$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: ZVm4lM6+RNAGmgi1w8eTke7uLbxHGYMfUnl22+OimvQ= Subject key identifier: 42:D6:D7:1F:41:4F:F0:5D:4B:93:6E:14:28:91:67:77:03:6A:AD:AF Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 359236AA79BD7D69ED86E077FBBBB7E3A72513ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0370 Signing time: Mon 20 Apr 2026 21:31:40 +0000 Manifest this update: Mon 20 Apr 2026 21:26:40 +0000 Manifest next update: Fri 24 Apr 2026 06:59:40 +0000 Files and hashes: 1: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: fpl0a4r6nhslNTmIpxyOL619/tuR+VHxUfsgmrJaOiQ=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:92:36:aa:79:bd:7d:69:ed:86:e0:77:fb:bb:b7:e3:a7:25:13:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Apr 20 21:26:40 2026 GMT Not After : Apr 24 06:59:40 2026 GMT Subject: CN=42D6D71F414FF05D4B936E1428916777036AADAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:b8:fa:f5:e7:98:1c:5d:b8:ef:65:c9:bc: 12:20:1d:4d:24:42:7a:2d:fe:ea:d4:f6:1b:6e:64: d7:e3:44:fa:6b:36:0b:ab:4a:6e:d3:99:22:07:90: 4f:a7:2a:b0:d3:2f:6c:8c:c9:ca:c5:db:d4:76:4d: ad:b3:ea:1c:09:cf:2c:64:33:1e:fd:54:14:9d:9d: 14:71:2f:5c:cd:ba:ad:bf:f5:ab:5b:1c:8c:35:85: 18:67:36:29:f3:21:24:b3:eb:b2:96:a8:c2:77:12: 06:21:a2:58:11:39:45:68:ee:2e:72:77:0d:d7:d8: 6a:8f:ab:aa:b2:60:4b:84:03:2a:a0:a9:6c:d8:c4: 13:91:a2:22:56:c5:0d:7a:9b:7b:d5:06:bd:a5:cd: 2c:f3:74:4a:8c:64:37:a6:f8:f0:ea:7e:3b:1c:f2: 3f:b5:d0:74:db:b6:19:f0:bc:94:5a:f6:0b:86:2b: d5:2f:19:be:d3:51:4d:83:e8:24:b6:d6:4c:57:23: 61:1f:cf:0b:1e:f9:74:4b:87:7d:b0:6a:ae:8f:08: c8:9b:8b:53:b9:e5:86:02:6d:4e:2d:16:1e:d5:d2: 70:31:09:9a:5d:37:b9:55:d6:fc:a6:95:ea:01:87: de:1b:c0:95:34:76:75:f4:0a:e3:65:fc:9d:53:b9: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D6:D7:1F:41:4F:F0:5D:4B:93:6E:14:28:91:67:77:03:6A:AD:AF X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:3b:09:91:f3:db:05:ec:5a:c1:f6:20:e3:11:b5:cd:83:89: c0:76:60:4f:20:b4:81:e1:18:d6:ee:c4:fc:53:fc:65:81:c6: ae:38:60:d7:f2:fd:41:26:63:d7:fb:ce:ab:48:c0:5b:a4:02: ef:7b:4f:2c:4a:19:80:a8:e1:68:1d:ef:04:8f:6e:a6:12:18: c8:0f:2b:63:2a:ea:b2:ed:25:d2:7f:4d:4a:4b:09:10:93:fd: 69:37:2d:19:13:bb:65:3b:18:ad:67:e8:d2:25:75:4d:ad:54: f6:1b:02:1b:58:2a:02:e1:5f:51:66:0f:b7:28:a5:35:a5:a1: 25:73:f3:d2:f2:56:2a:c4:04:72:bb:c3:b6:6f:4a:50:7d:9d: 15:28:09:28:bb:fc:17:8b:a6:b9:1d:e4:23:43:31:fc:76:63: d1:ad:e2:75:46:37:34:ad:22:06:4d:b7:0e:6a:c7:6c:53:2d: dc:2e:9c:b5:25:7e:46:df:a1:84:3d:3e:25:43:dc:0e:06:3e: 9d:9c:6b:bd:09:fc:1d:2b:b1:2a:2f:ea:58:e3:78:d4:1d:f0: 9a:0e:b4:a0:23:08:26:d8:58:97:ac:30:91:3b:88:f9:b8:6d: ac:e9:b5:c7:62:24:9d:c4:e4:5a:98:29:ca:09:5f:20:70:4e: 1a:b9:8e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZI2qnm9fWnthuB3+7u346clE+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNjA0MjAyMTI2NDBaFw0yNjA0MjQwNjU5NDBaMDMxMTAvBgNV BAMTKDQyRDZENzFGNDE0RkYwNUQ0QjkzNkUxNDI4OTE2Nzc3MDM2QUFEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllrj69eeYHF2472XJvBIgHU0k Qnot/urU9htuZNfjRPprNgurSm7TmSIHkE+nKrDTL2yMycrF29R2Ta2z6hwJzyxk Mx79VBSdnRRxL1zNuq2/9atbHIw1hRhnNinzISSz67KWqMJ3EgYholgROUVo7i5y dw3X2GqPq6qyYEuEAyqgqWzYxBORoiJWxQ16m3vVBr2lzSzzdEqMZDem+PDqfjsc 8j+10HTbthnwvJRa9guGK9UvGb7TUU2D6CS21kxXI2Efzwse+XRLh32waq6PCMib i1O55YYCbU4tFh7V0nAxCZpdN7lV1vymleoBh94bwJU0dnX0CuNl/J1Tue7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtbXH0FP8F1Lk24UKJFndwNqra8wHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMY7CZHz2wXsWsH2IOMRtc2DicB2YE8gtIHh GNbuxPxT/GWBxq44YNfy/UEmY9f7zqtIwFukAu97TyxKGYCo4Wgd7wSPbqYSGMgP K2Mq6rLtJdJ/TUpLCRCT/Wk3LRkTu2U7GK1n6NIldU2tVPYbAhtYKgLhX1FmD7co pTWloSVz89LyVirEBHK7w7ZvSlB9nRUoCSi7/BeLprkd5CNDMfx2Y9Gt4nVGNzSt IgZNtw5qx2xTLdwunLUlfkbfoYQ9PiVD3A4GPp2ca70J/B0rsSov6ljjeNQd8JoO tKAjCCbYWJesMJE7iPm4bazptcdiJJ3E5FqYKcoJXyBwThq5jhc= -----END CERTIFICATE-----Generated at Wed Apr 22 15:36:04 2026 by rpki-client