$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: LWlMOWIm4Sk5cG7Ya2wjnDGHnHh4q+gvzAYM7gM41f8= Subject key identifier: 78:10:5A:56:91:D6:D3:F6:E0:3F:02:E0:F4:8A:F3:A0:13:72:46:72 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 5E437DEEC4690F52C16078AAEA296C1DD15E9B8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 0152 Signing time: Thu 16 Apr 2026 07:30:45 +0000 Manifest this update: Thu 16 Apr 2026 07:25:45 +0000 Manifest next update: Sun 19 Apr 2026 18:32:45 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: T509F3cqjHj8JS5AyGLsTJwFNIi9lQN8yACfUwv1YkI=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 942czowzjJh0U0LSw2/9UwfW1RkF7wxSGzzd06JKS0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:43:7d:ee:c4:69:0f:52:c1:60:78:aa:ea:29:6c:1d:d1:5e:9b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Apr 16 07:25:45 2026 GMT Not After : Apr 19 18:32:45 2026 GMT Subject: CN=78105A5691D6D3F6E03F02E0F48AF3A013724672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:16:5e:14:83:82:29:8f:ab:a8:57:fb:28: 3e:83:78:68:34:33:b8:b9:2e:ae:d2:0c:40:bf:d2: 03:0f:31:4e:be:b5:d4:b9:25:da:04:93:b3:38:52: 98:31:51:f7:f2:04:28:00:37:5f:98:7d:be:61:cb: 85:6c:b4:9b:68:b4:74:6d:15:2f:2b:98:62:b0:5e: 1a:e6:58:b3:22:90:23:90:50:38:34:51:fd:97:d4: 3e:cf:1a:04:48:94:d0:ac:15:d1:a6:f9:a7:1f:ba: cb:90:fe:f5:60:04:66:9a:a5:68:67:cc:1b:f6:e0: 6b:d1:18:8e:7f:ba:42:6e:e6:bf:6c:64:50:46:49: fd:45:3c:9a:ed:1d:38:9e:6b:fc:13:c2:a9:8a:2a: 8d:c2:4b:8f:84:28:79:20:ee:29:24:a6:9c:b5:1c: b4:cd:0a:fa:76:1f:89:5a:7c:4b:df:d4:d7:a0:72: b0:5f:a3:d1:c4:b6:2d:6d:8b:42:49:3b:1c:92:18: 13:ff:fc:2f:e5:f8:41:9a:32:b9:c3:89:ca:36:e7: 12:46:98:57:8d:1d:23:01:95:e8:c5:ae:b1:ec:c3: 45:ad:4b:50:74:e8:83:15:9c:a0:c8:8e:52:34:aa: 37:5c:1e:09:67:7a:0b:2f:a2:b5:5c:ac:78:4d:f9: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:5A:56:91:D6:D3:F6:E0:3F:02:E0:F4:8A:F3:A0:13:72:46:72 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f4:4f:f4:4a:f8:7c:3f:c8:a8:f6:e0:ce:88:81:69:53:1c: e5:0d:cc:40:77:b7:c5:88:f2:29:fb:49:d3:e0:b9:5d:2b:b3: 53:03:16:34:15:27:8f:39:1f:2b:20:dc:60:2f:28:a2:1e:90: d1:b4:74:4c:86:a3:4d:51:6b:98:5b:21:dc:52:4b:1a:54:c2: eb:c6:1f:c3:fe:95:48:f0:57:92:2e:3a:6c:92:c5:08:50:4e: 7a:21:7b:7d:c2:a1:a3:14:d8:ad:1a:9f:9f:ba:74:28:e9:2b: 2b:2d:70:cf:b2:f1:ae:fa:8c:90:fe:c9:44:a2:8b:54:a6:73: 6b:c7:5b:52:82:5d:dc:c6:a3:83:9e:65:01:68:ba:4e:47:a7: 9e:46:f3:4b:d6:79:64:aa:84:4b:ed:f7:b8:6c:b0:15:81:88: 32:e6:63:d4:f3:96:52:53:38:bb:fe:2a:11:64:ac:f7:70:2d: 28:1a:66:8b:a6:80:ee:23:26:04:d3:02:5d:d5:7f:0b:ba:b8: c7:9f:fd:d2:b6:11:66:13:93:3a:24:ae:6d:cd:ae:c4:98:4e: af:4f:47:89:96:09:cc:37:34:44:74:40:4a:0f:d8:6e:d8:51: 1d:37:e5:22:b3:5f:37:d5:63:e8:9c:92:3c:39:d3:18:cb:f7: 2d:2b:0e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkN97sRpD1LBYHiq6ilsHdFem44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNjA0MTYwNzI1NDVaFw0yNjA0MTkxODMyNDVaMDMxMTAvBgNV BAMTKDc4MTA1QTU2OTFENkQzRjZFMDNGMDJFMEY0OEFGM0EwMTM3MjQ2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyBZeFIOCKY+rqFf7KD6DeGg0 M7i5Lq7SDEC/0gMPMU6+tdS5JdoEk7M4UpgxUffyBCgAN1+Yfb5hy4VstJtotHRt FS8rmGKwXhrmWLMikCOQUDg0Uf2X1D7PGgRIlNCsFdGm+acfusuQ/vVgBGaapWhn zBv24GvRGI5/ukJu5r9sZFBGSf1FPJrtHTiea/wTwqmKKo3CS4+EKHkg7ikkppy1 HLTNCvp2H4lafEvf1NegcrBfo9HEti1ti0JJOxySGBP//C/l+EGaMrnDico25xJG mFeNHSMBlejFrrHsw0WtS1B06IMVnKDIjlI0qjdcHglnegsvorVcrHhN+dl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBBaVpHW0/bgPwLg9IrzoBNyRnIwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHX0T/RK+Hw/yKj24M6IgWlTHOUNzEB3t8WI 8in7SdPguV0rs1MDFjQVJ485Hysg3GAvKKIekNG0dEyGo01Ra5hbIdxSSxpUwuvG H8P+lUjwV5IuOmySxQhQTnohe33CoaMU2K0an5+6dCjpKystcM+y8a76jJD+yUSi i1Smc2vHW1KCXdzGo4OeZQFouk5Hp55G80vWeWSqhEvt97hssBWBiDLmY9TzllJT OLv+KhFkrPdwLSgaZoumgO4jJgTTAl3Vfwu6uMef/dK2EWYTkzokrm3NrsSYTq9P R4mWCcw3NER0QEoP2G7YUR035SKzXzfVY+ickjw50xjL9y0rDmg= -----END CERTIFICATE-----Generated at Sat Apr 18 07:31:35 2026 by rpki-client