$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: lF5EQFqtU1vokbAjBjY4xg10qbeI9/14Q+7u0KrrCbU= Subject key identifier: E0:A5:1D:30:B6:C2:73:30:84:28:7A:12:4A:FB:CA:E6:AE:28:80:18 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 51FAD68D1824E5A1882B3D0505A4DA17630185CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: 014D Signing time: Mon 20 Apr 2026 09:31:14 +0000 Manifest this update: Mon 20 Apr 2026 09:26:14 +0000 Manifest next update: Thu 23 Apr 2026 11:17:14 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: odYW4tuHIAmBKw7Yir5Faqa6Vv8eHC6lsyyVWAOjs3U=) 2: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: DhHa51XST4Wihxzp+Ay72ENP6AwehCfcD/k24ieE4Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 11:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fa:d6:8d:18:24:e5:a1:88:2b:3d:05:05:a4:da:17:63:01:85:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Apr 20 09:26:14 2026 GMT Not After : Apr 23 11:17:14 2026 GMT Subject: CN=E0A51D30B6C2733084287A124AFBCAE6AE288018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:09:bf:13:77:45:2d:45:88:eb:fb:1b:7f: 49:1b:af:e8:63:02:d5:36:fa:dd:a6:b0:e7:6d:34: 82:f6:73:9d:90:69:b2:6b:29:9f:a5:0c:0a:54:e7: a1:49:15:f1:76:57:48:23:b4:a9:30:2d:b3:95:d7: 42:b6:51:b7:c5:44:9c:78:60:c5:78:d5:63:f8:17: c0:ed:cb:9d:fb:3a:c8:9a:00:09:6b:4c:80:62:5d: 67:fd:31:9d:1b:27:b8:01:6a:77:49:2e:8c:57:4e: 1d:99:68:b2:5e:b3:fe:a6:72:64:f6:44:83:de:6a: 25:f4:72:04:10:a1:aa:47:5e:c1:b3:c3:7d:e8:93: 67:43:ec:09:d2:c8:df:e4:51:26:5f:90:5b:0b:dc: b8:7b:85:bf:2c:ab:b0:b7:df:7a:75:10:64:32:7a: 5a:f8:2d:9d:dd:9b:86:90:16:9b:e2:68:49:a9:cf: 38:a2:5c:75:09:41:64:82:87:05:8a:be:ff:0f:79: e7:2e:37:a2:c6:7d:20:fd:c8:0f:56:59:68:08:73: 14:a1:e8:b0:ce:b0:93:1f:a1:d7:b7:3a:b0:8f:35: 6a:e7:e7:b1:d5:d5:1d:55:c1:ad:51:8b:50:25:54: 56:00:55:78:ea:e5:66:b1:50:33:1a:07:98:55:b1: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:1D:30:B6:C2:73:30:84:28:7A:12:4A:FB:CA:E6:AE:28:80:18 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:4a:d9:06:f3:22:b6:96:48:9c:e8:b3:62:f9:32:20:d2: 20:d1:3e:1b:1c:a6:f0:47:7b:b2:d5:55:32:47:69:d5:f8:19: a9:29:3f:b0:ef:9e:86:49:eb:77:0e:a3:46:35:c6:94:bf:f4: e4:92:56:48:86:25:e8:1d:0e:75:d5:8f:7b:f4:6f:f5:77:9e: df:84:75:9e:17:2d:5b:36:53:97:ea:48:3b:76:0f:d4:f5:f7: e7:67:f0:c3:4a:49:ba:35:53:cf:ca:ff:12:1a:d9:f1:86:bb: a9:08:df:97:f9:bd:f2:46:3d:96:e4:c9:05:ba:39:cf:f9:70: 5d:be:52:12:6e:b2:c0:1f:ca:34:a6:b4:a4:21:db:e1:c3:22: 5e:ee:4c:07:e4:e1:10:60:b0:4e:02:83:e8:0e:d5:01:4e:96: c2:4b:ae:7a:46:c0:13:a4:57:81:09:72:14:99:78:78:ac:34: 23:4d:07:79:c9:7f:d5:69:54:a8:d9:ee:1f:19:39:07:15:9e: 68:55:c4:02:86:13:85:0c:61:b5:82:1c:43:85:30:2d:57:d9: 3c:10:03:b1:66:a5:00:88:4c:d3:da:9a:37:a2:8a:6c:0e:4a: d6:7d:99:cf:56:43:38:26:d3:30:f8:d9:a1:e2:1f:93:f1:27: 0c:04:11:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfrWjRgk5aGIKz0FBaTaF2MBhc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNjA0MjAwOTI2MTRaFw0yNjA0MjMxMTE3MTRaMDMxMTAvBgNV BAMTKEUwQTUxRDMwQjZDMjczMzA4NDI4N0ExMjRBRkJDQUU2QUUyODgwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPQm/E3dFLUWI6/sbf0kbr+hj AtU2+t2msOdtNIL2c52QabJrKZ+lDApU56FJFfF2V0gjtKkwLbOV10K2UbfFRJx4 YMV41WP4F8Dty537OsiaAAlrTIBiXWf9MZ0bJ7gBandJLoxXTh2ZaLJes/6mcmT2 RIPeaiX0cgQQoapHXsGzw33ok2dD7AnSyN/kUSZfkFsL3Lh7hb8sq7C333p1EGQy elr4LZ3dm4aQFpviaEmpzziiXHUJQWSChwWKvv8PeecuN6LGfSD9yA9WWWgIcxSh 6LDOsJMfode3OrCPNWrn57HV1R1Vwa1Ri1AlVFYAVXjq5WaxUDMaB5hVsZhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KUdMLbCczCEKHoSSvvK5q4ogBgwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGNStkG8yK2lkic6LNi+TIg0iDRPhscpvBH e7LVVTJHadX4GakpP7DvnoZJ63cOo0Y1xpS/9OSSVkiGJegdDnXVj3v0b/V3nt+E dZ4XLVs2U5fqSDt2D9T19+dn8MNKSbo1U8/K/xIa2fGGu6kI35f5vfJGPZbkyQW6 Oc/5cF2+UhJussAfyjSmtKQh2+HDIl7uTAfk4RBgsE4Cg+gO1QFOlsJLrnpGwBOk V4EJchSZeHisNCNNB3nJf9VpVKjZ7h8ZOQcVnmhVxAKGE4UMYbWCHEOFMC1X2TwQ A7FmpQCITNPamjeiimwOStZ9mc9WQzgm0zD42aHiH5PxJwwEETQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client