$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: HX5LXSjl0weFUJGkQrflC2z/yh7sXy7Pj5Q92Y66t4Q= Subject key identifier: 75:42:AD:2E:5D:DC:C4:62:0E:F4:A2:40:E6:A2:DA:4A:86:B6:35:55 Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 4C27EA0E74F8BE0E0F1158A2CD5E9595D711A250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 0253 Signing time: Fri 17 Apr 2026 03:01:04 +0000 Manifest this update: Fri 17 Apr 2026 02:56:04 +0000 Manifest next update: Mon 20 Apr 2026 04:18:04 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: QL7wHzw4wOykZXMzKhp/rwnALSyaV66rS31bKRAw5DU=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:27:ea:0e:74:f8:be:0e:0f:11:58:a2:cd:5e:95:95:d7:11:a2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Apr 17 02:56:04 2026 GMT Not After : Apr 20 04:18:04 2026 GMT Subject: CN=7542AD2E5DDCC4620EF4A240E6A2DA4A86B63555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:c8:5d:05:05:14:5a:52:27:10:f1:c3:3c: 5d:2b:dc:26:16:06:ce:e6:5f:00:b4:36:2b:5a:ff: 1e:9c:99:12:53:39:a4:61:b6:5e:aa:a8:e1:4c:35: 13:a7:ca:a2:66:60:23:79:95:1c:0c:f2:34:18:30: 87:55:3a:99:eb:58:4e:0a:0a:75:76:92:3d:f4:b3: 01:c2:0b:77:e3:7f:b2:b8:94:1f:50:a8:fd:46:67: af:2b:63:71:88:25:53:20:85:8c:2b:17:4a:36:41: 39:cf:fc:40:c7:b6:f6:1b:8f:11:a9:8a:af:71:48: 55:b0:f9:02:76:c1:17:7b:00:32:10:a5:1d:d2:3b: 01:8d:a4:29:a4:c5:49:9a:c7:f3:4f:1a:9f:ae:0b: ec:14:9c:6e:ad:84:fc:c8:90:02:86:99:8b:fd:39: f9:c4:66:b9:fc:e1:f4:75:0e:a6:76:22:46:d7:4c: e3:ec:f5:f5:aa:8e:11:c0:a4:52:5e:a3:79:e1:64: 7b:44:c2:e4:e9:87:de:99:11:0c:38:b3:0c:5b:df: 7f:b1:cf:e8:c8:c2:bf:4c:94:35:32:7f:4f:59:90: fb:dd:7f:b0:b7:90:04:f8:af:75:7b:01:60:58:2b: 70:26:cf:6b:86:d9:3d:f5:05:14:6d:b7:03:e7:39: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:AD:2E:5D:DC:C4:62:0E:F4:A2:40:E6:A2:DA:4A:86:B6:35:55 X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c5:93:12:1c:8a:a7:07:78:d3:61:64:f3:71:12:63:43:75: f1:e7:bf:95:0b:31:11:56:75:1f:c8:fa:b5:1e:02:b7:cd:15: 20:24:a9:37:f5:4a:a6:a5:0a:ae:30:aa:c1:91:e7:40:94:ee: f0:8c:fd:41:19:dd:81:88:c7:16:42:94:89:95:d6:df:5a:81: f7:df:5f:09:1f:b5:a3:f2:3e:ba:54:91:4f:d7:5c:da:d5:86: 00:90:7a:20:ae:c5:cd:9c:c4:12:00:32:4d:13:a4:fc:2b:27: a0:14:5e:bb:15:5b:f2:20:6a:c5:ea:a1:40:90:be:8c:26:39: b4:8b:00:d6:1a:5a:46:a1:0b:bf:d6:cf:96:a4:2e:a4:45:20: d1:03:5c:6b:16:31:a5:2b:40:12:b7:dd:7a:e9:c7:0f:8b:29: a3:d4:6a:b1:e5:70:19:d7:d7:15:3a:cf:b3:34:71:67:05:b0: 4f:c7:03:36:e0:22:10:77:33:f8:e4:e9:af:09:fe:54:83:a6: bf:1a:5d:da:1b:e1:ba:0d:8f:93:14:b6:0c:2f:f5:78:7d:83: 4f:6c:5d:04:f8:3c:4b:4c:58:ee:e5:24:88:2d:59:2f:3d:56: cc:44:ea:00:7d:50:0a:44:57:c3:36:a4:0f:94:6a:36:6a:3b: bf:82:2b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCfqDnT4vg4PEViizV6VldcRolAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNjA0MTcwMjU2MDRaFw0yNjA0MjAwNDE4MDRaMDMxMTAvBgNV BAMTKDc1NDJBRDJFNUREQ0M0NjIwRUY0QTI0MEU2QTJEQTRBODZCNjM1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpchdBQUUWlInEPHDPF0r3CYW Bs7mXwC0Nita/x6cmRJTOaRhtl6qqOFMNROnyqJmYCN5lRwM8jQYMIdVOpnrWE4K CnV2kj30swHCC3fjf7K4lB9QqP1GZ68rY3GIJVMghYwrF0o2QTnP/EDHtvYbjxGp iq9xSFWw+QJ2wRd7ADIQpR3SOwGNpCmkxUmax/NPGp+uC+wUnG6thPzIkAKGmYv9 OfnEZrn84fR1DqZ2IkbXTOPs9fWqjhHApFJeo3nhZHtEwuTph96ZEQw4swxb33+x z+jIwr9MlDUyf09ZkPvdf7C3kAT4r3V7AWBYK3Amz2uG2T31BRRttwPnOZHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUKtLl3cxGIO9KJA5qLaSoa2NVUwHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDFkxIciqcHeNNhZPNxEmNDdfHnv5ULMRFW dR/I+rUeArfNFSAkqTf1SqalCq4wqsGR50CU7vCM/UEZ3YGIxxZClImV1t9agfff XwkftaPyPrpUkU/XXNrVhgCQeiCuxc2cxBIAMk0TpPwrJ6AUXrsVW/IgasXqoUCQ vowmObSLANYaWkahC7/Wz5akLqRFINEDXGsWMaUrQBK33Xrpxw+LKaPUarHlcBnX 1xU6z7M0cWcFsE/HAzbgIhB3M/jk6a8J/lSDpr8aXdob4boNj5MUtgwv9Xh9g09s XQT4PEtMWO7lJIgtWS89VsxE6gB9UApEV8M2pA+UajZqO7+CK5g= -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:58 2026 by rpki-client