$ rpki-client -vvf repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft File: 4DB742D9FEF95FE89AEE5B8874324892566482C3.mft (raw, json) Hash identifier: +LtffSnBrBgJ0eAzSIY0Bvqc/d3mabtZoYtTFQ+4q5k= Subject key identifier: 92:23:E9:99:37:67:1E:6D:DF:46:D7:57:A4:67:35:5D:04:25:DF:05 Authority key identifier: 4D:B7:42:D9:FE:F9:5F:E8:9A:EE:5B:88:74:32:48:92:56:64:82:C3 Certificate issuer: /CN=4DB742D9FEF95FE89AEE5B8874324892566482C3 Certificate serial: 40514F5F62C83D18D1392E9D66ED0E084E83354B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DB742D9FEF95FE89AEE5B8874324892566482C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft Manifest number: 05 Signing time: Thu 16 Apr 2026 17:01:56 +0000 Manifest this update: Thu 16 Apr 2026 16:56:56 +0000 Manifest next update: Sun 19 Apr 2026 20:03:56 +0000 Files and hashes: 1: 4DB742D9FEF95FE89AEE5B8874324892566482C3.crl (hash: 0OgWTNO02GJiB3rp6y06BAT7p/SnAQ7O/P1ZAkr7g4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.crl rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DB742D9FEF95FE89AEE5B8874324892566482C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:51:4f:5f:62:c8:3d:18:d1:39:2e:9d:66:ed:0e:08:4e:83:35:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DB742D9FEF95FE89AEE5B8874324892566482C3 Validity Not Before: Apr 16 16:56:56 2026 GMT Not After : Apr 19 20:03:56 2026 GMT Subject: CN=9223E99937671E6DDF46D757A467355D0425DF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:f2:32:2e:ce:c3:55:aa:2e:8f:43:3c:b5: d7:ec:bf:ac:0f:ee:b1:e6:b4:09:66:b7:a8:72:43: df:ad:87:f5:02:fb:1b:33:a4:e7:67:86:f4:dd:60: e1:23:df:ea:d6:47:1f:67:35:2b:07:62:e1:d2:0c: 3c:20:8b:93:6d:61:7e:9b:3d:05:6a:41:a0:b7:6b: 17:d8:4d:aa:5b:36:05:a1:1c:02:b1:91:51:21:b8: d3:49:9b:0b:92:a0:e1:f1:fa:d5:60:9d:a9:ef:ef: 7b:c2:2e:6a:c5:33:91:ae:1e:bd:09:dd:7e:58:00: 08:c6:33:8c:9a:6c:01:d4:eb:98:7c:fb:50:73:e1: f9:47:40:26:51:40:e0:94:70:32:ad:fe:54:39:3b: db:06:02:6a:35:b4:94:5f:c9:2a:38:b1:96:f8:b5: 4c:6e:26:b8:e1:90:51:73:11:e0:eb:58:92:5c:df: ec:96:6f:16:02:79:1c:fa:3b:88:32:88:70:50:a2: e8:64:52:2c:aa:a7:03:85:54:7d:bc:5d:c8:6b:e6: 4d:5b:a1:b4:a2:8f:1e:16:0f:00:fd:94:22:84:b3: 08:19:72:51:0e:fc:e7:23:b9:25:24:01:97:9b:96: de:70:84:99:a9:2c:ab:49:36:72:9c:b5:36:8c:f2: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:E9:99:37:67:1E:6D:DF:46:D7:57:A4:67:35:5D:04:25:DF:05 X509v3 Authority Key Identifier: keyid:4D:B7:42:D9:FE:F9:5F:E8:9A:EE:5B:88:74:32:48:92:56:64:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DB742D9FEF95FE89AEE5B8874324892566482C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/4DB742D9FEF95FE89AEE5B8874324892566482C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:83:a7:51:68:fa:ff:53:b3:be:6b:29:82:71:37:ab:5e:73: 44:f6:7a:2c:43:e0:1e:e0:e6:ae:e3:22:46:fd:6c:eb:2f:51: aa:a4:91:64:41:a2:db:19:41:e0:80:68:de:85:71:9c:84:5d: d6:47:c1:9a:54:0a:6c:dd:7a:05:15:38:22:a8:d0:ec:00:9f: aa:08:23:12:72:c0:45:a5:99:ab:6a:74:ea:d1:9d:01:77:41: 44:e8:5f:a0:07:10:ea:42:b2:2f:d5:01:3a:0c:ea:b3:58:67: 82:87:a9:96:88:1d:03:72:eb:84:2a:00:de:c8:31:d5:0b:fc: 4d:d2:b1:ab:32:33:aa:1a:66:28:ba:19:c7:37:f3:25:46:dd: b8:76:72:65:17:b7:9d:71:82:1b:18:b3:e8:ad:15:14:23:3f: 5c:b0:7c:cc:07:c6:36:45:82:6c:a8:98:03:52:f5:f4:5a:19: b3:39:d1:3d:36:19:f7:8b:b0:fd:8e:54:f8:5e:7b:35:22:8c: e5:b0:94:69:90:d9:fa:23:57:45:ec:f0:a8:11:7a:02:c1:ec: fd:d4:0f:a6:06:38:82:a2:7a:f5:ae:f8:33:d7:c2:59:ff:1c: 72:4f:2d:1e:31:17:6c:54:ae:e1:e4:6a:99:16:c0:bc:3d:4d: bb:a3:c7:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFFPX2LIPRjROS6dZu0OCE6DNUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERCNzQyRDlGRUY5NUZFODlBRUU1Qjg4NzQzMjQ4OTI1 NjY0ODJDMzAeFw0yNjA0MTYxNjU2NTZaFw0yNjA0MTkyMDAzNTZaMDMxMTAvBgNV BAMTKDkyMjNFOTk5Mzc2NzFFNkRERjQ2RDc1N0E0NjczNTVEMDQyNURGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/f/IyLs7DVaouj0M8tdfsv6wP 7rHmtAlmt6hyQ9+th/UC+xszpOdnhvTdYOEj3+rWRx9nNSsHYuHSDDwgi5NtYX6b PQVqQaC3axfYTapbNgWhHAKxkVEhuNNJmwuSoOHx+tVgnanv73vCLmrFM5GuHr0J 3X5YAAjGM4yabAHU65h8+1Bz4flHQCZRQOCUcDKt/lQ5O9sGAmo1tJRfySo4sZb4 tUxuJrjhkFFzEeDrWJJc3+yWbxYCeRz6O4gyiHBQouhkUiyqpwOFVH28Xchr5k1b obSijx4WDwD9lCKEswgZclEO/OcjuSUkAZeblt5whJmpLKtJNnKctTaM8rzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkiPpmTdnHm3fRtdXpGc1XQQl3wUwHwYDVR0j BBgwFoAUTbdC2f75X+ia7luIdDJIklZkgsMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjU3ZjIxZi1hYzA1LTQ3NTAtYTE4Zi1iZGU1ZjY5YWE2NWEvMC80REI3NDJEOUZF Rjk1RkU4OUFFRTVCODg3NDMyNDg5MjU2NjQ4MkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERCNzQyRDlGRUY5NUZFODlBRUU1Qjg4NzQzMjQ4OTI1NjY0 ODJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY1N2YyMWYtYWMwNS00NzUwLWEx OGYtYmRlNWY2OWFhNjVhLzAvNERCNzQyRDlGRUY5NUZFODlBRUU1Qjg4NzQzMjQ4 OTI1NjY0ODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSDp1Fo+v9Ts75rKYJxN6tec0T2eixD4B7g 5q7jIkb9bOsvUaqkkWRBotsZQeCAaN6FcZyEXdZHwZpUCmzdegUVOCKo0OwAn6oI IxJywEWlmatqdOrRnQF3QUToX6AHEOpCsi/VAToM6rNYZ4KHqZaIHQNy64QqAN7I MdUL/E3SsasyM6oaZii6Gcc38yVG3bh2cmUXt51xghsYs+itFRQjP1ywfMwHxjZF gmyomANS9fRaGbM50T02GfeLsP2OVPheezUijOWwlGmQ2fojV0Xs8KgRegLB7P3U D6YGOIKievWu+DPXwln/HHJPLR4xF2xUruHkapkWwLw9Tbujxyk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:53:46 2026 by rpki-client