$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: DyuwP7G+veiIzHRtzZq8SnFomrZwaSYeO/c4tdDiqzU= Subject key identifier: E6:5C:C2:FB:77:4D:4E:80:1D:9D:C8:5C:CA:A9:F2:B9:56:1A:5E:75 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 3E1752458452E1E2565DB049AFE5D6376B906555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 0114 Signing time: Mon 20 Apr 2026 21:11:17 +0000 Manifest this update: Mon 20 Apr 2026 21:06:17 +0000 Manifest next update: Fri 24 Apr 2026 01:23:17 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: vNH/YdJC9SfPNE0Z5M8q6XVAqtktyd+D18gicMW7czo=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:17:52:45:84:52:e1:e2:56:5d:b0:49:af:e5:d6:37:6b:90:65:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Apr 20 21:06:17 2026 GMT Not After : Apr 24 01:23:17 2026 GMT Subject: CN=E65CC2FB774D4E801D9DC85CCAA9F2B9561A5E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:3d:7e:7c:9d:80:c3:25:95:99:33:9d:b2: a0:48:53:58:9b:7e:a2:59:89:e6:d4:ec:5b:50:03: 3f:8b:ee:1c:db:69:77:f8:a9:af:4a:86:d8:91:8c: cd:3f:4b:b6:84:0f:6d:c4:ee:9b:21:18:52:e5:e6: 68:f8:17:49:b8:13:f2:d1:ba:2e:27:db:9a:04:00: b8:64:92:7b:7c:bf:ac:4f:21:48:2c:b3:32:62:8f: 82:e7:72:a9:8f:fc:94:4a:d5:fa:6f:ce:b4:5f:82: 7d:7d:6d:9b:45:1e:fd:20:68:c9:c5:19:41:8c:db: cc:45:44:e1:63:72:de:1f:64:f9:93:c3:b3:4c:c9: e0:96:83:07:40:5d:10:52:af:ed:32:6e:19:cf:21: 1e:3f:08:47:6b:ea:d5:56:a3:4d:09:4e:62:0e:52: d8:03:4b:99:f9:54:ec:3a:54:23:f4:26:67:81:bf: 14:98:fd:87:af:47:6e:2b:a8:27:66:5a:8a:2f:44: 54:86:d5:1a:ab:11:98:0b:89:7f:3d:1a:f0:2f:bf: 34:bf:fe:92:51:cc:8a:3c:e0:09:04:fb:8d:50:85: 1e:82:c5:1f:55:3c:29:a5:29:6e:30:ff:f7:3f:e2: 18:d2:39:71:61:c6:74:6b:b4:35:7d:4e:34:d8:ff: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:C2:FB:77:4D:4E:80:1D:9D:C8:5C:CA:A9:F2:B9:56:1A:5E:75 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:97:1e:ef:45:64:81:d9:c1:62:2a:83:b2:15:f2:c6:19: 66:96:d1:a5:57:b4:45:a9:3b:13:ad:54:ef:47:22:c1:7b:af: 5a:8c:60:51:da:da:0d:3a:cc:7d:48:f7:1c:9d:95:e8:16:37: 1c:df:80:97:f7:96:8f:d4:9e:c9:7a:07:84:70:12:bb:e7:73: 78:e2:e5:73:dc:3e:a5:87:0a:10:0a:20:79:1f:e2:a4:80:10: 4a:8e:34:61:b0:95:f5:b1:7a:ef:53:03:46:88:67:71:de:df: d4:d4:54:f0:a6:8b:d4:3c:d5:f9:c0:13:89:87:0a:c3:42:3f: 13:04:6f:6a:bf:38:b6:70:4f:11:27:d0:28:a4:56:ba:3d:52: c0:79:a4:12:e9:1d:19:07:62:dc:5b:20:3e:58:fc:7b:e2:38: 53:49:a7:f9:de:c6:e3:8d:e0:84:0c:00:3c:4c:4e:fd:8d:e0: 69:a5:a3:6f:d0:2c:0a:5d:73:e1:e0:c3:6b:d4:b3:a5:22:66: 6b:16:ae:10:2e:17:0d:fa:c2:56:41:1c:61:09:99:a2:d9:bf: ef:5a:41:80:70:55:cf:bd:9c:e8:56:bc:55:9c:e6:f2:eb:c6: e3:b6:c4:be:de:fe:66:41:26:1d:99:52:21:fd:95:72:5c:eb: 15:8a:b4:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhdSRYRS4eJWXbBJr+XWN2uQZVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNjA0MjAyMTA2MTdaFw0yNjA0MjQwMTIzMTdaMDMxMTAvBgNV BAMTKEU2NUNDMkZCNzc0RDRFODAxRDlEQzg1Q0NBQTlGMkI5NTYxQTVFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoD1+fJ2AwyWVmTOdsqBIU1ib fqJZiebU7FtQAz+L7hzbaXf4qa9KhtiRjM0/S7aED23E7pshGFLl5mj4F0m4E/LR ui4n25oEALhkknt8v6xPIUgsszJij4LncqmP/JRK1fpvzrRfgn19bZtFHv0gaMnF GUGM28xFROFjct4fZPmTw7NMyeCWgwdAXRBSr+0ybhnPIR4/CEdr6tVWo00JTmIO UtgDS5n5VOw6VCP0JmeBvxSY/YevR24rqCdmWoovRFSG1RqrEZgLiX89GvAvvzS/ /pJRzIo84AkE+41QhR6CxR9VPCmlKW4w//c/4hjSOXFhxnRrtDV9TjTY//6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5lzC+3dNToAdnchcyqnyuVYaXnUwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+Zlx7vRWSB2cFiKoOyFfLGGWaW0aVXtEWp OxOtVO9HIsF7r1qMYFHa2g06zH1I9xydlegWNxzfgJf3lo/Unsl6B4RwErvnc3ji 5XPcPqWHChAKIHkf4qSAEEqONGGwlfWxeu9TA0aIZ3He39TUVPCmi9Q81fnAE4mH CsNCPxMEb2q/OLZwTxEn0CikVro9UsB5pBLpHRkHYtxbID5Y/HviOFNJp/nexuON 4IQMADxMTv2N4Gmlo2/QLApdc+Hgw2vUs6UiZmsWrhAuFw36wlZBHGEJmaLZv+9a QYBwVc+9nOhWvFWc5vLrxuO2xL7e/mZBJh2ZUiH9lXJc6xWKtGs= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client