$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: vXYFTMpS2OcKBQdtL8oPoveW6UMn+HdteY+WjVBI7/M= Subject key identifier: B4:67:B2:98:7B:E1:C9:C8:0B:59:C8:BB:9C:10:BC:A3:1F:8F:A8:01 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 5EDB16D9CDAF47F780BF7F94051610EFCB8207DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 024D Signing time: Thu 16 Apr 2026 10:52:05 +0000 Manifest this update: Thu 16 Apr 2026 10:47:05 +0000 Manifest next update: Sun 19 Apr 2026 17:56:05 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM=) 3: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: QkuRD2kJD80/L+7QXBeYVUOUBrfCIzK0izZ5ciPPfLI=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:db:16:d9:cd:af:47:f7:80:bf:7f:94:05:16:10:ef:cb:82:07:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Apr 16 10:47:05 2026 GMT Not After : Apr 19 17:56:05 2026 GMT Subject: CN=B467B2987BE1C9C80B59C8BB9C10BCA31F8FA801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:3e:a0:b4:22:24:79:f4:be:4c:8a:e5:01: b8:2d:bb:de:b8:67:6f:87:22:7d:13:d8:f5:0c:ce: 10:57:a9:cd:ff:90:7e:88:3c:c5:35:e4:0e:88:b9: c4:94:c2:dc:95:af:30:36:81:45:88:8a:62:ad:e0: c2:06:c3:f1:a3:b8:05:67:b9:15:d2:11:a5:3b:34: 0b:22:ec:77:ff:c3:2a:03:23:16:7a:3f:c3:af:d2: 69:27:85:93:93:8a:12:14:2e:f2:2f:c8:d9:6b:22: 51:d8:4f:e8:41:65:2a:30:9b:03:b1:d3:b4:35:44: 3f:39:8e:7d:af:de:ea:3a:f6:fd:f0:cc:d7:1d:46: 98:e2:56:9f:0d:d9:80:f4:7c:07:97:21:ce:39:bc: 0f:5e:c0:76:f4:e8:58:fa:41:39:93:5d:12:d4:5a: 93:9c:e9:c3:90:98:4d:ca:3a:67:64:90:8b:3c:a1: c1:9e:e7:bd:0a:35:83:28:8d:74:8c:a2:f2:ee:c5: 8c:8b:b3:ce:f0:d4:d4:9b:77:b5:6e:a4:ad:d6:1e: 46:45:9c:ad:20:21:4f:6d:b9:52:94:53:2a:4a:1b: 34:37:d3:30:42:90:56:ff:8f:11:03:30:d0:e6:59: 6d:bd:93:18:0c:84:3c:54:08:8a:1f:2f:68:02:f6: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:67:B2:98:7B:E1:C9:C8:0B:59:C8:BB:9C:10:BC:A3:1F:8F:A8:01 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b3:06:1c:96:df:80:03:bc:0b:32:22:95:5b:73:e5:2b:79: 47:71:dc:8d:eb:5a:63:e9:99:43:f6:f4:5b:64:b1:f9:b5:c7: e4:33:e8:97:82:5b:5c:ad:80:c0:1b:27:8c:04:f2:78:b2:ad: a4:f2:c7:d2:ac:8f:44:62:3f:ab:70:e9:d0:a1:95:f4:6e:04: 70:c3:b4:8e:4f:92:4d:be:d2:10:c5:ce:ce:fb:f4:fe:ff:d7: a6:aa:d8:24:5e:6f:75:a5:bc:35:96:ac:76:99:85:a7:01:42: a4:41:f7:b4:01:ff:aa:59:35:c1:6b:3b:75:c8:fb:4f:7c:c6: be:68:82:ad:b6:55:af:35:b3:ce:44:4d:d9:02:da:75:40:04: bc:48:6c:a5:c6:3e:1c:88:79:5e:c2:c9:69:fe:63:8d:c1:a5: ab:d4:2e:cf:ec:f2:ae:7e:00:ae:b8:9b:ad:92:b7:ae:80:04: e0:59:cc:3a:2e:77:ef:a6:fd:e1:c7:9a:20:39:82:4c:bc:fb: c9:76:f9:c3:e1:d5:c4:b4:22:0d:1c:86:a5:16:0a:a4:18:37: 4d:2d:a8:a7:e8:32:a6:d7:12:41:1f:dc:9d:a5:90:ab:d8:29: 69:39:33:e7:07:e5:27:19:42:57:56:97:88:3c:b2:78:c6:ed: ff:2e:22:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtsW2c2vR/eAv3+UBRYQ78uCB98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjA0MTYxMDQ3MDVaFw0yNjA0MTkxNzU2MDVaMDMxMTAvBgNV BAMTKEI0NjdCMjk4N0JFMUM5QzgwQjU5QzhCQjlDMTBCQ0EzMUY4RkE4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bD6gtCIkefS+TIrlAbgtu964 Z2+HIn0T2PUMzhBXqc3/kH6IPMU15A6IucSUwtyVrzA2gUWIimKt4MIGw/GjuAVn uRXSEaU7NAsi7Hf/wyoDIxZ6P8Ov0mknhZOTihIULvIvyNlrIlHYT+hBZSowmwOx 07Q1RD85jn2v3uo69v3wzNcdRpjiVp8N2YD0fAeXIc45vA9ewHb06Fj6QTmTXRLU WpOc6cOQmE3KOmdkkIs8ocGe570KNYMojXSMovLuxYyLs87w1NSbd7VupK3WHkZF nK0gIU9tuVKUUypKGzQ30zBCkFb/jxEDMNDmWW29kxgMhDxUCIofL2gC9iAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGeymHvhycgLWci7nBC8ox+PqAEwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALezBhyW34ADvAsyIpVbc+UreUdx3I3rWmPp mUP29Ftksfm1x+Qz6JeCW1ytgMAbJ4wE8niyraTyx9Ksj0RiP6tw6dChlfRuBHDD tI5Pkk2+0hDFzs779P7/16aq2CReb3WlvDWWrHaZhacBQqRB97QB/6pZNcFrO3XI +098xr5ogq22Va81s85ETdkC2nVABLxIbKXGPhyIeV7CyWn+Y43BpavULs/s8q5+ AK64m62St66ABOBZzDoud++m/eHHmiA5gky8+8l2+cPh1cS0Ig0chqUWCqQYN00t qKfoMqbXEkEf3J2lkKvYKWk5M+cH5ScZQldWl4g8snjG7f8uItg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:44:27 2026 by rpki-client