$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: MhvvsX4f1SvZIXNiEV8c38QUzIE65MyKhgCgItxnduM= Subject key identifier: 66:3A:3F:6F:2F:51:94:95:17:BF:DB:38:78:3B:ED:DA:42:9E:64:3A Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 6DB92B81E2C9B61E72036D206AA4C9F6BB8DB99B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: E0 Signing time: Mon 20 Apr 2026 21:21:29 +0000 Manifest this update: Mon 20 Apr 2026 21:16:29 +0000 Manifest next update: Fri 24 Apr 2026 07:46:29 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: fTHHZTMjWFplWjSBToZNGdtpoyGA2PnPrrN+beRsMog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b9:2b:81:e2:c9:b6:1e:72:03:6d:20:6a:a4:c9:f6:bb:8d:b9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Apr 20 21:16:29 2026 GMT Not After : Apr 24 07:46:29 2026 GMT Subject: CN=663A3F6F2F51949517BFDB38783BEDDA429E643A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:50:6b:5e:b0:bd:10:55:33:bc:af:a1:1f: d5:32:70:29:b5:ac:1b:b7:75:ff:9a:a1:2e:4f:40: a0:dd:31:b6:96:57:4f:86:b9:dd:37:78:a8:44:4d: f4:fa:e8:9f:38:9e:a9:25:e0:70:f0:40:c3:d2:31: a6:5e:06:f8:e5:8d:f0:7c:d8:b7:8d:41:48:96:f7: fb:94:93:76:e8:41:1a:c6:b6:25:0e:5d:47:af:70: 43:fb:53:fa:ba:74:77:38:d6:4b:fd:b2:eb:8c:18: df:68:cd:e1:3c:65:39:c2:0e:e6:a4:65:ca:fc:d3: b4:fa:09:04:7b:94:4c:fb:dc:14:6a:20:61:bd:46: fb:05:9f:9c:03:6b:36:1b:ed:4d:5d:dd:2d:66:80: d1:4c:ef:8a:48:f1:fd:09:0f:2e:6a:d5:6c:64:28: 50:0d:f9:b7:60:1c:4e:d3:90:69:17:ac:34:d4:d3: 31:b7:da:62:24:a5:d9:4b:c9:cb:16:68:d6:7f:a2: 22:2c:db:68:af:b1:a0:68:12:0a:0c:e0:ee:63:95: 21:9a:5f:67:a6:10:64:de:b8:8c:20:24:3c:e9:16: af:8b:06:52:e7:63:b9:53:88:65:81:d5:d6:49:5f: c0:ee:a7:40:37:9f:58:28:8d:7d:2e:36:af:4a:24: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:3F:6F:2F:51:94:95:17:BF:DB:38:78:3B:ED:DA:42:9E:64:3A X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:bb:ad:8b:c9:60:db:cc:86:a5:e4:10:a2:ac:63:db:32: 6b:45:2a:e4:d4:2c:ba:57:3b:37:45:72:7e:5e:4b:bb:85:a0: 0b:ca:5f:9c:9e:2e:cf:33:eb:f9:c2:53:47:1b:91:72:df:db: b9:19:92:30:51:16:fa:1e:47:86:1b:6c:08:87:60:a0:b6:64: ef:89:ff:19:8c:15:e9:07:82:36:df:44:24:66:90:fa:cf:50: 13:e7:55:c3:bd:48:ed:25:97:46:b8:52:e8:59:c1:69:58:93: 24:13:b6:1d:d0:8a:cf:8e:5a:4a:cd:2a:71:7a:13:9e:c0:a3: 7b:07:f5:d4:e1:14:8a:57:1b:dd:75:fd:b6:f4:5e:ee:cd:ef: ed:29:fd:a7:f6:75:11:bd:c0:4e:2e:fe:d0:86:7e:99:b2:29: 30:5f:ee:e6:7a:6d:34:13:46:31:98:21:5b:f1:9d:49:5c:ad: 66:ca:ad:e3:81:b0:9c:2f:28:73:7c:91:39:95:13:ba:53:f4: 73:7a:a3:f2:a9:d1:31:71:9b:5a:62:74:43:02:f0:89:3c:36: 89:c3:1a:ec:e6:de:55:7a:8b:f1:0c:55:4b:b2:a7:34:64:8a: c3:42:10:4f:0c:18:0d:d4:9c:5a:5e:1c:0b:e2:0c:a3:0b:9f: 5a:82:d9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbkrgeLJth5yA20gaqTJ9ruNuZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNjA0MjAyMTE2MjlaFw0yNjA0MjQwNzQ2MjlaMDMxMTAvBgNV BAMTKDY2M0EzRjZGMkY1MTk0OTUxN0JGREIzODc4M0JFRERBNDI5RTY0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcG1BrXrC9EFUzvK+hH9UycCm1 rBu3df+aoS5PQKDdMbaWV0+Gud03eKhETfT66J84nqkl4HDwQMPSMaZeBvjljfB8 2LeNQUiW9/uUk3boQRrGtiUOXUevcEP7U/q6dHc41kv9suuMGN9ozeE8ZTnCDuak Zcr807T6CQR7lEz73BRqIGG9RvsFn5wDazYb7U1d3S1mgNFM74pI8f0JDy5q1Wxk KFAN+bdgHE7TkGkXrDTU0zG32mIkpdlLycsWaNZ/oiIs22ivsaBoEgoM4O5jlSGa X2emEGTeuIwgJDzpFq+LBlLnY7lTiGWB1dZJX8Dup0A3n1gojX0uNq9KJHgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjo/by9RlJUXv9s4eDvt2kKeZDowHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/Gu62LyWDbzIal5BCirGPbMmtFKuTULLpX OzdFcn5eS7uFoAvKX5yeLs8z6/nCU0cbkXLf27kZkjBRFvoeR4YbbAiHYKC2ZO+J /xmMFekHgjbfRCRmkPrPUBPnVcO9SO0ll0a4UuhZwWlYkyQTth3Qis+OWkrNKnF6 E57Ao3sH9dThFIpXG911/bb0Xu7N7+0p/af2dRG9wE4u/tCGfpmyKTBf7uZ6bTQT RjGYIVvxnUlcrWbKreOBsJwvKHN8kTmVE7pT9HN6o/Kp0TFxm1pidEMC8Ik8NonD Guzm3lV6i/EMVUuypzRkisNCEE8MGA3UnFpeHAviDKMLn1qC2f4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:48 2026 by rpki-client