$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft File: ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json) Hash identifier: wl1yD6iDl8rFf3tf3PmeqmZB/EA5D7tT2sEC+WTerSM= Subject key identifier: 93:D1:EA:96:C5:37:9D:6E:19:33:5D:DE:1D:52:4A:31:27:B3:E6:3B Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A Certificate issuer: /CN=ED137633BAEE661A0ACBBF277089F107CB59439A Certificate serial: 4ADC8FA05ADA5700D41FAA2C3FB265CB4F32AE6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft Manifest number: 0211 Signing time: Fri 17 Apr 2026 17:41:43 +0000 Manifest this update: Fri 17 Apr 2026 17:36:43 +0000 Manifest next update: Mon 20 Apr 2026 19:46:43 +0000 Files and hashes: 1: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: /ETAx9C2Y2SH0OwSahnbQjCtd9p5P2gJwUDGZxdkkNc=) 2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dc:8f:a0:5a:da:57:00:d4:1f:aa:2c:3f:b2:65:cb:4f:32:ae:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A Validity Not Before: Apr 17 17:36:43 2026 GMT Not After : Apr 20 19:46:43 2026 GMT Subject: CN=93D1EA96C5379D6E19335DDE1D524A3127B3E63B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:60:9a:43:30:84:f6:0e:d0:1e:14:41:fa:a1: eb:20:ee:bf:77:0e:59:23:0e:8b:24:86:27:7c:fd: 8f:1e:c8:5f:13:48:df:3f:b4:f8:74:2b:66:13:48: 04:b5:84:c7:5d:ee:51:17:7f:5e:e7:2c:60:c9:f6: 64:e3:33:03:11:bf:03:47:b7:0f:76:4f:d5:47:41: 0a:88:28:81:a6:32:81:34:65:bb:e3:e0:a8:ce:d2: 6b:89:ad:96:0b:d1:84:f8:c3:66:a5:5b:bf:c2:a7: 53:7f:12:4e:81:80:1a:15:07:3b:ea:3e:ce:02:1b: 82:9b:58:f9:56:0e:d1:c2:b4:ed:10:06:ca:36:b6: eb:cf:c3:7b:40:e3:78:39:c4:1c:5b:98:cd:6a:22: 24:bc:3a:80:f5:72:ac:20:9a:86:67:24:8d:64:57: 6d:6d:10:f8:ab:20:81:7e:9b:89:ca:b3:ff:7e:01: b6:26:7e:d6:ca:87:e3:09:f3:13:c4:36:31:c8:d8: 6f:23:66:b7:ce:76:eb:f4:a2:69:65:61:d1:24:6a: 2e:fb:67:c9:ef:2f:fd:3d:80:23:20:c1:58:1e:38: 5c:71:0a:56:ba:33:9b:64:c7:b0:f2:00:13:1e:8a: 8d:cf:b7:6f:15:04:1e:fa:47:7f:b4:fa:d6:db:1b: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D1:EA:96:C5:37:9D:6E:19:33:5D:DE:1D:52:4A:31:27:B3:E6:3B X509v3 Authority Key Identifier: keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a9:64:cb:c6:39:77:b4:c2:c3:3c:a6:dd:4e:5b:87:ef:b2: b8:11:24:9b:8d:7c:aa:cf:22:d1:9a:4d:35:b9:d4:0f:e8:a6: 25:7e:15:5e:1a:f2:47:e9:6f:1e:9b:65:6e:99:28:c2:71:f8: eb:fc:66:32:8c:c8:56:1d:16:ce:dc:24:54:49:87:ca:1f:a3: 8d:e0:9e:fe:90:14:bb:73:61:d6:57:86:35:4a:49:07:83:30: 1c:00:8a:44:93:47:ab:0a:cf:23:8a:c8:33:44:99:1a:b1:96: 5a:c6:f9:52:bd:c5:74:72:de:0d:cd:85:95:6b:31:d1:e0:ee: 9e:8b:5b:1b:39:12:5b:35:21:22:23:b9:ed:71:39:b8:cb:29: 06:bb:ad:47:91:80:0e:e6:80:89:6f:68:94:fa:d8:cc:6b:b3: b4:17:d8:67:8e:6f:07:08:c0:56:a1:36:a9:c8:60:02:5b:4d: b2:c1:46:33:1d:3e:be:dd:61:ac:4b:8a:3a:6d:e0:f7:9b:0d: d2:5a:0a:c6:5d:e3:28:6b:89:3a:ef:bd:2a:f7:59:ef:04:0d: 90:6d:19:d1:4d:8a:68:7c:0a:4a:e3:1d:a2:4d:8e:04:71:b9: 92:b8:0c:96:9d:1d:3c:9e:e6:48:ea:0a:d6:af:19:b7:06:69: 5b:c3:1a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStyPoFraVwDUH6osP7Jly08yrmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdD QjU5NDM5QTAeFw0yNjA0MTcxNzM2NDNaFw0yNjA0MjAxOTQ2NDNaMDMxMTAvBgNV BAMTKDkzRDFFQTk2QzUzNzlENkUxOTMzNURERTFENTI0QTMxMjdCM0U2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0YJpDMIT2DtAeFEH6oesg7r93 DlkjDoskhid8/Y8eyF8TSN8/tPh0K2YTSAS1hMdd7lEXf17nLGDJ9mTjMwMRvwNH tw92T9VHQQqIKIGmMoE0Zbvj4KjO0muJrZYL0YT4w2alW7/Cp1N/Ek6BgBoVBzvq Ps4CG4KbWPlWDtHCtO0QBso2tuvPw3tA43g5xBxbmM1qIiS8OoD1cqwgmoZnJI1k V21tEPirIIF+m4nKs/9+AbYmftbKh+MJ8xPENjHI2G8jZrfOduv0omllYdEkai77 Z8nvL/09gCMgwVgeOFxxCla6M5tkx7DyABMeio3Pt28VBB76R3+0+tbbG3ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9HqlsU3nW4ZM13eHVJKMSez5jswHwYDVR0j BBgwFoAU7RN2M7ruZhoKy78ncInxB8tZQ5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzIyNDM2MC0yNDVkLTRhMWEtYWYzNi1mOWJlZmNkYjcwYjcvMC9FRDEzNzYzM0JB RUU2NjFBMEFDQkJGMjc3MDg5RjEwN0NCNTk0MzlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdDQjU5 NDM5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYx MDdDQjU5NDM5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALapZMvGOXe0wsM8pt1OW4fvsrgRJJuNfKrP ItGaTTW51A/opiV+FV4a8kfpbx6bZW6ZKMJx+Ov8ZjKMyFYdFs7cJFRJh8ofo43g nv6QFLtzYdZXhjVKSQeDMBwAikSTR6sKzyOKyDNEmRqxllrG+VK9xXRy3g3NhZVr MdHg7p6LWxs5Els1ISIjue1xObjLKQa7rUeRgA7mgIlvaJT62Mxrs7QX2GeObwcI wFahNqnIYAJbTbLBRjMdPr7dYaxLijpt4PebDdJaCsZd4yhriTrvvSr3We8EDZBt GdFNimh8CkrjHaJNjgRxuZK4DJadHTye5kjqCtavGbcGaVvDGlc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:17 2026 by rpki-client