$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: A1gGTyJ04dpPlx9x98F3EYCukQi+0pUQ1wPFo2cd40w= Subject key identifier: F4:BF:15:6B:C4:90:B9:DE:59:DD:FB:41:A7:DF:0C:4A:B7:2E:BF:39 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 254A3A63DCF1FA63AB1F89FE16213BD4CE7B207A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: F3 Signing time: Mon 20 Apr 2026 07:51:28 +0000 Manifest this update: Mon 20 Apr 2026 07:46:28 +0000 Manifest next update: Thu 23 Apr 2026 16:36:28 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) 2: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 3: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: T9c72zgMNHNPkQpQP3JHR3IHmzzj4+Nqh2RzdyxHB1M=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4a:3a:63:dc:f1:fa:63:ab:1f:89:fe:16:21:3b:d4:ce:7b:20:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Apr 20 07:46:28 2026 GMT Not After : Apr 23 16:36:28 2026 GMT Subject: CN=F4BF156BC490B9DE59DDFB41A7DF0C4AB72EBF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:30:9d:6d:f5:d6:1f:3e:3f:85:ed:1f:91: 6b:6f:14:8e:f1:e1:91:57:b1:24:f7:55:3d:8c:4a: d7:cf:ad:c1:f5:5e:f3:32:7d:61:b1:9a:79:de:14: b6:45:f0:f3:dd:75:2c:f4:11:2b:f2:4d:d8:27:cd: f9:4e:46:67:b6:cb:72:db:e9:c7:06:78:ca:af:31: 72:9c:f9:0a:c4:63:13:3a:67:76:2b:e9:90:01:1a: a3:36:04:e9:c6:d3:6c:a8:62:97:0c:e4:b2:04:77: e1:bd:99:32:fb:77:df:4a:c0:07:a6:36:50:d0:c3: 14:4d:8a:d8:6e:53:f8:95:21:2b:63:a7:3b:b0:ba: 7a:99:b7:6d:5c:e0:f5:55:a3:87:db:f4:2e:3d:6a: 9a:cc:d4:cb:1c:7e:c3:ca:fe:27:00:ad:c2:b4:92: fc:4f:78:cc:81:25:9d:17:2f:f7:88:91:64:f0:63: 40:16:2a:b4:cb:31:6f:5e:93:aa:25:98:23:24:0b: e0:24:8d:ef:63:1e:99:34:29:80:a4:4b:66:c7:c7: 99:54:16:29:12:03:7b:1b:6a:24:fe:35:10:ba:e4: 15:ed:0d:ce:2d:88:93:bd:c8:9a:df:09:97:93:13: 0c:53:36:33:8c:96:eb:c1:e1:05:c1:5b:68:4c:6f: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BF:15:6B:C4:90:B9:DE:59:DD:FB:41:A7:DF:0C:4A:B7:2E:BF:39 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:60:8c:bb:9a:14:b8:c0:33:90:a6:6f:8b:da:2d:70:01:0c: ae:66:14:f7:90:e7:b8:f5:3d:3b:de:6c:76:f3:45:0a:a6:36: ef:42:6c:3c:2f:cc:01:c8:42:04:af:e6:db:79:a8:de:64:03: 00:60:84:23:d0:4e:da:ab:ca:4b:fa:98:ee:53:80:f5:82:e1: 70:bf:1a:a6:fe:17:12:ad:ff:29:54:f3:e4:50:f1:a4:aa:ad: 3e:3f:be:c9:2b:a3:7f:69:d8:ad:b8:b5:71:01:20:44:70:be: f9:d8:7e:9b:5c:de:a2:58:b3:59:12:be:fa:b6:2d:5a:62:cb: 14:7b:16:c6:57:65:77:54:4a:41:56:cc:77:72:fa:18:d7:86: 2b:c7:48:7b:b2:c6:f3:40:69:7f:ee:50:15:15:d3:74:84:ba: 2b:39:63:c4:2d:dd:02:d2:10:c2:b6:2b:b5:53:aa:7c:b9:92: bf:f1:7b:08:8e:69:01:a8:4e:fe:6a:8b:ff:22:27:04:16:af: ec:4f:a9:0b:3c:3c:ab:5b:cd:cf:33:6f:00:22:d1:b2:d7:4e: 5c:98:f0:80:7d:b7:35:d2:bc:d3:c6:0b:1a:f0:bf:83:d6:6b: 2b:0a:2d:68:aa:af:7c:27:12:f6:3f:b5:e9:61:e0:1f:25:f0: 0a:9c:60:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUo6Y9zx+mOrH4n+FiE71M57IHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNjA0MjAwNzQ2MjhaFw0yNjA0MjMxNjM2MjhaMDMxMTAvBgNV BAMTKEY0QkYxNTZCQzQ5MEI5REU1OURERkI0MUE3REYwQzRBQjcyRUJGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrzCdbfXWHz4/he0fkWtvFI7x 4ZFXsST3VT2MStfPrcH1XvMyfWGxmnneFLZF8PPddSz0ESvyTdgnzflORme2y3Lb 6ccGeMqvMXKc+QrEYxM6Z3Yr6ZABGqM2BOnG02yoYpcM5LIEd+G9mTL7d99KwAem NlDQwxRNithuU/iVIStjpzuwunqZt21c4PVVo4fb9C49aprM1MscfsPK/icArcK0 kvxPeMyBJZ0XL/eIkWTwY0AWKrTLMW9ek6olmCMkC+Akje9jHpk0KYCkS2bHx5lU FikSA3sbaiT+NRC65BXtDc4tiJO9yJrfCZeTEwxTNjOMluvB4QXBW2hMb/x5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9L8Va8SQud5Z3ftBp98MSrcuvzkwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1gjLuaFLjAM5Cmb4vaLXABDK5mFPeQ57j1 PTvebHbzRQqmNu9CbDwvzAHIQgSv5tt5qN5kAwBghCPQTtqrykv6mO5TgPWC4XC/ Gqb+FxKt/ylU8+RQ8aSqrT4/vskro39p2K24tXEBIERwvvnYfptc3qJYs1kSvvq2 LVpiyxR7FsZXZXdUSkFWzHdy+hjXhivHSHuyxvNAaX/uUBUV03SEuis5Y8Qt3QLS EMK2K7VTqny5kr/xewiOaQGoTv5qi/8iJwQWr+xPqQs8PKtbzc8zbwAi0bLXTlyY 8IB9tzXSvNPGCxrwv4PWaysKLWiqr3wnEvY/telh4B8l8AqcYIU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:21 2026 by rpki-client