$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: Z18eLfwt1VfakmBMVQytXxBFnHJTioHtFpXYoAcdTBE= Subject key identifier: 44:1F:3B:37:8C:0B:5A:CE:71:C3:C3:23:9B:79:8F:30:D6:C0:27:6B Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 2E130B34A20AF32E17C246CE37476602DD6A2208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 0130 Signing time: Tue 21 Apr 2026 11:32:51 +0000 Manifest this update: Tue 21 Apr 2026 11:27:51 +0000 Manifest next update: Fri 24 Apr 2026 18:28:51 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: E1t92eCCA0K5YE8ixQAa9ICN2HuojBT+vynz5XXJhec=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: 58o8xpIjp/oK6y5/vK0zJIBaCvI36zLpQOrEy+WjU/0=) 3: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: hDETcC6aiw4nI87sUJohnYKA5ZfAdVvxQi/ZYzJASZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:0b:34:a2:0a:f3:2e:17:c2:46:ce:37:47:66:02:dd:6a:22:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Apr 21 11:27:51 2026 GMT Not After : Apr 24 18:28:51 2026 GMT Subject: CN=441F3B378C0B5ACE71C3C3239B798F30D6C0276B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:d2:62:f6:23:34:ea:f0:7c:5d:84:94:a3: 15:3d:5f:58:63:3b:47:ef:ff:f0:4f:b6:b9:9d:a8: 40:81:5b:e6:94:9b:57:c6:57:99:66:86:9a:47:e1: b4:de:85:02:9c:1d:55:6a:d2:b2:cb:36:a4:6e:5c: 4d:b0:54:ed:a0:de:bd:d2:13:e3:ac:33:4a:ac:bb: 92:4f:a6:53:8e:32:50:15:b9:96:8a:a1:15:7b:59: fa:6b:29:32:ab:ac:0a:58:05:d7:75:9e:e5:a7:61: 1a:70:03:4f:f6:8c:11:c5:41:72:80:3e:b4:82:5b: e4:a0:71:46:93:73:a0:f9:2e:99:4c:4c:a0:a2:33: 1b:d7:b5:04:eb:15:a3:e2:fe:d5:e0:37:43:51:18: 49:db:4c:cf:d1:bc:69:94:7e:4b:03:71:43:e5:0e: e0:a0:d5:a5:a8:22:e3:0a:35:22:63:b5:89:d3:3f: 84:2e:1d:fa:02:7a:e4:4b:0e:03:56:54:2c:ca:08: ad:bf:68:4a:ac:9e:c7:cc:18:7d:af:b4:98:a7:6b: f3:a5:29:34:ef:1f:35:2b:ac:4f:c0:2d:50:ac:55: f5:ec:fb:a1:f8:b4:54:e3:41:56:10:b6:51:a3:4a: 63:a4:5a:13:77:b3:10:5a:de:0b:26:f6:a0:90:52: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1F:3B:37:8C:0B:5A:CE:71:C3:C3:23:9B:79:8F:30:D6:C0:27:6B X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c1:0d:4d:4f:35:a0:c1:6a:ea:0a:82:ac:d1:84:04:77:94: 49:64:11:b6:6a:af:ff:60:5d:ac:74:9f:40:34:ea:18:88:49: d8:12:0b:bd:15:ee:d1:3e:78:0d:f7:ca:f7:d3:a1:4b:3f:6f: 1b:96:ff:d3:e8:1c:04:44:03:ac:17:c4:b3:ac:09:6a:89:8a: e3:b3:50:10:74:86:59:4a:66:8c:be:69:9e:f7:c2:b3:c9:97: d5:ae:67:cd:09:78:7f:2e:78:be:44:cb:ca:64:3c:ff:46:16: 72:dc:b2:1a:55:1a:e3:f8:a9:4d:3b:d7:02:f0:2b:a0:a2:bf: 9d:6c:08:f3:26:dd:2b:40:fb:eb:42:2e:ce:90:41:11:af:95: 71:7f:89:19:0b:9a:b5:d3:4a:e1:78:c1:e4:5a:ef:7f:bf:09: 3e:36:7f:b3:c7:2f:97:c1:06:ba:86:0d:8d:32:95:9b:d2:1e: a7:a5:07:bd:3d:8d:52:5c:7c:c1:b1:a8:3a:ff:e5:1d:cf:83: 2a:45:d4:1a:19:c4:22:6d:00:ac:64:fd:4c:71:42:d4:40:8e: 24:0c:ac:b9:c5:28:67:5a:b9:d7:7d:00:fb:c9:0c:62:7c:1e: db:1c:1d:36:d6:e1:70:ec:01:e3:7d:84:e2:34:ee:ac:30:3f: 7e:b5:dc:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhMLNKIK8y4XwkbON0dmAt1qIggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNjA0MjExMTI3NTFaFw0yNjA0MjQxODI4NTFaMDMxMTAvBgNV BAMTKDQ0MUYzQjM3OEMwQjVBQ0U3MUMzQzMyMzlCNzk4RjMwRDZDMDI3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UdJi9iM06vB8XYSUoxU9X1hj O0fv//BPtrmdqECBW+aUm1fGV5lmhppH4bTehQKcHVVq0rLLNqRuXE2wVO2g3r3S E+OsM0qsu5JPplOOMlAVuZaKoRV7WfprKTKrrApYBdd1nuWnYRpwA0/2jBHFQXKA PrSCW+SgcUaTc6D5LplMTKCiMxvXtQTrFaPi/tXgN0NRGEnbTM/RvGmUfksDcUPl DuCg1aWoIuMKNSJjtYnTP4QuHfoCeuRLDgNWVCzKCK2/aEqsnsfMGH2vtJina/Ol KTTvHzUrrE/ALVCsVfXs+6H4tFTjQVYQtlGjSmOkWhN3sxBa3gsm9qCQUl+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURB87N4wLWs5xw8Mjm3mPMNbAJ2swHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHBDU1PNaDBauoKgqzRhAR3lElkEbZqr/9g Xax0n0A06hiISdgSC70V7tE+eA33yvfToUs/bxuW/9PoHAREA6wXxLOsCWqJiuOz UBB0hllKZoy+aZ73wrPJl9WuZ80JeH8ueL5Ey8pkPP9GFnLcshpVGuP4qU071wLw K6Civ51sCPMm3StA++tCLs6QQRGvlXF/iRkLmrXTSuF4weRa73+/CT42f7PHL5fB BrqGDY0ylZvSHqelB709jVJcfMGxqDr/5R3PgypF1BoZxCJtAKxk/UxxQtRAjiQM rLnFKGdaudd9APvJDGJ8HtscHTbW4XDsAeN9hOI07qwwP3613FU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client