$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: j4BNGF0pudCyS8Zovkt+Pnv+dnW5wbGPMm6mhRPOoBM= Subject key identifier: E4:3D:52:40:EB:97:2A:21:9F:D3:CA:9B:FC:1C:9D:73:46:4E:24:37 Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 4960A31B08A23E10BB208BCE4F7ADB8852C3E062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 0245 Signing time: Tue 21 Apr 2026 20:51:44 +0000 Manifest this update: Tue 21 Apr 2026 20:46:44 +0000 Manifest next update: Fri 24 Apr 2026 22:42:44 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: msyFABQvVqtY5q07qzalHnLXoVJ3Q7kwJz+dcbj1dyo=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 22:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:60:a3:1b:08:a2:3e:10:bb:20:8b:ce:4f:7a:db:88:52:c3:e0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Apr 21 20:46:44 2026 GMT Not After : Apr 24 22:42:44 2026 GMT Subject: CN=E43D5240EB972A219FD3CA9BFC1C9D73464E2437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0e:88:9a:81:ff:25:99:6a:b4:9d:69:d9:1b: 8a:cf:2f:c4:ec:32:c4:62:4b:47:5e:64:32:3b:a0: a6:44:b7:74:a8:e0:76:be:62:3a:5d:c9:c1:1d:8c: 71:69:24:c6:95:c1:a9:8a:41:77:e1:ca:d2:f4:6e: 62:29:cf:44:c4:99:78:b1:df:f0:59:1a:91:b8:91: 59:1f:1a:0a:e5:a7:c1:76:26:df:a4:59:b4:7f:ca: 4c:09:9d:2a:91:ac:bc:e9:c7:2f:49:d7:f7:ec:f2: ad:c4:d6:c0:67:29:e8:50:b7:c1:26:91:a1:c4:0b: d3:40:86:5b:8a:9c:2b:8f:38:9d:b6:8a:7a:b4:42: 3a:52:0a:26:9f:44:06:f5:7e:ac:ec:62:6b:ed:2d: 49:c6:25:ca:0d:4d:0a:11:cf:a5:ae:cb:16:b7:fc: fd:ea:30:cf:52:3d:f4:e6:f9:fd:52:27:4a:77:ad: c6:fa:0d:4c:2d:8a:d6:84:4c:42:44:30:23:92:7c: e8:d8:84:c9:a0:50:e6:a5:bb:b0:06:b7:e1:fc:1a: d3:52:73:a9:97:9f:80:e8:2c:95:aa:98:3b:78:3e: 5f:67:08:8e:eb:33:79:c8:7b:20:c1:1a:e6:ad:dc: 71:56:91:2e:d7:e4:87:5d:cd:04:04:81:51:c2:f8: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:52:40:EB:97:2A:21:9F:D3:CA:9B:FC:1C:9D:73:46:4E:24:37 X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:58:59:01:46:9b:8b:4b:de:70:e2:9a:65:85:eb:6c:ae:e9: d3:19:b4:a7:cf:b3:67:97:1d:06:86:1b:9f:2d:8c:a0:bb:99: b5:58:43:9e:ee:e9:de:b7:ba:45:dd:14:c4:3d:09:72:25:9a: da:c0:af:73:fa:3c:7a:bc:81:dd:f3:51:56:03:7b:96:ad:11: f4:94:f9:0e:5e:e7:e7:20:3f:be:32:7f:36:54:a6:0f:39:15: 03:fd:a3:74:50:f7:f5:65:38:d4:d2:4c:26:3e:44:d5:a7:40: 44:69:6a:4c:27:66:54:60:d7:e5:ec:8b:08:b7:71:23:66:16: 25:7a:32:85:31:5c:75:af:6c:7e:3e:68:c9:b2:a9:a7:6b:64: e2:3a:ad:f2:1d:2f:d7:fc:29:84:3e:58:69:35:10:35:31:54: 1c:b3:c9:1c:a6:dd:56:f4:74:d5:43:8d:eb:6c:e3:a5:8a:71: ca:a8:84:aa:91:cc:b4:d7:e0:da:ed:06:7a:d4:0a:cf:89:d7: f1:5b:63:2e:90:e8:52:06:31:b9:3a:a5:11:d5:15:94:18:9c: de:33:b0:f3:4d:12:52:fd:e3:b9:77:81:e4:3e:21:da:2c:05: 5b:b4:2f:50:10:52:72:c1:b0:bc:69:70:61:2d:4c:08:fb:8d: 08:80:00:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWCjGwiiPhC7IIvOT3rbiFLD4GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNjA0MjEyMDQ2NDRaFw0yNjA0MjQyMjQyNDRaMDMxMTAvBgNV BAMTKEU0M0Q1MjQwRUI5NzJBMjE5RkQzQ0E5QkZDMUM5RDczNDY0RTI0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzDoiagf8lmWq0nWnZG4rPL8Ts MsRiS0deZDI7oKZEt3So4Ha+YjpdycEdjHFpJMaVwamKQXfhytL0bmIpz0TEmXix 3/BZGpG4kVkfGgrlp8F2Jt+kWbR/ykwJnSqRrLzpxy9J1/fs8q3E1sBnKehQt8Em kaHEC9NAhluKnCuPOJ22inq0QjpSCiafRAb1fqzsYmvtLUnGJcoNTQoRz6Wuyxa3 /P3qMM9SPfTm+f1SJ0p3rcb6DUwtitaETEJEMCOSfOjYhMmgUOalu7AGt+H8GtNS c6mXn4DoLJWqmDt4Pl9nCI7rM3nIeyDBGuat3HFWkS7X5IddzQQEgVHC+PwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5D1SQOuXKiGf08qb/Bydc0ZOJDcwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9YWQFGm4tL3nDimmWF62yu6dMZtKfPs2eX HQaGG58tjKC7mbVYQ57u6d63ukXdFMQ9CXIlmtrAr3P6PHq8gd3zUVYDe5atEfSU +Q5e5+cgP74yfzZUpg85FQP9o3RQ9/VlONTSTCY+RNWnQERpakwnZlRg1+Xsiwi3 cSNmFiV6MoUxXHWvbH4+aMmyqadrZOI6rfIdL9f8KYQ+WGk1EDUxVByzyRym3Vb0 dNVDjets46WKccqohKqRzLTX4NrtBnrUCs+J1/FbYy6Q6FIGMbk6pRHVFZQYnN4z sPNNElL947l3geQ+IdosBVu0L1AQUnLBsLxpcGEtTAj7jQiAAE8= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:23 2026 by rpki-client