$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: ODXlzf2bscgP1cQNZAFHRFxpoL4/wFbDGzu75KOeg/c= Subject key identifier: 80:43:56:65:E4:E8:E7:00:FB:49:F6:70:20:42:66:50:FB:4E:B2:99 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 08C36F01FEF3C31314E3BCA045F0C817215D8DA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 12:01:30 +0000 Manifest this update: Fri 17 Apr 2026 11:56:30 +0000 Manifest next update: Mon 20 Apr 2026 13:03:30 +0000 Files and hashes: 1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: e2/zsA/AQSafNpEYe+IPWmdkYFL2aWrWBGeRtKDYHWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c3:6f:01:fe:f3:c3:13:14:e3:bc:a0:45:f0:c8:17:21:5d:8d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Apr 17 11:56:30 2026 GMT Not After : Apr 20 13:03:30 2026 GMT Subject: CN=80435665E4E8E700FB49F67020426650FB4EB299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:de:91:33:9f:65:61:fc:c0:f2:8f:ce:7a: b6:c8:9c:a3:0d:17:e1:d0:d4:64:2c:31:64:6b:8b: 7b:d6:f0:98:b5:54:c2:cd:d0:4f:8d:b1:e7:94:7a: 85:39:d1:ee:1f:b5:fe:be:ba:cc:5b:92:0a:5f:b4: 42:e5:fe:c3:91:20:d9:05:45:a9:1e:f2:c2:b0:e1: bd:5a:2a:53:31:35:74:37:b7:0e:e7:48:ef:3e:01: 71:70:86:5b:b5:c0:93:27:c0:10:b6:43:66:23:74: 21:3f:6c:cc:7f:56:7a:e0:d3:06:66:84:3f:cb:f1: c2:24:74:e6:89:80:ff:17:60:4a:19:4e:2d:81:9a: d5:da:c1:d8:ae:e2:52:af:5c:39:89:29:c6:d2:c5: 80:8c:89:3b:74:87:31:ac:30:f4:95:8e:09:4b:6e: d2:7d:3a:2f:24:33:83:b7:95:90:5e:82:48:64:cc: 7d:9b:f0:2f:18:69:15:cb:3f:7f:80:d1:31:be:a5: db:41:91:61:ce:ff:21:e5:ba:c1:94:98:1a:0f:8e: 55:79:e4:7b:30:42:20:e9:28:17:fb:42:32:d4:d9: 83:c1:85:f9:23:1e:df:8d:11:15:5e:cc:64:60:af: a9:9c:7b:32:ca:3b:c6:26:7d:ff:be:22:ba:bf:bc: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:43:56:65:E4:E8:E7:00:FB:49:F6:70:20:42:66:50:FB:4E:B2:99 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6d:a0:2b:56:b4:25:25:b2:b1:d4:8f:e8:a9:27:87:5b:d3: f7:2e:c6:64:5a:d5:49:40:69:58:2c:d8:ec:7e:55:6c:6a:dd: 90:d7:bb:73:f6:9b:86:55:d3:1a:ed:fc:69:c6:58:db:b6:dd: 57:98:96:7e:9d:5d:ca:97:33:98:16:1a:89:1d:c2:9b:56:2a: aa:76:1f:f0:b2:36:a7:3b:d6:af:ef:74:65:1b:33:4e:f7:e3: 34:c3:1a:8d:5d:58:26:db:2d:d4:07:ba:49:0f:46:96:5f:2c: a4:b4:01:6a:5d:79:b0:00:ce:d9:2a:b0:44:62:62:50:e9:0f: e0:27:c1:11:da:d9:ab:33:1d:39:39:02:82:4e:59:4b:df:e0: 13:74:f6:86:99:3a:74:30:f3:d7:01:07:ad:2f:3a:0e:a1:4a: b0:cb:0b:52:64:ef:67:ee:0d:86:93:99:fa:f3:f5:79:cf:f8: c6:06:42:3b:e2:3a:bc:04:55:a4:93:19:22:2f:b5:a5:17:61: 62:29:f9:ef:4e:6d:b6:5f:e9:b0:85:4b:43:ab:44:d4:aa:8e: bc:e0:e2:5d:ae:62:ab:cd:f4:e0:9d:a5:72:2b:7c:fd:f9:be: 07:0f:cc:81:72:6a:88:4a:d2:9b:9d:0d:f6:0c:87:e6:0a:ce: 85:0c:de:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMNvAf7zwxMU47ygRfDIFyFdjakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNjA0MTcxMTU2MzBaFw0yNjA0MjAxMzAzMzBaMDMxMTAvBgNV BAMTKDgwNDM1NjY1RTRFOEU3MDBGQjQ5RjY3MDIwNDI2NjUwRkI0RUIyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C96RM59lYfzA8o/OerbInKMN F+HQ1GQsMWRri3vW8Ji1VMLN0E+NseeUeoU50e4ftf6+usxbkgpftELl/sORINkF Rake8sKw4b1aKlMxNXQ3tw7nSO8+AXFwhlu1wJMnwBC2Q2YjdCE/bMx/Vnrg0wZm hD/L8cIkdOaJgP8XYEoZTi2BmtXawdiu4lKvXDmJKcbSxYCMiTt0hzGsMPSVjglL btJ9Oi8kM4O3lZBegkhkzH2b8C8YaRXLP3+A0TG+pdtBkWHO/yHlusGUmBoPjlV5 5HswQiDpKBf7QjLU2YPBhfkjHt+NERVezGRgr6mcezLKO8Ymff++Irq/vFirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgENWZeTo5wD7SfZwIEJmUPtOspkwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVtoCtWtCUlsrHUj+ipJ4db0/cuxmRa1UlA aVgs2Ox+VWxq3ZDXu3P2m4ZV0xrt/GnGWNu23VeYln6dXcqXM5gWGokdwptWKqp2 H/CyNqc71q/vdGUbM0734zTDGo1dWCbbLdQHukkPRpZfLKS0AWpdebAAztkqsERi YlDpD+AnwRHa2aszHTk5AoJOWUvf4BN09oaZOnQw89cBB60vOg6hSrDLC1Jk72fu DYaTmfrz9XnP+MYGQjviOrwEVaSTGSIvtaUXYWIp+e9ObbZf6bCFS0OrRNSqjrzg 4l2uYqvN9OCdpXIrfP35vgcPzIFyaohK0pudDfYMh+YKzoUM3k8= -----END CERTIFICATE-----Generated at Sat Apr 18 06:20:17 2026 by rpki-client