$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: MS4+panfYDb1WrYfRNbCI8Jzf4cujuCuTBetzQdxIV4= Subject key identifier: 07:6A:DA:20:38:C7:A6:94:DF:0B:E0:63:8D:0D:42:C0:E7:76:54:C6 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 53F3D1D2C5621F7CCB43B6549E24700B8B323153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0228 Signing time: Wed 15 Apr 2026 22:21:45 +0000 Manifest this update: Wed 15 Apr 2026 22:16:45 +0000 Manifest next update: Sun 19 Apr 2026 04:40:45 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: 7AvihzWJeh0hb/P0ADXT6YATWLdETmZoopZ/u4dc278=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f3:d1:d2:c5:62:1f:7c:cb:43:b6:54:9e:24:70:0b:8b:32:31:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Apr 15 22:16:45 2026 GMT Not After : Apr 19 04:40:45 2026 GMT Subject: CN=076ADA2038C7A694DF0BE0638D0D42C0E77654C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:95:61:ee:13:4e:de:05:cf:08:79:2e:e1: f0:e4:86:38:e2:53:d0:c1:35:8e:c8:cd:48:46:f0: 07:dd:11:f5:43:c3:82:21:2d:37:f3:f1:41:3d:b0: 67:be:25:ff:7f:64:ed:f3:3e:74:20:60:61:5e:28: 35:8a:83:54:f2:1a:48:48:30:b9:c0:7f:be:9c:1b: 03:a8:2f:3f:4d:37:53:aa:24:e5:f7:d0:5d:21:09: b0:59:0f:9c:76:f5:a2:8e:80:4a:80:8e:32:00:22: 19:36:1e:99:49:ed:e4:01:e7:30:00:f1:a5:1d:ab: d2:d1:81:c1:e3:bc:c9:7a:75:5b:0a:b3:cd:c3:f8: 39:a7:21:99:a1:c4:f9:d7:46:0a:1e:15:b0:d0:dc: 8e:24:25:f8:59:06:2a:13:e5:08:e6:2e:68:33:de: bb:67:c9:fd:66:ff:e1:79:58:6a:bf:06:af:7f:a6: 4f:2b:7a:1c:d9:dd:13:61:cd:42:4d:67:1a:1d:f3: 2f:59:15:92:3a:7d:4d:99:ef:48:b5:f1:c5:46:c9: 09:73:f1:cd:33:c5:64:32:c3:6e:36:45:52:c7:5f: ea:35:ba:fa:93:32:54:aa:d4:17:cd:10:af:83:f9: f7:15:22:d8:e0:85:b0:82:51:72:6c:d6:29:6b:ac: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6A:DA:20:38:C7:A6:94:DF:0B:E0:63:8D:0D:42:C0:E7:76:54:C6 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:51:24:91:8b:b1:2a:51:23:4f:30:5b:9c:f8:f6:9b:cb:02: 95:83:e9:54:c5:7d:f6:71:ea:4d:fe:a2:08:11:18:34:3d:41: 32:36:df:30:8a:fd:a2:c5:66:76:a8:f7:ad:98:fc:64:fc:93: a1:fa:d0:81:de:91:56:56:7e:c0:12:84:fc:05:06:d8:32:a0: 32:dd:17:90:61:d1:12:e4:28:38:c0:16:dc:5b:9f:70:70:22: 7d:8d:0d:02:cd:e5:5e:b9:88:51:f8:d1:03:d0:cd:f1:b2:c3: 6e:f9:af:cd:68:8f:b4:44:f3:77:70:2d:28:a9:05:73:1a:f7: 3c:b6:cb:7a:72:b6:e7:78:31:5c:08:40:22:59:d1:f0:f1:68: 97:a8:97:16:e8:a0:07:14:f3:57:f4:e7:30:24:45:b6:60:0c: 88:3e:80:c6:d4:2b:16:42:2a:a6:aa:1a:fd:90:06:fc:f0:1d: 89:25:c4:12:f9:a0:2f:7e:4d:b0:db:b0:bb:a5:04:a3:88:ff: ab:eb:f0:28:29:82:26:a7:55:48:af:c2:87:a8:0a:d5:d3:0c: 52:fc:75:fb:22:7e:97:a0:77:e1:04:90:4e:66:ba:23:39:8b: ef:b9:bf:6e:63:ad:77:41:5b:29:50:27:73:b5:86:32:71:5c: 6f:e6:c5:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/PR0sViH3zLQ7ZUniRwC4syMVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNjA0MTUyMjE2NDVaFw0yNjA0MTkwNDQwNDVaMDMxMTAvBgNV BAMTKDA3NkFEQTIwMzhDN0E2OTRERjBCRTA2MzhEMEQ0MkMwRTc3NjU0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMpVh7hNO3gXPCHku4fDkhjji U9DBNY7IzUhG8AfdEfVDw4IhLTfz8UE9sGe+Jf9/ZO3zPnQgYGFeKDWKg1TyGkhI MLnAf76cGwOoLz9NN1OqJOX30F0hCbBZD5x29aKOgEqAjjIAIhk2HplJ7eQB5zAA 8aUdq9LRgcHjvMl6dVsKs83D+DmnIZmhxPnXRgoeFbDQ3I4kJfhZBioT5QjmLmgz 3rtnyf1m/+F5WGq/Bq9/pk8rehzZ3RNhzUJNZxod8y9ZFZI6fU2Z70i18cVGyQlz 8c0zxWQyw242RVLHX+o1uvqTMlSq1BfNEK+D+fcVItjghbCCUXJs1ilrrDWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB2raIDjHppTfC+BjjQ1CwOd2VMYwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFRJJGLsSpRI08wW5z49pvLApWD6VTFffZx 6k3+oggRGDQ9QTI23zCK/aLFZnao962Y/GT8k6H60IHekVZWfsAShPwFBtgyoDLd F5Bh0RLkKDjAFtxbn3BwIn2NDQLN5V65iFH40QPQzfGyw275r81oj7RE83dwLSip BXMa9zy2y3pytud4MVwIQCJZ0fDxaJeolxbooAcU81f05zAkRbZgDIg+gMbUKxZC KqaqGv2QBvzwHYklxBL5oC9+TbDbsLulBKOI/6vr8CgpgianVUivwoeoCtXTDFL8 dfsifpegd+EEkE5muiM5i++5v25jrXdBWylQJ3O1hjJxXG/mxWU= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:27 2026 by rpki-client