$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: 45bx8Fn+V2tv58oRrpWVJkzxI4ohbdNBaJ5RDljp7EA= Subject key identifier: 2C:3B:1A:6E:01:B2:E1:14:F0:A7:26:B5:EC:7C:40:8D:BF:11:5D:4E Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 3D24E3BEB86E319FA34524A1508F65389005DEF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 042C Signing time: Sat 18 Apr 2026 01:11:16 +0000 Manifest this update: Sat 18 Apr 2026 01:06:16 +0000 Manifest next update: Tue 21 Apr 2026 06:37:16 +0000 Files and hashes: 1: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: L7IP9MHf9lzBvSIuS3oASd3QVP2r70B7eN+5QUqcHUk=) 2: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: dpWfWTXvZxUEWQevvPmXhj10v28gv5vwyumzdQV/OCs=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NvKxe3HHk9zHNuvCE6DN5lywX6x8QCyX3832DuoeqaY=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: cKBPEdRq2LZ2LdyolV1+vPX464R8Bt40w+RS4c175VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:24:e3:be:b8:6e:31:9f:a3:45:24:a1:50:8f:65:38:90:05:de:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Apr 18 01:06:16 2026 GMT Not After : Apr 21 06:37:16 2026 GMT Subject: CN=2C3B1A6E01B2E114F0A726B5EC7C408DBF115D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:75:bb:b8:0f:da:de:71:37:28:c8:bd:af: cc:d4:de:4e:0e:4b:60:3d:22:07:f7:0c:14:f9:47: 1e:01:93:93:ed:e7:5a:c8:fb:49:a4:79:c3:5a:ad: 41:47:cf:40:67:1b:8d:1d:9a:50:ef:68:76:fa:f0: 0f:ed:35:4c:49:3d:18:e8:f0:f2:52:65:5e:42:ff: 62:5c:53:2a:5f:01:af:05:94:0b:a8:b1:5a:da:84: bd:ac:d3:f1:53:71:23:9d:c1:85:1d:98:aa:f7:c6: f2:f8:86:4e:3c:c2:14:80:43:37:2e:c6:1d:fc:39: 48:9f:0f:28:35:3c:b2:43:cd:52:58:aa:61:d3:a7: ee:f2:e2:f0:23:66:49:5e:ce:66:39:d2:35:d9:58: 84:03:64:c2:20:aa:7c:44:7e:14:0c:bb:77:cd:d2: d9:63:bd:45:bc:e1:ba:ff:89:2d:91:3c:28:4f:a5: e0:d8:fe:00:4f:4f:a1:a1:49:5b:44:2d:d5:0c:95: 27:27:c4:29:e3:9d:3d:77:18:fc:84:19:7c:13:69: 65:61:18:e7:57:93:ed:c4:6a:23:41:a7:d6:77:f2: 4f:6a:90:aa:d2:01:68:81:51:86:bc:fc:d1:34:87: 76:8b:17:c8:b3:1d:a6:bf:31:c3:e7:8f:98:b3:1a: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3B:1A:6E:01:B2:E1:14:F0:A7:26:B5:EC:7C:40:8D:BF:11:5D:4E X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:94:53:5f:16:a6:ee:5e:df:b0:21:de:e5:81:3a:16:5d:eb: 7e:4d:18:d3:80:df:f6:86:03:d7:ea:6e:7f:f7:e7:5e:ef:a2: e1:8d:0a:77:d5:5a:05:c1:95:23:f2:62:fe:da:ac:14:64:8c: c2:40:2f:d5:94:dc:4f:5a:b7:b0:3f:25:72:c9:bf:90:7b:2e: 58:b7:e4:17:18:68:b3:a2:11:a6:63:8a:a3:e7:6e:2f:5c:3a: b5:24:c1:1b:35:09:cd:19:15:30:87:e5:c5:fb:4f:0b:f0:1c: d0:04:e1:38:c8:82:d1:2e:af:d9:91:64:c0:e6:ae:57:fc:85: ba:20:94:bf:53:38:43:36:ea:7b:d4:7c:67:b9:4e:e8:8b:cb: e0:8d:b3:5b:da:0a:e3:55:4f:60:ac:12:97:a6:5a:ad:53:f8: 55:18:6c:72:aa:9b:f7:fd:89:74:d8:f9:cd:e2:cf:64:79:ea: ef:c1:a2:40:08:4a:4b:6e:82:14:22:01:44:ac:7c:5f:cc:99: 8b:fb:d5:eb:84:8e:ce:0e:6a:77:d8:ee:77:98:f6:c5:e2:3b: 99:7a:76:4b:f2:af:81:27:5b:30:07:e0:1a:fc:8f:9f:57:af: 0c:18:59:96:27:46:6f:e9:14:04:85:30:b9:98:49:f9:77:55: 5d:e1:af:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSTjvrhuMZ+jRSShUI9lOJAF3vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNjA0MTgwMTA2MTZaFw0yNjA0MjEwNjM3MTZaMDMxMTAvBgNV BAMTKDJDM0IxQTZFMDFCMkUxMTRGMEE3MjZCNUVDN0M0MDhEQkYxMTVENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0nW7uA/a3nE3KMi9r8zU3k4O S2A9Igf3DBT5Rx4Bk5Pt51rI+0mkecNarUFHz0BnG40dmlDvaHb68A/tNUxJPRjo 8PJSZV5C/2JcUypfAa8FlAuosVrahL2s0/FTcSOdwYUdmKr3xvL4hk48whSAQzcu xh38OUifDyg1PLJDzVJYqmHTp+7y4vAjZklezmY50jXZWIQDZMIgqnxEfhQMu3fN 0tljvUW84br/iS2RPChPpeDY/gBPT6GhSVtELdUMlScnxCnjnT13GPyEGXwTaWVh GOdXk+3EaiNBp9Z38k9qkKrSAWiBUYa8/NE0h3aLF8izHaa/McPnj5izGj+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDsabgGy4RTwpya17HxAjb8RXU4wHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSUU18Wpu5e37Ah3uWBOhZd635NGNOA3/aG A9fqbn/3517vouGNCnfVWgXBlSPyYv7arBRkjMJAL9WU3E9at7A/JXLJv5B7Lli3 5BcYaLOiEaZjiqPnbi9cOrUkwRs1Cc0ZFTCH5cX7TwvwHNAE4TjIgtEur9mRZMDm rlf8hboglL9TOEM26nvUfGe5TuiLy+CNs1vaCuNVT2CsEpemWq1T+FUYbHKqm/f9 iXTY+c3iz2R56u/BokAISktughQiAUSsfF/MmYv71euEjs4OanfY7neY9sXiO5l6 dkvyr4EnWzAH4Br8j59XrwwYWZYnRm/pFASFMLmYSfl3VV3hrx0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:48 2026 by rpki-client