$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: qZ/p+An4NPcNFOyHRUyUorB7eXv2+2s9AoK3Bv/pCKE= Subject key identifier: 4A:79:4F:C6:6E:F6:38:79:E4:83:C5:D1:03:37:D4:AE:20:A7:30:D2 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 6E0C2DC5272C11F6D86547D1F8A64D0C7DBCC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 0242 Signing time: Thu 16 Apr 2026 12:01:44 +0000 Manifest this update: Thu 16 Apr 2026 11:56:44 +0000 Manifest next update: Sun 19 Apr 2026 23:02:44 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: PnDdLytAaxc+4oZW90Bz+53QSLw8rclX8MJdE4fVCJU=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0c:2d:c5:27:2c:11:f6:d8:65:47:d1:f8:a6:4d:0c:7d:bc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Apr 16 11:56:44 2026 GMT Not After : Apr 19 23:02:44 2026 GMT Subject: CN=4A794FC66EF63879E483C5D10337D4AE20A730D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:eb:da:49:c2:19:18:d3:fd:70:36:14:bc: 95:2e:fa:4f:c2:f2:39:b8:84:4e:cc:0a:a7:02:c4: d3:9b:b5:ce:14:de:11:0e:d2:91:18:44:62:78:da: 10:2b:51:79:2e:9a:86:ae:73:39:8d:4c:cc:99:46: 85:c7:c1:4d:35:12:88:fe:c0:73:3f:a3:b3:6c:7a: d7:09:f9:20:57:c7:f5:44:57:e6:2b:9a:7b:00:b0: 62:13:fe:8a:db:35:7c:4d:9f:db:47:2d:77:8e:fc: 7a:ae:1e:fa:d6:10:15:d7:02:b3:c1:d4:30:c3:44: ff:10:fa:56:a3:2d:fa:23:ca:b2:95:44:93:4a:b2: d8:cf:54:a6:aa:4a:75:65:04:70:c1:73:4f:03:41: dd:ea:34:33:01:66:7e:d7:9d:77:06:f3:73:0c:54: ea:ca:a6:24:42:2f:5e:60:28:9d:bd:0a:d8:6b:9a: 4e:cc:c8:bb:ca:fd:36:71:18:b5:84:a1:67:cd:b2: 75:36:89:e7:cb:dd:9b:77:b9:66:dd:e4:86:f4:32: 3e:7f:10:51:38:e0:03:74:eb:87:84:7e:5e:de:81: fa:33:68:d5:91:90:1f:20:a1:58:69:f6:41:d9:d1: 91:76:88:8e:28:85:40:7d:55:a4:76:83:92:21:25: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:79:4F:C6:6E:F6:38:79:E4:83:C5:D1:03:37:D4:AE:20:A7:30:D2 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:ac:a8:13:b4:d5:46:48:77:5f:ab:a6:b6:7d:c7:94:f1: f8:0d:6e:29:f6:bd:a6:50:75:da:c0:93:7e:56:87:df:44:ac: 15:5d:29:6b:bb:7f:2c:77:9a:5f:7f:6e:8a:ed:28:ac:8a:7e: 17:0e:78:f3:dc:00:33:e6:c0:85:42:dd:f6:f1:a7:09:e6:90: 56:c3:f0:fd:be:86:af:f5:2d:fe:e4:8e:12:1c:e9:b3:59:d7: de:07:8c:9b:b5:c1:0e:fb:84:86:b4:35:03:74:6f:f8:5e:9f: 49:3a:3d:38:81:3b:35:7a:77:a2:b4:57:3e:ab:ac:c9:a6:9b: 51:08:ef:38:9c:0f:53:ef:85:c7:67:06:d0:41:26:7d:38:2e: 7e:8d:75:03:1c:ce:3b:a2:00:53:c6:f5:a7:59:02:09:f8:98: dd:e5:16:cb:b8:1f:be:fc:79:b5:82:48:ca:37:9f:84:c8:56: 10:f4:db:b0:0f:47:d6:04:a9:c3:9f:e7:89:29:59:29:92:de: 71:d5:f0:13:d6:6d:5a:10:95:2f:a2:37:b3:50:d2:69:b9:62: de:86:3e:35:1c:6b:3e:65:0e:22:18:31:3e:ee:eb:c1:83:6b: 67:df:dc:04:4a:ba:21:b9:01:53:76:ad:43:e2:1d:12:87:c6: bd:7b:ca:e7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITbgwtxScsEfbYZUfR+KZNDH28xjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMDhBNUFGMzczOUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1 NzQ0ODE1MB4XDTI2MDQxNjExNTY0NFoXDTI2MDQxOTIzMDI0NFowMzExMC8GA1UE AxMoNEE3OTRGQzY2RUY2Mzg3OUU0ODNDNUQxMDMzN0Q0QUUyMEE3MzBEMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOT/69pJwhkY0/1wNhS8lS76T8Ly ObiETswKpwLE05u1zhTeEQ7SkRhEYnjaECtReS6ahq5zOY1MzJlGhcfBTTUSiP7A cz+js2x61wn5IFfH9URX5iuaewCwYhP+its1fE2f20ctd478eq4e+tYQFdcCs8HU MMNE/xD6VqMt+iPKspVEk0qy2M9UpqpKdWUEcMFzTwNB3eo0MwFmfteddwbzcwxU 6sqmJEIvXmAonb0K2GuaTszIu8r9NnEYtYShZ82ydTaJ58vdm3e5Zt3khvQyPn8Q UTjgA3Trh4R+Xt6B+jNo1ZGQHyChWGn2QdnRkXaIjiiFQH1VpHaDkiElFokCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRKeU/GbvY4eeSDxdEDN9SuIKcw0jAfBgNVHSME GDAWgBQgilrzc5v9eYXXeTzCfJtftXRIFTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQx ZDUxZDQxLWI2Y2MtNDIwYS1iNWE4LTY3YzhiZDZiMDJhZi8wLzIwOEE1QUYzNzM5 QkZENzk4NUQ3NzkzQ0MyN0M5QjVGQjU3NDQ4MTUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yMDhBNUFGMzczOUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0 ODE1LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80MWQ1MWQ0MS1iNmNjLTQyMGEtYjVh OC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzczOUJGRDc5ODVENzc5M0NDMjdDOUI1 RkI1NzQ0ODE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAngSsqBO01UZId1+rprZ9x5Tx+A1uKfa9plB1 2sCTflaH30SsFV0pa7t/LHeaX39uiu0orIp+Fw5489wAM+bAhULd9vGnCeaQVsPw /b6Gr/Ut/uSOEhzps1nX3geMm7XBDvuEhrQ1A3Rv+F6fSTo9OIE7NXp3orRXPqus yaabUQjvOJwPU++Fx2cG0EEmfTgufo11AxzOO6IAU8b1p1kCCfiY3eUWy7gfvvx5 tYJIyjefhMhWEPTbsA9H1gSpw5/niSlZKZLecdXwE9ZtWhCVL6I3s1DSabli3oY+ NRxrPmUOIhgxPu7rwYNrZ9/cBEq6IbkBU3atQ+IdEofGvXvK5w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:47 2026 by rpki-client