$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: 9RqReCi26SFZwqD82TxiYzm/RDA31Jw6OX5OyOw3iu4= Subject key identifier: 2C:1B:6D:10:C6:47:A6:29:E7:B0:D6:71:05:1F:54:2A:7E:DB:15:BF Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 496F50B9636C98B3FE676B80325C6D22B0166C25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: DE Signing time: Thu 16 Apr 2026 05:02:18 +0000 Manifest this update: Thu 16 Apr 2026 04:57:18 +0000 Manifest next update: Sun 19 Apr 2026 09:13:18 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: VTacfmL58ZnMCY+qoohGETbryjTZ7U6L4zfLHE4EYa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:50:b9:63:6c:98:b3:fe:67:6b:80:32:5c:6d:22:b0:16:6c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Apr 16 04:57:18 2026 GMT Not After : Apr 19 09:13:18 2026 GMT Subject: CN=2C1B6D10C647A629E7B0D671051F542A7EDB15BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:fa:b2:5d:6d:97:9b:7e:98:b0:0f:f5:52: 80:6b:2a:b7:35:cc:52:ec:e8:03:33:3e:41:a7:e0: 59:d0:dd:88:ac:bd:c1:e6:8e:61:8e:7b:f0:8a:a3: b3:40:51:ab:8f:20:ed:19:b6:7c:21:7c:b6:85:4d: b6:4f:c0:60:5f:4e:da:ba:70:cb:b2:ae:3c:76:d5: f7:f1:30:ca:e8:e1:6e:7d:dc:94:a5:22:8b:4a:94: ac:09:dc:61:c7:9a:aa:cf:e9:d2:7d:80:5c:43:b1: 78:df:f6:88:9f:2f:86:e6:f2:16:f1:6d:3f:a3:17: 37:d2:b5:5d:b7:ee:7c:e6:e9:9d:97:e5:6a:d3:67: c3:cc:5b:84:84:fa:70:b7:fe:1e:08:1c:be:68:6e: 48:2c:83:f5:9b:3b:9c:99:c2:9a:7c:0d:2d:75:f9: b8:e8:8e:2e:90:a0:c2:6f:44:10:4b:61:e2:14:a8: 53:3c:ab:16:46:09:75:a7:52:9d:3f:89:61:fa:01: 5f:8a:f8:36:4c:a8:41:6b:cd:9a:70:bc:69:6d:f7: fa:6a:81:9d:8b:53:da:ae:ea:62:cf:78:ad:32:3a: 8d:2f:ae:8d:7d:cd:d1:a7:3b:3e:94:23:61:6a:ee: 59:44:98:f7:46:32:16:00:cd:d1:d3:33:d4:f4:9b: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:6D:10:C6:47:A6:29:E7:B0:D6:71:05:1F:54:2A:7E:DB:15:BF X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:07:a7:07:b2:13:1f:3a:99:0b:1c:98:25:20:87:8e:03:9c: 82:41:f0:7f:43:a2:22:57:3d:b9:2b:f3:bc:78:17:fb:80:bb: b6:cc:4e:13:e9:46:b7:37:d2:51:c0:f5:e3:ce:02:98:9c:9c: 2b:e9:9d:e9:0e:93:83:fd:a8:f0:a0:2b:ea:b5:fa:39:0a:52: 42:f3:6c:ee:bf:88:8a:a7:b2:08:a9:f7:15:0f:04:27:64:e4: 76:61:d9:a7:64:9f:ba:3f:a8:ce:b5:b3:48:fd:58:ae:3b:33: d0:f4:ef:8e:b9:0e:da:05:65:61:8c:03:51:b0:4e:52:55:54: 30:21:f7:58:84:8e:36:d2:ef:af:e5:97:72:5e:0c:43:be:04: bb:68:a5:8e:b3:35:83:87:b8:4f:a3:6c:30:aa:53:e0:3e:e1: 8d:07:5a:fb:15:48:58:82:52:a8:46:8f:4c:8a:a2:a8:d3:fc: 99:aa:bf:6a:54:82:61:1d:08:bf:5b:40:5c:2b:df:e6:49:35: d0:9f:67:6f:69:41:9e:45:cc:c9:1c:5d:6a:95:83:87:33:bd: aa:24:06:96:c8:b0:7e:6e:cd:0f:e8:ac:f5:e6:2d:d2:ae:14: 8b:dc:f8:05:c0:4e:cf:01:fe:82:cf:18:fc:ab:d2:35:92:63: 29:b6:4a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW9QuWNsmLP+Z2uAMlxtIrAWbCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNjA0MTYwNDU3MThaFw0yNjA0MTkwOTEzMThaMDMxMTAvBgNV BAMTKDJDMUI2RDEwQzY0N0E2MjlFN0IwRDY3MTA1MUY1NDJBN0VEQjE1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0/qyXW2Xm36YsA/1UoBrKrc1 zFLs6AMzPkGn4FnQ3YisvcHmjmGOe/CKo7NAUauPIO0ZtnwhfLaFTbZPwGBfTtq6 cMuyrjx21ffxMMro4W593JSlIotKlKwJ3GHHmqrP6dJ9gFxDsXjf9oifL4bm8hbx bT+jFzfStV237nzm6Z2X5WrTZ8PMW4SE+nC3/h4IHL5obkgsg/WbO5yZwpp8DS11 +bjoji6QoMJvRBBLYeIUqFM8qxZGCXWnUp0/iWH6AV+K+DZMqEFrzZpwvGlt9/pq gZ2LU9qu6mLPeK0yOo0vro19zdGnOz6UI2Fq7llEmPdGMhYAzdHTM9T0m5ZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBttEMZHpinnsNZxBR9UKn7bFb8wHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgHpweyEx86mQscmCUgh44DnIJB8H9DoiJX Pbkr87x4F/uAu7bMThPpRrc30lHA9ePOApicnCvpnekOk4P9qPCgK+q1+jkKUkLz bO6/iIqnsgip9xUPBCdk5HZh2adkn7o/qM61s0j9WK47M9D07465DtoFZWGMA1Gw TlJVVDAh91iEjjbS76/ll3JeDEO+BLtopY6zNYOHuE+jbDCqU+A+4Y0HWvsVSFiC UqhGj0yKoqjT/Jmqv2pUgmEdCL9bQFwr3+ZJNdCfZ29pQZ5FzMkcXWqVg4czvaok BpbIsH5uzQ/orPXmLdKuFIvc+AXATs8B/oLPGPyr0jWSYym2Sr4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:56 2026 by rpki-client