$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: PsH21a9KWwXoS9QU3cTKF30q+EL6YVNwziAMLThwwLU= Subject key identifier: 89:08:05:4B:4E:36:0F:1F:F5:EC:49:4A:81:42:AF:B1:4F:2B:C9:82 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 3220EE82D350A2EB5ECCCD4D73ECB3D8F04275BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 0503 Signing time: Fri 17 Apr 2026 06:31:45 +0000 Manifest this update: Fri 17 Apr 2026 06:26:45 +0000 Manifest next update: Mon 20 Apr 2026 16:27:45 +0000 Files and hashes: 1: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: kytMoI0yo8MMtgSC+NRJeDzuLy2jRP+XRvBW5hZynY0=) 2: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=) 3: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yxV12cP+17+f4nsu4Qt/0TyM0Yc+PlYZYCbNR6RBl54=) 4: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=) 5: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=) 6: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: EXp3RCNwYXOW99lPgPgoT2jmWozp8DenSjKe6GpVx0A=) 7: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: GMDlJkIYSBbaiHdAVmprXvGw9l46ixxNam2eRH2A4Uo=) 8: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI=) 9: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=) 10: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:20:ee:82:d3:50:a2:eb:5e:cc:cd:4d:73:ec:b3:d8:f0:42:75:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Apr 17 06:26:45 2026 GMT Not After : Apr 20 16:27:45 2026 GMT Subject: CN=8908054B4E360F1FF5EC494A8142AFB14F2BC982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:7a:16:82:16:97:73:3d:8f:33:4b:9f:e1: ac:2c:d1:51:0a:f7:93:da:d9:47:3d:12:0f:6a:04: c2:0d:ca:b9:44:6a:12:29:a7:5a:fe:5d:13:08:e4: 28:66:1f:b1:a9:cf:ee:b3:ed:11:27:de:ad:32:d4: bd:40:4e:73:93:b7:d8:9d:b2:2c:a8:6c:1c:84:e4: 84:4f:db:b6:cb:53:f8:f4:48:df:71:04:e1:62:28: fc:13:d6:e6:4c:ba:63:44:10:49:06:b6:11:8f:0c: 2a:f1:d6:c9:ea:07:1c:5a:26:f7:79:a1:02:64:76: c4:c3:45:b1:85:b2:a7:4a:35:4f:90:8f:ab:67:0e: fa:97:b3:2f:ba:bd:37:ea:d3:8b:ba:3a:1d:5e:8c: c7:31:84:fa:ae:8e:3c:70:ed:d3:b0:5e:f1:4b:64: d0:43:9f:39:86:69:0a:32:b9:09:f7:57:c1:1f:8b: 31:8a:42:24:76:54:48:6b:8e:9d:62:78:9f:b2:f4: 54:52:97:8f:e9:2f:12:b2:24:a2:41:fb:1c:88:f8: 21:05:3e:42:04:16:dc:4b:76:2c:79:42:67:72:63: 5c:af:59:97:1d:72:47:e0:70:ce:91:c9:57:83:45: 65:e1:8b:03:70:7e:94:93:94:0f:43:d3:ed:af:58: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:05:4B:4E:36:0F:1F:F5:EC:49:4A:81:42:AF:B1:4F:2B:C9:82 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:cb:60:ed:84:ca:9f:41:67:ae:a9:ad:e3:4b:4c:cf:86: 34:7b:75:09:57:6d:c1:3b:11:2b:2b:87:d1:e6:5e:a1:ba:48: 55:65:a4:41:37:fa:56:ae:14:5d:ec:75:59:4f:eb:ec:12:a6: f9:56:1a:7e:67:a2:04:db:a3:14:02:2b:1e:f2:4f:1a:fa:94: 68:71:4e:d5:a9:48:f6:2a:3b:c3:88:4e:9d:8c:8b:7a:30:a6: c4:a4:f0:da:f1:6b:53:36:0d:10:ce:1e:9f:7c:56:aa:c7:b6: 60:ea:fa:5f:37:f3:31:97:e7:ab:ba:f3:0e:e3:ab:5c:3d:43: b7:8d:8f:d4:70:65:54:74:89:6f:30:c2:61:00:c6:be:8e:c1: a4:3a:09:24:f2:81:73:0f:e4:99:b3:bb:6a:b9:dd:8c:6e:af: 98:5d:1b:a5:9b:90:68:41:65:f7:2e:8e:30:a7:06:19:e9:af: 39:72:70:98:8c:2c:d8:20:ba:38:28:1f:e5:9a:cd:d8:32:83: d2:44:69:41:2f:44:53:c0:35:c2:2f:d2:47:a5:26:5f:e9:e7: 97:91:aa:0a:f4:2b:e5:1b:d2:68:76:3a:72:db:33:a6:91:d6: 42:52:10:02:16:f8:58:41:a5:e9:d6:66:41:1e:45:62:6b:91: 28:77:7b:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiDugtNQoutezM1Nc+yz2PBCdb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNjA0MTcwNjI2NDVaFw0yNjA0MjAxNjI3NDVaMDMxMTAvBgNV BAMTKDg5MDgwNTRCNEUzNjBGMUZGNUVDNDk0QTgxNDJBRkIxNEYyQkM5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTnoWghaXcz2PM0uf4aws0VEK 95Pa2Uc9Eg9qBMINyrlEahIpp1r+XRMI5ChmH7Gpz+6z7REn3q0y1L1ATnOTt9id siyobByE5IRP27bLU/j0SN9xBOFiKPwT1uZMumNEEEkGthGPDCrx1snqBxxaJvd5 oQJkdsTDRbGFsqdKNU+Qj6tnDvqXsy+6vTfq04u6Oh1ejMcxhPqujjxw7dOwXvFL ZNBDnzmGaQoyuQn3V8EfizGKQiR2VEhrjp1ieJ+y9FRSl4/pLxKyJKJB+xyI+CEF PkIEFtxLdix5QmdyY1yvWZcdckfgcM6RyVeDRWXhiwNwfpSTlA9D0+2vWPz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQgFS042Dx/17ElKgUKvsU8ryYIwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR+y2DthMqfQWeuqa3jS0zPhjR7dQlXbcE7 ESsrh9HmXqG6SFVlpEE3+lauFF3sdVlP6+wSpvlWGn5nogTboxQCKx7yTxr6lGhx TtWpSPYqO8OITp2Mi3owpsSk8Nrxa1M2DRDOHp98VqrHtmDq+l838zGX56u68w7j q1w9Q7eNj9RwZVR0iW8wwmEAxr6OwaQ6CSTygXMP5Jmzu2q53Yxur5hdG6WbkGhB ZfcujjCnBhnprzlycJiMLNggujgoH+Wazdgyg9JEaUEvRFPANcIv0kelJl/p55eR qgr0K+Ub0mh2OnLbM6aR1kJSEAIW+FhBpenWZkEeRWJrkSh3e/U= -----END CERTIFICATE-----Generated at Fri Apr 17 20:49:31 2026 by rpki-client