$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: 4rTKxiPiDe9wMCCv6m4OZhhqMKMmtVwyxODF2Qh7z5o= Subject key identifier: AB:9A:13:56:EA:A6:2C:60:16:C6:46:20:65:3C:7F:B7:5B:72:7D:62 Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 5EAB3093393809F2B7865723C10A9005484C719A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 023E Signing time: Sat 18 Apr 2026 21:21:34 +0000 Manifest this update: Sat 18 Apr 2026 21:16:34 +0000 Manifest next update: Wed 22 Apr 2026 05:16:34 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: qC27AygHNT9T7XgZLk5sbI6TmJIEsMcL4geZvv2EsoY=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ab:30:93:39:38:09:f2:b7:86:57:23:c1:0a:90:05:48:4c:71:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Apr 18 21:16:34 2026 GMT Not After : Apr 22 05:16:34 2026 GMT Subject: CN=AB9A1356EAA62C6016C64620653C7FB75B727D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:cb:cd:de:e0:7c:a5:e0:f5:a6:db:87:39: 6c:fc:6a:55:dd:ac:df:ec:a6:11:c5:5c:9d:a5:a0: cb:75:43:dc:e5:6e:45:d0:1f:e6:46:62:4d:ba:27: 30:87:d6:94:80:60:04:38:39:bc:ec:cd:e3:cd:96: 99:b0:b2:3b:e8:4b:1f:42:6d:f9:ba:20:fe:e8:4c: 49:fa:e6:f6:ad:41:c1:18:5a:b8:b6:fb:2a:67:18: c3:9b:61:c6:06:fa:47:2d:d6:ff:e7:75:d0:4b:d3: 0c:9f:a5:83:a8:27:50:7b:23:30:0a:4b:08:c9:1e: 7e:fd:57:98:0a:e7:b1:e3:9d:52:8c:f9:b9:7d:05: e8:9c:f4:57:f7:96:22:f0:78:91:2a:52:32:b7:5f: 7a:b7:ac:ad:51:76:20:aa:62:e5:b7:95:34:d1:2c: ca:a2:5d:93:ef:8f:a4:69:b7:2e:3a:c1:2a:a0:50: d4:5d:78:da:03:a6:03:4e:41:7c:a4:a7:ca:9b:18: c9:80:c6:c0:a7:06:a2:9a:94:ed:c1:6e:78:12:b9: 73:f3:6f:13:2a:42:e5:4a:05:36:be:b9:b2:9d:6b: 27:ed:ea:0f:6b:5d:d7:5e:22:50:ee:e3:2e:33:68: c6:7a:e1:24:d6:d3:45:38:44:84:cc:98:79:88:c1: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:13:56:EA:A6:2C:60:16:C6:46:20:65:3C:7F:B7:5B:72:7D:62 X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:76:ea:cf:04:7f:0a:75:1a:70:f0:be:05:dc:a5:c6:1a: 43:1b:b6:d2:43:b9:bc:05:73:a0:5f:6d:38:53:31:ab:08:14: e1:4e:6d:5e:3c:8d:b1:6d:f1:45:49:1c:b0:d3:d9:8e:bb:14: 65:3e:ab:11:a9:13:ce:12:5d:75:23:9d:fd:0d:69:cb:6f:c2: 0a:97:87:65:55:41:4e:09:21:86:fc:76:4a:d2:3f:f6:7f:e3: 88:34:e8:a7:8b:c4:a0:2d:ea:8e:dd:b7:cd:86:d7:7f:50:6b: 66:d5:8b:24:1d:27:29:59:6d:05:27:c2:de:d3:ef:3b:5b:d6: d1:70:8c:02:3d:c3:b3:6c:9e:1c:a9:34:25:58:cf:8d:8c:07: 29:57:1c:48:60:02:17:4e:79:d1:87:5b:f0:33:73:17:c3:e1: 5b:79:4d:c8:06:10:fd:33:8a:65:73:e8:f4:35:5e:d9:ef:26: 5c:5e:0e:3e:db:0a:f9:d6:28:34:1f:83:df:a1:95:c1:ca:eb: 83:c2:0c:c9:f4:b3:0d:84:67:48:68:5b:5f:0a:b3:16:85:ba: 64:15:24:a8:9d:30:65:ba:f8:f7:2f:ed:c8:08:f4:f8:e2:1c: fc:49:62:aa:e7:a9:ff:8e:19:e9:8c:a8:fb:37:e1:4d:2b:b9: 80:03:f2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqswkzk4CfK3hlcjwQqQBUhMcZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNjA0MTgyMTE2MzRaFw0yNjA0MjIwNTE2MzRaMDMxMTAvBgNV BAMTKEFCOUExMzU2RUFBNjJDNjAxNkM2NDYyMDY1M0M3RkI3NUI3MjdENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVMvN3uB8peD1ptuHOWz8alXd rN/sphHFXJ2loMt1Q9zlbkXQH+ZGYk26JzCH1pSAYAQ4ObzszePNlpmwsjvoSx9C bfm6IP7oTEn65vatQcEYWri2+ypnGMObYcYG+kct1v/nddBL0wyfpYOoJ1B7IzAK SwjJHn79V5gK57HjnVKM+bl9Beic9Ff3liLweJEqUjK3X3q3rK1RdiCqYuW3lTTR LMqiXZPvj6Rpty46wSqgUNRdeNoDpgNOQXykp8qbGMmAxsCnBqKalO3BbngSuXPz bxMqQuVKBTa+ubKdayft6g9rXddeIlDu4y4zaMZ64STW00U4RITMmHmIwYftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5oTVuqmLGAWxkYgZTx/t1tyfWIwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWMdurPBH8KdRpw8L4F3KXGGkMbttJDubwF c6BfbThTMasIFOFObV48jbFt8UVJHLDT2Y67FGU+qxGpE84SXXUjnf0NactvwgqX h2VVQU4JIYb8dkrSP/Z/44g06KeLxKAt6o7dt82G139Qa2bViyQdJylZbQUnwt7T 7ztb1tFwjAI9w7NsnhypNCVYz42MBylXHEhgAhdOedGHW/AzcxfD4Vt5TcgGEP0z imVz6PQ1XtnvJlxeDj7bCvnWKDQfg9+hlcHK64PCDMn0sw2EZ0hoW18KsxaFumQV JKidMGW6+Pcv7cgI9PjiHPxJYqrnqf+OGemMqPs34U0ruYAD8kU= -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:57 2026 by rpki-client