$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: iLom7+miKpSMtB7JBQo0CJvojJr51eOBoSqs/yNHthI= Subject key identifier: 24:57:53:7D:3F:08:C6:95:3B:4B:8F:46:D7:45:C8:F5:98:32:C7:7E Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 5D5227A06D8EB396A3C59D700B3B57E1D70A2840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 0129 Signing time: Wed 15 Apr 2026 07:12:43 +0000 Manifest this update: Wed 15 Apr 2026 07:07:43 +0000 Manifest next update: Sat 18 Apr 2026 18:37:43 +0000 Files and hashes: 1: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 2: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: 9BAMy5zrMmZJFiwtJrg4ZeuD0uf2A1CJd2XIuQp8h/o=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:27:a0:6d:8e:b3:96:a3:c5:9d:70:0b:3b:57:e1:d7:0a:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Apr 15 07:07:43 2026 GMT Not After : Apr 18 18:37:43 2026 GMT Subject: CN=2457537D3F08C6953B4B8F46D745C8F59832C77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:2a:b9:9a:f7:91:a4:26:a9:b5:4f:b2:e5: e5:8e:4c:46:e8:e6:76:bd:e2:37:ea:4b:35:46:8a: 5a:9a:53:10:74:9a:44:ec:76:57:b5:4d:82:4a:80: d4:4d:58:5b:6b:b8:8d:8a:c1:1e:08:5c:26:66:50: 64:55:a2:88:42:8e:ec:ac:eb:e8:ce:14:b6:ef:e9: 3b:6a:a2:0f:77:6d:9e:01:41:19:14:57:8d:c0:39: 94:bc:db:fb:15:f2:a9:72:15:f4:59:7f:ae:79:10: fc:3c:e2:a4:b7:db:f3:cc:43:4c:5d:e0:61:be:6c: 1a:62:f2:09:fc:9c:6a:e0:16:0c:9c:37:c5:9d:62: b7:c0:bb:9e:b8:36:c2:86:ff:f3:ec:6a:07:1d:ce: d1:a0:7b:d9:52:05:cc:ec:71:51:2b:bd:dc:99:7b: 7b:dc:6f:a5:90:4d:60:e6:e9:48:1d:82:d8:88:5d: 81:9f:ca:63:5d:2a:8e:34:2b:eb:d0:d7:e3:e0:dd: 8a:a2:92:dd:b8:57:25:7c:43:b0:70:0b:34:77:ca: 79:8c:f9:0d:2b:09:d1:6c:4f:b8:8e:83:a1:e0:ed: 3a:b5:4b:e3:d4:a7:be:6d:1b:a1:f2:58:50:f8:51: 6a:dd:3b:77:40:32:6d:39:f9:2f:51:24:49:85:ab: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:53:7D:3F:08:C6:95:3B:4B:8F:46:D7:45:C8:F5:98:32:C7:7E X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bb:40:21:02:f7:1b:c9:99:0a:99:bd:67:e4:d2:3d:12:87: 2e:7d:72:2a:13:d8:e6:26:64:5e:ec:e9:f3:89:fc:3f:94:2e: f9:8f:7c:0b:1e:5e:05:21:a9:d9:ce:dc:bc:a6:65:f2:6a:85: 23:f1:6c:dd:a0:88:13:7f:16:cc:e3:55:31:d3:0a:d6:eb:d8: 76:5a:2e:36:28:a4:84:d7:06:e6:06:55:5a:85:46:e5:98:fd: 54:66:92:76:f3:26:e6:95:cc:8d:84:fa:87:cc:57:fd:1f:6a: 3a:a1:2b:1e:3b:f9:24:f7:44:ea:9c:ae:fc:3a:6f:3d:f8:ba: 6a:77:47:c9:73:86:dd:10:b9:19:77:3f:a6:a5:dd:1c:c2:e5: ab:f3:41:b3:e7:a2:f7:e8:51:73:e4:0e:02:a7:5b:f9:5e:5a: a0:9a:88:d2:2b:0b:b0:74:6d:79:b9:57:6a:7a:22:9a:cb:d8: 1a:12:6e:5c:cc:fd:cc:04:30:c6:79:02:42:76:0e:d2:a1:c1: 43:8b:6d:9d:19:79:88:15:4f:c4:e3:0f:ce:dc:5d:e3:db:36: ab:6c:e4:9e:c6:51:3d:3d:04:e1:ed:52:e7:82:a2:e4:de:6d: f4:28:c3:aa:03:07:91:46:c1:c6:79:ca:f8:24:50:6d:d8:0b: 56:83:d2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVInoG2Os5ajxZ1wCztX4dcKKEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjA0MTUwNzA3NDNaFw0yNjA0MTgxODM3NDNaMDMxMTAvBgNV BAMTKDI0NTc1MzdEM0YwOEM2OTUzQjRCOEY0NkQ3NDVDOEY1OTgzMkM3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPSq5mveRpCaptU+y5eWOTEbo 5na94jfqSzVGilqaUxB0mkTsdle1TYJKgNRNWFtruI2KwR4IXCZmUGRVoohCjuys 6+jOFLbv6Ttqog93bZ4BQRkUV43AOZS82/sV8qlyFfRZf655EPw84qS32/PMQ0xd 4GG+bBpi8gn8nGrgFgycN8WdYrfAu564NsKG//PsagcdztGge9lSBczscVErvdyZ e3vcb6WQTWDm6UgdgtiIXYGfymNdKo40K+vQ1+Pg3Yqikt24VyV8Q7BwCzR3ynmM +Q0rCdFsT7iOg6Hg7Tq1S+PUp75tG6HyWFD4UWrdO3dAMm05+S9RJEmFqxdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFdTfT8IxpU7S49G10XI9Zgyx34wHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW7QCEC9xvJmQqZvWfk0j0Shy59cioT2OYm ZF7s6fOJ/D+ULvmPfAseXgUhqdnO3LymZfJqhSPxbN2giBN/FszjVTHTCtbr2HZa LjYopITXBuYGVVqFRuWY/VRmknbzJuaVzI2E+ofMV/0fajqhKx47+ST3ROqcrvw6 bz34ump3R8lzht0QuRl3P6al3RzC5avzQbPnovfoUXPkDgKnW/leWqCaiNIrC7B0 bXm5V2p6IprL2BoSblzM/cwEMMZ5AkJ2DtKhwUOLbZ0ZeYgVT8TjD87cXePbNqts 5J7GUT09BOHtUueCouTebfQow6oDB5FGwcZ5yvgkUG3YC1aD0kU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:54:55 2026 by rpki-client