$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: QU24ZzNLZxuzj6Qz5+dAqfyJo7UzME3cq6jIqcZGe44= Subject key identifier: 17:3E:6D:BE:F3:AB:BE:64:39:40:35:EB:47:86:A7:9F:33:8F:D9:51 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 3C8E80E2D443B919F53BDDC98F68285C3D6B524D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 056E Signing time: Thu 16 Apr 2026 00:12:20 +0000 Manifest this update: Thu 16 Apr 2026 00:07:20 +0000 Manifest next update: Sun 19 Apr 2026 01:54:20 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: NRGSVc1Vz0w8aehmeIWqF36B5Y+ebj8uQrzOJuNtua8=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8e:80:e2:d4:43:b9:19:f5:3b:dd:c9:8f:68:28:5c:3d:6b:52:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Apr 16 00:07:20 2026 GMT Not After : Apr 19 01:54:20 2026 GMT Subject: CN=173E6DBEF3ABBE64394035EB4786A79F338FD951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:ee:11:56:b0:fd:0d:91:3e:90:38:ab:01: cc:a8:e9:a2:03:b6:32:12:90:52:f2:86:1d:33:3d: 32:58:02:d1:0d:d1:3c:7c:d3:b4:5b:d6:7e:16:8f: df:69:43:5d:46:8d:a5:fc:78:60:52:9c:cb:2e:05: 88:3a:bf:3b:ec:54:ef:c6:87:d1:22:b6:57:69:6e: 5c:f2:42:b2:76:db:41:b6:07:94:a8:4b:f9:3e:fd: f4:19:52:1b:27:7e:24:66:29:fd:d7:c1:e0:0b:1a: d8:5d:14:01:f8:f8:f0:09:1d:93:18:0a:14:b0:1b: 9c:a2:00:30:60:77:04:b2:79:c0:b3:11:10:8f:d1: 61:cd:5a:0c:23:c4:8f:69:0c:ac:66:04:5e:5b:60: f1:e8:85:a5:2d:d5:1d:8a:8f:ec:be:0e:b6:65:98: ab:06:dd:d6:e4:65:40:5b:1f:78:f7:46:aa:1f:18: b3:39:ca:78:de:ff:70:cb:be:d1:1e:e3:5c:58:85: 89:ca:80:b6:35:9c:81:b7:e5:c2:25:43:04:3d:cc: 17:41:2c:d5:5b:58:43:ed:bc:20:f1:51:9c:f3:1d: 6f:c6:64:c0:5a:29:d8:ba:f1:67:22:70:90:ab:5f: eb:44:94:e0:63:53:8e:1b:f4:93:70:5d:de:0e:cf: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3E:6D:BE:F3:AB:BE:64:39:40:35:EB:47:86:A7:9F:33:8F:D9:51 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:77:e4:9d:9b:c7:ee:9d:8e:4b:2a:0f:ce:9e:eb:b7:a2: 17:fa:bd:e7:66:80:ed:bb:cf:c2:e1:fe:a1:f7:70:e4:f6:84: a6:f8:df:3e:47:79:c1:6b:47:c7:02:88:15:0e:33:26:ab:a0: f4:58:4f:89:87:e2:68:19:5f:a7:03:d4:3e:1e:49:31:9b:b7: 06:40:c0:b4:bd:15:4c:13:7e:56:56:c1:12:0d:f1:e8:d9:71: 47:06:a5:76:af:69:d1:70:bc:b1:c4:fc:3a:5c:a2:ff:53:cc: 15:8f:a0:d9:85:2d:a6:5a:cb:e4:7a:d4:24:c8:72:eb:89:d2: fb:1f:d7:37:aa:7b:86:83:1a:5a:9c:df:a4:28:ae:3f:1b:e3: c8:39:8a:3e:c6:f9:4c:df:d6:0c:d1:ec:39:07:a0:81:d4:38: bc:3e:d7:2a:5b:68:18:10:c0:d5:8e:86:56:0e:e4:eb:82:d4: 32:c4:ab:3b:10:56:9f:e4:a9:9c:2f:2c:5f:53:09:b1:b6:a6: 8b:8f:63:81:d6:8b:4f:99:00:b8:29:e0:bf:20:05:e2:df:77: c7:e1:cc:37:c0:1e:4a:75:f9:40:d4:d7:7e:2e:ed:d3:e5:44: e8:d3:7c:ae:25:8f:c2:13:89:64:36:0b:d1:14:f3:69:9f:0f: 33:dc:2c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPI6A4tRDuRn1O93Jj2goXD1rUk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNjA0MTYwMDA3MjBaFw0yNjA0MTkwMTU0MjBaMDMxMTAvBgNV BAMTKDE3M0U2REJFRjNBQkJFNjQzOTQwMzVFQjQ3ODZBNzlGMzM4RkQ5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLO4RVrD9DZE+kDirAcyo6aID tjISkFLyhh0zPTJYAtEN0Tx807Rb1n4Wj99pQ11GjaX8eGBSnMsuBYg6vzvsVO/G h9EitldpblzyQrJ220G2B5SoS/k+/fQZUhsnfiRmKf3XweALGthdFAH4+PAJHZMY ChSwG5yiADBgdwSyecCzERCP0WHNWgwjxI9pDKxmBF5bYPHohaUt1R2Kj+y+DrZl mKsG3dbkZUBbH3j3RqofGLM5ynje/3DLvtEe41xYhYnKgLY1nIG35cIlQwQ9zBdB LNVbWEPtvCDxUZzzHW/GZMBaKdi68WcicJCrX+tElOBjU44b9JNwXd4OzzDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFz5tvvOrvmQ5QDXrR4annzOP2VEwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6pd+Sdm8funY5LKg/Onuu3ohf6vedmgO27 z8Lh/qH3cOT2hKb43z5HecFrR8cCiBUOMyaroPRYT4mH4mgZX6cD1D4eSTGbtwZA wLS9FUwTflZWwRIN8ejZcUcGpXavadFwvLHE/Dpcov9TzBWPoNmFLaZay+R61CTI cuuJ0vsf1zeqe4aDGlqc36Qorj8b48g5ij7G+Uzf1gzR7DkHoIHUOLw+1ypbaBgQ wNWOhlYO5OuC1DLEqzsQVp/kqZwvLF9TCbG2pouPY4HWi0+ZALgp4L8gBeLfd8fh zDfAHkp1+UDU134u7dPlROjTfK4lj8ITiWQ2C9EU82mfDzPcLH8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:16 2026 by rpki-client