$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: Ot+Yxyhwtz1EodmFblkcDPknwAQZflZkkU0hNEAYWsY= Subject key identifier: F1:68:56:DF:80:A9:2E:0A:82:61:65:B8:A7:0C:DC:88:9D:B0:16:08 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 6C75813F51C4132962A93BDC7AB81610FA02484E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 017E Signing time: Fri 17 Apr 2026 03:30:00 +0000 Manifest this update: Fri 17 Apr 2026 03:25:00 +0000 Manifest next update: Mon 20 Apr 2026 09:56:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: GYBuf3IhZNhIkV34MnwjSU6JwaJpkn2dL4wpk+rByNE=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:75:81:3f:51:c4:13:29:62:a9:3b:dc:7a:b8:16:10:fa:02:48:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Apr 17 03:25:00 2026 GMT Not After : Apr 20 09:56:00 2026 GMT Subject: CN=F16856DF80A92E0A826165B8A70CDC889DB01608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:be:8b:15:a5:dd:50:7b:bb:26:04:14:57: 6d:e0:92:19:a6:06:c1:49:1d:3b:cf:1a:a4:4b:29: 48:d0:a6:49:5d:b5:63:ae:5a:f7:2e:ed:1e:e9:1c: 6e:20:98:80:97:da:9e:8b:64:63:7e:82:07:c3:11: eb:4d:23:75:57:8e:dd:09:df:52:81:cc:d6:85:8f: e4:97:04:3e:c9:e1:a4:88:06:56:83:ea:9c:d4:03: f6:be:d3:51:e4:86:63:b5:cf:e2:54:2d:f0:0b:16: 64:eb:e9:31:f6:5e:95:97:f7:c1:fe:eb:57:e9:b4: 2b:e4:18:70:36:27:0b:6b:f1:57:2e:2f:ed:1d:c6: cb:19:ce:2f:7a:8b:ef:06:63:ce:27:70:bf:ce:97: 1d:c1:7a:c4:e6:25:e6:a4:c2:a0:2a:28:53:50:d9: 19:d0:e8:33:6b:fc:01:c0:55:e6:21:ff:34:18:be: 1d:44:cd:26:cc:c2:4d:ea:6f:e6:31:9c:c2:9c:c5: 0b:e7:f1:af:4f:77:aa:83:ec:40:09:7d:db:ac:cd: b7:ba:51:31:e5:35:a0:5b:07:af:c9:cf:d3:10:77: 94:a4:32:73:42:9d:39:4d:30:47:a7:5e:bb:fb:3a: d0:33:2e:26:11:88:49:d8:92:9e:12:06:b5:bc:c9: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:68:56:DF:80:A9:2E:0A:82:61:65:B8:A7:0C:DC:88:9D:B0:16:08 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ac:09:cc:8e:3c:43:9f:b5:d5:5a:76:5f:6b:a8:7b:c0:7f: 35:ae:2a:e0:b3:79:de:a7:dc:85:db:13:ee:93:1f:5a:28:c7: 77:d9:3e:18:e3:29:19:07:79:a4:16:dd:04:3b:72:76:14:35: 87:37:7b:0e:49:6d:e2:0f:ed:f6:57:fa:b8:4f:d8:40:7b:77: f2:e3:4b:88:7c:43:4a:b7:08:79:2d:50:da:27:5c:04:7c:35: 07:14:c3:ac:75:0a:7e:83:51:0b:ee:87:3b:27:1a:65:0f:9d: d6:d4:5a:58:c3:dd:b2:a8:c1:34:d9:db:04:87:15:a4:a0:54: 2f:8b:47:3a:47:c2:0f:65:09:3b:0f:8b:b0:9e:13:92:cd:b1: a8:4f:6a:c1:86:d5:a7:ad:44:36:56:43:38:1d:31:49:63:94: f0:35:d8:74:4b:d6:57:a6:4e:a7:42:4d:73:5d:fd:de:4b:40: 3d:65:f4:7a:29:65:4e:49:12:c7:87:14:7d:bc:b2:38:68:dd: 1c:1f:4b:61:03:b6:cd:26:59:e6:0f:36:78:08:10:9f:bd:6b: 6e:bb:c9:08:39:ac:61:cc:4b:f1:56:4f:6a:29:49:2c:d8:f6: 87:cd:23:00:07:6d:85:40:98:b9:77:bc:86:fa:82:1a:41:32: fa:d3:59:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHWBP1HEEyliqTvcergWEPoCSE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNjA0MTcwMzI1MDBaFw0yNjA0MjAwOTU2MDBaMDMxMTAvBgNV BAMTKEYxNjg1NkRGODBBOTJFMEE4MjYxNjVCOEE3MENEQzg4OURCMDE2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Eb6LFaXdUHu7JgQUV23gkhmm BsFJHTvPGqRLKUjQpkldtWOuWvcu7R7pHG4gmICX2p6LZGN+ggfDEetNI3VXjt0J 31KBzNaFj+SXBD7J4aSIBlaD6pzUA/a+01HkhmO1z+JULfALFmTr6TH2XpWX98H+ 61fptCvkGHA2Jwtr8VcuL+0dxssZzi96i+8GY84ncL/Olx3BesTmJeakwqAqKFNQ 2RnQ6DNr/AHAVeYh/zQYvh1EzSbMwk3qb+YxnMKcxQvn8a9Pd6qD7EAJfduszbe6 UTHlNaBbB6/Jz9MQd5SkMnNCnTlNMEenXrv7OtAzLiYRiEnYkp4SBrW8yahLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WhW34CpLgqCYWW4pwzciJ2wFggwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCsCcyOPEOftdVadl9rqHvAfzWuKuCzed6n 3IXbE+6TH1oox3fZPhjjKRkHeaQW3QQ7cnYUNYc3ew5JbeIP7fZX+rhP2EB7d/Lj S4h8Q0q3CHktUNonXAR8NQcUw6x1Cn6DUQvuhzsnGmUPndbUWljD3bKowTTZ2wSH FaSgVC+LRzpHwg9lCTsPi7CeE5LNsahPasGG1aetRDZWQzgdMUljlPA12HRL1lem TqdCTXNd/d5LQD1l9HopZU5JEseHFH28sjho3RwfS2EDts0mWeYPNngIEJ+9a267 yQg5rGHMS/FWT2opSSzY9ofNIwAHbYVAmLl3vIb6ghpBMvrTWcw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:38 2026 by rpki-client