$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: YDiSIoG2kkv4uX7S91ZhfqSrg8m61SNBFPbEBKYpZVk= Subject key identifier: B4:DA:62:49:25:C9:15:D6:7B:AF:CA:C0:3D:67:0D:FD:8E:26:E7:AB Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 0241DBA6ED418A4DF589AAEA14F19AE3474F5886 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 0138 Signing time: Sun 19 Apr 2026 02:50:04 +0000 Manifest this update: Sun 19 Apr 2026 02:45:04 +0000 Manifest next update: Wed 22 Apr 2026 06:05:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: //8+3kvQNe39sMMdRJxI6tzEL7kr/Txb/kZmza8uM3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:41:db:a6:ed:41:8a:4d:f5:89:aa:ea:14:f1:9a:e3:47:4f:58:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Apr 19 02:45:04 2026 GMT Not After : Apr 22 06:05:04 2026 GMT Subject: CN=B4DA624925C915D67BAFCAC03D670DFD8E26E7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:fc:e9:d8:ca:7d:45:95:f2:ed:fe:fc:ac: f3:99:93:0f:bd:9e:ea:7e:b5:e2:b2:4d:6f:a9:75: 02:a3:fa:8a:8a:38:f9:0a:bc:c5:b3:2c:60:05:dd: 0b:bb:21:18:18:1c:fb:9f:28:68:20:5b:32:10:a7: d9:33:e5:35:be:f4:bf:d8:84:4f:53:03:de:9d:14: fc:21:56:a0:64:55:38:86:49:0c:55:8e:86:ca:56: 01:d0:65:04:8f:98:db:36:31:69:c0:33:3a:ff:ed: e8:63:f5:70:dd:03:d8:a6:a6:b6:7c:17:d2:8e:10: 10:f1:b1:1f:f6:53:e6:be:74:f6:7c:db:39:58:f0: 85:70:d3:8c:e5:b7:4f:67:54:71:b5:fc:52:d9:b3: a4:46:7a:c0:e2:79:33:99:9e:80:02:0c:11:4f:72: c2:19:81:96:1b:b5:8e:e1:5b:63:e5:fa:a2:30:57: ae:3c:5b:00:c4:e8:6d:1b:aa:d1:47:52:51:db:aa: 11:ff:7f:83:db:b3:78:69:ca:de:0a:bf:d7:58:e1: e1:e1:dd:c4:00:f9:b1:92:c3:bf:fa:ba:c7:9e:9c: 5d:65:56:4d:2b:a1:25:c8:02:6b:4c:e2:18:d8:4f: 51:0a:30:0f:63:d6:6a:47:1d:48:3a:6c:d7:7d:84: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:62:49:25:C9:15:D6:7B:AF:CA:C0:3D:67:0D:FD:8E:26:E7:AB X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:8a:11:77:ca:24:62:e1:25:e9:46:74:d8:96:34:6b:3c: 32:48:19:d5:0a:76:9f:be:19:2d:17:52:12:bc:97:c0:e4:4f: d7:36:49:6c:8c:b5:34:54:b5:20:42:8c:ec:0e:e0:29:d1:4c: e7:ad:ef:2b:37:6a:b3:fe:35:a7:89:4c:e4:3f:01:92:bb:1f: 80:b9:43:0c:a8:e3:ea:b0:9f:c7:7c:c9:49:15:3e:13:db:93: cc:6d:1d:23:a8:09:d1:88:6f:e0:ee:a0:4b:6c:ab:d1:94:06: 06:94:65:8c:c4:23:91:f1:5f:62:a9:a9:5f:06:9a:5f:c8:f0: 48:2b:97:3d:3b:f0:7a:0a:eb:ef:aa:30:fd:44:44:44:23:9f: f3:12:2b:77:33:61:2a:24:f8:52:09:30:a1:72:04:c2:71:6f: 15:60:d1:54:a1:d6:e4:20:87:4d:b9:b4:f5:ac:ab:96:66:80: 79:a2:b8:94:b5:fc:e4:4e:e7:09:6a:c6:0b:6b:9c:b1:85:f6: 79:9a:28:5e:9e:b4:05:45:83:d8:10:28:09:ba:b4:ca:28:93: cb:bd:10:61:cd:a2:3e:cb:e6:21:b3:88:4f:53:41:ce:ca:04: 42:90:02:9e:73:d3:96:a0:ea:f1:61:6e:3b:e8:f5:c2:73:5b: bf:9e:bd:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkHbpu1Bik31iarqFPGa40dPWIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNjA0MTkwMjQ1MDRaFw0yNjA0MjIwNjA1MDRaMDMxMTAvBgNV BAMTKEI0REE2MjQ5MjVDOTE1RDY3QkFGQ0FDMDNENjcwREZEOEUyNkU3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Qfzp2Mp9RZXy7f78rPOZkw+9 nup+teKyTW+pdQKj+oqKOPkKvMWzLGAF3Qu7IRgYHPufKGggWzIQp9kz5TW+9L/Y hE9TA96dFPwhVqBkVTiGSQxVjobKVgHQZQSPmNs2MWnAMzr/7ehj9XDdA9imprZ8 F9KOEBDxsR/2U+a+dPZ82zlY8IVw04zlt09nVHG1/FLZs6RGesDieTOZnoACDBFP csIZgZYbtY7hW2Pl+qIwV648WwDE6G0bqtFHUlHbqhH/f4Pbs3hpyt4Kv9dY4eHh 3cQA+bGSw7/6useenF1lVk0roSXIAmtM4hjYT1EKMA9j1mpHHUg6bNd9hPbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNpiSSXJFdZ7r8rAPWcN/Y4m56swHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDRihF3yiRi4SXpRnTYljRrPDJIGdUKdp++ GS0XUhK8l8DkT9c2SWyMtTRUtSBCjOwO4CnRTOet7ys3arP+NaeJTOQ/AZK7H4C5 Qwyo4+qwn8d8yUkVPhPbk8xtHSOoCdGIb+DuoEtsq9GUBgaUZYzEI5HxX2KpqV8G ml/I8Egrlz078HoK6++qMP1EREQjn/MSK3czYSok+FIJMKFyBMJxbxVg0VSh1uQg h025tPWsq5ZmgHmiuJS1/ORO5wlqxgtrnLGF9nmaKF6etAVFg9gQKAm6tMook8u9 EGHNoj7L5iGziE9TQc7KBEKQAp5z05ag6vFhbjvo9cJzW7+evaE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:32:29 2026 by rpki-client