$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: AxfUX9UghiyHWQz16hCw2DAkveX5ZFZJX59m1+E7WWE= Subject key identifier: A2:A4:CB:92:B2:82:9B:A9:F0:39:58:C9:D1:71:64:B3:96:45:80:50 Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 666D22113C093741D8144DE70701C422F321EC5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 14:02:19 +0000 Manifest this update: Thu 16 Apr 2026 13:57:19 +0000 Manifest next update: Sun 19 Apr 2026 22:37:19 +0000 Files and hashes: 1: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=) 2: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: LGIdReUc+9RwS/zkWF3hvSuQ/iWq3Ncg8SNK1oC+2rM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6d:22:11:3c:09:37:41:d8:14:4d:e7:07:01:c4:22:f3:21:ec:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Apr 16 13:57:19 2026 GMT Not After : Apr 19 22:37:19 2026 GMT Subject: CN=A2A4CB92B2829BA9F03958C9D17164B396458050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:a6:4d:a3:c1:50:e3:15:37:42:e6:6d:58: 22:f1:96:7d:93:28:ec:89:ca:7b:4e:17:74:aa:28: 4b:44:32:08:b5:ff:1f:92:70:d6:f6:95:e1:b2:01: 20:95:ec:05:c3:b0:0d:4c:db:2b:fb:76:7b:4a:fb: df:ce:e5:39:26:4b:f2:cf:1f:05:a8:32:4f:5f:71: 9a:81:6e:60:e7:95:79:60:28:c2:84:c4:d4:ac:fc: 3f:30:30:fc:0f:a1:e9:2d:5f:23:ff:98:a6:3c:a9: be:e1:e1:e4:e3:3d:34:38:c8:9f:f4:08:f3:3c:5d: d4:b2:24:8d:4b:87:69:28:7c:ad:f2:95:42:0f:4c: c9:b6:28:2c:64:a6:6b:c5:7b:fa:ed:36:c3:85:87: 90:0e:1b:72:5b:e8:97:d8:59:b6:c5:0f:f8:b3:e4: de:82:7e:94:97:d9:1c:21:ba:41:87:da:3e:23:06: 31:24:fb:51:dc:3a:38:da:db:ab:12:d9:e1:fb:f3: b6:69:9b:1b:73:98:f0:ca:cc:94:e0:63:4c:72:b7: 1d:44:63:ef:bd:2d:99:e1:f8:5d:f5:98:26:32:07: 0f:3f:24:37:08:50:e5:ac:ba:9e:c6:cc:01:24:14: c9:d0:9c:8c:bd:7b:4a:ee:f6:f9:ff:ca:b5:18:5d: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:CB:92:B2:82:9B:A9:F0:39:58:C9:D1:71:64:B3:96:45:80:50 X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d5:ae:1e:71:cd:2f:c1:f1:8d:d5:df:cb:1b:c7:8e:2d:fa: e9:6e:04:f5:00:d3:4d:e3:c7:b5:37:df:60:df:66:c2:a3:b3: c6:36:9e:7a:a3:af:33:bc:31:71:de:30:d2:e7:e3:e7:6f:1f: 77:5c:fe:15:48:76:61:a7:66:bc:88:f2:d9:2b:3d:93:8c:56: b0:1b:5b:a6:d5:55:e4:bd:0f:1c:2c:1d:8b:35:fe:40:f2:d4: 98:30:4c:6e:2a:96:73:f0:d4:af:2c:39:32:c2:d2:ec:c5:7d: a7:90:93:07:d6:48:ad:0f:3c:37:95:a7:13:a8:2b:4a:3d:d0: 3d:d7:e2:b3:bc:f4:eb:6c:71:c3:b6:30:79:ad:26:c5:2a:5c: 3d:c7:1b:4a:79:c0:41:e8:ba:4d:4c:94:5d:ea:25:bb:81:50: 30:3e:0a:4a:d8:1f:04:2d:c1:91:65:07:63:fb:ce:91:18:a6: 78:af:38:b4:ee:f5:81:bc:47:96:52:7e:31:dc:c7:18:02:44: e9:b5:ab:da:7f:67:8a:31:d3:7f:2e:a1:d8:8a:b4:86:cf:5b: 6a:54:85:ab:8a:c9:e9:85:9c:18:71:5c:6e:98:39:eb:79:1e: 65:45:ef:03:e7:37:74:27:89:e7:4c:f3:28:3e:bf:60:4e:0b: 2c:74:fb:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZm0iETwJN0HYFE3nBwHEIvMh7FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNjA0MTYxMzU3MTlaFw0yNjA0MTkyMjM3MTlaMDMxMTAvBgNV BAMTKEEyQTRDQjkyQjI4MjlCQTlGMDM5NThDOUQxNzE2NEIzOTY0NTgwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjaZNo8FQ4xU3QuZtWCLxln2T KOyJyntOF3SqKEtEMgi1/x+ScNb2leGyASCV7AXDsA1M2yv7dntK+9/O5TkmS/LP HwWoMk9fcZqBbmDnlXlgKMKExNSs/D8wMPwPoektXyP/mKY8qb7h4eTjPTQ4yJ/0 CPM8XdSyJI1Lh2kofK3ylUIPTMm2KCxkpmvFe/rtNsOFh5AOG3Jb6JfYWbbFD/iz 5N6CfpSX2RwhukGH2j4jBjEk+1HcOjja26sS2eH787ZpmxtzmPDKzJTgY0xytx1E Y++9LZnh+F31mCYyBw8/JDcIUOWsup7GzAEkFMnQnIy9e0ru9vn/yrUYXTsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqTLkrKCm6nwOVjJ0XFks5ZFgFAwHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfVrh5xzS/B8Y3V38sbx44t+uluBPUA003j x7U332DfZsKjs8Y2nnqjrzO8MXHeMNLn4+dvH3dc/hVIdmGnZryI8tkrPZOMVrAb W6bVVeS9DxwsHYs1/kDy1JgwTG4qlnPw1K8sOTLC0uzFfaeQkwfWSK0PPDeVpxOo K0o90D3X4rO89OtsccO2MHmtJsUqXD3HG0p5wEHouk1MlF3qJbuBUDA+CkrYHwQt wZFlB2P7zpEYpnivOLTu9YG8R5ZSfjHcxxgCROm1q9p/Z4ox038uodiKtIbPW2pU hauKyemFnBhxXG6YOet5HmVF7wPnN3QniedM8yg+v2BOCyx0+1U= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:46 2026 by rpki-client