$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json) Hash identifier: ry+VU1BozxFKfHi6pMFXK15e5fjUZh7hhMMC+hzPVHw= Subject key identifier: 21:81:C2:97:0D:00:F6:49:F3:90:83:E2:18:D5:3F:DD:EF:54:B5:6B Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Certificate issuer: /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Certificate serial: 453D1AE59738CEE2A51FFB239D730E6552AE0C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft Manifest number: 024F Signing time: Fri 17 Apr 2026 11:11:18 +0000 Manifest this update: Fri 17 Apr 2026 11:06:18 +0000 Manifest next update: Mon 20 Apr 2026 21:04:18 +0000 Files and hashes: 1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: BlVayBeTl8ZOobWpeda/4z5dIlpChMpE6lrhcgz/muY=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: 0a6d0VadEC4mllKiwomZ9jBfURtS2Uj6BdXxHPbtGhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3d:1a:e5:97:38:ce:e2:a5:1f:fb:23:9d:73:0e:65:52:ae:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Validity Not Before: Apr 17 11:06:18 2026 GMT Not After : Apr 20 21:04:18 2026 GMT Subject: CN=2181C2970D00F649F39083E218D53FDDEF54B56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:3c:f3:79:2a:29:1f:4b:82:76:7f:fa:e1: 09:86:39:cf:a1:4f:67:41:9d:39:6c:b8:ad:64:f2: 32:7d:a8:e5:94:a3:35:50:2c:f8:73:f6:4a:97:32: 70:91:21:bf:f4:b3:24:36:33:21:37:65:69:e5:03: 5f:5f:d5:5a:c1:1e:70:be:b9:31:cf:8e:5d:ce:50: 95:7f:35:9b:cc:e2:60:79:b0:4f:24:e7:ba:93:2c: e5:17:e9:4d:cc:8a:3e:8c:d3:6b:48:d3:88:85:f8: cc:67:2a:ae:1b:a7:2e:bc:16:65:67:04:70:ba:63: e3:6f:16:31:40:88:57:47:ba:a0:ef:b3:38:e5:11: 0c:c0:19:d4:79:20:ff:40:f9:ad:b9:35:83:a3:ad: 59:70:b8:eb:e3:1d:2d:b0:a9:7c:c4:4d:c5:bd:4b: 66:44:2b:88:5c:e0:92:11:a8:94:e4:fd:cc:7c:56: c6:33:b5:a9:fd:94:42:ec:1f:f5:d4:3c:93:ad:89: 2a:70:c0:45:0b:d8:74:97:03:28:a2:cf:32:1a:5e: ad:d0:a9:e9:6c:df:81:c1:da:79:43:ec:68:6b:77: fa:bb:d7:18:34:74:18:07:28:f2:52:72:02:08:49: a2:ea:a8:0e:6a:9d:c1:b0:7a:95:9e:06:4f:fa:ad: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:C2:97:0D:00:F6:49:F3:90:83:E2:18:D5:3F:DD:EF:54:B5:6B X509v3 Authority Key Identifier: keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f6:ba:c5:c3:df:45:fc:da:ea:57:75:9a:26:3d:4b:ab:81: 4f:de:7f:e6:4d:fd:81:1c:ec:d5:ca:94:81:39:d2:9c:dd:ab: 28:cf:76:12:95:0c:30:5c:e3:9d:32:a7:1d:13:dd:da:41:df: 5c:ce:46:fc:8f:de:0a:df:72:d6:17:c3:f9:7f:d9:24:8c:d3: 06:bb:00:29:ee:f8:8a:f1:4d:bf:39:75:1f:1e:09:9e:36:7f: ad:30:7f:5f:2e:0d:54:50:be:95:f4:b8:69:e6:a8:e8:3a:56: 1b:9c:e8:ea:4b:e0:b3:68:89:c8:df:44:de:d0:92:36:d3:69: 40:82:5d:1a:fb:3e:25:24:6c:7d:e8:23:de:21:f7:cf:52:8e: 41:54:b1:9a:f9:50:56:58:e0:36:63:f9:b2:dc:b3:c7:e8:4e: 43:81:d4:93:ea:e6:00:3e:ed:64:c7:c5:09:dc:cc:42:25:bf: cc:59:cf:e2:31:eb:04:66:97:6f:32:87:e9:35:01:b4:eb:ad: d4:82:f0:f9:51:c2:27:1c:5c:20:d0:22:74:57:2c:4b:35:0c: cd:e5:a4:20:05:8b:78:6c:07:8a:f7:6a:2b:2e:9e:89:25:8d: e3:16:74:09:e1:7c:2b:1f:c1:aa:41:8f:d6:4d:99:61:14:b9: d2:3e:c3:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURT0a5Zc4zuKlH/sjnXMOZVKuDIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcy MkNCQTZBRDAeFw0yNjA0MTcxMTA2MThaFw0yNjA0MjAyMTA0MThaMDMxMTAvBgNV BAMTKDIxODFDMjk3MEQwMEY2NDlGMzkwODNFMjE4RDUzRkRERUY1NEI1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rzzzeSopH0uCdn/64QmGOc+h T2dBnTlsuK1k8jJ9qOWUozVQLPhz9kqXMnCRIb/0syQ2MyE3ZWnlA19f1VrBHnC+ uTHPjl3OUJV/NZvM4mB5sE8k57qTLOUX6U3Mij6M02tI04iF+MxnKq4bpy68FmVn BHC6Y+NvFjFAiFdHuqDvszjlEQzAGdR5IP9A+a25NYOjrVlwuOvjHS2wqXzETcW9 S2ZEK4hc4JIRqJTk/cx8VsYztan9lELsH/XUPJOtiSpwwEUL2HSXAyiizzIaXq3Q qels34HB2nlD7Ghrd/q71xg0dBgHKPJScgIISaLqqA5qncGwepWeBk/6rQrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYHClw0A9knzkIPiGNU/3e9UtWswHwYDVR0j BBgwFoAU9aXfr9R/VNxU1WaD6RpcFyLLpq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMC9GNUE1REZBRkQ0 N0Y1NERDNTRENTY2ODNFOTFBNUMxNzIyQ0JBNkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVDMTcyMkNC QTZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvRjVBNURGQUZENDdGNTREQzU0RDU2NjgzRTkxQTVD MTcyMkNCQTZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj2usXD30X82upXdZomPUurgU/ef+ZN/YEc 7NXKlIE50pzdqyjPdhKVDDBc450ypx0T3dpB31zORvyP3grfctYXw/l/2SSM0wa7 ACnu+IrxTb85dR8eCZ42f60wf18uDVRQvpX0uGnmqOg6Vhuc6OpL4LNoicjfRN7Q kjbTaUCCXRr7PiUkbH3oI94h989SjkFUsZr5UFZY4DZj+bLcs8foTkOB1JPq5gA+ 7WTHxQnczEIlv8xZz+Ix6wRml28yh+k1AbTrrdSC8PlRwiccXCDQInRXLEs1DM3l pCAFi3hsB4r3aisunokljeMWdAnhfCsfwapBj9ZNmWEUudI+w4U= -----END CERTIFICATE-----Generated at Sun Apr 19 14:21:38 2026 by rpki-client