$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: hz6IfZfKFz2r7TyC4x/cpYDdGZLOUYN4bhAn4etyIv4= Subject key identifier: CA:47:C2:44:5F:B4:A7:EC:AC:42:11:9E:94:CB:6F:45:73:A6:14:0A Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 5649CF63001A2E7238685A88080CA926B32E9185 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 022F Signing time: Sat 18 Apr 2026 13:50:01 +0000 Manifest this update: Sat 18 Apr 2026 13:45:01 +0000 Manifest next update: Tue 21 Apr 2026 21:54:01 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: GXjT7wgYQoqsV9FwN2D35bHHkEGQ5XElgoRdLgqO+WM=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: ykDDbErsTEyYEAWcxIDo6kykbUOZgrgxzipcqNdNSTc=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: k8Mluks9NLDeIH36Z86fJ5gozvV2Rw7S1TNUUAWYhlE=) 4: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: aPzsnvod1Xh+WVwy6V33h9lqEe3T+e2H7ldEc+J30v8=) 5: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: f+QBOOF3ku4fnd+hE7xgl+gv5MnJPh+aT9iEef7iDl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:49:cf:63:00:1a:2e:72:38:68:5a:88:08:0c:a9:26:b3:2e:91:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Apr 18 13:45:01 2026 GMT Not After : Apr 21 21:54:01 2026 GMT Subject: CN=CA47C2445FB4A7ECAC42119E94CB6F4573A6140A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:8a:03:a0:d0:41:12:15:68:e0:2f:cb:8c: 4a:fa:36:97:1f:4f:0a:4c:86:ee:a2:4f:6f:e1:31: 98:4a:95:9a:00:08:64:b8:d8:2e:18:d8:b3:a2:30: 3b:d5:42:2c:fd:13:6d:06:c3:c8:fb:95:30:b3:4f: 37:64:db:cd:d8:8a:49:c7:70:24:f4:81:81:0f:6a: 79:c2:b7:27:ed:4f:7f:28:05:c0:c3:61:cd:36:59: bd:5f:2e:e4:3c:cb:9d:a6:98:b1:8f:42:b5:43:04: b6:96:2a:62:2c:26:3d:f5:5c:a7:c7:77:0d:6d:8b: c9:ac:93:4d:fb:c4:bb:b0:71:6f:81:f2:a4:15:a7: a1:e6:4f:53:9d:68:75:fc:0c:ba:f0:bf:7d:f3:79: d9:78:9d:3f:39:bb:25:5c:6d:85:e2:8f:33:15:01: b6:5b:d0:f6:0f:35:7c:b6:fc:3f:46:bd:05:a1:e6: ec:55:0f:4c:c9:22:bf:1c:5f:bd:85:5a:a2:bd:12: 4f:0f:22:c4:5f:ff:3d:f5:f4:b5:29:6b:cb:ca:9c: 0d:0e:6b:fe:d6:38:05:60:e6:0d:88:59:f3:46:b4: e2:a3:b5:51:b3:a6:1e:76:cd:ff:f3:17:41:35:ed: 89:d1:95:54:0b:fb:8f:6d:2d:30:7b:8c:7e:5d:86: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:C2:44:5F:B4:A7:EC:AC:42:11:9E:94:CB:6F:45:73:A6:14:0A X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:22:7a:49:47:2d:eb:6b:64:21:da:4f:d5:5b:5d:fe:13:2e: e2:a4:0e:5b:8f:fa:76:17:70:50:bf:1b:73:12:de:ab:ea:ac: ba:0a:0f:d8:39:4e:e5:91:e8:f8:fe:de:b1:b5:ed:2a:1a:bb: e4:ee:33:ab:d9:0e:12:5b:71:17:a4:c7:79:4c:7c:62:3b:35: 2e:07:17:27:00:60:c6:21:c9:2a:68:d3:b0:6d:02:74:cb:b3: 79:1a:a6:8f:6f:30:88:68:ca:fc:2c:c1:4b:69:54:27:16:76: 08:59:b0:92:d1:69:fb:61:95:4e:7c:d0:b2:81:e4:15:8e:18: e5:d3:ff:d5:84:81:4b:63:39:30:ee:22:40:ec:22:41:15:e6: c3:d1:7b:c1:ee:ea:3a:5a:af:6d:3d:b7:d7:1b:ce:c5:e8:1d: 35:59:cb:88:b2:7f:3b:f0:ca:96:d5:8c:f5:9d:e9:99:9a:17: 45:71:74:63:e4:72:6c:97:53:91:b4:42:49:27:9c:b2:ca:48: e3:8e:7c:82:6b:7d:db:af:2b:45:dc:49:66:0e:94:81:75:7b: ac:fb:06:72:60:f4:06:90:fa:a3:4f:78:75:75:5a:56:ce:36: f5:6a:84:61:93:35:ab:99:bb:e0:20:4c:83:4b:4b:3e:35:ff: 9f:35:62:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVknPYwAaLnI4aFqICAypJrMukYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNjA0MTgxMzQ1MDFaFw0yNjA0MjEyMTU0MDFaMDMxMTAvBgNV BAMTKENBNDdDMjQ0NUZCNEE3RUNBQzQyMTE5RTk0Q0I2RjQ1NzNBNjE0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCal4oDoNBBEhVo4C/LjEr6Npcf TwpMhu6iT2/hMZhKlZoACGS42C4Y2LOiMDvVQiz9E20Gw8j7lTCzTzdk283YiknH cCT0gYEPannCtyftT38oBcDDYc02Wb1fLuQ8y52mmLGPQrVDBLaWKmIsJj31XKfH dw1ti8msk037xLuwcW+B8qQVp6HmT1OdaHX8DLrwv33zedl4nT85uyVcbYXijzMV AbZb0PYPNXy2/D9GvQWh5uxVD0zJIr8cX72FWqK9Ek8PIsRf/z319LUpa8vKnA0O a/7WOAVg5g2IWfNGtOKjtVGzph52zf/zF0E17YnRlVQL+49tLTB7jH5dhi3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykfCRF+0p+ysQhGelMtvRXOmFAowHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcieklHLetrZCHaT9VbXf4TLuKkDluP+nYX cFC/G3MS3qvqrLoKD9g5TuWR6Pj+3rG17Soau+TuM6vZDhJbcRekx3lMfGI7NS4H FycAYMYhySpo07BtAnTLs3kapo9vMIhoyvwswUtpVCcWdghZsJLRafthlU580LKB 5BWOGOXT/9WEgUtjOTDuIkDsIkEV5sPRe8Hu6jpar209t9cbzsXoHTVZy4iyfzvw ypbVjPWd6ZmaF0VxdGPkcmyXU5G0QkknnLLKSOOOfIJrfduvK0XcSWYOlIF1e6z7 BnJg9AaQ+qNPeHV1WlbONvVqhGGTNauZu+AgTINLSz41/581Yrg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:38 2026 by rpki-client