$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft File: 4C493E592E006837A093CD288BB55329BE38D2D2.mft (raw, json) Hash identifier: +fgghELAG0xE57EgnbHaBs8ysNXqc2ZOGm3Xhw4DVRw= Subject key identifier: C9:08:97:B9:01:E3:13:0A:12:6E:4F:D2:E6:C1:5B:E0:FB:27:B9:9F Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 Certificate issuer: /CN=4C493E592E006837A093CD288BB55329BE38D2D2 Certificate serial: 2395E237EA98EEB9AA4F40D00D632A46156DAC0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 20:50:06 +0000 Manifest this update: Thu 16 Apr 2026 20:45:06 +0000 Manifest next update: Mon 20 Apr 2026 00:55:06 +0000 Files and hashes: 1: 4C493E592E006837A093CD288BB55329BE38D2D2.crl (hash: ylRfafd7rYB/K/wnCQlHOCQqMXo2zBBfmU6prGvQ91g=) 2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: N5m6EQloSn7cPSOHDMXggl0h6eDrNc8qhyGZ+DM46fM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:95:e2:37:ea:98:ee:b9:aa:4f:40:d0:0d:63:2a:46:15:6d:ac:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2 Validity Not Before: Apr 16 20:45:06 2026 GMT Not After : Apr 20 00:55:06 2026 GMT Subject: CN=C90897B901E3130A126E4FD2E6C15BE0FB27B99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:74:b3:29:62:aa:b0:b1:2d:89:58:a3:8d: 15:65:8b:c8:d8:88:b7:f6:60:dc:cd:d7:35:f5:37: 9e:4d:ad:57:8c:e4:dc:05:d3:4a:ab:7d:2f:2c:21: ae:03:77:a2:e4:48:03:91:ad:12:e0:95:89:1a:41: b1:fb:17:9d:60:84:3e:52:3d:2e:6b:01:7b:93:ed: b6:4d:d9:05:98:2f:67:14:bb:32:d6:76:fc:f0:50: 86:a3:f9:ca:a8:0f:a8:38:43:4a:3e:8d:ee:a8:40: e4:4c:21:20:3f:cd:ae:24:58:c1:62:20:a2:0a:ae: ce:f1:bf:9e:11:01:8e:82:8a:bb:d5:24:41:ee:4d: 70:32:e7:c4:e0:4b:8b:1f:30:75:1b:8d:bc:02:9f: 8e:1d:ba:af:ce:ef:41:72:e7:fb:d7:30:d3:c5:f5: fa:64:24:e6:e4:dd:94:96:76:ef:fe:1b:80:11:90: fa:9a:b9:46:5f:2b:a0:06:b0:ad:e9:88:7f:e2:ef: e1:0c:d2:7c:36:ba:8f:60:17:65:c8:0e:4a:9a:7b: f0:49:75:49:fd:d6:a3:19:8b:60:30:d1:fc:ad:6b: 61:4d:13:6a:8a:f1:ae:c8:7f:0a:52:65:d2:d4:66: 37:1c:a4:c0:fd:09:25:84:13:d4:80:f1:e1:30:27: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:08:97:B9:01:E3:13:0A:12:6E:4F:D2:E6:C1:5B:E0:FB:27:B9:9F X509v3 Authority Key Identifier: keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:34:2c:2e:2c:a2:6d:d0:4d:d8:c5:8d:f9:a4:5f:6f:2a:b0: 37:32:46:bd:46:ee:cb:ef:97:b3:74:2c:2a:9f:f5:11:94:4e: b7:15:e6:00:9a:b7:28:d4:e5:9c:cd:cc:83:13:0d:aa:0f:49: 65:4c:4f:e5:f7:bd:84:6b:ac:bb:cb:10:c1:79:a1:fd:cf:84: bd:a2:09:89:41:4c:3f:8e:1f:42:f3:69:57:d7:ad:cd:1f:a8: 52:96:f1:90:83:f2:76:a3:45:20:f9:46:b4:f1:f5:5b:78:ae: 26:32:3b:6b:3e:9c:81:e5:7d:6d:54:63:95:99:ec:4f:b2:9c: 1e:54:69:95:cb:bd:8e:f4:e1:58:74:b2:f8:4c:fc:10:82:c8: cc:02:26:1f:92:01:9d:19:ac:94:c8:a8:71:35:ed:83:c8:65: df:9e:76:11:b2:11:9d:be:b2:f2:fa:35:6d:71:db:4b:a4:e8: 6a:db:16:62:bd:db:d4:12:ba:ea:50:c8:47:a9:98:4b:32:fa: 7f:d0:6f:0a:59:0c:61:5e:e9:bd:c1:eb:fb:91:5a:56:50:25: 48:60:77:89:28:8e:ca:39:8f:42:fe:e7:73:c8:40:c6:c8:e3: ec:1d:28:3e:ba:fd:70:89:ae:6a:b0:74:f6:fb:ad:3f:ec:f8: b7:95:bb:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5XiN+qY7rmqT0DQDWMqRhVtrAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlC RTM4RDJEMjAeFw0yNjA0MTYyMDQ1MDZaFw0yNjA0MjAwMDU1MDZaMDMxMTAvBgNV BAMTKEM5MDg5N0I5MDFFMzEzMEExMjZFNEZEMkU2QzE1QkUwRkIyN0I5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkwXSzKWKqsLEtiVijjRVli8jY iLf2YNzN1zX1N55NrVeM5NwF00qrfS8sIa4Dd6LkSAORrRLglYkaQbH7F51ghD5S PS5rAXuT7bZN2QWYL2cUuzLWdvzwUIaj+cqoD6g4Q0o+je6oQORMISA/za4kWMFi IKIKrs7xv54RAY6CirvVJEHuTXAy58TgS4sfMHUbjbwCn44duq/O70Fy5/vXMNPF 9fpkJObk3ZSWdu/+G4ARkPqauUZfK6AGsK3piH/i7+EM0nw2uo9gF2XIDkqae/BJ dUn91qMZi2Aw0fyta2FNE2qK8a7IfwpSZdLUZjccpMD9CSWEE9SA8eEwJ9CNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQiXuQHjEwoSbk/S5sFb4PsnuZ8wHwYDVR0j BBgwFoAUTEk+WS4AaDegk80oi7VTKb440tIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODAwMmYzZi1iZjE3LTRlNDgtOWU4NS04NDM2MDYzMzEzZDIvMC80QzQ5M0U1OTJF MDA2ODM3QTA5M0NEMjg4QkI1NTMyOUJFMzhEMkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlCRTM4 RDJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgwMDJmM2YtYmYxNy00ZTQ4LTll ODUtODQzNjA2MzMxM2QyLzAvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUz MjlCRTM4RDJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU0LC4som3QTdjFjfmkX28qsDcyRr1G7svv l7N0LCqf9RGUTrcV5gCatyjU5ZzNzIMTDaoPSWVMT+X3vYRrrLvLEMF5of3PhL2i CYlBTD+OH0LzaVfXrc0fqFKW8ZCD8najRSD5RrTx9Vt4riYyO2s+nIHlfW1UY5WZ 7E+ynB5UaZXLvY704Vh0svhM/BCCyMwCJh+SAZ0ZrJTIqHE17YPIZd+edhGyEZ2+ svL6NW1x20uk6GrbFmK929QSuupQyEepmEsy+n/QbwpZDGFe6b3B6/uRWlZQJUhg d4kojso5j0L+53PIQMbI4+wdKD66/XCJrmqwdPb7rT/s+LeVu1Y= -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:55 2026 by rpki-client