$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: 9GRlWlDaV8UiCXAdKybWfvYhLlhGb1c/LkGu2acV54w= Subject key identifier: 3C:EC:A4:3D:2A:A6:71:70:6D:12:12:D7:8F:73:66:68:8C:1B:3E:4F Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 7C2EBB43A696E69B82F4DD5DBD5C484E03175346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: 018E Signing time: Fri 17 Apr 2026 03:01:19 +0000 Manifest this update: Fri 17 Apr 2026 02:56:19 +0000 Manifest next update: Mon 20 Apr 2026 08:41:19 +0000 Files and hashes: 1: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: Jsw2oWtZe5lfg8hZQPvRbvxkk0Whw0lDf07vCmZhUjM=) 2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=) 3: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=) 4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2e:bb:43:a6:96:e6:9b:82:f4:dd:5d:bd:5c:48:4e:03:17:53:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Apr 17 02:56:19 2026 GMT Not After : Apr 20 08:41:19 2026 GMT Subject: CN=3CECA43D2AA671706D1212D78F7366688C1B3E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:fd:fa:fb:0e:91:8a:6a:eb:36:8d:99:bc: 26:27:5b:c0:c2:71:f3:30:9a:fa:37:94:d4:43:e4: c1:31:26:f5:13:2c:3f:5a:d1:39:46:04:2f:3c:f9: 65:70:a9:a4:7d:69:41:2e:ab:4a:a1:6b:89:c6:3d: c5:57:d0:d8:23:dc:5f:72:01:01:44:e3:8d:ac:21: 58:5e:1e:e0:60:3e:4c:60:e6:81:a8:42:bf:e5:4d: 33:ab:70:63:61:fb:db:41:35:a8:ec:c0:57:d3:2a: d1:4b:15:a3:2b:35:17:6e:fa:77:0f:be:b6:33:bc: b4:7c:85:77:64:ff:4b:d9:25:57:f3:2f:f9:19:cd: 12:74:88:43:dc:8e:41:2d:84:03:b0:02:18:2b:ab: 9d:ff:57:b2:40:7b:e7:3a:6a:9d:06:d5:77:13:68: 5e:61:ee:17:a9:5f:de:e1:2b:ec:ab:c2:5e:66:38: 08:d3:64:67:70:01:91:0a:ff:f6:88:30:ba:16:a5: 60:a3:d1:36:74:bc:8b:07:55:81:8f:b0:d3:d1:ed: e3:c8:4a:49:83:67:46:6b:f0:df:70:70:0c:2e:ef: 41:13:d6:c1:9a:1f:b3:d3:9b:b3:ef:05:e9:f6:d7: d4:57:6c:7a:ff:bb:33:23:e5:93:fc:cf:d3:ac:4e: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:A4:3D:2A:A6:71:70:6D:12:12:D7:8F:73:66:68:8C:1B:3E:4F X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:79:e7:bd:a8:a3:b8:26:d6:30:48:e5:b7:b4:93:d7:d8:8c: e2:a3:bf:b7:14:d2:51:30:a4:f6:fb:57:5d:9a:a4:c4:09:ee: f0:cf:b4:1b:47:2e:18:62:07:b1:88:01:91:11:ed:6a:af:1c: 2b:b8:6b:17:0f:d1:7a:b5:57:7f:00:10:be:9c:af:00:5d:33: 7e:c8:e3:b5:26:30:f7:9c:d1:cd:2f:8e:ad:97:16:af:36:2b: fe:af:61:d5:d4:f7:32:b6:1c:b7:92:6a:9d:47:4f:ff:55:28: 4b:e3:89:9e:50:30:c7:35:2c:98:c4:20:c3:31:a7:44:9b:64: e3:c7:7d:01:b2:50:65:73:09:8d:00:52:1f:3f:e2:74:4e:10: f6:15:c3:05:75:e7:3c:17:21:8a:db:ad:37:78:ad:72:83:ad: ae:90:14:b3:2b:06:dd:9a:39:a2:f4:fa:77:1c:97:7c:b5:77: f8:96:3b:3a:a5:99:28:c9:2d:55:8b:ef:a7:54:64:8b:9b:7c: 53:34:f6:06:61:0a:21:c0:6e:79:df:4e:a5:7d:97:3c:64:63: ef:35:0f:12:07:49:40:8f:ce:33:97:9a:f9:7b:c9:5a:b9:36: ff:69:f1:e2:cf:d3:28:c2:a0:7f:b7:8c:40:33:89:15:b5:ad: 1b:9a:db:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfC67Q6aW5puC9N1dvVxITgMXU0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNjA0MTcwMjU2MTlaFw0yNjA0MjAwODQxMTlaMDMxMTAvBgNV BAMTKDNDRUNBNDNEMkFBNjcxNzA2RDEyMTJENzhGNzM2NjY4OEMxQjNFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpv36+w6RimrrNo2ZvCYnW8DC cfMwmvo3lNRD5MExJvUTLD9a0TlGBC88+WVwqaR9aUEuq0qha4nGPcVX0Ngj3F9y AQFE442sIVheHuBgPkxg5oGoQr/lTTOrcGNh+9tBNajswFfTKtFLFaMrNRdu+ncP vrYzvLR8hXdk/0vZJVfzL/kZzRJ0iEPcjkEthAOwAhgrq53/V7JAe+c6ap0G1XcT aF5h7hepX97hK+yrwl5mOAjTZGdwAZEK//aIMLoWpWCj0TZ0vIsHVYGPsNPR7ePI SkmDZ0Zr8N9wcAwu70ET1sGaH7PTm7PvBen219RXbHr/uzMj5ZP8z9OsTkFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOykPSqmcXBtEhLXj3NmaIwbPk8wHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt5572oo7gm1jBI5be0k9fYjOKjv7cU0lEw pPb7V12apMQJ7vDPtBtHLhhiB7GIAZER7WqvHCu4axcP0Xq1V38AEL6crwBdM37I 47UmMPec0c0vjq2XFq82K/6vYdXU9zK2HLeSap1HT/9VKEvjiZ5QMMc1LJjEIMMx p0SbZOPHfQGyUGVzCY0AUh8/4nROEPYVwwV15zwXIYrbrTd4rXKDra6QFLMrBt2a OaL0+nccl3y1d/iWOzqlmSjJLVWL76dUZIubfFM09gZhCiHAbnnfTqV9lzxkY+81 DxIHSUCPzjOXmvl7yVq5Nv9p8eLP0yjCoH+3jEAziRW1rRua2yY= -----END CERTIFICATE-----Generated at Sat Apr 18 08:07:57 2026 by rpki-client