$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: R1NJFbY7FPEvUkGIF+XrWmKg7mZ/AyEzaduYfSfwSxg= Subject key identifier: 37:61:BA:F8:13:3D:D0:C5:19:A9:D8:56:29:47:2F:C0:C3:26:3A:99 Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 3274783E9F628240FF86A7D3F0D355CEF2028A49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0290 Signing time: Thu 16 Apr 2026 17:22:12 +0000 Manifest this update: Thu 16 Apr 2026 17:17:12 +0000 Manifest next update: Mon 20 Apr 2026 03:48:12 +0000 Files and hashes: 1: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: y1rclnFHJhgiYlD50WTlj4aWshpl4lcp8i25phj/7Jo=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: vgTgBTNTJydGtVf4bKSxwWlbjZECM4zNCEv4WqlYb9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:78:3e:9f:62:82:40:ff:86:a7:d3:f0:d3:55:ce:f2:02:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Apr 16 17:17:12 2026 GMT Not After : Apr 20 03:48:12 2026 GMT Subject: CN=3761BAF8133DD0C519A9D85629472FC0C3263A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:8b:83:cf:5c:9d:8d:c4:27:93:7d:ab:81: ab:a3:0f:68:b0:56:d8:96:2f:d0:4b:62:4f:81:47: 8f:94:16:26:03:6a:00:2a:19:58:e5:e6:ab:f9:93: dc:c1:08:43:30:8c:03:46:2a:74:45:5c:70:ea:50: 96:8c:72:91:ce:5d:d2:17:f3:53:5d:6c:55:3a:0a: c8:ff:62:6c:b9:1b:cb:72:ed:3a:d7:75:b7:b9:d8: d8:b5:97:5e:5d:63:13:0d:aa:33:e6:7c:fb:de:6a: 05:9f:77:88:77:0b:d7:3e:ac:d0:5f:1b:86:2e:1f: 70:cd:65:99:8d:1d:91:c3:af:c6:c6:9b:d1:37:61: 23:20:f0:da:47:41:0c:cf:ad:ba:2c:90:c9:d2:c9: b0:68:09:12:a0:fd:5b:eb:54:0d:ac:8b:a1:54:0f: 59:25:a7:36:9d:4a:be:b2:06:15:d4:dd:fc:ad:e4: 13:5a:06:db:99:2e:ce:19:da:59:35:24:22:79:98: 52:fd:40:24:10:99:d0:72:29:31:91:ae:dc:2c:79: 14:9a:4c:3c:f8:da:13:4a:9c:9b:09:9b:64:37:bb: a1:5b:92:6e:92:78:49:68:00:82:60:0c:92:d2:19: 98:21:c8:48:08:dc:11:de:b7:79:26:90:8b:92:0b: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:BA:F8:13:3D:D0:C5:19:A9:D8:56:29:47:2F:C0:C3:26:3A:99 X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5b:34:b2:88:29:74:51:79:d8:e8:d3:0a:df:30:12:ea:a8: c5:0e:40:26:24:7d:af:41:85:e7:e4:1a:41:2b:96:08:f1:54: 4a:35:3f:30:c8:4d:3c:c1:dd:36:97:ff:e7:e9:dc:89:40:b3: ec:51:1c:7a:55:f6:06:ae:e7:d2:18:e2:1e:4e:76:a4:5d:56: 66:15:aa:f8:64:2c:01:c3:11:02:eb:28:4f:87:27:db:3e:c1: fa:44:04:77:6e:35:b2:aa:ef:d9:b6:3d:9a:1e:c1:4e:a2:a9: d7:0a:c3:58:43:de:3a:b2:8e:fd:8f:ca:1a:a3:4e:49:85:b2: 47:84:6c:bd:09:c9:82:f8:bd:41:ee:7f:2c:2c:8d:8d:32:01: b6:25:40:a1:56:d5:5e:04:df:ff:2e:51:de:31:5c:22:24:81: 2e:7e:c1:44:d5:43:c4:d3:f8:31:e7:7c:da:cb:3f:e7:ba:a9: 31:e9:fe:0a:d9:66:30:2f:e4:ec:a7:a0:5a:0c:67:44:da:d2: 3e:74:ba:d2:d2:b9:7d:eb:17:b4:10:73:19:5e:23:9c:fe:48: 1a:9b:a9:88:8b:a2:cd:66:7d:1e:b1:5b:29:f6:52:c7:a0:ea: 27:de:d6:47:6a:b7:70:81:c9:fc:53:da:6e:e3:0a:a4:77:15: 8b:0b:fb:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnR4Pp9igkD/hqfT8NNVzvICikkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNjA0MTYxNzE3MTJaFw0yNjA0MjAwMzQ4MTJaMDMxMTAvBgNV BAMTKDM3NjFCQUY4MTMzREQwQzUxOUE5RDg1NjI5NDcyRkMwQzMyNjNBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxIuDz1ydjcQnk32rgaujD2iw VtiWL9BLYk+BR4+UFiYDagAqGVjl5qv5k9zBCEMwjANGKnRFXHDqUJaMcpHOXdIX 81NdbFU6Csj/Ymy5G8ty7TrXdbe52Ni1l15dYxMNqjPmfPveagWfd4h3C9c+rNBf G4YuH3DNZZmNHZHDr8bGm9E3YSMg8NpHQQzPrboskMnSybBoCRKg/VvrVA2si6FU D1klpzadSr6yBhXU3fyt5BNaBtuZLs4Z2lk1JCJ5mFL9QCQQmdByKTGRrtwseRSa TDz42hNKnJsJm2Q3u6Fbkm6SeEloAIJgDJLSGZghyEgI3BHet3kmkIuSC+iZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2G6+BM90MUZqdhWKUcvwMMmOpkwHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxbNLKIKXRRedjo0wrfMBLqqMUOQCYkfa9B hefkGkErlgjxVEo1PzDITTzB3TaX/+fp3IlAs+xRHHpV9gau59IY4h5OdqRdVmYV qvhkLAHDEQLrKE+HJ9s+wfpEBHduNbKq79m2PZoewU6iqdcKw1hD3jqyjv2Pyhqj TkmFskeEbL0JyYL4vUHufywsjY0yAbYlQKFW1V4E3/8uUd4xXCIkgS5+wUTVQ8TT +DHnfNrLP+e6qTHp/grZZjAv5OynoFoMZ0Ta0j50utLSuX3rF7QQcxleI5z+SBqb qYiLos1mfR6xWyn2Useg6ife1kdqt3CByfxT2m7jCqR3FYsL+6I= -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:24 2026 by rpki-client