$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: Nb1r4i3M26hVTLrOyrLMir6GjglaZnNSEGYvOAAmkYM= Subject key identifier: 54:E7:C7:83:24:8D:6D:CC:24:DB:9F:1E:9C:94:B4:31:3F:AA:8D:DF Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 02A6C07AD53635245F967CE7A71DF19C50D05FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 018A Signing time: Sun 19 Apr 2026 01:12:08 +0000 Manifest this update: Sun 19 Apr 2026 01:07:08 +0000 Manifest next update: Wed 22 Apr 2026 12:44:08 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: YVi9g8NdOjXDje+YVcBLgnLbbwR1OK3cjuaUVPpp2SA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a6:c0:7a:d5:36:35:24:5f:96:7c:e7:a7:1d:f1:9c:50:d0:5f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Apr 19 01:07:08 2026 GMT Not After : Apr 22 12:44:08 2026 GMT Subject: CN=54E7C783248D6DCC24DB9F1E9C94B4313FAA8DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:ef:42:7f:b1:7d:8b:3b:6f:61:3f:c6:8e: 09:b1:ec:68:7e:7f:43:16:6c:46:b3:d7:4f:fd:fb: 16:81:c3:a9:e6:6c:ae:cd:37:27:e6:50:a5:b8:5f: 16:6b:aa:99:57:7c:0e:0a:6f:08:cf:9d:02:30:76: 20:db:69:09:52:ee:df:ca:2f:27:da:02:2e:19:70: 96:9e:e5:f8:ac:88:11:9a:a1:b7:f1:32:ba:df:68: 60:fc:8f:a0:45:79:8c:4e:81:f8:c4:67:5a:f7:68: 52:fb:f5:ef:4f:8a:2e:fd:93:74:4a:8e:7a:6c:0d: a8:79:c6:76:ae:4f:ff:44:1e:3e:d8:f0:db:a2:9a: 6d:b7:eb:33:fe:76:fd:67:c2:f2:60:73:b1:a4:53: 24:4c:6b:b5:38:eb:64:60:43:2e:0b:13:3a:65:12: ac:71:84:8e:9f:44:8b:ef:cc:3f:25:31:3b:58:09: 88:39:60:ed:f8:3c:62:40:cd:57:84:4a:60:55:6a: 0e:f4:d2:95:54:57:cf:ba:f0:d6:82:c3:db:70:5e: 41:3d:c6:13:86:05:87:58:e3:5c:6f:35:b2:65:2f: c0:ac:47:1a:c2:07:d4:da:2d:1d:d2:cc:cd:04:d0: 82:91:d8:fa:2c:f6:bf:0c:a3:a3:4a:36:03:a6:7f: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:C7:83:24:8D:6D:CC:24:DB:9F:1E:9C:94:B4:31:3F:AA:8D:DF X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:27:7b:20:3a:1d:3a:52:b3:4a:88:e1:5a:8d:59:0f:dc: a9:82:c0:ce:21:79:fe:18:55:09:08:29:66:90:5f:0a:43:00: 64:af:12:77:30:1c:1b:cb:13:96:23:c0:43:51:29:12:8c:0b: 11:b7:7d:e7:08:c5:79:13:2f:50:11:73:e4:08:cc:6e:50:c6: 69:ac:7e:c8:64:4a:7f:1e:81:40:79:35:ea:b0:21:f8:6a:bc: 1b:b9:30:bc:3a:47:98:3b:1b:77:b9:34:3f:59:56:0c:4c:19: 82:c3:ac:31:1e:fd:77:f0:f2:0f:5b:b5:e6:f7:7d:d6:a7:f9: 04:c2:d9:5d:99:18:8d:24:31:f7:42:4b:4e:c4:1e:c8:dd:b8: 05:9f:d5:8e:c7:08:7a:5b:56:7b:3a:b3:ba:8e:c9:5b:d0:c5: 38:f9:a3:b1:61:68:3d:77:3e:7c:e7:35:28:4c:d6:4e:1b:b1: 78:27:9b:87:b6:97:50:90:98:cc:21:5c:6f:68:dc:ae:53:b9: 17:5b:3c:6c:75:74:83:aa:ff:83:1f:8c:66:b5:40:15:28:94: ae:fb:c9:a5:44:f8:05:ab:af:ca:52:92:7a:84:b4:05:9d:07: 6a:32:71:ef:4d:56:68:ad:e9:59:23:ca:1f:f0:95:74:ad:dc: a3:b6:dd:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqbAetU2NSRflnznpx3xnFDQX8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNjA0MTkwMTA3MDhaFw0yNjA0MjIxMjQ0MDhaMDMxMTAvBgNV BAMTKDU0RTdDNzgzMjQ4RDZEQ0MyNERCOUYxRTlDOTRCNDMxM0ZBQThEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qe9Cf7F9iztvYT/Gjgmx7Gh+ f0MWbEaz10/9+xaBw6nmbK7NNyfmUKW4XxZrqplXfA4KbwjPnQIwdiDbaQlS7t/K LyfaAi4ZcJae5fisiBGaobfxMrrfaGD8j6BFeYxOgfjEZ1r3aFL79e9Pii79k3RK jnpsDah5xnauT/9EHj7Y8Nuimm236zP+dv1nwvJgc7GkUyRMa7U462RgQy4LEzpl EqxxhI6fRIvvzD8lMTtYCYg5YO34PGJAzVeESmBVag700pVUV8+68NaCw9twXkE9 xhOGBYdY41xvNbJlL8CsRxrCB9TaLR3SzM0E0IKR2Pos9r8Mo6NKNgOmf9yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOfHgySNbcwk258enJS0MT+qjd8wHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7EJ3sgOh06UrNKiOFajVkP3KmCwM4hef4Y VQkIKWaQXwpDAGSvEncwHBvLE5YjwENRKRKMCxG3fecIxXkTL1ARc+QIzG5Qxmms fshkSn8egUB5NeqwIfhqvBu5MLw6R5g7G3e5ND9ZVgxMGYLDrDEe/Xfw8g9bteb3 fdan+QTC2V2ZGI0kMfdCS07EHsjduAWf1Y7HCHpbVns6s7qOyVvQxTj5o7FhaD13 PnznNShM1k4bsXgnm4e2l1CQmMwhXG9o3K5TuRdbPGx1dIOq/4MfjGa1QBUolK77 yaVE+AWrr8pSknqEtAWdB2oyce9NVmit6Vkjyh/wlXSt3KO23Rs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:36 2026 by rpki-client