$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: 62eZGxm0PvHravZoLd/79v185uG3rh7spHJAlOJdJGU= Subject key identifier: CF:8B:83:D6:0B:18:12:6C:09:CE:85:C8:4F:2C:BF:04:55:D1:14:28 Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 2C534333146B10D132161693A5862CA30EDCC679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 024E Signing time: Thu 16 Apr 2026 07:11:57 +0000 Manifest this update: Thu 16 Apr 2026 07:06:57 +0000 Manifest next update: Sun 19 Apr 2026 15:11:57 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: LgRRVJRfV+/ns4q13d+YqlNlGcgqnMAnfg10KVI19ag=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: KM1yb0V0/CTgzYvh7mR3sFpnnzqevs9ATWqlerLDg7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:53:43:33:14:6b:10:d1:32:16:16:93:a5:86:2c:a3:0e:dc:c6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Apr 16 07:06:57 2026 GMT Not After : Apr 19 15:11:57 2026 GMT Subject: CN=CF8B83D60B18126C09CE85C84F2CBF0455D11428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:aa:ab:7c:44:72:b2:66:8e:e2:76:38:6b: f5:63:f4:28:6c:55:39:e9:a3:4d:3d:b7:cb:36:38: 09:4e:4b:2e:07:35:e0:77:03:66:66:73:66:46:22: f9:8c:82:c3:0e:e3:c6:73:28:85:51:af:1d:b2:5f: d6:a2:31:b8:5a:df:53:ab:bc:01:45:f6:c4:25:3f: 16:c9:ac:2a:9b:cf:e6:b7:17:8e:3e:78:4f:48:17: 80:16:29:c2:41:98:90:ff:0b:7d:9b:59:a6:81:45: b4:06:0e:c7:fa:18:7d:21:13:bb:a0:1f:ff:5e:72: 4e:81:13:c4:5d:dd:bc:48:1f:86:ff:43:c1:11:58: 73:49:93:bc:ea:f6:2f:92:60:6c:ad:cb:8c:53:23: 7a:27:46:39:13:41:6a:b7:ed:91:cd:3f:b5:0f:21: 04:5e:2e:a8:df:37:bb:c1:a2:03:32:f0:b3:82:cd: e3:0c:1a:5a:d8:94:fe:c1:a7:c5:00:1c:c7:8a:8d: c6:c8:b0:ae:ad:8c:9d:3c:da:1d:d0:92:b1:bd:46: 2b:a2:eb:b1:e5:fb:45:40:ed:d7:ea:c8:86:6b:82: e3:5c:b8:0b:5c:9e:c2:a9:cb:3a:46:cc:92:f4:c5: 3b:c2:97:1f:a9:40:34:23:63:ca:63:67:d2:22:a0: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:83:D6:0B:18:12:6C:09:CE:85:C8:4F:2C:BF:04:55:D1:14:28 X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bf:83:03:65:a7:82:3f:c9:bd:45:50:a1:2a:53:2a:72:11: 55:de:1d:6f:30:9c:36:73:f4:13:46:a7:ff:eb:a0:1f:47:af: d6:3e:21:04:9c:c7:ef:ab:16:51:8b:a6:dc:22:22:fb:6d:b3: f2:0f:3e:f2:31:f1:f9:6f:44:26:5f:c3:4d:d1:1c:ab:9c:3f: ec:76:10:c2:b7:24:cd:c7:ef:a4:0e:b2:30:fd:19:62:2b:89: 3f:92:6d:2b:80:c6:3f:84:09:c8:2e:e6:ef:18:05:09:7d:e1: 07:a3:c3:1e:f0:8a:51:f5:6b:20:c6:38:76:6f:7b:4c:f1:d6: 98:db:32:e9:3a:06:08:a5:4b:dd:81:58:d7:4f:6c:a5:ce:6d: 2a:52:db:ff:7a:c8:77:94:65:87:c7:12:a5:f3:59:bf:3c:75: 2f:ca:42:66:60:d1:c6:e4:cf:a4:83:d7:de:1a:73:94:94:41: 13:f7:de:ce:b8:41:67:93:ca:c8:97:25:77:34:54:65:26:02: 32:28:6d:a2:91:75:50:a2:45:66:a3:5f:91:58:eb:b4:53:e7: 90:17:e4:96:29:bc:cf:ec:3e:09:b0:4f:af:3c:f7:71:aa:6c: 39:0f:b3:3c:62:68:72:95:45:2e:fd:6d:16:17:d0:65:fe:38: 27:0d:90:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFNDMxRrENEyFhaTpYYsow7cxnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNjA0MTYwNzA2NTdaFw0yNjA0MTkxNTExNTdaMDMxMTAvBgNV BAMTKENGOEI4M0Q2MEIxODEyNkMwOUNFODVDODRGMkNCRjA0NTVEMTE0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM16qrfERysmaO4nY4a/Vj9Chs VTnpo009t8s2OAlOSy4HNeB3A2Zmc2ZGIvmMgsMO48ZzKIVRrx2yX9aiMbha31Or vAFF9sQlPxbJrCqbz+a3F44+eE9IF4AWKcJBmJD/C32bWaaBRbQGDsf6GH0hE7ug H/9eck6BE8Rd3bxIH4b/Q8ERWHNJk7zq9i+SYGyty4xTI3onRjkTQWq37ZHNP7UP IQReLqjfN7vBogMy8LOCzeMMGlrYlP7Bp8UAHMeKjcbIsK6tjJ082h3QkrG9Riui 67Hl+0VA7dfqyIZrguNcuAtcnsKpyzpGzJL0xTvClx+pQDQjY8pjZ9IioO1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4uD1gsYEmwJzoXITyy/BFXRFCgwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW/gwNlp4I/yb1FUKEqUypyEVXeHW8wnDZz 9BNGp//roB9Hr9Y+IQScx++rFlGLptwiIvtts/IPPvIx8flvRCZfw03RHKucP+x2 EMK3JM3H76QOsjD9GWIriT+SbSuAxj+ECcgu5u8YBQl94Qejwx7wilH1ayDGOHZv e0zx1pjbMuk6BgilS92BWNdPbKXObSpS2/96yHeUZYfHEqXzWb88dS/KQmZg0cbk z6SD194ac5SUQRP33s64QWeTysiXJXc0VGUmAjIobaKRdVCiRWajX5FY67RT55AX 5JYpvM/sPgmwT68893GqbDkPszxiaHKVRS79bRYX0GX+OCcNkBY= -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:59 2026 by rpki-client