$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: L6BWO5seXTT3VowGiSiMVLbXL7gWNrE5LwWrM5k+oGg= Subject key identifier: 8C:E9:9D:A0:53:07:4A:F4:83:48:20:B4:8B:F1:DA:A7:7D:31:9D:9E Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 6BB152EE62AE99CC14C3EB0FB62F5FEEA4031463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0272 Signing time: Fri 17 Apr 2026 14:51:25 +0000 Manifest this update: Fri 17 Apr 2026 14:46:25 +0000 Manifest next update: Mon 20 Apr 2026 23:20:25 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: yK7nyqbkyDPHD1QbGGLBt44X/fl33LRlABzMx16APXY=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: +Wy+Gr63i64MAqUNgzQsD6u1mDbUUmqexuIxsrEAZdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b1:52:ee:62:ae:99:cc:14:c3:eb:0f:b6:2f:5f:ee:a4:03:14:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Apr 17 14:46:25 2026 GMT Not After : Apr 20 23:20:25 2026 GMT Subject: CN=8CE99DA053074AF4834820B48BF1DAA77D319D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d3:05:39:c1:a0:e3:39:37:ef:b9:d2:17:72: 6d:af:b7:7b:79:ba:88:aa:e5:d6:7d:84:b3:ed:15: 6e:76:bd:80:19:21:9e:75:9f:bc:72:15:73:7b:1a: 0f:e9:90:a4:01:65:b4:99:c4:16:23:ad:a2:4f:93: 4e:ff:3c:18:7a:cf:30:b5:e5:4d:f1:fe:78:61:d3: 6b:ca:bf:2b:7c:ee:af:dd:9a:b3:14:bb:a4:40:dc: ad:87:05:41:9b:61:36:12:32:d9:8f:b4:19:1f:1e: 05:db:ff:e2:e1:95:4a:97:c9:6d:59:ea:24:a6:ef: 0a:35:a4:03:c3:08:d8:f2:0c:90:a7:7b:52:7f:ae: 1f:b6:e8:57:00:ee:18:b9:02:f8:a2:d0:4b:3f:19: 28:85:e5:4f:3d:e0:1d:fd:fa:e5:14:5a:3e:e6:33: 5e:74:af:7c:b1:f8:1a:68:dd:b5:98:18:90:0a:3a: 89:eb:4b:6b:6b:98:ed:9e:bb:e4:ac:b9:05:53:35: cb:a3:d7:bb:0c:e7:dd:ae:1d:fc:0c:34:77:0b:e8: 97:d7:71:aa:a7:ef:39:13:7b:f8:15:94:c5:f1:06: 53:7a:5a:28:d0:81:55:9a:6f:22:81:4e:f7:d6:5a: 67:bd:b0:12:24:0d:e8:35:94:9d:db:63:22:83:9b: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:9D:A0:53:07:4A:F4:83:48:20:B4:8B:F1:DA:A7:7D:31:9D:9E X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:38:a8:52:0e:2e:3d:be:8a:2e:dd:93:8f:24:8c:61:58:9c: 53:4d:5f:31:e9:24:77:11:c8:2e:8d:d1:c1:73:d6:7d:cf:a5: 68:6d:64:23:24:1b:ed:f0:76:a2:a4:8a:06:f9:40:a0:5d:b1: b6:88:92:78:b3:9b:76:9e:b2:bf:6a:f6:d5:4f:d8:5f:69:42: a9:34:92:4c:17:9a:62:6c:ac:f8:eb:17:5d:80:88:40:16:8f: 71:61:cc:6f:ca:96:d7:ec:58:d9:77:98:cb:6a:ff:22:c5:39: 79:88:ad:e8:ec:c5:32:2e:4f:a0:2f:f1:9e:e5:4d:d8:d4:e5: d4:9c:6d:bb:3d:3c:e0:0a:b6:a3:01:50:35:6c:03:cd:14:d9: e8:9a:8f:4a:76:17:f7:ec:ca:e8:81:38:3f:29:14:3c:d3:79: 18:42:b0:06:e2:11:a6:fc:6b:5c:64:1d:dd:2b:d5:78:73:55: 8c:40:9e:b3:5d:f5:97:6f:f5:d7:1f:d7:bf:2d:9c:c9:97:23: 35:c6:0f:4e:f2:7e:cb:be:5a:9e:42:22:bf:40:1b:2d:9a:b5: 40:a3:43:3d:9f:67:c5:a5:0a:c0:b6:d6:b7:7c:ee:8b:30:6e: ba:38:6e:2b:de:c2:9b:15:e7:59:f6:f8:d9:39:d7:55:38:c0: 8f:42:2d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7FS7mKumcwUw+sPti9f7qQDFGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNjA0MTcxNDQ2MjVaFw0yNjA0MjAyMzIwMjVaMDMxMTAvBgNV BAMTKDhDRTk5REEwNTMwNzRBRjQ4MzQ4MjBCNDhCRjFEQUE3N0QzMTlEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00wU5waDjOTfvudIXcm2vt3t5 uoiq5dZ9hLPtFW52vYAZIZ51n7xyFXN7Gg/pkKQBZbSZxBYjraJPk07/PBh6zzC1 5U3x/nhh02vKvyt87q/dmrMUu6RA3K2HBUGbYTYSMtmPtBkfHgXb/+LhlUqXyW1Z 6iSm7wo1pAPDCNjyDJCne1J/rh+26FcA7hi5Avii0Es/GSiF5U894B39+uUUWj7m M150r3yx+Bpo3bWYGJAKOonrS2trmO2eu+SsuQVTNcuj17sM592uHfwMNHcL6JfX caqn7zkTe/gVlMXxBlN6WijQgVWabyKBTvfWWme9sBIkDeg1lJ3bYyKDmz/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOmdoFMHSvSDSCC0i/Hap30xnZ4wHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA4qFIOLj2+ii7dk48kjGFYnFNNXzHpJHcR yC6N0cFz1n3PpWhtZCMkG+3wdqKkigb5QKBdsbaIknizm3aesr9q9tVP2F9pQqk0 kkwXmmJsrPjrF12AiEAWj3FhzG/KltfsWNl3mMtq/yLFOXmIrejsxTIuT6Av8Z7l TdjU5dScbbs9POAKtqMBUDVsA80U2eiaj0p2F/fsyuiBOD8pFDzTeRhCsAbiEab8 a1xkHd0r1XhzVYxAnrNd9Zdv9dcf178tnMmXIzXGD07yfsu+Wp5CIr9AGy2atUCj Qz2fZ8WlCsC21rd87oswbro4bivewpsV51n2+Nk511U4wI9CLcU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:20 2026 by rpki-client