$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: tRO6s1S0NkjAEq2v6SSvQig+FfebXm8cl/ueaTQdoyc= Subject key identifier: 34:88:F0:4D:47:69:EC:60:0F:F5:61:DD:90:44:F3:1F:7B:3F:63:B2 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 6385413D570A8BF6D0C366C5D9E9A28CB1A8AAF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 027D Signing time: Thu 16 Apr 2026 06:51:54 +0000 Manifest this update: Thu 16 Apr 2026 06:46:54 +0000 Manifest next update: Sun 19 Apr 2026 07:31:54 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: gu6/fUTR3/Jtpia8qerZPnUaiwcgm5SzrSARRMgRgZk=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: 29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:85:41:3d:57:0a:8b:f6:d0:c3:66:c5:d9:e9:a2:8c:b1:a8:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Apr 16 06:46:54 2026 GMT Not After : Apr 19 07:31:54 2026 GMT Subject: CN=3488F04D4769EC600FF561DD9044F31F7B3F63B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:2f:26:fc:1b:ea:0e:57:af:16:69:be:a5: d5:8c:c8:27:e7:18:bc:84:1d:2d:75:9f:06:74:b9: 30:4d:9b:03:e0:e1:58:ee:b3:08:53:49:2f:1c:c9: 49:03:58:21:a8:e0:fa:1f:55:33:c0:81:9d:bf:51: 2d:dc:8a:ed:e1:ab:23:eb:1c:c8:a4:1d:fb:57:b3: b2:80:bc:76:82:5e:f2:c2:84:41:fc:12:34:65:2b: c9:79:63:dc:16:7d:1a:5e:d9:20:88:06:1c:b0:e2: 05:d1:18:77:91:2a:af:c8:f4:78:42:a9:06:c8:b3: c3:0a:72:36:99:8e:fb:89:87:99:0e:db:6f:93:d4: 80:58:19:30:a2:56:c4:37:09:09:1c:1c:0c:05:1d: 6d:32:b2:dd:63:ad:97:a0:c6:dd:fb:b8:39:9b:b7: 94:7b:0a:48:a8:f7:b5:b9:1a:7a:27:fd:6a:97:d4: 6d:24:27:b7:c3:18:a6:fb:3c:b8:69:9b:b8:50:44: d7:8d:b8:eb:c7:42:2c:a3:e4:27:75:1f:dd:95:4c: 7a:f2:5e:c8:f1:78:25:24:dd:26:eb:a1:d7:fd:c2: f3:28:30:fe:c0:12:08:2d:4c:a6:c5:a5:5c:b7:08: 45:54:b8:81:7f:62:fb:21:9d:f8:04:33:d8:d4:15: 18:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:F0:4D:47:69:EC:60:0F:F5:61:DD:90:44:F3:1F:7B:3F:63:B2 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8f:51:a9:c5:d6:76:ac:01:f0:60:4e:cf:c2:d4:0e:d5:00: 73:58:bf:17:89:95:c8:44:50:7a:0f:3e:5c:55:87:05:51:06: 33:6b:fa:5c:af:b1:f9:9e:33:cb:b1:e0:8b:4e:ce:3a:22:e4: 3e:11:41:19:5f:c0:97:92:ad:5f:3e:9e:1f:33:5e:9f:f4:ca: 81:fc:a2:7a:53:f1:10:cb:d4:77:09:9b:ee:b9:1d:e1:d4:cf: 44:1d:a1:b1:06:cb:2c:23:1d:c3:f7:4c:ed:e9:6c:b8:48:1f: f2:37:c1:f8:86:fb:66:86:a0:c5:48:65:d3:27:39:25:5d:c6: 7f:5c:cb:40:95:2d:42:57:be:4c:fd:66:7e:fe:77:b4:3a:da: a6:64:f2:34:09:c6:dd:9a:dc:10:bc:ae:92:1e:46:21:48:f6: 3f:16:26:15:7f:6a:ca:b5:41:c7:66:29:34:24:e4:68:2a:35: 29:1a:3f:22:50:17:f7:f5:3c:f3:e0:53:0c:09:9d:cd:20:07: d1:c5:26:6d:50:12:96:44:04:8c:e4:f8:88:28:10:5b:5f:82: 0b:fa:cb:96:68:f6:7e:c9:31:7e:42:d0:3d:b7:80:21:b9:77: bf:2a:2a:43:73:53:8c:c3:ec:2d:c1:1c:39:f8:82:8e:c1:25: 65:30:bc:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4VBPVcKi/bQw2bF2emijLGoqvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNjA0MTYwNjQ2NTRaFw0yNjA0MTkwNzMxNTRaMDMxMTAvBgNV BAMTKDM0ODhGMDRENDc2OUVDNjAwRkY1NjFERDkwNDRGMzFGN0IzRjYzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCS8m/BvqDlevFmm+pdWMyCfn GLyEHS11nwZ0uTBNmwPg4VjuswhTSS8cyUkDWCGo4PofVTPAgZ2/US3ciu3hqyPr HMikHftXs7KAvHaCXvLChEH8EjRlK8l5Y9wWfRpe2SCIBhyw4gXRGHeRKq/I9HhC qQbIs8MKcjaZjvuJh5kO22+T1IBYGTCiVsQ3CQkcHAwFHW0yst1jrZegxt37uDmb t5R7Ckio97W5Gnon/WqX1G0kJ7fDGKb7PLhpm7hQRNeNuOvHQiyj5Cd1H92VTHry XsjxeCUk3Sbrodf9wvMoMP7AEggtTKbFpVy3CEVUuIF/YvshnfgEM9jUFRiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNIjwTUdp7GAP9WHdkETzH3s/Y7IwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqPUanF1nasAfBgTs/C1A7VAHNYvxeJlchE UHoPPlxVhwVRBjNr+lyvsfmeM8ux4ItOzjoi5D4RQRlfwJeSrV8+nh8zXp/0yoH8 onpT8RDL1HcJm+65HeHUz0QdobEGyywjHcP3TO3pbLhIH/I3wfiG+2aGoMVIZdMn OSVdxn9cy0CVLUJXvkz9Zn7+d7Q62qZk8jQJxt2a3BC8rpIeRiFI9j8WJhV/asq1 QcdmKTQk5GgqNSkaPyJQF/f1PPPgUwwJnc0gB9HFJm1QEpZEBIzk+IgoEFtfggv6 y5Zo9n7JMX5C0D23gCG5d78qKkNzU4zD7C3BHDn4go7BJWUwvOk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:47:45 2026 by rpki-client