$ rpki-client -vvf repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft File: 0955FAD07ADAFA4D810608923476BE03CAB7151E.mft (raw, json) Hash identifier: SwMXaYYEqwlOaZztCJzkkdo24nQs2ntYtpdZpVKJgew= Subject key identifier: D0:39:8F:0C:DA:A2:D0:E7:44:53:20:4F:82:2A:ED:0D:A6:2A:19:03 Authority key identifier: 09:55:FA:D0:7A:DA:FA:4D:81:06:08:92:34:76:BE:03:CA:B7:15:1E Certificate issuer: /CN=0955FAD07ADAFA4D810608923476BE03CAB7151E Certificate serial: 1F329C678E592A709A4A8D8F687129F2DF5EC9EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0955FAD07ADAFA4D810608923476BE03CAB7151E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft Manifest number: 05 Signing time: Thu 16 Apr 2026 05:32:20 +0000 Manifest this update: Thu 16 Apr 2026 05:27:20 +0000 Manifest next update: Sun 19 Apr 2026 07:34:20 +0000 Files and hashes: 1: 0955FAD07ADAFA4D810608923476BE03CAB7151E.crl (hash: x6UBQ3la5LFqeHobu7sHW13DSpKd6Ec9J1QTcX4kQsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.crl rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0955FAD07ADAFA4D810608923476BE03CAB7151E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:32:9c:67:8e:59:2a:70:9a:4a:8d:8f:68:71:29:f2:df:5e:c9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0955FAD07ADAFA4D810608923476BE03CAB7151E Validity Not Before: Apr 16 05:27:20 2026 GMT Not After : Apr 19 07:34:20 2026 GMT Subject: CN=D0398F0CDAA2D0E74453204F822AED0DA62A1903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:37:d0:d1:b2:37:bb:f3:78:21:a0:49:d8: 52:9f:aa:3f:e8:00:e9:7b:c3:74:22:07:40:94:22: 78:0a:84:d4:d0:2b:71:db:6d:b0:a4:6b:01:11:ef: e1:41:9d:15:df:84:e6:4f:bd:3e:72:58:67:6a:59: 2f:2b:d0:99:af:0c:2b:65:e4:53:3a:31:47:22:c0: 73:e7:8d:7d:dd:cd:1f:0e:7f:b4:cd:49:c0:5b:99: dc:0c:95:61:09:8b:d6:51:1f:ad:f5:04:71:46:75: b8:58:b2:05:dd:9f:15:1d:f0:e6:8c:5e:c1:be:b8: ec:9a:22:e3:d2:00:1f:c6:d3:e8:76:3a:80:07:43: 43:e8:1c:7d:80:85:58:2a:79:13:2c:86:87:a2:d3: a3:b1:d5:b2:c7:75:70:60:19:53:03:a5:0c:2d:ff: 08:04:42:62:32:43:a5:89:00:48:f0:2a:a3:7f:dd: 23:41:91:82:77:de:08:be:cf:b8:34:f1:d0:ae:1f: 7e:3a:24:78:a2:6b:7f:62:2f:66:21:fa:22:29:52: 3e:74:41:d7:f8:f5:74:96:0a:aa:bf:ef:67:78:a5: d0:ec:2e:8b:b0:91:d4:66:7b:59:31:e4:ff:be:e8: 0f:3c:68:ee:41:bd:19:ce:30:ea:11:b7:13:f1:af: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:39:8F:0C:DA:A2:D0:E7:44:53:20:4F:82:2A:ED:0D:A6:2A:19:03 X509v3 Authority Key Identifier: keyid:09:55:FA:D0:7A:DA:FA:4D:81:06:08:92:34:76:BE:03:CA:B7:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0955FAD07ADAFA4D810608923476BE03CAB7151E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3e:10:99:50:67:c2:9c:a8:15:68:25:1f:ce:6c:de:18:68: b0:03:35:b0:1d:fe:1a:af:a1:6b:8f:b8:19:94:ea:53:92:b7: 82:d4:c8:81:aa:23:e2:10:e7:bc:49:42:c6:7b:39:15:20:cb: d6:04:ab:6a:cb:12:ef:4b:f0:ed:fd:90:78:bc:86:0f:fc:f4: 8a:98:ad:e1:6b:a5:83:47:60:8c:31:35:f3:a9:53:f2:85:1b: b4:75:6f:2c:25:5a:42:83:b3:55:f3:6a:60:69:6a:53:7f:a0: 3e:0e:d3:9c:97:39:66:ab:db:8d:06:0a:be:a8:e3:04:8a:96: 16:35:c5:80:43:fc:1a:c1:48:d3:ac:91:1e:aa:f1:12:e6:44: ca:92:c2:ab:16:16:64:e5:dd:05:c4:82:0e:7b:a7:3d:1a:a0: 1d:4c:8c:f4:da:92:c1:fb:ad:bd:53:68:2d:5b:95:9a:dd:bd: ca:c1:d5:79:00:85:d3:12:1d:f6:c8:a3:12:a1:e0:23:68:31: 51:c3:42:f5:c6:b2:dd:79:d4:0b:f8:7e:5b:1b:72:40:23:59: 6d:c9:19:a9:3a:d2:aa:a7:cf:59:af:8b:cc:58:5a:a4:60:32: bc:a0:25:f0:55:29:9f:2c:a6:86:0c:8b:69:63:a9:cc:7e:72: 6e:af:b9:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzKcZ45ZKnCaSo2PaHEp8t9eye4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1NUZBRDA3QURBRkE0RDgxMDYwODkyMzQ3NkJFMDND QUI3MTUxRTAeFw0yNjA0MTYwNTI3MjBaFw0yNjA0MTkwNzM0MjBaMDMxMTAvBgNV BAMTKEQwMzk4RjBDREFBMkQwRTc0NDUzMjA0RjgyMkFFRDBEQTYyQTE5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULjfQ0bI3u/N4IaBJ2FKfqj/o AOl7w3QiB0CUIngKhNTQK3HbbbCkawER7+FBnRXfhOZPvT5yWGdqWS8r0JmvDCtl 5FM6MUciwHPnjX3dzR8Of7TNScBbmdwMlWEJi9ZRH631BHFGdbhYsgXdnxUd8OaM XsG+uOyaIuPSAB/G0+h2OoAHQ0PoHH2AhVgqeRMshoei06Ox1bLHdXBgGVMDpQwt /wgEQmIyQ6WJAEjwKqN/3SNBkYJ33gi+z7g08dCuH346JHiia39iL2Yh+iIpUj50 Qdf49XSWCqq/72d4pdDsLouwkdRme1kx5P++6A88aO5BvRnOMOoRtxPxr1flAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0DmPDNqi0OdEUyBPgirtDaYqGQMwHwYDVR0j BBgwFoAUCVX60Hra+k2BBgiSNHa+A8q3FR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDY4NTMwNy04NGVhLTRmZTMtYmI3Yy1mYjI4OTUzNzg3NDIvMC8wOTU1RkFEMDdB REFGQTREODEwNjA4OTIzNDc2QkUwM0NBQjcxNTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1NUZBRDA3QURBRkE0RDgxMDYwODkyMzQ3NkJFMDNDQUI3 MTUxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvMDk1NUZBRDA3QURBRkE0RDgxMDYwODkyMzQ3NkJF MDNDQUI3MTUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo+EJlQZ8KcqBVoJR/ObN4YaLADNbAd/hqv oWuPuBmU6lOSt4LUyIGqI+IQ57xJQsZ7ORUgy9YEq2rLEu9L8O39kHi8hg/89IqY reFrpYNHYIwxNfOpU/KFG7R1bywlWkKDs1XzamBpalN/oD4O05yXOWar240GCr6o 4wSKlhY1xYBD/BrBSNOskR6q8RLmRMqSwqsWFmTl3QXEgg57pz0aoB1MjPTaksH7 rb1TaC1blZrdvcrB1XkAhdMSHfbIoxKh4CNoMVHDQvXGst151Av4flsbckAjWW3J Gak60qqnz1mvi8xYWqRgMrygJfBVKZ8spoYMi2ljqcx+cm6vuT0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:01:40 2026 by rpki-client