$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: HI4PtR/JVwt0Vga8AXrCaLBKlEwdmLtFwXyxH6y2MRk= Subject key identifier: 7A:21:C4:51:77:E6:F9:5A:79:9D:27:E5:0E:55:46:32:ED:F1:DE:1C Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 3DE900FE111DE06CEFA90E219EA2C993BE22E1AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 0127 Signing time: Tue 21 Apr 2026 13:11:30 +0000 Manifest this update: Tue 21 Apr 2026 13:06:30 +0000 Manifest next update: Fri 24 Apr 2026 15:49:30 +0000 Files and hashes: 1: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: o+d+gE4ZKJK+hiPASfmjoLAkxzSGGtZNo7hARRKUsCw=) 2: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e9:00:fe:11:1d:e0:6c:ef:a9:0e:21:9e:a2:c9:93:be:22:e1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Apr 21 13:06:30 2026 GMT Not After : Apr 24 15:49:30 2026 GMT Subject: CN=7A21C45177E6F95A799D27E50E554632EDF1DE1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:1f:c5:31:d4:12:df:5f:21:05:51:dd:a7: 6b:14:e3:ed:df:31:aa:71:f9:d4:23:13:2a:2d:ff: 6f:47:d4:9e:48:c7:27:ae:e9:1a:f1:85:59:2a:0d: 8c:28:cb:de:bc:66:e5:a4:96:34:5e:c2:60:b6:60: 8d:7a:0d:3f:ed:77:3a:0c:13:79:56:f8:83:11:d2: 55:4e:82:b5:2b:c7:e9:33:24:62:7c:31:a2:65:58: 3a:ec:6e:8f:8f:43:9b:19:aa:5c:7a:bb:b3:46:71: 1e:c4:94:07:0a:43:4a:0e:9f:92:c4:97:82:23:a8: 1d:9c:a3:f9:25:fc:c2:53:c2:ad:75:d4:84:b5:44: 9e:c2:0f:5a:0f:f2:cf:d0:70:e4:b6:d1:90:02:9a: 37:e0:46:d1:78:e8:a9:12:5a:88:a7:e6:f7:89:0a: 4b:76:db:a9:b2:71:5d:04:03:f2:e3:0c:f4:2b:be: 94:6b:db:f1:57:0a:b9:22:c2:49:b1:7e:be:18:0d: 0d:d0:03:aa:eb:89:fb:ca:f3:ce:3d:9c:e2:b6:29: 13:bb:37:be:8a:98:41:68:cf:09:46:47:f5:0d:df: 98:60:38:88:20:f3:02:bf:eb:1a:d0:23:ef:24:27: da:5b:8e:99:90:35:9c:cf:d9:48:7b:59:4f:50:70: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:21:C4:51:77:E6:F9:5A:79:9D:27:E5:0E:55:46:32:ED:F1:DE:1C X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:de:0b:b2:ca:8c:a7:06:45:af:3d:2c:44:dd:63:27:f7:67: ab:dd:5a:49:49:8d:aa:ac:11:08:35:42:5a:d4:d8:bc:09:10: 85:13:fc:92:99:d9:08:80:d9:de:34:72:0a:54:a6:e5:3f:e8: 3f:41:ef:66:f6:95:7c:85:c9:a2:1f:0e:5a:d3:64:a3:69:f6: 93:30:b4:7c:b6:20:1c:5b:f9:ec:9b:f1:64:f5:b8:b7:85:17: 75:a3:2d:3f:d5:89:1e:56:77:9d:8c:3b:ba:1c:23:0d:19:c8: 0d:d5:f5:a1:ff:1f:e6:a5:22:ee:ce:03:cc:ca:53:45:f7:ef: ca:7f:de:05:c0:19:16:71:83:61:27:aa:f1:3b:5b:63:97:45: f9:56:21:4d:d6:0f:66:3a:69:6c:31:f3:da:0c:f9:c6:b8:b8: 8a:f3:af:c1:a3:ab:8a:53:b7:1f:c9:2b:76:04:e7:28:80:6a: 97:9d:3e:3e:04:4c:cd:39:5a:87:a5:14:a8:af:87:33:56:fa: c0:8a:0e:ad:6f:bb:20:a9:fb:47:5d:49:d0:a4:02:e3:fc:25: 56:33:07:34:e8:01:15:38:ad:9a:3d:a3:51:f1:91:a2:4e:36: 86:48:4e:d9:11:24:e5:df:b1:9c:f0:e1:c5:1c:b2:c5:5d:56: d7:06:82:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPekA/hEd4GzvqQ4hnqLJk74i4a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNjA0MjExMzA2MzBaFw0yNjA0MjQxNTQ5MzBaMDMxMTAvBgNV BAMTKDdBMjFDNDUxNzdFNkY5NUE3OTlEMjdFNTBFNTU0NjMyRURGMURFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhB/FMdQS318hBVHdp2sU4+3f Mapx+dQjEyot/29H1J5Ixyeu6RrxhVkqDYwoy968ZuWkljRewmC2YI16DT/tdzoM E3lW+IMR0lVOgrUrx+kzJGJ8MaJlWDrsbo+PQ5sZqlx6u7NGcR7ElAcKQ0oOn5LE l4IjqB2co/kl/MJTwq111IS1RJ7CD1oP8s/QcOS20ZACmjfgRtF46KkSWoin5veJ Ckt226mycV0EA/LjDPQrvpRr2/FXCrkiwkmxfr4YDQ3QA6rrifvK8849nOK2KRO7 N76KmEFozwlGR/UN35hgOIgg8wK/6xrQI+8kJ9pbjpmQNZzP2Uh7WU9QcJE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeiHEUXfm+Vp5nSflDlVGMu3x3hwwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPeC7LKjKcGRa89LETdYyf3Z6vdWklJjaqs EQg1QlrU2LwJEIUT/JKZ2QiA2d40cgpUpuU/6D9B72b2lXyFyaIfDlrTZKNp9pMw tHy2IBxb+eyb8WT1uLeFF3WjLT/ViR5Wd52MO7ocIw0ZyA3V9aH/H+alIu7OA8zK U0X378p/3gXAGRZxg2EnqvE7W2OXRflWIU3WD2Y6aWwx89oM+ca4uIrzr8Gjq4pT tx/JK3YE5yiAapedPj4ETM05WoelFKivhzNW+sCKDq1vuyCp+0ddSdCkAuP8JVYz BzToARU4rZo9o1HxkaJONoZITtkRJOXfsZzw4cUcssVdVtcGglE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:53 2026 by rpki-client