$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: azJ3PFTbbcn4sDuAPB1MrOfmi35oK4VN/hI2DG4/328= Subject key identifier: 47:60:4C:50:0E:03:A3:2E:1C:56:D0:26:B1:A3:8B:57:0F:C7:6B:40 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 4DBB1CC92D02287FAE8A4D5D3C6D222312412CC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: BD Signing time: Thu 16 Apr 2026 22:31:30 +0000 Manifest this update: Thu 16 Apr 2026 22:26:30 +0000 Manifest next update: Mon 20 Apr 2026 01:31:30 +0000 Files and hashes: 1: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: 20zKH3vY05eOWp19raWuXLZZGsHUwLtE9NZkT24fH3k=) 2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 6dckKLb4IjoNupMYzivHBSbdaon1eSuU1MGkh5Rrhkk=) 3: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: BzG6yaz8K9d2yaZJbxZR2wDQbC5lgAeoiJLMdERwWfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bb:1c:c9:2d:02:28:7f:ae:8a:4d:5d:3c:6d:22:23:12:41:2c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Apr 16 22:26:30 2026 GMT Not After : Apr 20 01:31:30 2026 GMT Subject: CN=47604C500E03A32E1C56D026B1A38B570FC76B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:43:a2:83:76:62:5d:f0:64:6e:6a:b6:f5: 85:29:d5:09:cb:66:4f:c5:4e:c4:f0:d3:4a:c9:19: 0c:32:02:4e:87:f8:24:e3:11:71:5b:eb:45:92:88: 38:bc:21:91:19:32:18:7d:70:c9:d6:cf:58:2a:25: cb:57:9e:cc:88:7c:3d:c6:c6:c8:f5:9e:d6:30:43: cb:13:7a:f0:ec:e8:02:ec:41:4e:04:78:d2:70:f3: ca:7a:c5:f1:1f:cd:14:27:47:7c:d5:26:f8:ad:87: 63:eb:c5:16:a5:60:2e:c6:0e:ed:25:47:6f:0b:c9: 9c:0b:ff:44:e6:49:f1:40:cd:fc:5d:2a:4d:3e:37: 1c:7e:28:cc:60:a5:1a:35:61:c6:ba:ce:b6:1c:c4: 10:c6:3f:71:13:e9:43:37:18:2f:b4:a0:52:db:3f: e8:fd:72:a6:ee:26:a4:f2:55:98:17:69:53:d6:71: 97:4f:4d:d5:8d:e2:4d:d2:a0:5d:cf:11:d5:61:fb: a5:72:54:6b:0c:c6:9a:89:02:b2:ea:77:f6:5b:a1: 27:25:67:8b:df:0f:71:46:f6:71:a5:2d:36:4c:83: 7c:a3:69:06:4a:79:ad:68:21:ae:b0:d7:27:bf:d7: 43:ad:99:ae:5c:f3:17:c5:6f:10:03:57:ab:14:51: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:60:4C:50:0E:03:A3:2E:1C:56:D0:26:B1:A3:8B:57:0F:C7:6B:40 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:80:92:0f:51:ad:c8:d6:d2:d1:25:99:34:73:ab:f5:37: db:26:be:bf:51:e3:55:4b:46:c6:b5:2f:38:35:ea:b3:46:dd: 51:80:82:73:f7:34:07:e7:82:2d:b0:bd:b2:f1:a6:1f:ce:55: 69:38:12:3f:70:6c:e0:8f:38:97:fb:79:a5:eb:c3:1a:34:1a: 0b:4d:01:2a:e0:a5:c4:77:e4:ae:fb:66:5b:cd:05:e9:cd:5d: cf:e3:59:54:ee:7d:12:57:e1:85:c5:88:7f:a8:13:c1:e0:c6: 30:a5:1c:1d:ff:e8:2f:92:46:d4:2a:5f:63:71:b5:03:25:8a: 96:30:91:7d:b1:c6:7c:ef:fb:51:44:38:ef:08:df:fe:b9:5e: f7:1b:2d:53:de:dd:91:46:8e:8f:30:f2:21:8b:8d:2c:28:b0: 84:c4:df:1e:62:76:76:ab:fd:61:01:e3:36:9d:a5:2d:ec:33: 97:42:97:14:12:25:08:ac:b5:e2:63:0b:83:55:d2:13:69:9b: d3:d9:a7:21:60:88:8f:92:97:8e:36:fb:43:7b:5f:b6:60:97: 3f:1f:9f:79:7e:85:e2:c2:2f:99:7f:53:06:bf:e1:90:38:52: cd:b8:5c:ff:ab:41:01:66:31:58:ab:84:12:bc:d7:26:7a:6b: 1f:b0:b3:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbscyS0CKH+uik1dPG0iIxJBLMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNjA0MTYyMjI2MzBaFw0yNjA0MjAwMTMxMzBaMDMxMTAvBgNV BAMTKDQ3NjA0QzUwMEUwM0EzMkUxQzU2RDAyNkIxQTM4QjU3MEZDNzZCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMkOig3ZiXfBkbmq29YUp1QnL Zk/FTsTw00rJGQwyAk6H+CTjEXFb60WSiDi8IZEZMhh9cMnWz1gqJctXnsyIfD3G xsj1ntYwQ8sTevDs6ALsQU4EeNJw88p6xfEfzRQnR3zVJvith2PrxRalYC7GDu0l R28LyZwL/0TmSfFAzfxdKk0+Nxx+KMxgpRo1Yca6zrYcxBDGP3ET6UM3GC+0oFLb P+j9cqbuJqTyVZgXaVPWcZdPTdWN4k3SoF3PEdVh+6VyVGsMxpqJArLqd/ZboScl Z4vfD3FG9nGlLTZMg3yjaQZKea1oIa6w1ye/10Otma5c8xfFbxADV6sUUVWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2BMUA4Doy4cVtAmsaOLVw/Ha0AwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkhgJIPUa3I1tLRJZk0c6v1N9smvr9R41VL Rsa1Lzg16rNG3VGAgnP3NAfngi2wvbLxph/OVWk4Ej9wbOCPOJf7eaXrwxo0GgtN ASrgpcR35K77ZlvNBenNXc/jWVTufRJX4YXFiH+oE8HgxjClHB3/6C+SRtQqX2Nx tQMlipYwkX2xxnzv+1FEOO8I3/65XvcbLVPe3ZFGjo8w8iGLjSwosITE3x5idnar /WEB4zadpS3sM5dClxQSJQisteJjC4NV0hNpm9PZpyFgiI+Sl442+0N7X7Zglz8f n3l+heLCL5l/Uwa/4ZA4Us24XP+rQQFmMVirhBK81yZ6ax+ws14= -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:12 2026 by rpki-client