$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: +wFwiWSko7+u3UgqhM2ouXqhIJcVXOdsbZGqOycgG5c= Subject key identifier: F2:49:F2:9C:8A:D1:D3:A3:D2:A4:E7:6B:81:ED:6A:71:FC:64:AE:F0 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 29BE2906D5E3113DC9A1E5B76739D4FBED3B745F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0569 Signing time: Wed 15 Apr 2026 21:42:34 +0000 Manifest this update: Wed 15 Apr 2026 21:37:34 +0000 Manifest next update: Sun 19 Apr 2026 06:33:34 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: EIfa8/381EH9AkvrKZfOvNo7s3SbuSYXgXm8/1NHEzQ=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:be:29:06:d5:e3:11:3d:c9:a1:e5:b7:67:39:d4:fb:ed:3b:74:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Apr 15 21:37:34 2026 GMT Not After : Apr 19 06:33:34 2026 GMT Subject: CN=F249F29C8AD1D3A3D2A4E76B81ED6A71FC64AEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:28:3c:8c:42:73:77:fa:0b:fb:0d:a2:f4: 34:37:8d:00:63:66:84:50:89:de:27:e5:0e:b8:9e: 7c:2b:df:06:3a:5d:d7:2b:bc:4d:d6:9d:dd:26:f4: 73:c7:3a:54:3b:7b:43:0b:6d:14:a9:8f:b1:90:62: 70:8d:5f:ee:92:ba:89:fc:d8:92:e4:3f:f5:ee:fe: 86:b8:5f:ca:9a:5e:b9:30:34:18:ca:38:14:60:92: 88:27:b1:ff:f7:8c:ee:8b:8d:96:be:66:b2:a3:ec: b9:6b:8c:c8:16:7f:de:7d:8a:b4:1d:68:a2:93:f3: 97:3c:e1:45:0e:ad:13:26:5d:9a:5e:59:cc:2c:be: 4a:2d:ff:3c:81:49:74:58:7b:03:e8:1d:25:ad:84: 4d:0b:70:ba:ed:ff:68:30:21:b8:84:2f:22:5e:32: ef:03:0e:f4:0d:0d:82:57:e1:a2:db:f6:ad:43:bb: e8:94:50:20:2c:0c:71:85:2c:9c:45:68:31:77:33: 9d:c8:84:f2:ca:4b:84:3c:cd:2c:20:a4:d7:db:6c: 1b:22:c9:f5:21:0d:3f:cc:d9:cc:4f:a0:c2:90:1d: 05:09:ff:65:42:a7:41:2b:fb:46:e6:35:2e:c1:e8: 75:f3:b1:c4:eb:a0:45:8f:01:30:fd:2e:15:fa:ed: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:F2:9C:8A:D1:D3:A3:D2:A4:E7:6B:81:ED:6A:71:FC:64:AE:F0 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:61:0d:6e:af:46:8b:3f:ce:1f:32:f3:51:13:4a:2d:37: 36:b8:c7:02:93:1e:d4:b7:28:7b:f4:a5:5e:7e:bb:37:3b:68: 5a:07:1b:0d:ba:b4:df:17:6d:44:65:aa:46:21:28:31:b2:26: d1:c3:f8:c4:8c:d4:d2:e5:33:55:76:89:dd:a8:ba:4c:d5:fa: 41:5c:8a:82:f3:df:52:ec:a7:47:1a:b1:3d:3d:fe:fb:96:b1: 29:c7:3b:10:e9:91:12:72:3e:df:92:b4:79:28:bf:68:be:15: cf:bb:33:33:ac:9f:0b:38:88:bd:44:b5:a4:37:03:26:a5:1f: d4:b5:6e:05:64:f3:7d:16:23:0c:e2:cc:bb:e0:00:24:a5:49: b9:63:c4:30:cf:d2:a6:36:fa:5f:c4:50:da:f2:93:80:27:c2: 1e:93:5f:ec:5f:a0:23:b5:cd:3e:e1:a8:22:7c:7a:c9:e4:33: 77:be:d4:17:7b:35:ce:d0:46:f4:aa:59:57:41:92:fc:48:d3: 28:c0:7f:db:43:1d:88:01:74:b9:6d:ec:80:f5:f1:e4:86:21: 41:77:2d:ea:87:64:57:2c:2f:09:e8:26:af:74:fa:03:4d:89: 21:02:a6:c1:27:2e:43:3c:f8:5d:3c:38:54:fc:3d:1a:bb:cc: 35:83:92:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKb4pBtXjET3JoeW3ZznU++07dF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNjA0MTUyMTM3MzRaFw0yNjA0MTkwNjMzMzRaMDMxMTAvBgNV BAMTKEYyNDlGMjlDOEFEMUQzQTNEMkE0RTc2QjgxRUQ2QTcxRkM2NEFFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLig8jEJzd/oL+w2i9DQ3jQBj ZoRQid4n5Q64nnwr3wY6XdcrvE3Wnd0m9HPHOlQ7e0MLbRSpj7GQYnCNX+6Suon8 2JLkP/Xu/oa4X8qaXrkwNBjKOBRgkognsf/3jO6LjZa+ZrKj7LlrjMgWf959irQd aKKT85c84UUOrRMmXZpeWcwsvkot/zyBSXRYewPoHSWthE0LcLrt/2gwIbiELyJe Mu8DDvQNDYJX4aLb9q1Du+iUUCAsDHGFLJxFaDF3M53IhPLKS4Q8zSwgpNfbbBsi yfUhDT/M2cxPoMKQHQUJ/2VCp0Er+0bmNS7B6HXzscTroEWPATD9LhX67bK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8knynIrR06PSpOdrge1qcfxkrvAwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSFYQ1ur0aLP84fMvNRE0otNza4xwKTHtS3 KHv0pV5+uzc7aFoHGw26tN8XbURlqkYhKDGyJtHD+MSM1NLlM1V2id2oukzV+kFc ioLz31Lsp0casT09/vuWsSnHOxDpkRJyPt+StHkov2i+Fc+7MzOsnws4iL1EtaQ3 AyalH9S1bgVk830WIwzizLvgACSlSbljxDDP0qY2+l/EUNryk4Anwh6TX+xfoCO1 zT7hqCJ8esnkM3e+1Bd7Nc7QRvSqWVdBkvxI0yjAf9tDHYgBdLlt7ID18eSGIUF3 LeqHZFcsLwnoJq90+gNNiSECpsEnLkM8+F08OFT8PRq7zDWDksQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:01:50 2026 by rpki-client