$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: 6KfGXKAqL1EhRN6hWijcCPXPBbvZ/G67rwAS7/5sRXc= Subject key identifier: B5:30:25:76:1D:76:C6:12:15:D3:B0:BF:55:3C:85:DC:4C:AD:B5:2D Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 35F21C445377EC87D16DDC2CF4FB382E3A2FE517 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: F7 Signing time: Sat 18 Apr 2026 19:21:16 +0000 Manifest this update: Sat 18 Apr 2026 19:16:16 +0000 Manifest next update: Tue 21 Apr 2026 22:10:16 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: Ilcu8yoLuQWHnomSr5jvx1dxZs+td1LQ8J5V69BZtz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f2:1c:44:53:77:ec:87:d1:6d:dc:2c:f4:fb:38:2e:3a:2f:e5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Apr 18 19:16:16 2026 GMT Not After : Apr 21 22:10:16 2026 GMT Subject: CN=B53025761D76C61215D3B0BF553C85DC4CADB52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:80:cd:2c:ec:78:4a:64:1b:59:cd:b0:73: 12:f4:0c:14:1e:52:c0:fa:b6:5d:1d:92:b6:b8:e2: 38:75:19:48:54:a0:f3:07:4f:7c:37:17:40:9e:a9: 1a:66:56:70:7a:7f:d5:35:95:40:72:2a:53:66:33: 14:a3:12:ed:dc:c3:1f:e4:e2:5c:bd:40:8e:e1:25: e7:9b:32:66:e4:8f:0d:e1:ac:b6:52:bc:d4:b2:f4: 13:23:8b:5e:9a:7f:17:5f:ff:59:a3:dd:c8:52:c8: d6:1b:f5:ec:be:16:81:f1:47:51:a5:8b:28:4e:e6: e8:79:63:8f:7e:8e:32:8c:6d:96:5b:8c:e6:1a:cf: e4:5f:c0:61:95:c5:3d:65:8b:73:72:0b:d9:79:72: a9:10:3a:d3:da:1d:32:1b:83:d6:d3:e1:8a:99:b6: 61:cd:f6:aa:0b:4e:8e:5f:d7:34:61:d2:97:1e:2c: 54:bb:eb:08:04:6d:54:4f:96:54:f0:cd:d8:1a:8d: a9:5e:f5:13:b8:8a:69:ec:32:bc:1b:45:cf:f9:26: 56:48:04:b8:bb:09:88:46:e0:c1:f7:8c:cc:d5:f5: 1c:97:fb:1d:42:a3:d3:63:bf:10:e2:a0:1f:fc:db: 5f:d6:7c:da:d1:2c:ef:87:b7:8a:ff:04:c0:41:36: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:25:76:1D:76:C6:12:15:D3:B0:BF:55:3C:85:DC:4C:AD:B5:2D X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:a5:9c:80:ac:db:e3:e1:b3:56:d1:f7:35:60:21:7a:b2: 6e:de:c5:2f:00:ce:88:e7:f0:16:15:05:3c:d3:56:64:ad:aa: e5:8a:a3:9c:e0:ab:f8:cf:f4:95:e0:1e:cd:35:db:e4:77:bf: 2e:3c:bc:28:44:bb:d3:cb:48:5a:c7:39:a4:9b:1f:85:82:31: b3:ae:44:47:9c:0e:17:1d:b1:3d:77:51:eb:39:fb:87:ae:f8: 24:d9:64:fa:5d:48:df:43:07:3f:56:02:9f:d3:4a:2f:ea:bb: 40:67:b7:ac:17:e2:f1:78:21:07:6a:db:5e:1c:ab:69:65:d4: 89:1f:d9:f2:e0:17:06:0b:95:7f:45:26:37:77:35:0a:32:55: 41:dd:27:53:93:3d:f8:16:e9:9b:3b:5b:2f:82:08:80:29:f9: e7:29:e5:49:3d:75:09:81:2c:b0:fc:1c:d6:15:f6:be:e1:5c: 7f:24:b2:97:7d:e9:0b:30:88:50:8c:6a:f3:33:e8:c3:90:4d: f5:a1:37:04:b4:02:fc:08:0d:70:0f:77:4d:c9:8a:b3:93:83: db:00:d2:9e:34:61:17:16:4e:84:9c:98:7e:05:69:1f:1a:ae: 73:0e:8c:e8:80:be:55:8f:a1:18:d0:33:d3:6a:0f:9b:79:1e: 85:e3:a0:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfIcRFN37IfRbdws9Ps4Ljov5RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNjA0MTgxOTE2MTZaFw0yNjA0MjEyMjEwMTZaMDMxMTAvBgNV BAMTKEI1MzAyNTc2MUQ3NkM2MTIxNUQzQjBCRjU1M0M4NURDNENBREI1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAYDNLOx4SmQbWc2wcxL0DBQe UsD6tl0dkra44jh1GUhUoPMHT3w3F0CeqRpmVnB6f9U1lUByKlNmMxSjEu3cwx/k 4ly9QI7hJeebMmbkjw3hrLZSvNSy9BMji16afxdf/1mj3chSyNYb9ey+FoHxR1Gl iyhO5uh5Y49+jjKMbZZbjOYaz+RfwGGVxT1li3NyC9l5cqkQOtPaHTIbg9bT4YqZ tmHN9qoLTo5f1zRh0pceLFS76wgEbVRPllTwzdgajale9RO4imnsMrwbRc/5JlZI BLi7CYhG4MH3jMzV9RyX+x1Co9NjvxDioB/821/WfNrRLO+Ht4r/BMBBNlq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTAldh12xhIV07C/VTyF3EyttS0wHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzapZyArNvj4bNW0fc1YCF6sm7exS8Azojn 8BYVBTzTVmStquWKo5zgq/jP9JXgHs012+R3vy48vChEu9PLSFrHOaSbH4WCMbOu REecDhcdsT13Ues5+4eu+CTZZPpdSN9DBz9WAp/TSi/qu0Bnt6wX4vF4IQdq214c q2ll1Ikf2fLgFwYLlX9FJjd3NQoyVUHdJ1OTPfgW6Zs7Wy+CCIAp+ecp5Uk9dQmB LLD8HNYV9r7hXH8kspd96QswiFCMavMz6MOQTfWhNwS0AvwIDXAPd03JirOTg9sA 0p40YRcWToScmH4FaR8arnMOjOiAvlWPoRjQM9NqD5t5HoXjoB8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:30 2026 by rpki-client