$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: +km9uCMciYJKt2ZWsL7uJunZmKDAaAmXsEKF6G9BHxE= Subject key identifier: 0F:B0:CB:E0:EC:10:38:58:49:35:BB:53:47:9A:90:C2:A3:02:3B:C5 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 14A3E71EE6CD5A78399767941A375E0C85DCE373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 02D5 Signing time: Sat 18 Apr 2026 04:51:39 +0000 Manifest this update: Sat 18 Apr 2026 04:46:39 +0000 Manifest next update: Tue 21 Apr 2026 15:06:39 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: yo51mawJbybSG8IjT8g0y8rnH5KZE6ktRS8Jln6xQM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a3:e7:1e:e6:cd:5a:78:39:97:67:94:1a:37:5e:0c:85:dc:e3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Apr 18 04:46:39 2026 GMT Not After : Apr 21 15:06:39 2026 GMT Subject: CN=0FB0CBE0EC1038584935BB53479A90C2A3023BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:ce:9a:4c:a8:4a:84:a2:48:43:6c:c9:e1: 27:d3:d1:59:ea:1b:19:d6:95:e2:79:3a:16:1a:68: 08:c2:67:7e:23:21:7c:2c:ef:ea:70:b0:f8:63:b5: a9:89:78:ba:f9:23:3b:35:89:5f:ed:30:a4:00:ee: 50:cf:4d:63:2c:33:54:4b:ec:c0:ce:af:45:d1:5b: 01:e4:3c:ba:05:b8:b4:25:f5:0c:50:22:ce:d8:b2: cb:f0:65:bd:83:a8:31:26:e6:37:9c:69:fc:ec:6a: 7f:95:cd:2b:05:2a:64:ca:28:95:20:50:30:61:d6: 16:c3:2b:ee:86:e1:ff:9c:b7:48:eb:c0:97:72:c5: 47:b8:4b:ea:fb:40:e6:91:8e:74:dc:52:8b:3e:03: 07:b6:19:57:a8:57:6b:ae:5f:ed:a4:8d:bb:5d:55: 48:5b:db:a9:72:bc:f5:91:f5:b7:c8:22:23:63:1d: 5a:ca:ea:60:75:7a:d4:2c:73:dd:b3:da:8a:96:db: 32:db:ce:24:ca:fd:68:61:8a:8a:07:14:cb:60:12: c1:b5:ae:2d:aa:36:26:f4:4c:7d:3d:50:c5:57:4a: b4:1e:64:a3:b5:05:7f:9e:b2:f0:71:c0:4e:5b:85: f4:c4:ab:40:79:8d:b1:ca:78:29:14:c5:19:58:b0: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:CB:E0:EC:10:38:58:49:35:BB:53:47:9A:90:C2:A3:02:3B:C5 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:6b:9a:b9:2f:43:c0:21:6c:c0:cf:35:93:00:cf:58:11: bc:f5:e1:23:54:27:db:5f:f9:37:3f:ea:34:45:62:8c:ba:f3: d7:b9:2a:52:0a:dc:54:08:0b:da:3c:be:78:bb:cc:26:a2:c0: d8:98:55:ee:60:7e:fc:f9:a6:72:be:97:18:68:6f:3b:0e:ce: 66:0c:0f:e2:75:ea:82:79:c4:ab:e7:79:18:cd:91:98:17:7d: c7:07:55:71:73:fc:33:e6:d3:d8:83:97:4f:aa:f6:ec:87:26: c5:cf:1e:01:71:97:31:66:94:7d:cc:99:33:c3:57:af:d3:14: d7:02:cf:89:dd:af:a5:98:c0:b1:9b:ca:7b:3c:49:6e:2c:0f: 98:2f:e0:11:1a:13:69:4c:44:40:74:71:89:a2:7e:83:d4:b0: 69:e1:53:e7:76:5c:d8:85:87:75:92:a9:c9:73:35:29:8f:e1: ff:cd:ef:97:cc:87:df:19:d9:61:22:1e:ec:bc:35:46:bb:80: 6a:4c:54:93:d5:90:7b:7d:6d:aa:ad:1b:0c:e6:ba:e4:91:4c: c1:7c:4a:64:4b:35:79:1e:b3:95:dc:89:ce:2b:72:3b:03:b1: 96:74:7e:63:d9:0b:df:da:8e:ab:a7:46:42:f1:51:23:9d:59: 1f:00:dc:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKPnHubNWng5l2eUGjdeDIXc43MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNjA0MTgwNDQ2MzlaFw0yNjA0MjExNTA2MzlaMDMxMTAvBgNV BAMTKDBGQjBDQkUwRUMxMDM4NTg0OTM1QkI1MzQ3OUE5MEMyQTMwMjNCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWc6aTKhKhKJIQ2zJ4SfT0Vnq GxnWleJ5OhYaaAjCZ34jIXws7+pwsPhjtamJeLr5Izs1iV/tMKQA7lDPTWMsM1RL 7MDOr0XRWwHkPLoFuLQl9QxQIs7YssvwZb2DqDEm5jecafzsan+VzSsFKmTKKJUg UDBh1hbDK+6G4f+ct0jrwJdyxUe4S+r7QOaRjnTcUos+Awe2GVeoV2uuX+2kjbtd VUhb26lyvPWR9bfIIiNjHVrK6mB1etQsc92z2oqW2zLbziTK/WhhiooHFMtgEsG1 ri2qNib0TH09UMVXSrQeZKO1BX+esvBxwE5bhfTEq0B5jbHKeCkUxRlYsHm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD7DL4OwQOFhJNbtTR5qQwqMCO8UwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0fa5q5L0PAIWzAzzWTAM9YEbz14SNUJ9tf +Tc/6jRFYoy689e5KlIK3FQIC9o8vni7zCaiwNiYVe5gfvz5pnK+lxhobzsOzmYM D+J16oJ5xKvneRjNkZgXfccHVXFz/DPm09iDl0+q9uyHJsXPHgFxlzFmlH3MmTPD V6/TFNcCz4ndr6WYwLGbyns8SW4sD5gv4BEaE2lMREB0cYmifoPUsGnhU+d2XNiF h3WSqclzNSmP4f/N75fMh98Z2WEiHuy8NUa7gGpMVJPVkHt9baqtGwzmuuSRTMF8 SmRLNXkes5Xcic4rcjsDsZZ0fmPZC9/ajqunRkLxUSOdWR8A3HU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:54:02 2026 by rpki-client