$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: uAdp0zT2byDAXQ5R28BVGcFNlcQc30qcwVaEI6n/OdM= Subject key identifier: AB:19:93:BC:99:77:A4:16:07:AE:F5:79:DE:72:10:BF:DE:9F:5B:BA Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 435B631DB7593E5F9D3F048F09BD19507A15DA14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 014A Signing time: Fri 17 Apr 2026 03:12:08 +0000 Manifest this update: Fri 17 Apr 2026 03:07:08 +0000 Manifest next update: Mon 20 Apr 2026 12:19:08 +0000 Files and hashes: 1: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 3sn3cHR3pPdkg5yz9dRolP/N8qZbatQdrQrIM71l4Oo=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PAO+Kk4WyW8qQnaa3rlW0GbO1a4tKVv1+JDyB+HgHco=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: edoGoSPm2CAwjuI59D3DYQ99ncwjrFmVk1Lk6FbM204=) 4: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: C0wAJqyvAU7Sh+BpTEuQFaoTXiogQNOOPTk9Yvnz4Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5b:63:1d:b7:59:3e:5f:9d:3f:04:8f:09:bd:19:50:7a:15:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Apr 17 03:07:08 2026 GMT Not After : Apr 20 12:19:08 2026 GMT Subject: CN=AB1993BC9977A41607AEF579DE7210BFDE9F5BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:f7:f3:d3:3f:5a:90:9e:1b:b6:0c:75:d6: ea:64:c5:c0:24:ea:ec:6a:a3:a0:97:e7:59:89:c5: c1:4e:ba:28:ee:b8:60:ce:7b:55:86:80:25:f7:ce: b1:bd:05:42:e4:4e:db:f9:46:64:aa:97:9e:08:39: 6b:69:4c:74:19:c4:a6:4d:cf:41:19:1e:59:1d:63: ed:c7:74:c4:c6:c1:ce:b1:e6:05:b2:26:42:e6:96: fa:8e:3b:42:70:50:b4:f8:1c:9d:36:cf:47:c1:d6: 95:81:dc:67:fc:7f:02:c1:0e:91:40:55:94:27:bd: 18:70:6a:75:68:49:6d:cb:7a:dd:53:ef:85:80:65: de:85:3b:be:fe:9c:f0:56:8a:a8:b8:f1:30:4e:9d: ff:d3:e0:aa:2c:96:2f:5e:1e:61:42:0c:a7:ea:c4: 60:bd:ca:a8:50:0e:a6:8e:b0:a8:0d:3d:48:02:65: 99:52:9c:8b:f0:ee:0f:97:d6:b3:c8:ef:7d:8b:60: a7:27:fe:25:36:30:a0:f1:74:a9:f2:fd:4c:c1:c7: ed:1d:79:86:87:76:1f:c0:53:c0:c8:ee:ee:9b:31: a9:c5:76:79:3f:76:50:41:4d:eb:c0:3b:1a:aa:c3: 78:be:f7:79:50:51:9f:63:38:6d:a7:f7:14:05:8d: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:93:BC:99:77:A4:16:07:AE:F5:79:DE:72:10:BF:DE:9F:5B:BA X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4b:24:3c:2e:e4:b1:22:2a:c1:d7:6d:f2:2b:59:c4:69:10: f6:a9:cd:60:90:76:b1:ab:e2:ae:45:69:db:22:28:3e:79:eb: d9:fa:09:1e:cf:ed:c2:88:db:26:cb:ed:d1:92:21:1b:bb:f9: d9:4e:40:57:f0:79:0e:11:67:91:ba:09:78:74:4d:60:50:e0: 5e:dc:fa:f1:e8:07:6b:f7:28:00:de:49:7f:59:ac:e2:24:37: 85:c7:94:e2:29:49:ec:41:ed:18:ae:fe:5e:6f:2a:10:61:45: 07:be:fa:eb:ec:52:e8:48:5e:7d:a0:3d:dd:4c:0e:22:99:43: d8:24:d1:22:73:79:da:27:b1:85:b7:0b:88:03:22:f1:56:37: d3:55:85:04:17:e0:fd:3d:ac:f8:ae:07:80:94:0c:0d:c5:11: d2:ef:11:35:0e:50:48:42:d6:e5:2d:33:57:bf:7a:45:d5:fe: f3:63:dc:30:00:7e:02:20:29:7d:02:80:d6:a8:82:de:58:c5: cb:a2:54:c5:01:17:5e:a5:f2:ba:9e:1f:8a:2f:e1:08:bb:dd: 2b:d1:e2:42:95:df:b0:81:ef:bc:1a:e5:16:26:5d:ef:dd:b6: 40:7e:61:87:01:72:38:7c:a6:08:cd:6d:b4:c5:c0:30:36:00: 68:a4:56:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1tjHbdZPl+dPwSPCb0ZUHoV2hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNjA0MTcwMzA3MDhaFw0yNjA0MjAxMjE5MDhaMDMxMTAvBgNV BAMTKEFCMTk5M0JDOTk3N0E0MTYwN0FFRjU3OURFNzIxMEJGREU5RjVCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3Pfz0z9akJ4btgx11upkxcAk 6uxqo6CX51mJxcFOuijuuGDOe1WGgCX3zrG9BULkTtv5RmSql54IOWtpTHQZxKZN z0EZHlkdY+3HdMTGwc6x5gWyJkLmlvqOO0JwULT4HJ02z0fB1pWB3Gf8fwLBDpFA VZQnvRhwanVoSW3Let1T74WAZd6FO77+nPBWiqi48TBOnf/T4Kosli9eHmFCDKfq xGC9yqhQDqaOsKgNPUgCZZlSnIvw7g+X1rPI732LYKcn/iU2MKDxdKny/UzBx+0d eYaHdh/AU8DI7u6bManFdnk/dlBBTevAOxqqw3i+93lQUZ9jOG2n9xQFjeD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxmTvJl3pBYHrvV53nIQv96fW7owHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINLJDwu5LEiKsHXbfIrWcRpEPapzWCQdrGr 4q5FadsiKD5569n6CR7P7cKI2ybL7dGSIRu7+dlOQFfweQ4RZ5G6CXh0TWBQ4F7c +vHoB2v3KADeSX9ZrOIkN4XHlOIpSexB7Riu/l5vKhBhRQe++uvsUuhIXn2gPd1M DiKZQ9gk0SJzedonsYW3C4gDIvFWN9NVhQQX4P09rPiuB4CUDA3FEdLvETUOUEhC 1uUtM1e/ekXV/vNj3DAAfgIgKX0CgNaogt5YxcuiVMUBF16l8rqeH4ov4Qi73SvR 4kKV37CB77wa5RYmXe/dtkB+YYcBcjh8pgjNbbTFwDA2AGikVho= -----END CERTIFICATE-----Generated at Fri Apr 17 10:56:19 2026 by rpki-client