$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: 0NhUzwpuGLD6ZkPOqRC3pzeLTY1qfRXCA45QmiE+4dw= Subject key identifier: F2:C9:6B:8D:13:C9:88:1A:10:D9:38:A5:68:13:D4:EE:D5:0D:76:71 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 0BE5E1377AFEAAA2C989D96B6CF1AA8EFF9BC448 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 02E9 Signing time: Fri 17 Apr 2026 14:01:14 +0000 Manifest this update: Fri 17 Apr 2026 13:56:14 +0000 Manifest next update: Mon 20 Apr 2026 18:28:14 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: FRND5pLACB7/0FLEj8TMvIYeqr4SP1icvu7YasW8MAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e5:e1:37:7a:fe:aa:a2:c9:89:d9:6b:6c:f1:aa:8e:ff:9b:c4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Apr 17 13:56:14 2026 GMT Not After : Apr 20 18:28:14 2026 GMT Subject: CN=F2C96B8D13C9881A10D938A56813D4EED50D7671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:6a:ae:25:7b:b8:71:ee:7c:4f:59:fc:c0: 26:df:57:25:8c:77:88:1c:76:a5:4c:55:b2:35:62: 99:6a:8c:8e:67:1f:03:65:0e:82:eb:e8:e1:04:c4: 3e:f1:2b:a0:66:d5:63:47:c1:ef:93:c1:83:52:0c: 5e:1f:ec:1e:3f:b4:6b:51:2f:41:ef:64:75:a4:e4: 6b:db:2f:fe:a7:ec:4b:06:10:27:6f:d4:99:06:7a: cb:20:d5:b8:1d:4b:46:19:3f:8f:93:17:07:d2:ad: 52:db:dd:d7:87:5d:cf:c4:a8:dd:26:0c:14:8b:3b: 24:41:15:78:c2:aa:05:4a:89:26:15:a5:76:e6:48: cf:cd:56:14:87:8a:2a:c3:6d:c1:4e:82:86:93:3e: 2b:38:8b:fe:2c:a4:8f:35:b1:c3:93:31:d1:83:8b: 20:23:33:28:31:08:d5:30:85:60:3f:cd:36:9b:b2: a6:a1:f8:b3:ce:39:af:d2:61:4c:51:8f:a4:d2:d4: 9e:b2:c0:19:df:7c:f4:c3:7f:69:99:a0:bb:da:78: ca:c4:a6:df:37:d4:6b:d0:f0:8b:63:6e:a1:c5:82: 6d:b4:71:c6:22:26:6a:ff:84:f0:b0:55:51:b0:36: 87:56:75:f4:d2:f9:b9:fc:24:65:a6:7d:ac:89:48: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:6B:8D:13:C9:88:1A:10:D9:38:A5:68:13:D4:EE:D5:0D:76:71 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:16:90:03:b5:f4:06:da:98:99:8f:1b:31:c0:a3:0c:ab: aa:b9:c0:ad:b1:a4:80:41:7c:12:91:c5:98:f7:7b:a9:3c:94: 44:a9:6e:16:0c:2c:85:27:ca:02:51:35:cd:ec:01:bb:27:b7: e4:34:13:4e:9d:f8:d2:29:e7:bb:f7:e2:cd:33:cc:b1:7a:b1: 72:17:77:fc:c4:2a:74:08:b2:e4:d3:83:db:9d:ec:53:04:f2: e2:ad:8b:83:09:43:69:19:93:63:ff:db:7d:de:db:bb:38:b8: 7c:5b:23:51:8f:53:9f:a5:81:b9:2e:d0:61:3d:0e:39:be:50: 0b:f0:fe:d6:ee:3e:9f:9c:1c:ce:9d:e3:75:0e:17:8e:d4:c7: 8a:4f:b9:b8:6d:86:7f:d7:e8:84:52:4e:bb:07:05:57:b9:19: 2e:f4:4a:7d:27:16:8c:e3:8d:a5:d2:71:db:f2:e3:37:5f:79: 15:b5:7e:a2:ea:ea:95:3c:ab:6d:62:5b:3d:55:d0:96:3b:99: ce:e0:b7:f5:b5:97:bd:61:6c:f7:65:51:b8:ba:70:c5:85:5d: af:a3:b5:7e:ed:1b:3e:b2:d3:97:8f:f2:a8:73:cc:dc:d1:e8: 94:4f:8a:14:41:ed:86:3d:da:60:69:16:49:f2:95:52:92:f7: 91:01:3a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+XhN3r+qqLJidlrbPGqjv+bxEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNjA0MTcxMzU2MTRaFw0yNjA0MjAxODI4MTRaMDMxMTAvBgNV BAMTKEYyQzk2QjhEMTNDOTg4MUExMEQ5MzhBNTY4MTNENEVFRDUwRDc2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXx2quJXu4ce58T1n8wCbfVyWM d4gcdqVMVbI1YplqjI5nHwNlDoLr6OEExD7xK6Bm1WNHwe+TwYNSDF4f7B4/tGtR L0HvZHWk5GvbL/6n7EsGECdv1JkGessg1bgdS0YZP4+TFwfSrVLb3deHXc/EqN0m DBSLOyRBFXjCqgVKiSYVpXbmSM/NVhSHiirDbcFOgoaTPis4i/4spI81scOTMdGD iyAjMygxCNUwhWA/zTabsqah+LPOOa/SYUxRj6TS1J6ywBnffPTDf2mZoLvaeMrE pt831GvQ8ItjbqHFgm20ccYiJmr/hPCwVVGwNodWdfTS+bn8JGWmfayJSOM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8slrjRPJiBoQ2TilaBPU7tUNdnEwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFweFpADtfQG2piZjxsxwKMMq6q5wK2xpIBB fBKRxZj3e6k8lESpbhYMLIUnygJRNc3sAbsnt+Q0E06d+NIp57v34s0zzLF6sXIX d/zEKnQIsuTTg9ud7FME8uKti4MJQ2kZk2P/233e27s4uHxbI1GPU5+lgbku0GE9 Djm+UAvw/tbuPp+cHM6d43UOF47Ux4pPubhthn/X6IRSTrsHBVe5GS70Sn0nFozj jaXScdvy4zdfeRW1fqLq6pU8q21iWz1V0JY7mc7gt/W1l71hbPdlUbi6cMWFXa+j tX7tGz6y05eP8qhzzNzR6JRPihRB7YY92mBpFknylVKS95EBOuE= -----END CERTIFICATE-----Generated at Sun Apr 19 14:08:02 2026 by rpki-client