$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: kaX/BQASTxZI3F0PKsXDDF3gafqg7MtG6OuWBZZ4JiY= Subject key identifier: 64:ED:6C:E0:CA:20:9E:4C:2C:A8:E6:2C:93:20:4C:EC:BB:C2:ED:58 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 7E7507DF33C4D8B350E8842F235F523DAC71012F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0535 Signing time: Fri 17 Apr 2026 02:12:10 +0000 Manifest this update: Fri 17 Apr 2026 02:07:10 +0000 Manifest next update: Mon 20 Apr 2026 12:58:10 +0000 Files and hashes: 1: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 3: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: X4WeVink6/DYX/OKnqThWB3j6o/7kjhC1Q5CmMr0HWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:75:07:df:33:c4:d8:b3:50:e8:84:2f:23:5f:52:3d:ac:71:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Apr 17 02:07:10 2026 GMT Not After : Apr 20 12:58:10 2026 GMT Subject: CN=64ED6CE0CA209E4C2CA8E62C93204CECBBC2ED58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:6c:75:fc:c2:b8:93:1c:73:67:df:8e:4e: ff:8c:b5:aa:1a:d9:3c:b5:62:86:d9:6f:55:c0:e6: e9:21:0b:ab:ee:48:ae:9c:4e:11:e4:d5:d7:46:d0: c5:6f:9e:0d:d4:d4:df:67:db:c6:b2:cb:fc:4a:26: 2e:bc:a0:49:a4:1f:e0:e0:e3:fa:09:20:28:0a:a1: 74:e4:ec:8a:8f:db:68:82:9a:52:72:62:62:47:94: 95:6d:6a:f0:76:a9:34:56:0e:c9:4f:48:07:8f:6f: 42:7b:cf:75:e5:da:4c:26:a5:12:7b:c4:37:61:f8: 68:a5:29:7b:4c:22:f7:b2:f4:13:c7:64:f0:7e:9c: 26:8a:09:f5:de:1c:cb:96:90:2a:2f:4f:53:50:cd: 1a:32:dc:0f:a3:dc:7b:db:20:3c:ec:8d:32:43:33: a9:77:ab:90:25:a2:b3:19:51:08:6d:c8:a9:bf:df: e0:e4:d6:67:77:ae:03:2c:70:75:f8:12:99:af:f2: 97:ac:ac:43:11:38:f8:00:b6:d0:d5:7e:5c:2f:d7: cd:8c:33:29:41:17:cc:97:11:e5:83:da:4e:c0:a6: 6a:31:ce:5b:35:b7:d2:b6:53:df:e5:35:80:99:3c: 31:07:ef:9c:43:e8:a3:24:f0:aa:85:e0:50:08:3f: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:6C:E0:CA:20:9E:4C:2C:A8:E6:2C:93:20:4C:EC:BB:C2:ED:58 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4a:4f:10:7c:41:60:c2:6b:cc:0e:79:2d:6f:9e:dc:62:1e: d4:2e:32:32:83:ae:f9:1e:c6:a6:db:49:e6:aa:cc:3c:d6:2f: 15:f0:5b:c6:22:9f:d6:0b:55:49:8d:26:da:99:e7:9d:7c:ff: b4:28:0e:a0:73:bd:a2:c5:95:50:04:58:2e:14:d5:e0:e1:ff: 3d:3e:cf:ac:21:fe:68:41:a0:61:10:13:64:25:46:a5:14:0a: ad:c8:21:6b:44:50:76:9a:fe:ee:d5:32:26:e9:2d:6c:b2:bc: 61:81:cf:e1:97:9c:47:ea:c9:50:62:c9:4e:5a:51:94:22:1a: 99:af:59:4b:d5:cc:3b:74:4c:67:e4:87:40:33:f4:40:a8:cb: 1d:59:a8:84:77:a3:62:cc:f5:d7:93:39:73:09:7a:d9:99:16: fc:11:3b:f1:49:96:f6:03:3e:a8:51:63:eb:2a:f8:7d:25:e9: 00:be:d8:c0:c6:e9:10:65:93:20:95:df:00:f1:30:58:f4:c6: 28:ce:da:80:06:45:8d:01:a6:f0:a8:5e:f8:61:95:43:2d:a7: 26:ac:e9:4b:8d:be:8e:e0:d2:80:38:1c:81:81:8d:df:45:a3: 9e:e0:2e:51:dc:ba:df:b2:80:d4:ca:07:3d:00:f3:18:fc:e8: 58:2c:a0:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnUH3zPE2LNQ6IQvI19SPaxxAS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNjA0MTcwMjA3MTBaFw0yNjA0MjAxMjU4MTBaMDMxMTAvBgNV BAMTKDY0RUQ2Q0UwQ0EyMDlFNEMyQ0E4RTYyQzkzMjA0Q0VDQkJDMkVENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVc2x1/MK4kxxzZ9+OTv+Mtaoa 2Ty1YobZb1XA5ukhC6vuSK6cThHk1ddG0MVvng3U1N9n28ayy/xKJi68oEmkH+Dg 4/oJICgKoXTk7IqP22iCmlJyYmJHlJVtavB2qTRWDslPSAePb0J7z3Xl2kwmpRJ7 xDdh+GilKXtMIvey9BPHZPB+nCaKCfXeHMuWkCovT1NQzRoy3A+j3HvbIDzsjTJD M6l3q5AlorMZUQhtyKm/3+Dk1md3rgMscHX4Epmv8pesrEMROPgAttDVflwv182M MylBF8yXEeWD2k7Apmoxzls1t9K2U9/lNYCZPDEH75xD6KMk8KqF4FAIP6LNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZO1s4MognkwsqOYskyBM7LvC7VgwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxKTxB8QWDCa8wOeS1vntxiHtQuMjKDrvke xqbbSeaqzDzWLxXwW8Yin9YLVUmNJtqZ5518/7QoDqBzvaLFlVAEWC4U1eDh/z0+ z6wh/mhBoGEQE2QlRqUUCq3IIWtEUHaa/u7VMibpLWyyvGGBz+GXnEfqyVBiyU5a UZQiGpmvWUvVzDt0TGfkh0Az9ECoyx1ZqIR3o2LM9deTOXMJetmZFvwRO/FJlvYD PqhRY+sq+H0l6QC+2MDG6RBlkyCV3wDxMFj0xijO2oAGRY0BpvCoXvhhlUMtpyas 6UuNvo7g0oA4HIGBjd9Fo57gLlHcut+ygNTKBz0A8xj86FgsoOY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:03 2026 by rpki-client