$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: BBKBESGhchnsSX/vkdh0HN6FFL1m8DvEso9XrNxnRKA= Subject key identifier: 25:D0:87:6A:5B:5B:22:8A:1A:04:5C:F1:5C:1A:6E:AA:9F:17:61:FE Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 0652A7DA1940FF449A4E83948954DA88542DDBD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 05A1 Signing time: Mon 27 Apr 2026 05:11:28 +0000 Manifest this update: Mon 27 Apr 2026 05:06:28 +0000 Manifest next update: Thu 30 Apr 2026 09:12:28 +0000 Files and hashes: 1: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 75E5/wNg1gW13NP4pidyseZpfPgC9bQlFJMQWGidUN4=) 2: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: 78N/7/lN6fFcNxTsBAhwu2aVo0YPMpRgQPsTAmxhqAM=) 3: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: Oz2Qeiz5xyOTL/MwYfZrBtOVufZJPKw0poJngZ0glFA=) 4: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 5: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: 0AnC19EXOug79ZBIk1vL3o/ukS94fX2nTpPrNo0q52k=) 6: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) 7: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: +XLAGZaO1CUhgIfOrcy+sNRJJiCj6bewjgriX63Ik2M=) 8: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=) 9: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 10: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 11: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: yc5NmKqgc087/1Q1aK0xzmJOjZX9anqvOxLY60HOjzI=) 12: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 09:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:52:a7:da:19:40:ff:44:9a:4e:83:94:89:54:da:88:54:2d:db:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Apr 27 05:06:28 2026 GMT Not After : Apr 30 09:12:28 2026 GMT Subject: CN=25D0876A5B5B228A1A045CF15C1A6EAA9F1761FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:27:6a:77:a1:5b:00:3c:0c:7b:87:84:b7: 83:c2:68:60:c2:d4:36:0b:0b:28:a3:9a:88:55:bb: 7c:c2:eb:d2:09:52:e3:79:93:fe:08:96:66:6e:f2: 5e:ff:04:d0:87:b2:8a:be:7b:36:06:3d:c4:63:a7: 11:d5:6c:6a:e3:5a:15:01:b6:dd:3c:6e:02:1c:70: 3e:51:4d:9e:ae:03:9c:9e:da:30:61:25:f4:9c:21: 32:ff:06:be:f1:4b:6e:28:8b:01:9e:ec:ec:f3:a5: 27:61:d8:19:c0:b9:c3:da:aa:44:17:0f:55:16:77: 6d:43:56:98:d6:a4:d8:af:e2:fa:ec:a7:e5:0a:9c: 4c:ac:17:80:ae:1d:d1:1e:ca:ae:e9:3d:e3:88:e1: fa:07:46:6f:0f:88:93:fb:a2:07:75:04:5f:6b:54: b6:d4:d0:20:f8:86:50:44:de:cc:50:e7:92:7e:28: 2b:09:9d:73:17:b7:21:4c:d1:bd:c1:9a:f9:d7:b9: 40:ca:de:af:de:7d:62:13:88:0b:12:4d:6c:9c:a6: c1:db:29:6c:8c:7f:37:31:e3:04:74:0d:c6:90:99: e4:a0:b2:5e:16:57:fa:44:2c:0b:70:83:6a:55:b8: 1a:87:c2:a7:ff:48:7a:e0:a4:ca:2c:0c:15:64:3d: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D0:87:6A:5B:5B:22:8A:1A:04:5C:F1:5C:1A:6E:AA:9F:17:61:FE X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:83:91:ca:5a:b0:4f:7c:76:ad:a9:73:01:5b:00:42:c4:98: 6a:44:a7:cc:d7:df:03:2c:7c:b4:20:ff:17:f4:4d:9b:e3:4d: 66:d2:98:4e:a1:30:70:ff:bb:ee:69:d9:fa:a6:2f:0f:82:4f: da:de:28:64:16:25:67:df:14:ae:98:68:fc:80:e3:ff:48:d1: 38:74:8d:21:55:4c:ee:27:d6:06:51:dd:60:cc:d7:7b:29:a4: c5:a6:35:89:7c:14:b3:6f:50:65:42:31:d7:b9:b3:95:38:82: 12:14:8b:7d:e0:7e:1b:99:7a:e3:4f:af:da:76:2c:ca:b1:0f: aa:7f:0f:c0:e6:a0:28:ec:b0:ff:6d:bf:d3:aa:61:ac:25:79: c9:0d:96:a6:03:6a:0a:8a:1b:5b:d8:aa:ef:fc:93:b3:57:1e: da:9f:9f:15:ef:7c:48:8c:17:33:e6:12:41:b1:d1:d1:71:8a: fe:34:ac:97:80:1e:0e:96:4e:73:74:b9:b8:ee:d5:ca:78:a2: 48:81:d3:6c:4e:b7:d6:38:e6:60:37:51:11:ac:f8:f9:15:17: 6e:43:e8:35:0d:18:a1:c6:a4:57:13:48:38:3e:c5:0f:99:53: 97:c7:26:ba:0d:07:f0:7b:ae:49:b8:02:7f:23:72:82:80:b3: 91:47:c7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlKn2hlA/0SaToOUiVTaiFQt29cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNjA0MjcwNTA2MjhaFw0yNjA0MzAwOTEyMjhaMDMxMTAvBgNV BAMTKDI1RDA4NzZBNUI1QjIyOEExQTA0NUNGMTVDMUE2RUFBOUYxNzYxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ISdqd6FbADwMe4eEt4PCaGDC 1DYLCyijmohVu3zC69IJUuN5k/4IlmZu8l7/BNCHsoq+ezYGPcRjpxHVbGrjWhUB tt08bgIccD5RTZ6uA5ye2jBhJfScITL/Br7xS24oiwGe7OzzpSdh2BnAucPaqkQX D1UWd21DVpjWpNiv4vrsp+UKnEysF4CuHdEeyq7pPeOI4foHRm8PiJP7ogd1BF9r VLbU0CD4hlBE3sxQ55J+KCsJnXMXtyFM0b3BmvnXuUDK3q/efWITiAsSTWycpsHb KWyMfzcx4wR0DcaQmeSgsl4WV/pELAtwg2pVuBqHwqf/SHrgpMosDBVkPfkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdCHaltbIooaBFzxXBpuqp8XYf4wHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGDkcpasE98dq2pcwFbAELEmGpEp8zX3wMs fLQg/xf0TZvjTWbSmE6hMHD/u+5p2fqmLw+CT9reKGQWJWffFK6YaPyA4/9I0Th0 jSFVTO4n1gZR3WDM13sppMWmNYl8FLNvUGVCMde5s5U4ghIUi33gfhuZeuNPr9p2 LMqxD6p/D8DmoCjssP9tv9OqYawleckNlqYDagqKG1vYqu/8k7NXHtqfnxXvfEiM FzPmEkGx0dFxiv40rJeAHg6WTnN0ubju1cp4okiB02xOt9Y45mA3URGs+PkVF25D 6DUNGKHGpFcTSDg+xQ+ZU5fHJroNB/B7rkm4An8jcoKAs5FHx8M= -----END CERTIFICATE-----Generated at Mon Apr 27 23:08:31 2026 by rpki-client