$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: WjhOJkyKRvQqGgWB9B08u4hcAxEuA1pY40DEvrHM+L4= Subject key identifier: 95:D5:CD:D4:7C:77:3F:65:37:8A:8D:7C:D5:19:4C:CD:B4:69:6C:2B Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 4DC42DCA1EFA977489A9701DE2F7ED93CD1D99A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 03D0 Signing time: Fri 17 Apr 2026 18:02:08 +0000 Manifest this update: Fri 17 Apr 2026 17:57:08 +0000 Manifest next update: Mon 20 Apr 2026 21:35:08 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: aSdaPM0o498crDDrokbkojmBP4EpLJ/R7SH4SGHemZM=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: nxVd6u+Nl7KMJCTmVEIrtiJliVEr+qH5gmFzMn5oo3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c4:2d:ca:1e:fa:97:74:89:a9:70:1d:e2:f7:ed:93:cd:1d:99:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Apr 17 17:57:08 2026 GMT Not After : Apr 20 21:35:08 2026 GMT Subject: CN=95D5CDD47C773F65378A8D7CD5194CCDB4696C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:45:76:3c:ca:d4:46:99:30:3b:dc:01:93: e1:24:38:2c:1c:3c:21:83:e0:17:ef:34:2a:91:18: 3e:b0:9d:e9:c8:b5:41:99:7b:c6:e7:d4:ed:7f:6b: 53:69:89:7e:43:28:29:8f:05:3e:4c:46:f5:19:9f: c7:15:04:85:f3:45:e8:f3:5e:0e:dc:3b:1f:98:05: b8:01:53:b8:ea:c4:65:57:ad:4d:01:69:6c:02:13: 43:60:96:06:b9:77:00:63:d8:d4:da:42:be:14:1b: 11:e4:8d:ff:a2:07:12:d9:81:8c:f2:9c:65:ac:5d: 8d:70:a9:c7:b4:3f:0d:7b:34:24:87:2c:be:c6:df: e3:65:9d:05:1e:d9:74:26:be:29:7b:83:33:3d:1a: 56:65:f2:f8:6d:d0:00:42:1b:93:ec:4b:ff:8c:34: e5:0d:04:4a:96:85:70:31:bd:6c:bb:24:7d:b0:c7: f5:a6:6a:23:c5:dc:00:9d:f0:6a:68:70:05:c0:c5: ca:b4:b7:d6:1b:30:62:0d:29:97:59:f9:2f:2a:0c: d4:c2:ae:11:28:5b:08:0b:9f:c7:6c:18:7c:e1:5a: f6:5b:2c:2a:32:ba:71:5b:7a:69:e6:4d:ce:64:39: c2:f7:ed:57:cc:59:68:17:63:00:0c:3f:f8:d2:39: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D5:CD:D4:7C:77:3F:65:37:8A:8D:7C:D5:19:4C:CD:B4:69:6C:2B X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:99:54:8e:b1:37:34:7b:d7:34:be:e9:b5:82:47:ee:ad:fd: d2:87:58:0e:c1:b2:8e:4a:54:4f:93:fc:e4:da:16:aa:b4:09: 5b:c8:1a:6d:b7:ee:df:ae:f5:cc:c3:fa:af:12:18:e4:53:ab: df:f9:54:3b:5d:64:43:27:92:67:fc:1a:12:16:bd:3b:7f:54: d1:f7:62:ba:ce:56:51:68:3d:c9:bd:64:c7:52:d9:6a:da:f5: 26:95:1f:37:3d:bb:28:6a:7d:f7:0d:16:dd:af:f9:c7:59:c1: 6e:a2:d8:0d:08:86:78:58:16:14:48:31:88:e8:a8:db:1e:c7: b5:ab:8a:dc:11:32:8c:2c:0b:99:10:b1:0c:48:da:88:78:ff: 66:2c:a7:31:54:19:2c:27:a5:52:dd:0d:1d:23:38:33:b9:e6: 3f:cb:10:7a:81:b1:38:a6:8b:f2:fc:43:0a:9b:54:2f:f3:91: a0:c6:03:8c:84:11:5b:50:e5:a6:c5:a9:13:14:79:5e:97:df: 67:e0:9b:80:16:3e:5e:fb:0d:51:48:d1:1a:29:e4:a2:95:ae: a7:bd:37:37:df:2f:b2:dc:c0:d3:d8:3c:92:f8:9c:f1:5f:af: ba:db:43:5e:21:80:80:34:92:5f:42:61:61:7b:11:59:9f:ad: f6:ef:71:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcQtyh76l3SJqXAd4vftk80dmaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNjA0MTcxNzU3MDhaFw0yNjA0MjAyMTM1MDhaMDMxMTAvBgNV BAMTKDk1RDVDREQ0N0M3NzNGNjUzNzhBOEQ3Q0Q1MTk0Q0NEQjQ2OTZDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVkV2PMrURpkwO9wBk+EkOCwc PCGD4BfvNCqRGD6wnenItUGZe8bn1O1/a1NpiX5DKCmPBT5MRvUZn8cVBIXzRejz Xg7cOx+YBbgBU7jqxGVXrU0BaWwCE0Nglga5dwBj2NTaQr4UGxHkjf+iBxLZgYzy nGWsXY1wqce0Pw17NCSHLL7G3+NlnQUe2XQmvil7gzM9GlZl8vht0ABCG5PsS/+M NOUNBEqWhXAxvWy7JH2wx/WmaiPF3ACd8GpocAXAxcq0t9YbMGINKZdZ+S8qDNTC rhEoWwgLn8dsGHzhWvZbLCoyunFbemnmTc5kOcL37VfMWWgXYwAMP/jSOY2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUldXN1Hx3P2U3io181RlMzbRpbCswHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2ZVI6xNzR71zS+6bWCR+6t/dKHWA7Bso5K VE+T/OTaFqq0CVvIGm237t+u9czD+q8SGORTq9/5VDtdZEMnkmf8GhIWvTt/VNH3 YrrOVlFoPcm9ZMdS2Wra9SaVHzc9uyhqffcNFt2v+cdZwW6i2A0IhnhYFhRIMYjo qNsex7WritwRMowsC5kQsQxI2oh4/2YspzFUGSwnpVLdDR0jODO55j/LEHqBsTim i/L8QwqbVC/zkaDGA4yEEVtQ5abFqRMUeV6X32fgm4AWPl77DVFI0Rop5KKVrqe9 NzffL7LcwNPYPJL4nPFfr7rbQ14hgIA0kl9CYWF7EVmfrfbvcag= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:32 2026 by rpki-client