$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: Fy2zlR7hkmfD5VxOJtMnvjHIFrOOEx+9zfSv2p0vnAY= Subject key identifier: 23:1F:B8:6E:AD:89:34:86:0A:F9:7A:78:3B:13:DC:7D:C4:CE:15:D9 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 134A949D0A7957A1C0755CF454B7351E66049F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 17:11:44 +0000 Manifest this update: Thu 16 Apr 2026 17:06:44 +0000 Manifest next update: Sun 19 Apr 2026 22:01:44 +0000 Files and hashes: 1: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: 15OYkiyNVqTe9XeV/f65GixyVDe/9Ehl4eM6O2mAAU8=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4a:94:9d:0a:79:57:a1:c0:75:5c:f4:54:b7:35:1e:66:04:9f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Apr 16 17:06:44 2026 GMT Not After : Apr 19 22:01:44 2026 GMT Subject: CN=231FB86EAD8934860AF97A783B13DC7DC4CE15D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:2d:87:f5:df:17:07:c1:e9:2b:dd:4f:fb: b4:0c:f0:68:b1:3c:54:a9:60:a4:61:dd:df:1f:68: 57:03:dd:6a:3f:e3:55:56:e6:cf:e4:20:05:ba:c8: fd:ad:4e:23:14:2f:4a:34:37:7c:8a:25:d5:cd:f3: 1c:ec:ee:ea:b6:26:46:af:e2:35:c0:22:ad:2e:df: 47:8b:6a:53:22:a0:31:3c:35:c2:1a:c0:50:5e:6a: 5d:08:e4:0f:04:84:65:e6:6d:2b:d8:eb:ed:f4:ff: 0d:e5:10:05:b6:6c:4e:09:72:1a:8d:a3:3c:04:60: 8f:ee:16:40:21:8c:c2:e6:b7:b0:0d:67:3b:01:41: 2e:63:d5:2c:1c:48:0a:b4:9c:b9:c0:43:9b:ee:f0: 1a:69:00:ab:40:95:2a:e9:6e:97:5c:71:e7:26:e0: b7:3d:d9:06:eb:c4:34:b4:bc:99:03:dd:36:4d:49: 6f:1c:c0:8a:a5:b1:16:9a:fc:55:bc:8b:d4:77:70: 27:1e:18:fb:53:50:c8:2c:ef:59:cc:a9:db:cf:f4: c4:84:18:a5:97:31:7e:1b:b1:ee:d5:df:8d:6e:14: 30:ea:c6:29:c9:0f:21:8f:bb:c6:19:0e:42:f3:9d: 6d:ea:1d:f8:5f:cc:cf:78:57:1d:b6:77:ab:39:40: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1F:B8:6E:AD:89:34:86:0A:F9:7A:78:3B:13:DC:7D:C4:CE:15:D9 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:33:21:86:3a:f5:49:89:90:4d:8f:2d:14:b2:30:2b:d1: 39:a9:7a:20:99:b8:28:57:8e:60:4f:1d:20:51:e5:05:49:a1: 31:4d:2a:97:45:e3:9a:04:71:49:9a:54:04:9e:a3:cb:38:44: a9:0b:c4:fb:88:d9:5b:47:a6:af:56:13:06:1e:10:05:44:94: 6f:c7:83:c7:be:a1:4e:cf:f8:2a:e7:0c:74:f3:67:d5:e9:46: 57:b2:ee:28:66:56:1a:15:d6:3c:25:ae:7f:04:27:75:f5:fe: 35:6a:72:6b:56:4a:16:02:59:d0:bb:7f:3b:17:4a:22:d2:bf: 05:36:d3:5f:44:58:c1:de:36:42:ea:25:4e:07:b0:f9:bd:4d: 13:6c:26:ab:42:20:03:86:9f:4c:e3:5a:44:98:de:ef:d3:39: 72:a4:ba:1a:32:9b:e6:38:54:82:43:c2:f8:4c:11:25:87:d4: 75:77:ea:fd:bc:f3:8b:c0:8b:86:64:ea:c8:4c:1f:a3:6b:58: 50:f3:1e:8f:dc:c4:1f:da:e4:45:d2:7a:6f:27:b5:61:fa:1b: ad:7e:11:16:9d:87:de:e2:ae:f1:12:84:72:5b:e8:6b:6e:23: 46:1a:66:fb:72:bc:49:9a:5d:d1:7f:cd:d0:1f:f0:71:2f:21: 80:d0:99:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0qUnQp5V6HAdVz0VLc1HmYEn10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNjA0MTYxNzA2NDRaFw0yNjA0MTkyMjAxNDRaMDMxMTAvBgNV BAMTKDIzMUZCODZFQUQ4OTM0ODYwQUY5N0E3ODNCMTNEQzdEQzRDRTE1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGy2H9d8XB8HpK91P+7QM8Gix PFSpYKRh3d8faFcD3Wo/41VW5s/kIAW6yP2tTiMUL0o0N3yKJdXN8xzs7uq2Jkav 4jXAIq0u30eLalMioDE8NcIawFBeal0I5A8EhGXmbSvY6+30/w3lEAW2bE4JchqN ozwEYI/uFkAhjMLmt7ANZzsBQS5j1SwcSAq0nLnAQ5vu8BppAKtAlSrpbpdccecm 4Lc92QbrxDS0vJkD3TZNSW8cwIqlsRaa/FW8i9R3cCceGPtTUMgs71nMqdvP9MSE GKWXMX4bse7V341uFDDqxinJDyGPu8YZDkLznW3qHfhfzM94Vx22d6s5QBw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIx+4bq2JNIYK+Xp4OxPcfcTOFdkwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR1MyGGOvVJiZBNjy0UsjAr0TmpeiCZuChX jmBPHSBR5QVJoTFNKpdF45oEcUmaVASeo8s4RKkLxPuI2VtHpq9WEwYeEAVElG/H g8e+oU7P+CrnDHTzZ9XpRley7ihmVhoV1jwlrn8EJ3X1/jVqcmtWShYCWdC7fzsX SiLSvwU2019EWMHeNkLqJU4HsPm9TRNsJqtCIAOGn0zjWkSY3u/TOXKkuhoym+Y4 VIJDwvhMESWH1HV36v2884vAi4Zk6shMH6NrWFDzHo/cxB/a5EXSem8ntWH6G61+ ERadh97irvEShHJb6GtuI0YaZvtyvEmaXdF/zdAf8HEvIYDQmfw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:17 2026 by rpki-client