$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: IpEkK0AumDnUEZCgtUUob+I5jv10/PkXVRZwtKSPp2w= Subject key identifier: 29:DE:2B:2A:A8:10:F8:12:C7:6E:18:BB:7B:E8:7D:3F:CB:2D:E0:D7 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 32B46E5AA7F9B13286C75F86D2F538234FF306D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: 012A Signing time: Tue 21 Apr 2026 08:11:48 +0000 Manifest this update: Tue 21 Apr 2026 08:06:48 +0000 Manifest next update: Fri 24 Apr 2026 18:30:48 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: 0UPY4xQwprgOuCkLJG3jsOk4w03jLsCEajNzlBwHN34=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b4:6e:5a:a7:f9:b1:32:86:c7:5f:86:d2:f5:38:23:4f:f3:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Apr 21 08:06:48 2026 GMT Not After : Apr 24 18:30:48 2026 GMT Subject: CN=29DE2B2AA810F812C76E18BB7BE87D3FCB2DE0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:ff:9a:98:9f:d4:64:f3:4c:44:3b:c3:6a: 84:bf:f6:b1:7e:c7:98:2d:bc:05:78:49:d3:14:23: f1:d8:59:1e:8e:45:9d:2b:d2:5d:1e:06:ff:19:60: b0:8a:27:d7:95:1d:18:86:4f:bc:26:0e:f3:ed:eb: c9:58:64:f8:18:d7:04:18:4b:ca:f6:d9:01:fe:ff: 7b:9e:d1:ed:4d:48:50:d4:25:36:24:3a:57:3a:17: 11:78:85:db:b6:98:e8:ef:93:5d:07:77:91:0e:bc: 3e:92:c7:88:7f:0e:e7:29:0e:00:a9:76:0d:4d:24: 4f:c0:65:fc:6a:0d:8c:4c:28:d1:70:8b:29:d6:c1: 88:b0:ae:19:4d:15:90:c8:c4:22:51:d7:75:d6:e9: e4:16:1a:93:e1:44:c7:66:d9:ec:1f:eb:92:a2:5c: a7:0c:73:92:f4:66:f9:07:34:98:34:fb:dc:27:c3: bd:d0:a0:14:e5:f9:ff:9b:9a:d2:18:a7:95:4f:04: a7:d6:b6:60:97:ba:0b:ba:cf:9c:a9:54:8c:12:84: 72:3a:e0:e5:7f:64:93:47:9b:c5:66:60:4c:73:19: 4c:e6:88:b0:58:a1:5d:3c:02:09:da:7f:00:5c:d9: 2c:c0:a9:71:2d:7d:fa:b5:b5:8b:0d:a7:98:e7:03: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DE:2B:2A:A8:10:F8:12:C7:6E:18:BB:7B:E8:7D:3F:CB:2D:E0:D7 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:44:22:3f:0f:8c:2e:67:3c:f1:21:00:69:0c:f3:24:3d:5a: 29:93:c8:a4:11:b7:d7:51:60:70:7f:9d:44:b4:ec:f1:45:7e: ef:24:b6:eb:cb:12:63:d8:06:62:17:64:53:6f:7d:2f:2c:91: 4c:75:1e:1a:26:2c:18:00:00:6f:74:8d:69:f8:d3:b3:ba:5e: 24:4c:2c:8b:63:4b:18:c8:ee:11:25:d7:ff:ab:2b:9c:f8:41: 81:f3:58:6f:2d:2f:c8:09:ed:49:85:23:a5:5c:22:a1:8e:21: df:c7:2a:80:08:68:a8:60:a4:ed:b5:d7:85:7e:5a:45:44:de: d5:84:e0:5c:2d:06:40:a0:f9:56:1a:c1:ee:36:75:ff:ee:eb: 74:2a:4c:05:be:8f:bf:5b:de:66:f3:e6:d6:b8:8d:b3:f7:20: ab:57:aa:ca:81:38:bd:3d:18:b9:87:0b:8d:92:81:e3:30:33: 27:04:ed:ed:69:e1:0f:7e:3a:b9:8c:0e:2c:e3:a0:c0:77:2e: a5:9b:80:67:31:6b:4a:ec:2d:72:f1:b8:40:88:68:52:39:7d: e0:d3:80:a3:f7:6c:49:ab:98:ba:14:58:1d:6b:d1:66:89:dc: ca:87:43:69:3c:d9:4f:e2:a9:51:1a:6b:ef:1c:38:ec:0a:fc: f2:ad:29:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrRuWqf5sTKGx1+G0vU4I0/zBtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNjA0MjEwODA2NDhaFw0yNjA0MjQxODMwNDhaMDMxMTAvBgNV BAMTKDI5REUyQjJBQTgxMEY4MTJDNzZFMThCQjdCRTg3RDNGQ0IyREUwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+of+amJ/UZPNMRDvDaoS/9rF+ x5gtvAV4SdMUI/HYWR6ORZ0r0l0eBv8ZYLCKJ9eVHRiGT7wmDvPt68lYZPgY1wQY S8r22QH+/3ue0e1NSFDUJTYkOlc6FxF4hdu2mOjvk10Hd5EOvD6Sx4h/DucpDgCp dg1NJE/AZfxqDYxMKNFwiynWwYiwrhlNFZDIxCJR13XW6eQWGpPhRMdm2ewf65Ki XKcMc5L0ZvkHNJg0+9wnw73QoBTl+f+bmtIYp5VPBKfWtmCXugu6z5ypVIwShHI6 4OV/ZJNHm8VmYExzGUzmiLBYoV08AgnafwBc2SzAqXEtffq1tYsNp5jnA6ELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKd4rKqgQ+BLHbhi7e+h9P8st4NcwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxEIj8PjC5nPPEhAGkM8yQ9WimTyKQRt9dR YHB/nUS07PFFfu8ktuvLEmPYBmIXZFNvfS8skUx1HhomLBgAAG90jWn407O6XiRM LItjSxjI7hEl1/+rK5z4QYHzWG8tL8gJ7UmFI6VcIqGOId/HKoAIaKhgpO2114V+ WkVE3tWE4FwtBkCg+VYawe42df/u63QqTAW+j79b3mbz5ta4jbP3IKtXqsqBOL09 GLmHC42SgeMwMycE7e1p4Q9+OrmMDizjoMB3LqWbgGcxa0rsLXLxuECIaFI5feDT gKP3bEmrmLoUWB1r0WaJ3MqHQ2k82U/iqVEaa+8cOOwK/PKtKdE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client