$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: aW5j3w8gh/rS4U4diebdSvFXKpeWhmkbir3hmZsmW/o= Subject key identifier: 70:C5:69:FD:F6:BB:2E:FC:8E:EA:7F:6E:CF:70:90:31:0B:79:1F:0E Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 20074B73B804A6B3FAAD93B4845FE83FDD839AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0570 Signing time: Sun 19 Apr 2026 08:21:27 +0000 Manifest this update: Sun 19 Apr 2026 08:16:27 +0000 Manifest next update: Wed 22 Apr 2026 12:54:27 +0000 Files and hashes: 1: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 2: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 3: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 4: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 5: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 6: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: PrS/NKZTseWO0LcALsKN8PbQbIx2yzVCVIHdUA8gDs8=) 7: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 12:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:07:4b:73:b8:04:a6:b3:fa:ad:93:b4:84:5f:e8:3f:dd:83:9a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Apr 19 08:16:27 2026 GMT Not After : Apr 22 12:54:27 2026 GMT Subject: CN=70C569FDF6BB2EFC8EEA7F6ECF7090310B791F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:3c:e2:68:26:04:4b:49:1a:e4:cf:40:36: fc:46:a5:2b:2c:a3:4b:b0:a5:0b:ec:b6:10:8d:bc: ff:bc:cd:4f:7d:87:f0:ca:65:c5:d0:a0:b0:4b:e1: 73:88:ef:43:ea:d1:b2:59:70:d0:9e:2e:f9:32:bf: 86:03:fe:cd:63:9a:a6:61:16:ec:1e:71:64:c7:d4: 49:60:ff:c1:10:f0:13:51:9d:d8:15:c7:3f:ab:0c: e0:88:e3:7e:3b:8b:1c:9a:5a:49:29:72:43:35:cf: f4:e4:ea:b2:8b:a9:fd:65:aa:2e:5f:14:95:0a:55: a6:43:0b:5e:79:ac:51:9b:1a:38:2f:d4:68:9a:6f: 4b:d4:8c:1c:3e:81:c6:5a:03:d5:69:2c:3a:b5:5f: 02:6e:ee:fe:a7:33:b6:27:1a:0a:97:6f:23:6e:1d: 94:28:07:0a:58:07:46:c8:01:07:63:6b:cf:51:5e: 88:e7:d0:1d:77:bb:4d:95:c9:35:aa:8f:bf:4d:d8: 35:46:9d:f1:7b:55:f4:76:00:8c:6b:94:06:03:97: 4b:84:32:54:36:e6:a8:b4:3b:20:1e:05:cb:fe:87: 26:96:a6:21:7a:bc:6b:f6:00:4c:a2:f8:0c:60:aa: 5f:7e:de:72:3d:98:4d:a3:c5:09:d9:ef:52:5d:5d: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:69:FD:F6:BB:2E:FC:8E:EA:7F:6E:CF:70:90:31:0B:79:1F:0E X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:11:4a:b2:89:c6:f5:51:8b:f3:71:18:bd:c9:8b:1f:98:6f: 10:47:c9:eb:da:55:85:b1:0d:ae:cd:c3:01:87:f3:32:94:d1: 5c:6f:82:24:5a:21:0a:ad:24:f1:6e:73:32:f5:df:e9:f5:37: 0c:e1:3d:36:e3:48:ca:66:4b:47:d1:f4:c4:d5:e9:7f:b2:8b: 76:f4:44:89:26:4e:ac:4d:6a:9a:b3:ba:1b:fb:d4:cd:44:95: 96:a6:ff:70:e0:5e:5d:54:da:b5:bc:10:ab:0b:d9:f0:8b:04: d1:e3:2a:f5:b9:0e:33:75:65:ca:1c:41:13:d4:8a:58:d0:29: ea:69:a7:2d:86:ef:bc:37:5e:fb:89:13:e6:b9:56:0c:88:26: f2:52:ef:19:af:d7:1b:f8:79:5b:94:ba:61:d3:a8:b3:36:4a: 5c:62:85:e3:c7:0b:d2:72:4d:d7:91:86:2a:bc:6d:f3:1f:3b: 02:c9:d9:19:39:b1:42:2f:ca:89:8e:af:4f:43:c1:dd:8d:2c: 1a:9c:dd:c4:8d:b1:78:1a:88:b5:e4:f5:ca:aa:25:e3:a5:96: 50:58:bb:a3:08:b2:2d:17:66:c0:f9:55:c4:40:ec:e6:64:c8: 07:eb:88:f3:d9:ff:99:5f:67:8a:05:a1:de:00:84:92:63:84: a7:42:fe:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAdLc7gEprP6rZO0hF/oP92DmvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNjA0MTkwODE2MjdaFw0yNjA0MjIxMjU0MjdaMDMxMTAvBgNV BAMTKDcwQzU2OUZERjZCQjJFRkM4RUVBN0Y2RUNGNzA5MDMxMEI3OTFGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ezziaCYES0ka5M9ANvxGpSss o0uwpQvsthCNvP+8zU99h/DKZcXQoLBL4XOI70Pq0bJZcNCeLvkyv4YD/s1jmqZh FuwecWTH1Elg/8EQ8BNRndgVxz+rDOCI4347ixyaWkkpckM1z/Tk6rKLqf1lqi5f FJUKVaZDC155rFGbGjgv1Giab0vUjBw+gcZaA9VpLDq1XwJu7v6nM7YnGgqXbyNu HZQoBwpYB0bIAQdja89RXojn0B13u02VyTWqj79N2DVGnfF7VfR2AIxrlAYDl0uE MlQ25qi0OyAeBcv+hyaWpiF6vGv2AEyi+Axgql9+3nI9mE2jxQnZ71JdXYt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMVp/fa7LvyO6n9uz3CQMQt5Hw4wHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHARSrKJxvVRi/NxGL3Jix+YbxBHyevaVYWx Da7NwwGH8zKU0VxvgiRaIQqtJPFuczL13+n1NwzhPTbjSMpmS0fR9MTV6X+yi3b0 RIkmTqxNapqzuhv71M1ElZam/3DgXl1U2rW8EKsL2fCLBNHjKvW5DjN1ZcocQRPU iljQKepppy2G77w3XvuJE+a5VgyIJvJS7xmv1xv4eVuUumHTqLM2SlxihePHC9Jy TdeRhiq8bfMfOwLJ2Rk5sUIvyomOr09Dwd2NLBqc3cSNsXgaiLXk9cqqJeOlllBY u6MIsi0XZsD5VcRA7OZkyAfriPPZ/5lfZ4oFod4AhJJjhKdC/i4= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:18 2026 by rpki-client