$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: qJzuky1jVEnVGIp5zmKdY48F2NH5VEpO2hI802XFcAo= Subject key identifier: 49:AA:22:E5:02:38:83:FB:28:11:81:06:7C:37:7B:5B:33:5A:26:BD Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 08001740E6CC9396AF6A53BCB7008B0949DA91D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 0245 Signing time: Mon 20 Apr 2026 14:22:25 +0000 Manifest this update: Mon 20 Apr 2026 14:17:25 +0000 Manifest next update: Thu 23 Apr 2026 21:19:25 +0000 Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: QDAwvQ1hdKuHKxbT7Sy46FhPmsC/JtmtTWaEO15yTlo=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:00:17:40:e6:cc:93:96:af:6a:53:bc:b7:00:8b:09:49:da:91:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Apr 20 14:17:25 2026 GMT Not After : Apr 23 21:19:25 2026 GMT Subject: CN=49AA22E5023883FB281181067C377B5B335A26BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:51:de:cd:aa:34:6c:ea:03:f3:d0:0c:f2: 5d:af:1b:4f:55:d7:fa:4e:e1:63:5b:11:d4:be:95: f8:37:f9:d2:4c:14:20:0a:e5:d6:0a:0c:11:b0:e0: ed:c4:82:29:ce:fb:54:92:58:72:cb:17:4e:84:49: 43:42:97:7f:cd:da:a7:24:0b:69:19:de:d5:4e:5a: 34:d5:a2:5f:69:0b:40:3a:91:8e:79:b2:02:5d:27: 5a:d2:90:1c:66:a7:d5:2b:34:52:6c:cc:0c:9a:f9: 8a:84:3f:e6:9b:cf:53:be:fb:db:92:71:6f:18:6e: 6b:70:c7:aa:c0:5b:00:15:a4:70:36:73:21:d5:d6: dd:83:c6:7a:3d:a5:fa:11:c2:e9:50:59:19:da:a5: 52:a9:21:dd:7a:e5:ad:64:b4:31:ba:e0:27:c6:28: 98:17:99:f4:dc:1d:55:71:c9:cd:c9:20:a0:2b:c2: 27:87:ef:f1:16:79:fc:03:79:5d:9e:14:d2:ab:b3: f1:13:7b:54:95:d5:a8:05:16:81:84:bf:fb:b2:23: c7:83:b1:e4:50:37:fd:74:ac:cb:91:99:53:3b:38: c8:a2:9b:cf:cf:2c:f6:37:d2:f4:3d:f6:2d:6f:25: 6f:5d:2b:91:09:a1:5a:7f:80:8b:52:2e:a4:88:45: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:22:E5:02:38:83:FB:28:11:81:06:7C:37:7B:5B:33:5A:26:BD X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:c2:8f:2a:b6:04:78:d2:19:f0:9b:71:f0:f3:24:52:90: db:cf:86:16:ad:40:89:d4:5e:a3:de:a5:0b:e3:d0:f6:c3:b4: 83:8f:fc:42:73:a6:a6:68:04:3d:81:62:53:9c:1f:fb:60:b6: 6a:50:bf:20:39:09:1a:86:08:24:c0:55:f6:bc:d1:17:c8:a9: 0a:f9:b8:c9:4a:cc:46:88:13:37:9e:bd:8f:a8:12:46:68:12: 68:d9:a3:0f:2c:20:37:9b:82:7c:dd:eb:0e:ea:f1:60:74:1f: 79:6e:f4:30:b6:df:26:f6:f9:5b:e3:ee:d9:61:9f:c9:ea:c7: 5f:a5:e6:99:7c:67:c7:9c:ae:86:c0:a1:5b:bb:6a:06:8c:55: 80:f7:1f:9f:bf:e0:fd:51:d9:d5:2a:60:84:77:98:d6:3b:ca: fc:1a:dc:16:3c:f4:a7:03:2a:67:05:2c:cf:0b:88:23:43:b3: 41:aa:9c:96:6c:24:0f:7e:78:21:52:5d:b5:2d:d4:31:b9:d7: b5:31:5b:8c:12:01:12:d9:66:7d:6f:32:16:23:95:44:cf:fd: 0c:20:29:b2:a1:67:b4:f8:18:b1:da:84:4f:8c:2b:52:c4:ae: c3:25:8b:3c:ab:c9:ed:b1:4a:39:74:7f:85:7a:74:7a:80:1c: bb:02:c7:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAAXQObMk5avalO8twCLCUnakdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNjA0MjAxNDE3MjVaFw0yNjA0MjMyMTE5MjVaMDMxMTAvBgNV BAMTKDQ5QUEyMkU1MDIzODgzRkIyODExODEwNjdDMzc3QjVCMzM1QTI2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmlHezao0bOoD89AM8l2vG09V 1/pO4WNbEdS+lfg3+dJMFCAK5dYKDBGw4O3EginO+1SSWHLLF06ESUNCl3/N2qck C2kZ3tVOWjTVol9pC0A6kY55sgJdJ1rSkBxmp9UrNFJszAya+YqEP+abz1O++9uS cW8Ybmtwx6rAWwAVpHA2cyHV1t2Dxno9pfoRwulQWRnapVKpId165a1ktDG64CfG KJgXmfTcHVVxyc3JIKArwieH7/EWefwDeV2eFNKrs/ETe1SV1agFFoGEv/uyI8eD seRQN/10rMuRmVM7OMiim8/PLPY30vQ99i1vJW9dK5EJoVp/gItSLqSIRc0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSaoi5QI4g/soEYEGfDd7WzNaJr0wHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3pwo8qtgR40hnwm3Hw8yRSkNvPhhatQInU XqPepQvj0PbDtIOP/EJzpqZoBD2BYlOcH/tgtmpQvyA5CRqGCCTAVfa80RfIqQr5 uMlKzEaIEzeevY+oEkZoEmjZow8sIDebgnzd6w7q8WB0H3lu9DC23yb2+Vvj7tlh n8nqx1+l5pl8Z8ecrobAoVu7agaMVYD3H5+/4P1R2dUqYIR3mNY7yvwa3BY89KcD KmcFLM8LiCNDs0GqnJZsJA9+eCFSXbUt1DG517UxW4wSARLZZn1vMhYjlUTP/Qwg KbKhZ7T4GLHahE+MK1LErsMlizyrye2xSjl0f4V6dHqAHLsCx7M= -----END CERTIFICATE-----Generated at Wed Apr 22 08:55:04 2026 by rpki-client