKjOg oBZ2ut9QEdhEUTRu0C//XsoCG14hZd/mf6sjz7ygiR4dvJPHCGWEenDXQnlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Q3MLojq11wusgXJDUIMjjgny4MwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6t7Gh4OtyEJkPNxP4wSKdw+YkooE1OF+jQ feU0retVH7OcYJpDg5bbvhlUiOmCbDKYsY0BaBt/xiWT5imNSGimYKjhgbg47/Nx YNJtcSGAPo2c+vhB2pIuo+AyucdyXpDe4P/1C5OqTq6XtXqX2SeDb08y6942XgNQ rrfJxZx26sGgGxc2fMn/oioXVQi6vos8/AkvX4E5wYxoA5ao6Wb5g5HGfHAFCkf0 XSxpb12hZqHglmb+fAKT6/WXDPK7QuzaRWy1+r4jDN7VUqFX3SVckrX+fm8fR2B3 DFAa/jHPLxJx8+1v73PbQdT0emObJF0OE6hk9ZgAYGDrpYiXnTs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:38 2026 by rpki-client