$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: IgibogUNaniPmwuAOH8/IbEcTe0oTN2CxfCPWHG/DAY= Subject key identifier: D9:FF:CD:E6:5E:13:6F:C6:62:24:CB:97:A5:80:5C:3F:30:64:2D:5B Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 4D7FBBEEA638E2FA1DB2E24E038CC24BBCF3CDF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 17:02:22 +0000 Manifest this update: Fri 17 Apr 2026 16:57:22 +0000 Manifest next update: Tue 21 Apr 2026 03:53:22 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 2: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 3: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 5: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: oFlpjmCWEWCkrxetEp96oMZ79enD6hIXUPezDVapbpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7f:bb:ee:a6:38:e2:fa:1d:b2:e2:4e:03:8c:c2:4b:bc:f3:cd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Apr 17 16:57:22 2026 GMT Not After : Apr 21 03:53:22 2026 GMT Subject: CN=D9FFCDE65E136FC66224CB97A5805C3F30642D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:29:e5:9a:0e:65:28:e5:82:22:c6:dc:7e: d9:3a:07:68:77:1b:16:26:0b:44:00:dc:4e:e5:fe: 24:3b:66:44:f9:ad:e4:9d:10:68:94:36:90:37:7b: 82:d2:39:c9:b5:42:d1:c6:c2:ac:bf:ac:82:61:5a: 29:36:e0:b0:8e:de:41:b7:7b:c6:74:de:c3:9e:db: f7:80:b2:1c:13:a7:6e:10:3b:bd:f6:58:92:58:6b: d7:d9:e5:f0:4b:c5:37:de:60:56:0c:4b:54:a6:85: a5:2e:3e:36:15:2a:a2:42:d8:ed:d6:19:59:ab:71: 0a:19:2c:56:87:fd:ef:b4:38:e8:93:7a:35:00:99: d4:09:82:82:3f:c9:90:7c:34:64:37:3c:46:a3:2b: 61:74:86:49:16:7c:eb:e9:ac:f6:bb:f5:3d:c2:58: 19:f7:68:c5:c4:b3:3f:89:de:3b:f1:b0:b0:ba:96: 86:dc:39:18:f7:5e:fe:47:37:cb:e5:d5:12:e6:fe: d2:69:c4:fe:c7:63:ba:82:6e:8b:c1:49:b5:64:11: 38:fa:00:5f:8d:88:7f:69:ab:be:55:a9:08:d8:56: 68:56:b3:92:57:f0:cd:40:a4:9b:0b:28:f8:a5:70: 69:86:ae:91:ca:ae:a0:e2:ba:ed:7f:8a:ac:07:ca: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:CD:E6:5E:13:6F:C6:62:24:CB:97:A5:80:5C:3F:30:64:2D:5B X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c1:29:33:77:1e:7d:0a:3a:2e:25:be:39:80:9d:2d:69:91: b6:7b:6e:fd:35:59:e4:0f:70:4d:3a:18:02:b9:97:7a:be:e3: 9d:ff:5f:da:a0:38:b1:80:58:16:26:42:72:15:df:86:18:ae: aa:dd:94:17:be:8e:7c:bb:21:aa:50:fe:bf:74:69:41:17:11: b5:60:9c:2f:65:f8:82:3e:c8:3f:9a:cf:a1:1f:10:d9:94:cd: 3e:d7:f6:c8:c5:13:70:2b:98:a4:e4:0c:2f:c9:66:8f:9b:c7: 6d:ff:2d:2a:c6:1a:a6:85:64:2e:ae:6c:84:0c:a4:28:6b:08: 29:aa:80:c6:4b:c5:cf:d3:29:bf:9f:9a:07:b1:5c:95:05:bf: 26:9b:78:66:42:a7:a8:66:c1:9e:47:82:4e:80:3c:e8:a3:94: 26:d1:b4:61:a3:32:0c:45:94:81:3b:18:d4:40:29:0e:71:6a: a5:41:c1:36:a9:db:45:a6:7a:7d:5f:a3:34:79:50:60:0f:9e: 37:b8:3f:39:4d:bc:71:92:cc:96:51:3f:1f:e8:bd:b7:74:d7: 83:5c:ce:43:d6:29:90:f3:12:12:a8:78:74:d9:7f:3f:3d:cc: 59:c3:36:e7:fa:5d:68:1f:1b:3b:ea:cd:31:97:f9:5d:f1:b8: 20:bc:58:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTX+77qY44vodsuJOA4zCS7zzzfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNjA0MTcxNjU3MjJaFw0yNjA0MjEwMzUzMjJaMDMxMTAvBgNV BAMTKEQ5RkZDREU2NUUxMzZGQzY2MjI0Q0I5N0E1ODA1QzNGMzA2NDJENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwSnlmg5lKOWCIsbcftk6B2h3 GxYmC0QA3E7l/iQ7ZkT5reSdEGiUNpA3e4LSOcm1QtHGwqy/rIJhWik24LCO3kG3 e8Z03sOe2/eAshwTp24QO732WJJYa9fZ5fBLxTfeYFYMS1SmhaUuPjYVKqJC2O3W GVmrcQoZLFaH/e+0OOiTejUAmdQJgoI/yZB8NGQ3PEajK2F0hkkWfOvprPa79T3C WBn3aMXEsz+J3jvxsLC6lobcORj3Xv5HN8vl1RLm/tJpxP7HY7qCbovBSbVkETj6 AF+NiH9pq75VqQjYVmhWs5JX8M1ApJsLKPilcGmGrpHKrqDiuu1/iqwHysQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2f/N5l4Tb8ZiJMuXpYBcPzBkLVswHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHBKTN3Hn0KOi4lvjmAnS1pkbZ7bv01WeQP cE06GAK5l3q+453/X9qgOLGAWBYmQnIV34YYrqrdlBe+jny7IapQ/r90aUEXEbVg nC9l+II+yD+az6EfENmUzT7X9sjFE3ArmKTkDC/JZo+bx23/LSrGGqaFZC6ubIQM pChrCCmqgMZLxc/TKb+fmgexXJUFvyabeGZCp6hmwZ5Hgk6APOijlCbRtGGjMgxF lIE7GNRAKQ5xaqVBwTap20Wmen1fozR5UGAPnje4PzlNvHGSzJZRPx/ovbd014Nc zkPWKZDzEhKoeHTZfz89zFnDNuf6XWgfGzvqzTGX+V3xuCC8WNw= -----END CERTIFICATE-----Generated at Sat Apr 18 07:17:27 2026 by rpki-client