$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: 3sGe7BaPFT0LhoErtLLW2G900/bT8b8rDbyA8y6Eqzo= Subject key identifier: B6:98:C2:5D:D7:3A:41:89:DC:1C:D2:01:05:C5:27:9D:84:02:E6:53 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 71442D2E76ACD10129F1ED3121D91E69F71BDB5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01E9 Signing time: Fri 17 Apr 2026 02:01:46 +0000 Manifest this update: Fri 17 Apr 2026 01:56:46 +0000 Manifest next update: Mon 20 Apr 2026 13:42:46 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: S+hQR8ube7o6csT9Rv22n/U07yHPrGgGLfGsncAQhYA=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: We9u7wYcDmmYxcar3CFSe79UnBoWhtJKsMtOMQLcowM=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: thtf3QdtQWO4Jp41Gq1rhKlrwJiL9JV02YjBNx9ONMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:44:2d:2e:76:ac:d1:01:29:f1:ed:31:21:d9:1e:69:f7:1b:db:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Apr 17 01:56:46 2026 GMT Not After : Apr 20 13:42:46 2026 GMT Subject: CN=B698C25DD73A4189DC1CD20105C5279D8402E653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:75:c9:ae:c9:72:fe:d9:4c:53:31:4e:1a: 35:e1:50:f4:b8:3e:1a:a9:a0:a5:6b:7f:9f:ba:3e: ed:ed:8b:30:5f:7f:7e:9c:2e:ee:84:30:bc:73:3f: 76:5d:08:1f:02:2d:4e:26:c9:a5:45:0e:14:a0:9d: 4d:e2:24:2d:a5:2c:7a:69:4e:75:dd:fc:05:e1:37: 36:90:9b:5a:09:e6:bd:7e:04:0a:a5:82:02:a4:06: 4a:69:1a:6d:1a:04:d4:90:84:db:33:85:03:b6:fd: 92:79:1a:8c:09:0b:4c:eb:ca:95:fa:29:45:78:35: 91:8d:b4:3b:74:a7:e1:14:1d:75:cf:30:43:59:4c: 3e:d1:5b:46:8b:58:07:bf:c8:60:1e:98:e7:3e:af: 7b:e1:6f:44:f7:b6:c5:18:a7:7d:cb:0f:9f:7d:8f: 3c:60:2e:12:3f:96:b0:d3:65:a5:f5:bd:bb:f5:3f: c0:bc:9a:c4:8c:43:19:04:1e:22:d5:ed:0b:66:1d: b3:6d:3d:24:29:e9:54:06:99:b9:8a:d4:5a:d5:38: 73:50:cd:04:8a:53:77:4d:fa:02:9a:8f:af:76:b5: 16:31:0c:ad:0e:ed:92:59:aa:b3:ad:43:54:36:22: 9b:ad:4a:5f:44:f7:a6:e8:d3:33:eb:75:1a:15:a8: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:98:C2:5D:D7:3A:41:89:DC:1C:D2:01:05:C5:27:9D:84:02:E6:53 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8d:f5:71:87:d9:8d:25:04:d3:bb:b4:e4:49:cb:fa:88:1b: ad:aa:c4:1f:db:d8:41:02:cd:08:d9:77:ba:33:c3:76:1a:50: 22:1a:8a:7b:be:e2:35:40:55:95:ec:f6:ff:e1:de:31:8d:7c: c7:17:48:68:ce:46:06:2b:70:cd:46:9e:7a:3a:1d:75:3c:a8: af:3f:25:4f:51:a1:9b:9c:bf:05:b0:90:f1:e0:92:73:a1:31: c5:62:ad:4b:7d:57:0d:0c:13:4e:bd:89:76:fe:2e:55:4f:da: a0:d0:2a:1e:4e:e8:81:94:85:05:d0:b8:ab:df:78:c5:bf:1a: 30:80:5c:09:e0:c5:db:f7:c7:6e:f9:5c:cb:e4:54:55:d6:0a: 4e:da:08:d8:34:6f:ab:a7:2f:78:ba:ce:66:95:6a:56:f2:2a: be:d5:21:7c:75:76:93:7d:e6:d8:f7:a0:34:90:e4:b2:78:b5: b9:11:6f:1d:03:00:05:89:ee:fc:de:5e:0c:6e:71:c3:ff:7e: d6:3b:1b:4d:1f:13:b4:aa:13:40:42:40:cc:ef:dc:da:95:68: b5:e2:9c:4a:48:15:54:a9:84:26:09:d3:5b:66:8e:59:44:be: 7a:94:ea:67:4d:57:c0:28:46:4e:18:6f:f1:5f:58:c3:64:94: 93:85:2f:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUQtLnas0QEp8e0xIdkeafcb210wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNjA0MTcwMTU2NDZaFw0yNjA0MjAxMzQyNDZaMDMxMTAvBgNV BAMTKEI2OThDMjVERDczQTQxODlEQzFDRDIwMTA1QzUyNzlEODQwMkU2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAanXJrsly/tlMUzFOGjXhUPS4 PhqpoKVrf5+6Pu3tizBff36cLu6EMLxzP3ZdCB8CLU4myaVFDhSgnU3iJC2lLHpp TnXd/AXhNzaQm1oJ5r1+BAqlggKkBkppGm0aBNSQhNszhQO2/ZJ5GowJC0zrypX6 KUV4NZGNtDt0p+EUHXXPMENZTD7RW0aLWAe/yGAemOc+r3vhb0T3tsUYp33LD599 jzxgLhI/lrDTZaX1vbv1P8C8msSMQxkEHiLV7QtmHbNtPSQp6VQGmbmK1FrVOHNQ zQSKU3dN+gKaj692tRYxDK0O7ZJZqrOtQ1Q2IputSl9E96bo0zPrdRoVqMN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtpjCXdc6QYncHNIBBcUnnYQC5lMwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGN9XGH2Y0lBNO7tORJy/qIG62qxB/b2EEC zQjZd7ozw3YaUCIainu+4jVAVZXs9v/h3jGNfMcXSGjORgYrcM1Gnno6HXU8qK8/ JU9RoZucvwWwkPHgknOhMcVirUt9Vw0ME069iXb+LlVP2qDQKh5O6IGUhQXQuKvf eMW/GjCAXAngxdv3x275XMvkVFXWCk7aCNg0b6unL3i6zmaValbyKr7VIXx1dpN9 5tj3oDSQ5LJ4tbkRbx0DAAWJ7vzeXgxuccP/ftY7G00fE7SqE0BCQMzv3NqVaLXi nEpIFVSphCYJ01tmjllEvnqU6mdNV8AoRk4Yb/FfWMNklJOFL6g= -----END CERTIFICATE-----Generated at Fri Apr 17 14:23:03 2026 by rpki-client