$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: wVA2vEoM28oVn5wtwOenfnvrsdHdyB6fsi5t2YNSyvI= Subject key identifier: 1C:0F:5E:85:D2:24:DD:38:7E:05:3A:92:DA:23:74:26:41:40:A3:50 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 02A667C321BB4C2074FEC862B63295ED0493988E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0260 Signing time: Thu 16 Apr 2026 07:11:22 +0000 Manifest this update: Thu 16 Apr 2026 07:06:22 +0000 Manifest next update: Sun 19 Apr 2026 08:30:22 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: X44+99vCaHDAJp0S+9oY1TO4qY0fxjPW0B73PChoolE=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: lW1S43/pcoUgHysASo7Fj4hF5yGyOMccC2jRCS55KX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a6:67:c3:21:bb:4c:20:74:fe:c8:62:b6:32:95:ed:04:93:98:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Apr 16 07:06:22 2026 GMT Not After : Apr 19 08:30:22 2026 GMT Subject: CN=1C0F5E85D224DD387E053A92DA2374264140A350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:c3:4a:35:a1:54:0c:2d:12:2a:1b:59:79: 0f:ee:b1:56:f1:bc:47:76:83:57:0c:26:8e:1d:3c: 58:40:25:d2:09:ee:4e:e5:52:9d:4d:cb:65:80:ed: 1b:4f:e4:d2:fa:95:ad:53:0b:70:73:4d:45:bf:40: 58:71:83:67:9a:09:6a:82:c5:12:f1:0d:2d:a7:c5: b3:d6:72:8a:aa:b1:76:74:a0:e6:d9:cc:af:7b:d1: 37:9d:c6:1f:13:9e:b4:f6:d3:ab:e4:77:8b:ae:82: 67:11:dc:f0:21:af:e3:8c:48:e9:7f:db:ec:22:78: 9f:4f:c8:23:b6:49:16:34:9a:9d:0c:30:43:80:2d: 55:43:f8:1d:e7:9a:4e:29:6b:14:16:96:b9:86:a0: c3:d0:ba:e4:fd:90:57:e3:66:fc:8e:76:fb:34:b6: 86:ba:13:2b:f4:d6:fe:7c:34:63:a7:0c:27:46:33: fa:1e:96:ea:33:0c:e7:69:6c:8d:ff:5d:77:ec:17: 8b:76:dc:68:55:18:e5:43:2b:2f:34:4c:d2:95:99: 29:2d:c2:db:e1:c2:77:80:31:14:d7:74:9f:86:e4: 73:ac:71:cb:4b:d5:40:4a:71:3e:ba:ac:8b:5a:eb: 18:81:16:66:a8:aa:b5:d1:8a:39:32:fa:a9:b5:3f: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0F:5E:85:D2:24:DD:38:7E:05:3A:92:DA:23:74:26:41:40:A3:50 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:33:58:24:9e:a8:cb:e3:04:33:e6:1c:73:48:03:cf:08:99: 8f:e6:80:69:e7:6c:d6:d4:b0:82:8f:23:33:08:28:db:6f:b5: f6:0a:e6:04:9c:bf:fa:37:79:86:34:d5:61:2a:6f:f0:14:1b: 6a:d4:30:cb:0b:dd:35:09:d2:16:b5:f2:50:c6:1d:29:47:78: 55:56:d2:5c:8d:b2:f8:e7:57:78:87:70:3a:d9:0e:92:41:6d: 8d:43:f9:d9:7f:5e:df:a8:be:f3:07:40:37:85:c6:db:2d:63: 3c:a4:55:a3:03:cb:9d:25:7e:12:51:db:79:e2:08:fa:c3:bc: 3a:59:19:13:8a:29:54:4c:b1:d0:7e:30:00:06:73:04:9d:99: f5:37:df:ce:5e:98:56:3c:94:8c:d3:a3:8a:f0:da:25:41:80: 06:76:5c:c1:c6:34:5c:fb:d4:f3:ba:dc:84:5e:4e:03:aa:c6: c1:96:9b:fb:b1:37:84:de:71:08:c8:30:d7:c3:ac:fb:7e:f9: 37:09:c8:a3:0c:83:25:53:de:9b:ef:83:5c:af:ca:2c:fd:1f: e4:27:42:31:3b:cd:ff:2c:ad:33:62:8f:a5:d4:02:d5:f1:0b: d7:c9:7c:47:e8:7f:be:7e:95:52:4e:d6:0f:7e:25:16:b7:68: 5f:b1:2a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqZnwyG7TCB0/shitjKV7QSTmI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjA0MTYwNzA2MjJaFw0yNjA0MTkwODMwMjJaMDMxMTAvBgNV BAMTKDFDMEY1RTg1RDIyNEREMzg3RTA1M0E5MkRBMjM3NDI2NDE0MEEzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPMNKNaFUDC0SKhtZeQ/usVbx vEd2g1cMJo4dPFhAJdIJ7k7lUp1Ny2WA7RtP5NL6la1TC3BzTUW/QFhxg2eaCWqC xRLxDS2nxbPWcoqqsXZ0oObZzK970Tedxh8TnrT206vkd4uugmcR3PAhr+OMSOl/ 2+wieJ9PyCO2SRY0mp0MMEOALVVD+B3nmk4paxQWlrmGoMPQuuT9kFfjZvyOdvs0 toa6Eyv01v58NGOnDCdGM/oeluozDOdpbI3/XXfsF4t23GhVGOVDKy80TNKVmSkt wtvhwneAMRTXdJ+G5HOscctL1UBKcT66rIta6xiBFmaoqrXRijky+qm1P3JFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHA9ehdIk3Th+BTqS2iN0JkFAo1AwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANczWCSeqMvjBDPmHHNIA88ImY/mgGnnbNbU sIKPIzMIKNtvtfYK5gScv/o3eYY01WEqb/AUG2rUMMsL3TUJ0ha18lDGHSlHeFVW 0lyNsvjnV3iHcDrZDpJBbY1D+dl/Xt+ovvMHQDeFxtstYzykVaMDy50lfhJR23ni CPrDvDpZGROKKVRMsdB+MAAGcwSdmfU3385emFY8lIzTo4rw2iVBgAZ2XMHGNFz7 1PO63IReTgOqxsGWm/uxN4TecQjIMNfDrPt++TcJyKMMgyVT3pvvg1yvyiz9H+Qn QjE7zf8srTNij6XUAtXxC9fJfEfof75+lVJO1g9+JRa3aF+xKjw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:52 2026 by rpki-client