$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: mBKC2ZFC+3mfIrLnNeXhDMgDQB9OmyG0xv2xTGwMm7E= Subject key identifier: 70:37:86:78:AF:69:B3:10:75:B7:45:EE:9A:3F:C2:61:82:D5:3C:42 Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 2D904FA2DECD587CC8A72EC7F030E5446310E71F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 023B Signing time: Fri 17 Apr 2026 08:10:52 +0000 Manifest this update: Fri 17 Apr 2026 08:05:52 +0000 Manifest next update: Mon 20 Apr 2026 17:21:52 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: pIgHQ1ZpmsNORIEkCbUbNjTthg8HVY1mytMOqasUpj8=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:90:4f:a2:de:cd:58:7c:c8:a7:2e:c7:f0:30:e5:44:63:10:e7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Apr 17 08:05:52 2026 GMT Not After : Apr 20 17:21:52 2026 GMT Subject: CN=70378678AF69B31075B745EE9A3FC26182D53C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:e7:c4:30:79:8f:77:cf:4e:29:00:96:cb: 57:3b:16:8a:5f:e5:e0:d4:0d:ae:e4:e9:3a:2f:76: 75:d8:2c:5b:b5:07:83:40:49:a3:1c:0d:d3:5b:cd: 1a:13:ae:92:38:fd:ed:7f:32:c1:4f:e8:0c:01:ef: bd:28:1f:1e:2b:c4:77:fe:90:3d:29:8b:79:78:ab: 32:7d:0a:77:3e:d2:61:9d:f9:b0:f3:4a:ca:59:04: f0:c3:5f:5b:62:93:f9:34:1c:dd:d4:1f:45:2c:31: 85:6b:2d:e9:6e:ad:4f:e3:4f:91:20:cb:d2:46:d5: 50:09:a0:67:dc:ce:8b:13:84:72:50:b6:d3:82:2a: 76:fc:5c:12:49:f3:da:3d:23:af:ff:d2:93:56:cc: 7a:f6:59:38:14:e4:fc:ed:46:f3:d7:6b:73:7f:39: c5:1d:bb:51:42:b1:7d:07:90:7d:0b:68:61:f6:d3: 6c:59:da:5f:c8:7d:ff:65:b5:c2:8b:86:30:e0:92: 2a:0c:1e:ee:7e:1c:0a:10:ba:da:b4:b4:f7:8c:2b: fc:77:2a:49:be:1a:56:a2:16:a7:f6:99:26:d5:12: e4:2d:9f:60:a2:6e:4a:20:93:5b:0a:f9:2e:b0:83: fe:36:73:d8:77:3f:b3:55:af:5c:0b:cc:2d:8a:85: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:37:86:78:AF:69:B3:10:75:B7:45:EE:9A:3F:C2:61:82:D5:3C:42 X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:03:5f:b2:e4:77:7f:a8:f1:5c:fc:90:59:bc:05:90:fe: 2b:84:b9:1b:b3:5f:1b:c8:2d:52:ab:48:e2:30:28:53:31:a8: a0:2c:57:08:b8:31:1e:a9:1f:1f:24:08:11:e6:8d:2e:f5:2e: a4:8a:4e:b6:82:e5:86:60:59:c8:04:c1:9e:0c:cd:a1:64:58: 22:cf:e1:1a:a9:e0:e2:9c:a0:5f:41:66:3d:64:a6:a2:3e:6f: f4:2e:42:a0:d5:c4:04:69:24:04:28:cc:4c:16:2e:65:42:ec: 2a:32:b3:01:a9:ef:2b:3c:98:58:d0:4e:91:e6:aa:63:f1:dd: f2:7f:96:32:54:87:72:70:84:f4:b5:a3:2f:6a:53:c9:fe:fc: 59:8e:89:d4:b0:d9:d5:67:de:61:09:e4:d8:ec:83:45:51:41: 5f:55:c3:99:8a:20:75:d2:ab:48:c6:40:51:35:7d:e8:74:cf: c7:c6:d1:ca:61:47:13:99:c3:57:25:c0:0e:99:41:fd:b1:84: f0:3a:71:e2:e4:88:55:c8:8a:4d:4f:72:c1:65:53:cb:12:14: f9:91:c2:ad:29:53:c5:92:2a:1b:6e:e8:c4:c1:3c:dc:ea:f2: 64:01:5e:59:21:c3:15:72:a4:d7:f6:58:2e:f8:a2:0f:37:cf: f9:3c:cf:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZBPot7NWHzIpy7H8DDlRGMQ5x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNjA0MTcwODA1NTJaFw0yNjA0MjAxNzIxNTJaMDMxMTAvBgNV BAMTKDcwMzc4Njc4QUY2OUIzMTA3NUI3NDVFRTlBM0ZDMjYxODJENTNDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dufEMHmPd89OKQCWy1c7Fopf 5eDUDa7k6TovdnXYLFu1B4NASaMcDdNbzRoTrpI4/e1/MsFP6AwB770oHx4rxHf+ kD0pi3l4qzJ9Cnc+0mGd+bDzSspZBPDDX1tik/k0HN3UH0UsMYVrLelurU/jT5Eg y9JG1VAJoGfczosThHJQttOCKnb8XBJJ89o9I6//0pNWzHr2WTgU5PztRvPXa3N/ OcUdu1FCsX0HkH0LaGH202xZ2l/Iff9ltcKLhjDgkioMHu5+HAoQutq0tPeMK/x3 Kkm+GlaiFqf2mSbVEuQtn2Cibkogk1sK+S6wg/42c9h3P7NVr1wLzC2KhbKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDeGeK9psxB1t0Xumj/CYYLVPEIwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW2A1+y5Hd/qPFc/JBZvAWQ/iuEuRuzXxvI LVKrSOIwKFMxqKAsVwi4MR6pHx8kCBHmjS71LqSKTraC5YZgWcgEwZ4MzaFkWCLP 4Rqp4OKcoF9BZj1kpqI+b/QuQqDVxARpJAQozEwWLmVC7CoyswGp7ys8mFjQTpHm qmPx3fJ/ljJUh3JwhPS1oy9qU8n+/FmOidSw2dVn3mEJ5Njsg0VRQV9Vw5mKIHXS q0jGQFE1feh0z8fG0cphRxOZw1clwA6ZQf2xhPA6ceLkiFXIik1PcsFlU8sSFPmR wq0pU8WSKhtu6MTBPNzq8mQBXlkhwxVypNf2WC74og83z/k8zwo= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:06 2026 by rpki-client