$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: 1Co2tEI2fJ5hsvWML2v1oFlgM4iNcUFrobeBqt+TUPM= Subject key identifier: 7C:C0:4C:15:27:AF:A2:A7:D5:D7:96:39:0E:75:BF:FE:F4:EA:EC:40 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 04DF35A404E0ABD68CD346794E1EFF2866B970FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 0226 Signing time: Fri 17 Apr 2026 00:31:12 +0000 Manifest this update: Fri 17 Apr 2026 00:26:12 +0000 Manifest next update: Mon 20 Apr 2026 01:21:12 +0000 Files and hashes: 1: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 3: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 4: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: Mxr1HLe3KrDr7h4kMszK9gO4UdPFKRtwngmXDcEHiQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:df:35:a4:04:e0:ab:d6:8c:d3:46:79:4e:1e:ff:28:66:b9:70:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Apr 17 00:26:12 2026 GMT Not After : Apr 20 01:21:12 2026 GMT Subject: CN=7CC04C1527AFA2A7D5D796390E75BFFEF4EAEC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:6c:de:fc:62:fc:80:f2:57:c5:5e:e0:3f: 53:74:71:85:46:ec:9b:fe:b9:77:98:4f:3f:f3:ff: d5:01:c1:e6:bf:72:7f:22:ca:d3:4c:6c:30:9a:05: b5:a0:91:aa:00:b2:18:52:a7:47:e3:cc:34:6d:8b: a9:cd:83:ba:2e:e3:cd:d4:a7:00:34:e1:d9:d3:dd: de:3a:d8:0c:ff:8e:92:44:83:39:27:67:fc:0a:f3: b9:69:62:b7:56:d6:51:c1:e8:9d:67:f0:e7:1a:d7: 40:10:2f:c7:cb:a8:73:ed:2c:b7:6d:73:e1:1b:30: eb:64:74:78:7f:c2:70:b4:b2:04:48:a5:ca:59:88: 20:4b:9a:55:5a:e6:47:eb:f1:e1:6c:fb:d9:4b:98: 6a:4d:9f:c6:4a:72:35:3a:a8:5b:00:bb:95:a3:ec: ef:62:50:6e:c8:84:52:7c:5d:c6:ab:3d:67:21:d8: 58:b4:cd:1d:61:f4:fd:90:26:35:26:e2:07:71:f3: c5:6b:80:88:e0:5b:72:7d:3b:e3:47:a5:84:c0:81: 32:82:13:77:8a:71:5f:09:c0:d8:ea:44:55:eb:2f: 30:28:41:89:80:4b:2b:56:c1:47:a6:4e:71:c3:31: 0c:3a:8a:81:d9:dc:71:d6:ab:30:2f:cc:46:a9:60: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:4C:15:27:AF:A2:A7:D5:D7:96:39:0E:75:BF:FE:F4:EA:EC:40 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b8:a1:7b:4e:6a:76:ee:d8:62:2c:30:f0:26:e2:15:bb:ea: 1c:dd:4e:ca:25:50:6e:e9:84:32:38:4e:e6:ee:cf:34:9b:71: 7c:03:3f:e8:06:01:d4:31:11:e9:9c:18:c7:0c:15:a8:15:0d: 3e:ef:1b:74:bc:dd:dd:59:45:1f:a8:67:51:50:f4:d0:48:5f: b9:9d:d7:50:91:06:8e:7b:d0:1e:f4:ec:ee:27:3f:b5:c6:23: 62:29:1c:da:48:18:95:33:13:f7:80:88:6c:48:5c:57:d6:86: 40:49:bc:71:58:2a:41:d1:b3:8e:7a:26:77:d1:b2:8e:c8:4f: 7b:ee:bf:fd:29:87:9c:a0:db:b1:12:42:8d:c6:c0:b9:ab:ff: 8a:2b:fd:5f:6d:a5:7f:d4:8d:82:ff:96:0a:a7:b3:78:d6:b5: 4a:f1:45:b7:9b:f7:7d:25:48:1d:bb:83:c3:df:14:f0:c2:ea: 13:d5:64:00:5d:68:63:26:bd:4a:55:4f:ba:39:8b:67:f5:c9: 26:54:de:85:e5:71:e5:25:75:42:30:ab:22:37:4d:96:46:42: 8d:54:8b:a9:72:ed:b1:5f:61:42:1a:e1:fc:72:45:80:b7:9d: b4:7f:89:05:74:f8:02:79:1f:52:dc:3e:8b:24:3a:ca:75:a0: cb:3e:7b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBN81pATgq9aM00Z5Th7/KGa5cPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNjA0MTcwMDI2MTJaFw0yNjA0MjAwMTIxMTJaMDMxMTAvBgNV BAMTKDdDQzA0QzE1MjdBRkEyQTdENUQ3OTYzOTBFNzVCRkZFRjRFQUVDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcWze/GL8gPJXxV7gP1N0cYVG 7Jv+uXeYTz/z/9UBwea/cn8iytNMbDCaBbWgkaoAshhSp0fjzDRti6nNg7ou483U pwA04dnT3d462Az/jpJEgzknZ/wK87lpYrdW1lHB6J1n8Oca10AQL8fLqHPtLLdt c+EbMOtkdHh/wnC0sgRIpcpZiCBLmlVa5kfr8eFs+9lLmGpNn8ZKcjU6qFsAu5Wj 7O9iUG7IhFJ8XcarPWch2Fi0zR1h9P2QJjUm4gdx88VrgIjgW3J9O+NHpYTAgTKC E3eKcV8JwNjqRFXrLzAoQYmASytWwUemTnHDMQw6ioHZ3HHWqzAvzEapYNLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMBMFSevoqfV15Y5DnW//vTq7EAwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK4oXtOanbu2GIsMPAm4hW76hzdTsolUG7p hDI4TubuzzSbcXwDP+gGAdQxEemcGMcMFagVDT7vG3S83d1ZRR+oZ1FQ9NBIX7md 11CRBo570B707O4nP7XGI2IpHNpIGJUzE/eAiGxIXFfWhkBJvHFYKkHRs456JnfR so7IT3vuv/0ph5yg27ESQo3GwLmr/4or/V9tpX/UjYL/lgqns3jWtUrxRbeb930l SB27g8PfFPDC6hPVZABdaGMmvUpVT7o5i2f1ySZU3oXlceUldUIwqyI3TZZGQo1U i6ly7bFfYUIa4fxyRYC3nbR/iQV0+AJ5H1LcPoskOsp1oMs+e+M= -----END CERTIFICATE-----Generated at Fri Apr 17 14:50:46 2026 by rpki-client