$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: L7DHlA3SloXR4NsduVNcAk0R2aPCTfk0spNrh/H18mg= Subject key identifier: 1D:A3:B0:7E:08:B7:F4:CD:8C:22:C6:77:16:46:8B:B1:BC:5B:94:4B Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 44D371811939825074800D846CD63923D1710E80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 0504 Signing time: Thu 16 Apr 2026 16:51:12 +0000 Manifest this update: Thu 16 Apr 2026 16:46:12 +0000 Manifest next update: Mon 20 Apr 2026 01:58:12 +0000 Files and hashes: 1: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: nY7avS4e3/O8gYNq5MBsv11RTws6hkJeCSTaN7sAdRE=) 2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 3: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 4: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d3:71:81:19:39:82:50:74:80:0d:84:6c:d6:39:23:d1:71:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Apr 16 16:46:12 2026 GMT Not After : Apr 20 01:58:12 2026 GMT Subject: CN=1DA3B07E08B7F4CD8C22C67716468BB1BC5B944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:06:34:4c:a8:df:d6:7c:b6:98:c6:7c:ce: 5d:2c:b9:94:a2:84:d8:cd:6b:2f:26:91:90:31:d0: a2:06:1f:a6:0b:0c:89:e8:e7:d0:32:fc:11:f1:69: d4:68:cc:7c:60:bf:44:f1:c9:52:96:dc:2a:66:8d: f7:a1:ba:b9:bd:7a:9e:29:e6:7e:92:e7:b5:1b:c0: b6:1e:6a:25:ca:d2:ba:1b:58:6a:6e:1f:78:b0:bc: d3:b2:29:50:23:d3:21:bf:12:f8:62:f5:54:09:ce: 13:ed:73:4a:92:6a:a7:6a:c1:be:0d:14:9e:34:50: 14:ed:c5:64:0c:1d:07:b2:eb:c3:9b:67:3d:61:96: e7:71:9d:d9:a8:1e:e3:d8:3b:7e:e3:ab:71:5f:cf: fc:44:c3:c0:56:25:82:5a:05:04:b9:e3:34:6e:0b: 03:1a:d7:6a:4b:5e:57:1b:38:2c:50:0f:c3:2c:b5: d5:43:45:b5:46:1d:96:d3:74:6c:f2:13:90:3c:8d: e0:57:88:0b:e2:14:72:8b:8a:ab:6a:75:c8:35:03: 58:17:9a:4b:42:87:35:c6:54:8e:51:de:3c:88:e0: 8d:1a:71:64:67:c0:a0:ef:54:c6:af:29:e0:c6:79: 08:e5:99:12:b8:73:fb:98:61:4a:88:e5:36:fb:55: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:B0:7E:08:B7:F4:CD:8C:22:C6:77:16:46:8B:B1:BC:5B:94:4B X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ba:aa:6f:8b:38:91:f5:3d:83:50:48:8e:8a:a3:e7:85:e4: 18:fd:3f:f4:93:9a:34:d2:e5:56:10:10:bd:00:01:e9:6b:35: c5:82:02:d3:56:e3:0b:44:a5:eb:44:d0:04:0e:9b:b2:2f:14: 82:52:05:46:a5:03:1b:40:5a:d1:f0:3c:74:65:24:4b:32:66: 69:68:39:dc:57:60:c3:8d:1d:88:d4:a6:25:a6:94:d0:5a:91: 97:18:87:d5:3b:db:7a:18:8c:f1:d2:1c:e7:d3:ab:1a:5c:56: 86:83:aa:62:89:b9:94:33:a5:cb:70:84:39:4c:67:2d:a5:33: c1:61:70:ad:8d:e0:6f:d5:09:ba:07:18:dc:e7:28:6d:7e:0f: c9:2f:68:79:7c:02:a1:c3:9c:b8:e7:eb:95:a7:a0:5d:9f:3c: b1:ce:80:0a:3e:96:1e:6b:e3:fb:c0:cf:57:fa:19:f2:73:52: 35:b9:31:99:9e:e6:44:5b:de:a6:ee:3d:0d:14:62:31:a1:fb: 20:35:23:5d:36:b8:07:0b:7c:60:bd:6f:18:8d:0a:0f:8f:96: 33:3b:5e:d8:88:4c:0b:12:aa:07:3b:5e:63:7e:2a:9e:42:54: f3:75:33:79:a6:ff:d9:7a:6c:2b:5f:a3:e5:14:34:3b:78:b5: f0:d8:c1:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNNxgRk5glB0gA2EbNY5I9FxDoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNjA0MTYxNjQ2MTJaFw0yNjA0MjAwMTU4MTJaMDMxMTAvBgNV BAMTKDFEQTNCMDdFMDhCN0Y0Q0Q4QzIyQzY3NzE2NDY4QkIxQkM1Qjk0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURgY0TKjf1ny2mMZ8zl0suZSi hNjNay8mkZAx0KIGH6YLDIno59Ay/BHxadRozHxgv0TxyVKW3Cpmjfehurm9ep4p 5n6S57UbwLYeaiXK0robWGpuH3iwvNOyKVAj0yG/Evhi9VQJzhPtc0qSaqdqwb4N FJ40UBTtxWQMHQey68ObZz1hludxndmoHuPYO37jq3Ffz/xEw8BWJYJaBQS54zRu CwMa12pLXlcbOCxQD8MstdVDRbVGHZbTdGzyE5A8jeBXiAviFHKLiqtqdcg1A1gX mktChzXGVI5R3jyI4I0acWRnwKDvVMavKeDGeQjlmRK4c/uYYUqI5Tb7VRmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaOwfgi39M2MIsZ3FkaLsbxblEswHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO6qm+LOJH1PYNQSI6Ko+eF5Bj9P/STmjTS 5VYQEL0AAelrNcWCAtNW4wtEpetE0AQOm7IvFIJSBUalAxtAWtHwPHRlJEsyZmlo OdxXYMONHYjUpiWmlNBakZcYh9U723oYjPHSHOfTqxpcVoaDqmKJuZQzpctwhDlM Zy2lM8FhcK2N4G/VCboHGNznKG1+D8kvaHl8AqHDnLjn65WnoF2fPLHOgAo+lh5r 4/vAz1f6GfJzUjW5MZme5kRb3qbuPQ0UYjGh+yA1I102uAcLfGC9bxiNCg+PljM7 XtiITAsSqgc7XmN+Kp5CVPN1M3mm/9l6bCtfo+UUNDt4tfDYwac= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:23 2026 by rpki-client