$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: +y3MiiAKyIvASNSsuMMOr5o69lFe/8+Ti3tpT9nYU4Y= Subject key identifier: 03:34:5D:BA:2C:D2:7E:75:70:83:CC:19:B6:32:59:9B:C7:7D:9C:60 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 4703A3433EC42E76C2D6EE79A8319A4F644CF507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: 0128 Signing time: Thu 16 Apr 2026 23:32:24 +0000 Manifest this update: Thu 16 Apr 2026 23:27:24 +0000 Manifest next update: Mon 20 Apr 2026 06:14:24 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: SZSh+1r3M+7NE+6fyrLwNRS0CRo6b8VUC6ohyXglx/s=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:a3:43:3e:c4:2e:76:c2:d6:ee:79:a8:31:9a:4f:64:4c:f5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Apr 16 23:27:24 2026 GMT Not After : Apr 20 06:14:24 2026 GMT Subject: CN=03345DBA2CD27E757083CC19B632599BC77D9C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f1:e6:44:00:a4:05:a0:39:be:0d:dd:8d:76: 35:47:5d:5c:55:6b:9a:57:70:ea:31:22:b8:a0:51: f1:88:ac:fd:43:c1:2c:77:f2:f8:92:9f:be:c7:d6: 99:ac:d6:6c:8b:d6:4b:99:c7:1f:17:91:ae:f8:c1: c5:7e:0a:e9:a3:8e:3a:f4:1c:b4:fd:b0:95:1f:1f: b4:34:a6:f4:24:48:69:fe:54:de:c6:38:6a:62:ef: 06:01:aa:37:1c:88:c7:70:c0:13:dd:d1:09:5d:38: 0f:ca:c5:14:f9:87:0e:64:db:62:3a:d7:19:69:58: c1:7e:0b:49:ab:47:fc:b5:f7:37:9f:1b:08:88:0b: aa:eb:a3:ca:7f:d2:12:72:a7:1e:bc:6c:75:60:90: 94:51:4d:1f:51:da:69:67:aa:b3:a9:80:d8:a0:42: 85:f4:f6:22:92:29:07:49:66:ce:e9:67:fc:1a:38: cc:67:d2:3c:b3:c5:f8:c3:21:bf:1b:ef:78:eb:7d: 42:aa:3b:ab:0d:1e:19:ba:56:fc:11:4b:a7:bc:69: d1:92:d4:66:6b:03:99:9c:5a:bf:1e:ae:6c:b2:e6: cc:c4:6a:d1:7e:2b:1b:64:63:a9:8b:f7:42:9c:72: 43:48:26:07:0b:ff:3a:38:78:8f:74:9a:16:5e:bf: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:5D:BA:2C:D2:7E:75:70:83:CC:19:B6:32:59:9B:C7:7D:9C:60 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:25:13:41:78:74:e6:dd:40:7b:91:76:97:b4:27:c2:91:e6: 95:e1:45:94:32:15:cc:8f:8f:24:19:3e:9e:43:75:a0:2e:f1: b0:96:f3:a8:f9:b7:fb:bd:8f:0e:e7:0e:43:59:ed:b0:7d:ca: 85:31:c6:bd:7a:a4:fd:c3:0d:38:fa:c4:27:4c:5b:ac:c1:83: 7d:a4:c4:ab:f1:ca:d0:4e:bf:f1:b7:6f:aa:74:87:33:f1:de: 2d:7e:b6:4b:fd:56:da:cb:2e:7d:e1:fe:df:39:23:eb:9a:e9: 6c:20:f9:0e:06:0d:78:5e:de:2d:da:f2:c0:e6:3a:04:07:71: cd:6b:b4:82:83:84:e5:78:56:a1:b5:e0:9a:6b:10:f1:0f:67: 57:b0:ea:2d:0d:f6:99:e4:8f:2e:64:14:1a:70:91:c3:3a:cb: b3:c4:c5:7d:3e:64:31:6d:c6:6d:9e:51:fd:ba:b9:cb:0c:08: 4a:a0:2e:0c:bb:2b:66:45:64:53:7e:f1:1f:39:7d:ea:73:99: cb:53:c3:b3:80:17:21:75:c2:db:cf:e8:94:0d:1f:76:fb:90: 73:cc:59:1c:55:0c:84:51:d8:e2:fd:0f:60:3c:2d:d3:24:37: c2:1a:11:93:2d:61:5a:11:69:99:50:5d:c4:fd:5c:73:b4:e6: 7f:55:22:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwOjQz7ELnbC1u55qDGaT2RM9QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNjA0MTYyMzI3MjRaFw0yNjA0MjAwNjE0MjRaMDMxMTAvBgNV BAMTKDAzMzQ1REJBMkNEMjdFNzU3MDgzQ0MxOUI2MzI1OTlCQzc3RDlDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi8eZEAKQFoDm+Dd2NdjVHXVxV a5pXcOoxIrigUfGIrP1DwSx38viSn77H1pms1myL1kuZxx8Xka74wcV+Cumjjjr0 HLT9sJUfH7Q0pvQkSGn+VN7GOGpi7wYBqjcciMdwwBPd0QldOA/KxRT5hw5k22I6 1xlpWMF+C0mrR/y19zefGwiIC6rro8p/0hJypx68bHVgkJRRTR9R2mlnqrOpgNig QoX09iKSKQdJZs7pZ/waOMxn0jyzxfjDIb8b73jrfUKqO6sNHhm6VvwRS6e8adGS 1GZrA5mcWr8ermyy5szEatF+KxtkY6mL90KcckNIJgcL/zo4eI90mhZev1kXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzRduizSfnVwg8wZtjJZm8d9nGAwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAlE0F4dObdQHuRdpe0J8KR5pXhRZQyFcyP jyQZPp5DdaAu8bCW86j5t/u9jw7nDkNZ7bB9yoUxxr16pP3DDTj6xCdMW6zBg32k xKvxytBOv/G3b6p0hzPx3i1+tkv9VtrLLn3h/t85I+ua6Wwg+Q4GDXhe3i3a8sDm OgQHcc1rtIKDhOV4VqG14JprEPEPZ1ew6i0N9pnkjy5kFBpwkcM6y7PExX0+ZDFt xm2eUf26ucsMCEqgLgy7K2ZFZFN+8R85fepzmctTw7OAFyF1wtvP6JQNH3b7kHPM WRxVDIRR2OL9D2A8LdMkN8IaEZMtYVoRaZlQXcT9XHO05n9VIrs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:49 2026 by rpki-client