$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: 7dv7LVI2Fwe2t4sR3U5ffObYZ/e6aH5KuWNG1GBhoqk= Subject key identifier: 3C:4E:B5:51:76:F0:BB:D6:C8:A3:CD:38:EA:D4:DA:D1:07:A2:90:5C Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 346B04D5B2E377185BFE16223F8BABBB0713D454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0155 Signing time: Wed 15 Apr 2026 16:00:42 +0000 Manifest this update: Wed 15 Apr 2026 15:55:42 +0000 Manifest next update: Sun 19 Apr 2026 01:07:42 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: aIHodB1nz1DhifH6iuPw3Hsr0XqaD481RG1+0C9lrxQ=) 2: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: qz1dXSjmkF1AA5Ei88d+aInM4zHfe9p4wjNpf+FYrqI=) 3: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: 2cfZ6gvsjmS9slxQjCEN8X+U3QE260jJaFlWNiVAUz8=) 4: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: JrpOhdiy+mBFESSL7rD9ukXYen5fXGnMpvaEHRT8ihU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6b:04:d5:b2:e3:77:18:5b:fe:16:22:3f:8b:ab:bb:07:13:d4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Apr 15 15:55:42 2026 GMT Not After : Apr 19 01:07:42 2026 GMT Subject: CN=3C4EB55176F0BBD6C8A3CD38EAD4DAD107A2905C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:6c:bd:03:97:08:77:93:3f:f9:6e:e1:04: 20:e8:f7:8e:25:4b:33:e8:5e:bc:9f:e3:c3:01:fb: 3b:98:ee:3d:17:2c:50:31:13:52:10:3b:03:92:fc: 3e:dd:b0:69:8e:02:2d:c5:eb:a2:67:14:26:6d:3e: 75:aa:4a:67:f6:c2:f2:36:15:54:d8:df:92:c3:a3: 4d:d7:d2:3a:55:67:80:5c:b5:cb:03:89:a5:0c:82: f0:bc:5e:70:0c:2d:87:31:ca:6b:22:e7:21:56:5b: 33:1f:8d:b8:75:de:81:4f:86:2f:9e:ac:fa:12:97: b2:61:97:4b:21:17:16:66:79:c6:31:67:cb:2b:ef: ef:c1:ab:3a:c3:01:0b:e7:f8:c5:77:38:0f:df:fc: c2:68:1c:1e:96:6a:a0:35:8b:32:20:e3:90:32:08: 0a:78:e8:5f:c3:67:ab:5b:b4:48:fa:2a:63:42:91: a4:5a:c3:7b:75:ea:d0:9b:dd:ec:bd:1d:06:c6:e7: 90:d0:ca:86:27:4d:1c:71:00:24:ef:23:c8:f7:42: 3d:1e:4d:4d:76:9f:e2:80:4c:d2:b0:63:98:e4:9e: cc:76:dc:6b:ce:1c:59:b4:c5:2c:9e:a6:3c:88:4e: b9:51:55:0c:e6:43:f3:bc:4d:40:fe:19:70:11:75: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:B5:51:76:F0:BB:D6:C8:A3:CD:38:EA:D4:DA:D1:07:A2:90:5C X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:36:67:16:bc:e0:df:62:0e:5c:6e:3a:4e:56:67:17:ba:f1: c0:c1:68:38:43:11:d5:65:71:ae:ea:0c:91:23:20:ed:4f:cf: cb:03:03:cb:f5:59:77:dc:a2:f8:4f:fb:45:5b:ee:06:0e:24: c5:96:63:2a:4f:5f:89:ee:d5:bd:65:ac:79:63:d0:c5:61:de: 53:28:32:39:70:e2:c0:97:11:5a:b1:e1:67:5f:30:29:f7:7a: 1b:8f:08:8e:0a:90:29:c5:05:f9:d0:90:c8:41:1f:99:1a:9d: 16:dc:36:07:8f:b3:2e:38:67:32:53:50:bc:1e:b9:30:ff:74: 9c:5f:e5:bf:d0:12:10:d1:c7:42:a9:41:d3:09:db:27:cf:e8: db:29:48:ae:e3:8d:7d:9a:aa:d4:1f:78:9a:23:82:17:07:c8: 03:0c:bf:4c:a4:82:1f:da:f9:1b:5b:a3:9b:e0:65:07:0c:f6: 96:77:cd:70:12:5b:22:a8:52:89:c3:f5:80:53:c7:46:31:57: 6b:fa:ad:4d:50:bd:64:dd:2f:67:c3:33:b2:eb:6e:86:01:64: da:13:bb:e2:b4:da:33:f3:71:5e:8a:8f:8c:aa:33:ea:a7:a9: 32:ae:41:63:b0:83:e7:12:57:de:6b:ec:11:09:22:18:38:9d: 6a:cf:93:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGsE1bLjdxhb/hYiP4uruwcT1FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjA0MTUxNTU1NDJaFw0yNjA0MTkwMTA3NDJaMDMxMTAvBgNV BAMTKDNDNEVCNTUxNzZGMEJCRDZDOEEzQ0QzOEVBRDREQUQxMDdBMjkwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxWy9A5cId5M/+W7hBCDo944l SzPoXryf48MB+zuY7j0XLFAxE1IQOwOS/D7dsGmOAi3F66JnFCZtPnWqSmf2wvI2 FVTY35LDo03X0jpVZ4BctcsDiaUMgvC8XnAMLYcxymsi5yFWWzMfjbh13oFPhi+e rPoSl7Jhl0shFxZmecYxZ8sr7+/BqzrDAQvn+MV3OA/f/MJoHB6WaqA1izIg45Ay CAp46F/DZ6tbtEj6KmNCkaRaw3t16tCb3ey9HQbG55DQyoYnTRxxACTvI8j3Qj0e TU12n+KATNKwY5jknsx23GvOHFm0xSyepjyITrlRVQzmQ/O8TUD+GXARdfoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPE61UXbwu9bIo8046tTa0QeikFwwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI2Zxa84N9iDlxuOk5WZxe68cDBaDhDEdVl ca7qDJEjIO1Pz8sDA8v1WXfcovhP+0Vb7gYOJMWWYypPX4nu1b1lrHlj0MVh3lMo Mjlw4sCXEVqx4WdfMCn3ehuPCI4KkCnFBfnQkMhBH5kanRbcNgePsy44ZzJTULwe uTD/dJxf5b/QEhDRx0KpQdMJ2yfP6NspSK7jjX2aqtQfeJojghcHyAMMv0ykgh/a +Rtbo5vgZQcM9pZ3zXASWyKoUonD9YBTx0YxV2v6rU1QvWTdL2fDM7LrboYBZNoT u+K02jPzcV6Kj4yqM+qnqTKuQWOwg+cSV95r7BEJIhg4nWrPk4A= -----END CERTIFICATE-----Generated at Fri Apr 17 13:36:48 2026 by rpki-client