$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: CPZBvveLjqf4Lmb3eslq+MI6YzqhZLUJbs1nTsNCln8= Subject key identifier: FC:41:F9:7F:32:D9:84:FE:03:71:4A:94:1D:B3:77:98:D0:EB:03:F7 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 34148BFE34C83A8434621B9EABF0E8C905E1CF11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01FB Signing time: Fri 17 Apr 2026 00:22:07 +0000 Manifest this update: Fri 17 Apr 2026 00:17:07 +0000 Manifest next update: Mon 20 Apr 2026 10:35:07 +0000 Files and hashes: 1: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: ylRiceTabCMUWEEzA8lxTKdlNAUPc5wRheh1Rcoze6I=) 2: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: GNZzAcmYMO24v0PgoH0PVcbzFxgNvmanVmMwCuln4aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:14:8b:fe:34:c8:3a:84:34:62:1b:9e:ab:f0:e8:c9:05:e1:cf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Apr 17 00:17:07 2026 GMT Not After : Apr 20 10:35:07 2026 GMT Subject: CN=FC41F97F32D984FE03714A941DB37798D0EB03F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:7e:fc:55:d3:4b:db:d3:45:37:2f:6e:d3: fe:2b:11:f5:30:f4:07:d8:53:df:6b:0d:1e:7c:84: bb:d2:1f:88:38:12:20:9f:6f:d4:f6:38:19:b6:e4: 32:3c:14:63:89:17:22:96:5b:7f:29:3c:a4:df:6d: ea:70:5f:52:3f:15:e0:3c:78:8e:8a:57:a8:a4:13: e4:c3:53:2a:3f:1c:6f:ac:10:14:e5:d1:1c:61:0e: b9:f1:94:46:fe:06:72:41:75:95:53:b8:40:c8:87: ea:9f:d1:25:19:e0:c9:06:bb:e1:bf:a3:bb:89:eb: 76:d4:8e:87:65:bb:cd:10:6b:59:de:51:2f:75:66: a2:85:de:04:a7:f7:80:54:0a:77:9d:31:62:4a:8d: 59:4d:05:1d:4b:e7:7a:a1:25:b1:c9:9c:c3:ff:75: 52:1c:f6:79:79:29:16:2c:b9:72:a7:0d:98:78:88: cb:a8:93:60:fa:72:32:df:6a:9b:d1:18:32:4e:6b: a4:57:de:1d:f6:45:a9:bc:6f:c6:32:c0:30:5f:da: a5:ba:0a:67:0a:5b:e0:5e:aa:6a:cf:8c:2d:53:63: a5:bc:b1:56:34:3e:52:31:65:c0:4a:ca:fe:bf:85: d7:79:ce:ae:fc:b7:5b:28:26:2d:64:16:a5:22:cc: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:41:F9:7F:32:D9:84:FE:03:71:4A:94:1D:B3:77:98:D0:EB:03:F7 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b0:33:bf:1d:f6:05:43:f4:64:ee:cf:0d:c1:c1:e3:12:c6: c4:4b:a9:09:e8:a2:60:e6:30:f3:56:0f:f1:fd:78:ef:4c:30: 3b:e3:f7:63:77:2c:af:86:20:7e:02:a4:08:a9:66:4c:e9:1d: 7d:6d:3f:12:af:b0:95:45:05:78:14:5b:aa:0c:5e:6c:6a:c6: eb:45:9e:de:7b:1d:da:a2:7d:fc:10:78:e4:c3:f3:f0:02:76: bf:92:a4:87:d6:ad:f3:97:81:cb:af:99:c2:71:1a:d1:27:42: 36:80:05:0f:4c:5f:00:ff:62:03:84:ce:98:53:fa:f0:87:3a: e6:53:a4:5a:7a:17:95:54:4d:6d:a5:d5:60:bd:0d:45:c2:d4: 9b:6e:b1:07:c6:9a:5f:c2:40:77:b8:06:ed:1b:bb:13:bd:72: 33:ec:7d:85:14:fa:43:f3:c2:4b:97:13:44:88:85:cd:01:0e: 25:97:07:4e:07:ec:8d:86:24:34:59:4b:e5:6d:cc:6f:e4:f8: 33:cd:c3:5c:36:ae:fb:2a:14:57:7a:f4:c5:42:02:fc:0a:d5: 9f:c6:7e:12:10:68:f0:94:36:22:2e:9a:1f:de:0b:95:76:68: 9e:f6:8a:7c:d0:ab:15:c3:9f:52:bb:ff:c0:44:96:4d:c7:e5: 03:54:05:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBSL/jTIOoQ0Yhueq/DoyQXhzxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNjA0MTcwMDE3MDdaFw0yNjA0MjAxMDM1MDdaMDMxMTAvBgNV BAMTKEZDNDFGOTdGMzJEOTg0RkUwMzcxNEE5NDFEQjM3Nzk4RDBFQjAzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3H78VdNL29NFNy9u0/4rEfUw 9AfYU99rDR58hLvSH4g4EiCfb9T2OBm25DI8FGOJFyKWW38pPKTfbepwX1I/FeA8 eI6KV6ikE+TDUyo/HG+sEBTl0RxhDrnxlEb+BnJBdZVTuEDIh+qf0SUZ4MkGu+G/ o7uJ63bUjodlu80Qa1neUS91ZqKF3gSn94BUCnedMWJKjVlNBR1L53qhJbHJnMP/ dVIc9nl5KRYsuXKnDZh4iMuok2D6cjLfapvRGDJOa6RX3h32Ram8b8YywDBf2qW6 CmcKW+BeqmrPjC1TY6W8sVY0PlIxZcBKyv6/hdd5zq78t1soJi1kFqUizMjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/EH5fzLZhP4DcUqUHbN3mNDrA/cwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOwM78d9gVD9GTuzw3BweMSxsRLqQnoomDm MPNWD/H9eO9MMDvj92N3LK+GIH4CpAipZkzpHX1tPxKvsJVFBXgUW6oMXmxqxutF nt57HdqiffwQeOTD8/ACdr+SpIfWrfOXgcuvmcJxGtEnQjaABQ9MXwD/YgOEzphT +vCHOuZTpFp6F5VUTW2l1WC9DUXC1JtusQfGml/CQHe4Bu0buxO9cjPsfYUU+kPz wkuXE0SIhc0BDiWXB04H7I2GJDRZS+VtzG/k+DPNw1w2rvsqFFd69MVCAvwK1Z/G fhIQaPCUNiIumh/eC5V2aJ72inzQqxXDn1K7/8BElk3H5QNUBXE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:28 2026 by rpki-client