$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: m8xDOuNVySWwwpIk0lXyQTnryPWsa2IBq+5p1tycQPw= Subject key identifier: C6:D2:DE:30:CD:6C:87:E8:49:A8:8C:EC:10:17:1A:CC:64:32:97:4B Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 6ED90EC65D7B1562A15BF34FC0830F1601FFE32F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 01EA Signing time: Fri 17 Apr 2026 13:10:05 +0000 Manifest this update: Fri 17 Apr 2026 13:05:05 +0000 Manifest next update: Mon 20 Apr 2026 14:17:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: ntt6i1KS6Nco0kMTvYx5ZeyT6rOsTgXbChNnAX3UKg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:0e:c6:5d:7b:15:62:a1:5b:f3:4f:c0:83:0f:16:01:ff:e3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Apr 17 13:05:05 2026 GMT Not After : Apr 20 14:17:05 2026 GMT Subject: CN=C6D2DE30CD6C87E849A88CEC10171ACC6432974B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:22:a1:85:ab:eb:46:8b:6c:52:83:1a:b4: 73:d6:6b:01:36:16:0d:51:85:cf:3b:e4:1f:f8:4d: a8:32:74:3a:5d:ca:b0:49:c4:71:00:e0:78:d6:c2: e2:0b:08:b2:f3:bb:40:ad:a4:6c:a6:e0:ba:9e:89: f5:b4:fd:11:97:97:b6:69:75:a5:51:8a:ff:e8:e0: 97:68:8b:76:af:a5:76:bf:fc:12:de:62:ca:85:9b: 34:d1:55:ab:a5:01:d0:04:28:3e:43:71:4f:1f:52: b5:76:2f:04:7d:f0:72:52:f2:83:75:89:b0:93:f4: f3:51:3e:33:87:84:d6:30:b5:9c:3e:91:0c:b7:0c: e4:99:23:e8:02:bd:00:72:5c:91:f9:ff:83:f8:b6: 19:08:45:7a:50:df:5e:18:bc:5e:88:f2:b9:d5:1d: d1:a0:b3:9c:5b:0d:33:40:88:f9:8a:e3:c4:26:97: 80:c2:ec:46:b7:ae:99:fa:55:c9:5a:f5:cb:bc:e4: f2:8a:93:b6:fd:26:f1:ee:0d:ab:c1:e0:e3:11:08: cd:fe:44:f6:0a:3e:59:2c:86:b8:b7:8c:ab:06:8d: 70:19:6d:1f:b3:ff:32:6f:94:9c:7f:d8:5e:34:48: 4c:a1:71:56:c2:34:f1:79:99:99:ef:0e:5e:f9:d4: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D2:DE:30:CD:6C:87:E8:49:A8:8C:EC:10:17:1A:CC:64:32:97:4B X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:be:e7:43:c6:6f:2c:e7:4a:0d:8e:b2:b4:31:a4:60:3b:f8: 55:c5:63:83:4a:9b:c8:2c:a3:ce:55:cc:84:3c:27:06:63:e8: dc:c7:13:19:ae:ae:c4:6c:ca:7a:71:81:e1:28:82:9d:1d:8e: 59:b4:68:d5:5c:dd:c6:1c:4a:d6:f5:dc:b7:95:7a:4f:87:fc: e4:f0:65:2c:00:0f:ce:e8:10:9d:44:62:c2:ca:28:b7:10:d3: 8f:61:be:8c:ae:5c:2c:6b:55:c7:6e:98:db:a7:3d:91:3a:a2: 0d:0f:62:d6:65:25:37:f4:2f:f3:c7:17:10:e3:ea:17:d3:c3: e4:2c:d5:8e:a7:74:1b:cf:89:cf:f3:4e:90:09:99:62:d1:b6: 1e:50:eb:66:b0:ce:56:be:42:1c:c3:a7:92:bb:f7:ba:a7:5f: e2:66:0f:f7:c2:6d:18:83:b8:42:d5:97:23:9d:19:9d:4a:6f: 99:32:e4:6b:2a:33:53:f6:5b:30:1c:9b:c9:57:ec:c1:06:cb: cb:d0:a8:12:be:b4:1c:5e:35:dc:bf:df:cb:95:13:14:56:5e: 27:c4:66:19:75:15:39:c0:51:b5:c5:52:06:59:a4:2d:4f:b4: e4:14:fc:ab:33:cf:a9:96:ac:8b:1f:25:df:31:61:8c:34:e0: ac:aa:0c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtkOxl17FWKhW/NPwIMPFgH/4y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNjA0MTcxMzA1MDVaFw0yNjA0MjAxNDE3MDVaMDMxMTAvBgNV BAMTKEM2RDJERTMwQ0Q2Qzg3RTg0OUE4OENFQzEwMTcxQUNDNjQzMjk3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4yKhhavrRotsUoMatHPWawE2 Fg1Rhc875B/4TagydDpdyrBJxHEA4HjWwuILCLLzu0CtpGym4LqeifW0/RGXl7Zp daVRiv/o4Jdoi3avpXa//BLeYsqFmzTRVaulAdAEKD5DcU8fUrV2LwR98HJS8oN1 ibCT9PNRPjOHhNYwtZw+kQy3DOSZI+gCvQByXJH5/4P4thkIRXpQ314YvF6I8rnV HdGgs5xbDTNAiPmK48Qml4DC7Ea3rpn6Vcla9cu85PKKk7b9JvHuDavB4OMRCM3+ RPYKPlkshri3jKsGjXAZbR+z/zJvlJx/2F40SEyhcVbCNPF5mZnvDl751JwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtLeMM1sh+hJqIzsEBcazGQyl0swHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa+50PGbyznSg2OsrQxpGA7+FXFY4NKm8gs o85VzIQ8JwZj6NzHExmursRsynpxgeEogp0djlm0aNVc3cYcStb13LeVek+H/OTw ZSwAD87oEJ1EYsLKKLcQ049hvoyuXCxrVcdumNunPZE6og0PYtZlJTf0L/PHFxDj 6hfTw+Qs1Y6ndBvPic/zTpAJmWLRth5Q62awzla+QhzDp5K797qnX+JmD/fCbRiD uELVlyOdGZ1Kb5ky5GsqM1P2WzAcm8lX7MEGy8vQqBK+tBxeNdy/38uVExRWXifE Zhl1FTnAUbXFUgZZpC1PtOQU/Kszz6mWrIsfJd8xYYw04KyqDOI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:40 2026 by rpki-client