$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: 27CvVuFjix5rny6mK5TYjZbWTxTileqzes/U201rQP8= Subject key identifier: 30:CA:68:32:0B:23:03:9F:29:9F:B2:73:DF:4E:F9:62:06:91:30:82 Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 30EF082EF9DA598D55EF4CB2E7E8D2F67EF34DC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: DF Signing time: Fri 17 Apr 2026 01:21:02 +0000 Manifest this update: Fri 17 Apr 2026 01:16:02 +0000 Manifest next update: Mon 20 Apr 2026 11:54:02 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=) 2: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: SEyrjKDaqSs0Gde36UC1G9f3udblD8zMXW7TTDmL47A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ef:08:2e:f9:da:59:8d:55:ef:4c:b2:e7:e8:d2:f6:7e:f3:4d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Apr 17 01:16:02 2026 GMT Not After : Apr 20 11:54:02 2026 GMT Subject: CN=30CA68320B23039F299FB273DF4EF96206913082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:c3:d5:2f:bc:43:3a:64:35:ac:f7:60:59: 40:b7:25:4b:33:04:75:70:e3:7e:3e:a6:1d:41:e1: b0:33:d2:c5:59:e1:48:1e:55:15:03:87:d5:cd:ac: 6c:49:8a:8d:54:05:b3:93:cf:85:ba:68:01:da:f1: 1e:22:b1:f1:35:2e:55:b3:67:ab:5d:9b:92:a4:2a: 60:8c:6b:7b:74:1d:1f:0c:a3:f3:fc:80:0e:0d:c3: 94:24:d0:a4:af:1a:81:51:0e:1d:b4:e5:be:e1:c1: 1d:dc:30:86:b0:cb:14:b9:01:ff:c3:20:27:a5:e6: 51:f4:20:1f:1b:8f:00:14:0a:73:d0:22:0b:3a:34: af:0f:22:5a:27:cf:a1:cf:ff:25:c2:ac:9c:3b:ff: f8:4e:f6:14:a6:24:57:4b:f6:53:da:ec:02:8e:90: 13:21:37:b1:05:24:a4:c6:db:8a:68:30:f1:f5:4d: 4b:1f:5f:8d:99:ab:db:d2:1d:75:c7:20:cb:04:84: 39:e8:3f:9c:40:ca:9e:f8:d8:f5:4c:fa:32:e9:28: 30:16:50:e5:78:df:8c:a6:ad:32:40:f2:ba:6f:40: bf:97:7a:85:c1:78:8c:d7:bf:b1:a5:12:e4:f2:97: d0:a6:af:19:2c:c9:7c:ba:31:92:9e:fd:47:3a:7d: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CA:68:32:0B:23:03:9F:29:9F:B2:73:DF:4E:F9:62:06:91:30:82 X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:36:77:69:74:a2:f8:cf:1f:08:26:e2:66:f3:aa:9d:aa:17: f2:95:7c:a5:a4:2f:09:02:55:94:b0:ac:83:d6:f6:f9:db:df: 0c:02:6a:da:f2:79:49:ef:6c:a0:54:b9:d7:07:dd:c1:e5:1d: f7:9c:1e:3f:a4:d5:2d:fa:cb:24:12:df:bf:b4:c5:5e:98:98: 42:cd:0b:de:84:a8:b3:fa:fd:f7:66:2b:48:c0:c4:83:bf:37: bb:82:ea:3b:8e:f0:7f:8d:6d:5b:6f:35:77:ee:03:4d:e2:55: bf:d5:07:8d:5d:ee:3f:ff:da:e3:1e:43:ec:80:cb:0e:d8:ba: f5:0c:34:79:07:1f:36:2e:9c:2d:b0:e4:a8:2f:bb:2e:44:d6: 1d:70:bc:67:ca:62:90:c0:bc:ff:09:71:c3:65:70:0e:93:8e: a7:fb:53:6d:ee:f5:c2:b2:03:a1:d0:62:50:d2:e0:90:80:94: 9f:49:fc:6d:27:e4:0b:c6:bb:23:f8:4d:6f:34:98:5e:d3:1a: 6a:cd:ee:58:07:5e:c1:71:9e:5c:ea:ce:14:aa:59:f9:3a:61: 29:5f:08:c4:d3:df:24:93:ea:99:d0:e7:55:0b:ca:ec:0d:e4: 90:3b:87:50:a6:5b:03:ca:ca:3c:f5:14:28:40:2a:48:c0:8b: 30:38:9b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMO8ILvnaWY1V70yy5+jS9n7zTcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNjA0MTcwMTE2MDJaFw0yNjA0MjAxMTU0MDJaMDMxMTAvBgNV BAMTKDMwQ0E2ODMyMEIyMzAzOUYyOTlGQjI3M0RGNEVGOTYyMDY5MTMwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklcPVL7xDOmQ1rPdgWUC3JUsz BHVw434+ph1B4bAz0sVZ4UgeVRUDh9XNrGxJio1UBbOTz4W6aAHa8R4isfE1LlWz Z6tdm5KkKmCMa3t0HR8Mo/P8gA4Nw5Qk0KSvGoFRDh205b7hwR3cMIawyxS5Af/D ICel5lH0IB8bjwAUCnPQIgs6NK8PIlonz6HP/yXCrJw7//hO9hSmJFdL9lPa7AKO kBMhN7EFJKTG24poMPH1TUsfX42Zq9vSHXXHIMsEhDnoP5xAyp742PVM+jLpKDAW UOV434ymrTJA8rpvQL+XeoXBeIzXv7GlEuTyl9CmrxksyXy6MZKe/Uc6feVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMMpoMgsjA58pn7Jz3075YgaRMIIwHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg2d2l0ovjPHwgm4mbzqp2qF/KVfKWkLwkC VZSwrIPW9vnb3wwCatryeUnvbKBUudcH3cHlHfecHj+k1S36yyQS37+0xV6YmELN C96EqLP6/fdmK0jAxIO/N7uC6juO8H+NbVtvNXfuA03iVb/VB41d7j//2uMeQ+yA yw7YuvUMNHkHHzYunC2w5Kgvuy5E1h1wvGfKYpDAvP8JccNlcA6Tjqf7U23u9cKy A6HQYlDS4JCAlJ9J/G0n5AvGuyP4TW80mF7TGmrN7lgHXsFxnlzqzhSqWfk6YSlf CMTT3yST6pnQ51ULyuwN5JA7h1CmWwPKyjz1FChAKkjAizA4my4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:29:22 2026 by rpki-client