$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: 2rb5y0O0MPsK0DoBHUlSGRv+TB9mtYxnGPBy40NofVg= Subject key identifier: 0D:96:01:19:D4:9D:89:DA:AD:82:06:97:C6:D2:7C:5F:81:A9:2E:9C Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 2C835AEA0102BC7F1D094A7F40DB1BBFDE38D089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 036B Signing time: Sat 25 Apr 2026 14:11:02 +0000 Manifest this update: Sat 25 Apr 2026 14:06:02 +0000 Manifest next update: Wed 29 Apr 2026 00:50:02 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: DyWfWOoPMdkJVh9KL70s6NPSM+3lUI68Ih8LOrW+Tw8=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 00:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:83:5a:ea:01:02:bc:7f:1d:09:4a:7f:40:db:1b:bf:de:38:d0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Apr 25 14:06:02 2026 GMT Not After : Apr 29 00:50:02 2026 GMT Subject: CN=0D960119D49D89DAAD820697C6D27C5F81A92E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:41:3b:5c:67:2b:8c:84:6f:9c:19:75:ca: b5:e2:73:a7:2e:a7:71:44:f5:00:8d:b7:a9:f6:13: d3:83:07:75:93:8b:98:9c:7a:89:da:15:68:b5:4e: c1:db:65:3c:d7:68:07:18:1a:2c:09:d3:d2:e6:9c: 25:8f:f0:0a:37:b1:87:f3:26:e1:92:c2:eb:0c:76: 2d:fc:5a:eb:6b:eb:cf:8e:7b:47:5c:d7:9f:a9:be: cd:8a:30:a0:1d:98:d2:4a:07:4c:68:54:a9:00:4c: c0:4e:ce:77:4d:42:00:2a:0a:4d:0a:b7:bc:49:b7: 4c:f4:16:be:7e:e4:2d:a6:ca:e0:d3:92:59:64:90: 63:6c:1f:a7:b4:0f:b8:99:93:39:9c:b4:29:d9:b1: c2:a7:0e:f2:7f:81:a2:fc:5c:9a:7f:40:7e:79:f8: 53:d7:8d:ad:c3:cc:78:fe:9e:e6:dd:ab:5c:66:85: 4d:c4:10:d7:8d:6e:4c:86:9b:ef:38:42:9b:41:6e: f1:2b:a6:87:ce:e6:19:e4:c3:6d:f4:d3:52:63:01: 99:18:e2:24:9a:89:c4:90:20:e1:b8:89:0a:04:c6: 73:77:35:bf:ae:e4:13:97:36:d0:6e:97:9e:11:24: 71:a6:8d:4e:2b:6c:2c:9c:a4:3e:4f:a5:26:81:77: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:01:19:D4:9D:89:DA:AD:82:06:97:C6:D2:7C:5F:81:A9:2E:9C X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:4c:8f:74:e4:fa:67:f5:45:15:8d:31:e6:74:27:96:56: b4:84:99:73:a6:38:70:e8:0b:24:b7:a7:9b:9b:11:7b:51:44: c7:24:3c:19:49:db:03:42:8e:50:60:43:ff:92:7f:ee:fe:e2: 0d:ab:a4:15:39:d4:cc:35:15:0e:c2:0a:c3:03:ae:fe:88:58: e8:87:df:54:f6:c7:9c:a5:84:5b:0e:20:aa:78:e8:8a:ef:59: e8:22:25:d1:a8:8a:3f:dd:6e:80:c7:0d:0f:09:a3:02:80:47: a7:eb:4a:f8:bc:ba:93:0a:ab:4d:24:a8:1c:58:b9:f4:e4:86: 3a:20:65:82:d2:0f:b0:41:61:11:9e:b6:36:d0:7c:d9:49:5a: 01:37:06:ad:d7:72:f9:6f:3c:c7:17:48:bd:4f:13:86:cc:3d: f9:47:33:5b:09:18:d6:b7:ec:23:39:35:07:c8:2d:73:d9:6d: 23:fb:c4:28:2c:63:0e:0b:9d:36:7c:e5:43:14:25:17:d5:ca: 22:94:b4:b3:ee:ff:5e:f0:36:f1:4f:79:21:bc:f2:5c:00:6e: fe:5d:19:bb:e8:f9:d1:2f:e7:95:dc:0d:f9:78:90:a4:dc:79: 35:4f:c2:c3:41:56:a8:47:dc:f6:29:68:0b:82:1d:39:78:12: 39:1f:da:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULINa6gECvH8dCUp/QNsbv9440IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNjA0MjUxNDA2MDJaFw0yNjA0MjkwMDUwMDJaMDMxMTAvBgNV BAMTKDBEOTYwMTE5RDQ5RDg5REFBRDgyMDY5N0M2RDI3QzVGODFBOTJFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbn0E7XGcrjIRvnBl1yrXic6cu p3FE9QCNt6n2E9ODB3WTi5iceonaFWi1TsHbZTzXaAcYGiwJ09LmnCWP8Ao3sYfz JuGSwusMdi38Wutr68+Oe0dc15+pvs2KMKAdmNJKB0xoVKkATMBOzndNQgAqCk0K t7xJt0z0Fr5+5C2myuDTkllkkGNsH6e0D7iZkzmctCnZscKnDvJ/gaL8XJp/QH55 +FPXja3DzHj+nubdq1xmhU3EENeNbkyGm+84QptBbvErpofO5hnkw23001JjAZkY 4iSaicSQIOG4iQoExnN3Nb+u5BOXNtBul54RJHGmjU4rbCycpD5PpSaBd1itAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZYBGdSdidqtggaXxtJ8X4GpLpwwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD6TI905Ppn9UUVjTHmdCeWVrSEmXOmOHDo CyS3p5ubEXtRRMckPBlJ2wNCjlBgQ/+Sf+7+4g2rpBU51Mw1FQ7CCsMDrv6IWOiH 31T2x5ylhFsOIKp46IrvWegiJdGoij/dboDHDQ8JowKAR6frSvi8upMKq00kqBxY ufTkhjogZYLSD7BBYRGetjbQfNlJWgE3Bq3XcvlvPMcXSL1PE4bMPflHM1sJGNa3 7CM5NQfILXPZbSP7xCgsYw4LnTZ85UMUJRfVyiKUtLPu/17wNvFPeSG88lwAbv5d Gbvo+dEv55XcDfl4kKTceTVPwsNBVqhH3PYpaAuCHTl4Ejkf2kg= -----END CERTIFICATE-----Generated at Mon Apr 27 19:47:52 2026 by rpki-client