$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: rQLr9/K8VcGNtlHls32eZ3cvb2xnb9JBqPslNM8WFZI= Subject key identifier: 2E:92:EE:82:CD:2D:E4:E9:2E:0B:B4:DA:BE:8E:42:29:B8:49:FC:26 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 4A3CEB196B9860409E43336C7750A983B92440A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 0126 Signing time: Tue 21 Apr 2026 13:41:20 +0000 Manifest this update: Tue 21 Apr 2026 13:36:20 +0000 Manifest next update: Fri 24 Apr 2026 21:41:20 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: KNqb2nPjnPhAHR9CmRt3U+cUunEbK7O/QWOwb7epCXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 21:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3c:eb:19:6b:98:60:40:9e:43:33:6c:77:50:a9:83:b9:24:40:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Apr 21 13:36:20 2026 GMT Not After : Apr 24 21:41:20 2026 GMT Subject: CN=2E92EE82CD2DE4E92E0BB4DABE8E4229B849FC26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:28:27:e2:65:53:cc:6f:4f:a1:74:c8:4a: f5:18:b8:21:09:56:27:5f:84:e3:0d:d1:07:0d:f9: 8c:70:49:86:61:2f:46:7a:40:d9:73:93:c6:82:8d: ec:74:4a:50:59:70:05:17:fc:cd:aa:31:e1:4d:49: 80:72:ae:82:9b:0c:43:93:0c:5c:28:54:c4:68:51: 37:39:58:01:33:ad:9a:90:5d:cd:0d:0b:f6:6a:e2: c0:0a:18:e3:f4:7e:93:09:8b:ee:f3:de:ed:75:71: 9b:fd:f4:5a:ac:94:aa:19:de:8b:a6:07:61:5d:3e: f6:0c:ba:f8:cf:a8:81:a1:64:8f:9e:b6:a8:50:a5: e6:59:43:34:a0:21:76:48:3c:9b:aa:e0:82:50:68: 07:db:d6:49:78:91:1d:f6:49:8d:0a:08:9a:0d:f9: 66:e9:0c:42:10:74:1e:c5:50:61:d9:1d:74:a3:0b: 24:45:db:df:58:08:15:64:95:e2:fb:ab:2a:16:a2: da:06:bb:44:ee:83:ef:83:0d:f1:2e:46:79:c1:ae: dd:de:b9:23:67:a1:3a:ea:85:46:88:4a:70:1b:5d: bd:ee:ae:a9:35:49:ef:2a:c2:13:8e:d9:25:13:23: df:26:06:a7:e1:43:46:c9:09:c8:6c:03:b8:51:d8: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:EE:82:CD:2D:E4:E9:2E:0B:B4:DA:BE:8E:42:29:B8:49:FC:26 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1e:ca:3d:19:ca:7c:32:01:48:28:ed:03:9e:d4:e7:da:90: ca:9f:37:7b:09:30:10:86:a2:da:06:94:7e:01:ef:0b:a4:d9: 84:de:a0:59:b3:57:41:f1:75:93:55:e0:d2:7a:c6:47:0a:99: 43:9e:ce:ba:d8:9c:fb:22:c1:e4:c0:66:14:07:33:ac:2b:39: 8c:0d:fd:12:a8:cc:07:00:1d:2c:90:e4:17:37:13:43:4a:80: c3:00:f8:32:82:fa:ee:58:fb:a0:99:b8:2e:69:70:c9:de:bf: da:0b:d3:7c:0a:37:d6:8a:60:6a:ed:6c:cc:8d:71:4b:08:ef: 1e:3a:f8:4c:3f:0b:e2:4d:c0:02:c9:7a:9e:99:05:95:a5:d3: 6e:47:f7:e0:2f:a0:2e:f9:21:81:ac:b5:fa:89:f0:a9:f2:a6: 0c:6c:81:02:6c:b1:ea:0c:d2:7c:6a:28:4a:4f:11:97:1e:6c: db:85:db:73:32:fb:7f:05:40:f7:34:41:aa:ca:63:6c:22:8e: f6:f1:5a:ec:b1:8e:8f:3c:e0:35:62:10:90:26:83:6e:f6:18: 54:6e:0e:01:31:4e:de:62:c2:a8:ff:5b:3e:00:a6:2c:c4:42: de:94:0f:23:70:54:28:26:e4:4b:71:96:fc:7b:4e:ba:08:0b: ea:b1:86:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjzrGWuYYECeQzNsd1Cpg7kkQKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNjA0MjExMzM2MjBaFw0yNjA0MjQyMTQxMjBaMDMxMTAvBgNV BAMTKDJFOTJFRTgyQ0QyREU0RTkyRTBCQjREQUJFOEU0MjI5Qjg0OUZDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjygn4mVTzG9PoXTISvUYuCEJ VidfhOMN0QcN+YxwSYZhL0Z6QNlzk8aCjex0SlBZcAUX/M2qMeFNSYByroKbDEOT DFwoVMRoUTc5WAEzrZqQXc0NC/Zq4sAKGOP0fpMJi+7z3u11cZv99FqslKoZ3oum B2FdPvYMuvjPqIGhZI+etqhQpeZZQzSgIXZIPJuq4IJQaAfb1kl4kR32SY0KCJoN +WbpDEIQdB7FUGHZHXSjCyRF299YCBVkleL7qyoWotoGu0Tug++DDfEuRnnBrt3e uSNnoTrqhUaISnAbXb3urqk1Se8qwhOO2SUTI98mBqfhQ0bJCchsA7hR2DChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpLugs0t5OkuC7Tavo5CKbhJ/CYwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgeyj0ZynwyAUgo7QOe1OfakMqfN3sJMBCG otoGlH4B7wuk2YTeoFmzV0HxdZNV4NJ6xkcKmUOezrrYnPsiweTAZhQHM6wrOYwN /RKozAcAHSyQ5Bc3E0NKgMMA+DKC+u5Y+6CZuC5pcMnev9oL03wKN9aKYGrtbMyN cUsI7x46+Ew/C+JNwALJep6ZBZWl025H9+AvoC75IYGstfqJ8KnypgxsgQJsseoM 0nxqKEpPEZcebNuF23My+38FQPc0QarKY2wijvbxWuyxjo884DViEJAmg272GFRu DgExTt5iwqj/Wz4ApizEQt6UDyNwVCgm5Etxlvx7TroIC+qxhoc= -----END CERTIFICATE-----Generated at Wed Apr 22 07:27:17 2026 by rpki-client