$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: P1/G3xsF5Cd6OahvowkKq0bXg5jVfZMxrHIRaCVYJAM= Subject key identifier: 0A:87:D2:65:F3:B3:90:A7:0E:18:38:30:43:67:A6:13:6B:DA:49:C3 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 25C67F5FC5D8DFB44AE5F218805405F4326459D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: 0126 Signing time: Tue 21 Apr 2026 01:32:22 +0000 Manifest this update: Tue 21 Apr 2026 01:27:22 +0000 Manifest next update: Fri 24 Apr 2026 07:12:22 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) 2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: tuw1f/Ma98EBWngsc+EqwIiUzJPTY0YiKDlMs30jKfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c6:7f:5f:c5:d8:df:b4:4a:e5:f2:18:80:54:05:f4:32:64:59:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Apr 21 01:27:22 2026 GMT Not After : Apr 24 07:12:22 2026 GMT Subject: CN=0A87D265F3B390A70E1838304367A6136BDA49C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:a1:be:25:cd:e3:a0:3e:94:34:3d:4f:18: e5:43:b8:d1:57:2d:1f:c8:62:29:76:e5:6c:3e:44: 03:3c:89:33:d7:56:43:0e:51:d0:f0:5f:54:c8:0a: 1f:70:6c:8d:eb:43:5e:b9:4b:69:a1:a9:09:25:54: 5b:d9:3d:50:b5:01:e7:9c:dc:88:d7:dc:9d:28:59: 28:49:20:54:49:74:83:f3:9b:3a:ba:89:61:66:23: 65:12:80:14:ef:cb:ee:73:19:7f:6d:1b:31:15:01: c7:c5:3f:b8:7e:bd:32:eb:84:10:eb:d3:42:e4:31: 62:46:42:78:4a:1b:8b:19:c3:4b:e4:7d:3e:10:f2: 9c:b0:c4:b2:a8:55:d5:c7:9d:71:bb:c4:60:6a:69: f5:d2:c7:a9:5c:30:12:03:48:9a:73:e2:30:24:57: 71:ae:ae:cf:82:6a:5d:cc:e3:08:d4:77:65:39:e6: d1:db:d8:3d:ee:8c:56:7f:df:88:00:c6:f4:8d:69: 2f:25:83:b5:9f:5b:e1:a0:37:2b:f9:43:7a:2f:1b: b5:52:ba:88:b8:dc:f1:28:ad:e7:80:16:e4:c1:1e: 06:f1:d8:6b:d8:75:26:8d:a8:5e:c0:b8:e2:b8:d4: fb:39:90:16:22:82:98:67:1f:82:f5:cf:71:ac:fb: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:D2:65:F3:B3:90:A7:0E:18:38:30:43:67:A6:13:6B:DA:49:C3 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cb:5d:b0:ed:cd:bc:e0:be:57:58:6b:5c:5d:88:18:fc:f5: 4f:f6:92:78:df:94:5d:47:25:0d:7f:8d:4c:8d:e7:cb:46:c0: 79:79:ec:fe:37:ae:d8:73:fe:f6:c3:d5:a3:ba:9b:1a:79:75: 51:16:33:e3:a2:03:3c:37:55:07:db:dc:54:d9:2a:77:6c:49: 02:fe:51:7f:c0:4b:ca:a7:d4:1f:78:33:92:aa:d7:60:07:2c: 3b:b6:f4:cd:64:26:62:56:00:68:d7:a6:b8:1d:a8:28:8a:26: 68:aa:dc:71:24:64:81:2a:dc:f7:78:58:13:ac:83:8b:e6:0a: 31:e8:c5:96:32:ea:40:a2:cb:e2:16:7d:e5:9c:4d:24:7e:22: df:b8:75:55:9a:8b:e8:35:f2:b9:0f:ca:a3:96:bf:7d:8c:b3: 41:35:e7:26:81:12:cf:fc:c2:d4:17:4a:89:f1:21:fc:05:3a: 6e:b1:75:9e:3f:dd:3f:c6:75:05:4d:7a:03:14:bb:36:07:b5: 14:14:cf:0e:b2:39:ee:0e:ec:8f:bf:67:51:c4:80:7b:49:22: 59:b6:ce:fe:04:75:e1:d9:52:92:12:a0:f9:ce:3f:1c:93:54: 2c:aa:9a:6f:ae:ee:3d:ba:3e:39:b5:d6:e2:68:82:49:b0:71: 0d:40:8a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcZ/X8XY37RK5fIYgFQF9DJkWdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNjA0MjEwMTI3MjJaFw0yNjA0MjQwNzEyMjJaMDMxMTAvBgNV BAMTKDBBODdEMjY1RjNCMzkwQTcwRTE4MzgzMDQzNjdBNjEzNkJEQTQ5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+aG+Jc3joD6UND1PGOVDuNFX LR/IYil25Ww+RAM8iTPXVkMOUdDwX1TICh9wbI3rQ165S2mhqQklVFvZPVC1Aeec 3IjX3J0oWShJIFRJdIPzmzq6iWFmI2USgBTvy+5zGX9tGzEVAcfFP7h+vTLrhBDr 00LkMWJGQnhKG4sZw0vkfT4Q8pywxLKoVdXHnXG7xGBqafXSx6lcMBIDSJpz4jAk V3Gurs+Cal3M4wjUd2U55tHb2D3ujFZ/34gAxvSNaS8lg7WfW+GgNyv5Q3ovG7VS uoi43PEoreeAFuTBHgbx2GvYdSaNqF7AuOK41Ps5kBYigphnH4L1z3Gs+67vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCofSZfOzkKcOGDgwQ2emE2vaScMwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzLXbDtzbzgvldYa1xdiBj89U/2knjflF1H JQ1/jUyN58tGwHl57P43rthz/vbD1aO6mxp5dVEWM+OiAzw3VQfb3FTZKndsSQL+ UX/AS8qn1B94M5Kq12AHLDu29M1kJmJWAGjXprgdqCiKJmiq3HEkZIEq3Pd4WBOs g4vmCjHoxZYy6kCiy+IWfeWcTSR+It+4dVWai+g18rkPyqOWv32Ms0E15yaBEs/8 wtQXSonxIfwFOm6xdZ4/3T/GdQVNegMUuzYHtRQUzw6yOe4O7I+/Z1HEgHtJIlm2 zv4EdeHZUpISoPnOPxyTVCyqmm+u7j26Pjm11uJogkmwcQ1AihQ= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:53 2026 by rpki-client