$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: RFVlAUxdQ8FTZ0Znp4iwoxdaVD7FbnIJZV/IaIPS/kw= Subject key identifier: 5B:66:5E:6B:71:5D:D8:E3:1A:50:F1:0C:F4:08:76:81:8E:34:FC:BC Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 28EBBE5F9756D9B090803EB081928D21B1880D0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 025F Signing time: Fri 17 Apr 2026 09:52:32 +0000 Manifest this update: Fri 17 Apr 2026 09:47:32 +0000 Manifest next update: Mon 20 Apr 2026 21:51:32 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: x6w9cKdiR5aQpWjyYvscXPQq4z+/K1uw1qvLcaHQdCg=) 2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: T6tmK5lxojhy+ON7aQXIHjGtNnEnhPS8tjOp5HNqK24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:eb:be:5f:97:56:d9:b0:90:80:3e:b0:81:92:8d:21:b1:88:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Apr 17 09:47:32 2026 GMT Not After : Apr 20 21:51:32 2026 GMT Subject: CN=5B665E6B715DD8E31A50F10CF40876818E34FCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:82:6e:8e:af:6f:fa:47:00:4e:6e:11:eb: d5:08:9c:fd:4f:c0:8a:8c:33:2a:ae:2f:d0:4d:bb: 6a:fb:78:5c:e4:94:ec:96:7a:57:cf:ac:1a:47:1a: 7e:91:47:54:2a:37:a4:87:8b:c0:23:ec:06:ef:58: b8:c5:3f:44:01:ef:52:eb:e8:8b:a0:7e:ee:c0:da: 94:13:d3:05:fc:c3:ce:29:04:1c:1d:2d:75:72:21: a6:d4:01:56:f4:1c:0b:29:5c:b1:8f:a4:c0:bf:6a: 51:4d:84:28:59:c3:bf:aa:6e:5c:c6:37:7d:65:be: c7:69:2e:be:e8:e1:d9:fe:22:c0:7e:35:de:04:de: a1:eb:6c:f8:ae:99:7e:ac:f7:49:36:83:77:d8:7a: a6:74:6b:77:3e:57:b3:9d:3d:00:ef:5c:01:1a:64: 1d:6e:c3:f9:c3:e4:9a:c4:7c:14:b2:0a:4c:7e:61: 44:9c:13:82:53:91:c1:58:9c:25:ac:6c:18:95:0a: b8:1b:fe:08:fa:fc:d4:ae:cf:eb:66:a2:32:88:6b: a0:69:bc:43:43:44:12:b8:b6:09:05:1f:42:ee:62: 5c:ca:dd:a1:03:71:11:5f:c3:7d:04:5e:e0:6b:57: fd:8b:59:0d:0e:04:ea:f0:5b:22:12:e5:4b:00:70: 28:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:66:5E:6B:71:5D:D8:E3:1A:50:F1:0C:F4:08:76:81:8E:34:FC:BC X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:9d:a4:d7:8b:93:aa:a5:7c:d8:f1:b9:e1:82:c6:e4:57: 5d:1d:b9:6a:f1:10:28:11:46:85:b9:36:d1:ef:09:a8:d1:25: f9:4f:7e:99:ee:c9:2b:6b:1a:47:94:fc:5c:66:56:3f:d0:97: c4:7a:cc:2c:3d:66:05:f5:21:f6:5e:f0:a3:7d:4e:28:bc:22: 60:ed:0b:6c:3a:e1:87:e3:5b:6e:40:99:0d:1a:8f:b2:69:5c: eb:10:ed:5a:51:c2:1f:5a:cb:85:55:20:26:09:ab:32:08:f7: ec:3f:e6:d1:34:9d:9d:af:d5:e2:45:0a:94:13:3a:f1:c8:9e: 6c:02:81:07:87:ea:9c:f2:ea:c3:c9:33:3c:b3:d8:81:2a:b1: a4:ae:d7:a6:49:3b:c2:69:4f:a8:83:70:02:32:d2:1c:01:f4: 18:5c:27:7a:94:b5:72:0f:64:08:a6:bc:79:74:f7:4c:4a:5f: a0:76:cc:37:95:71:9a:6d:a3:fc:c1:03:cc:3b:f7:54:f0:e2: 5a:d8:30:96:3a:8f:c4:d2:3d:42:1d:b5:92:d9:fd:b8:36:05: 6b:fd:2e:dd:f7:ec:4e:48:57:19:51:42:ad:93:b9:b6:fe:bb: b8:b5:2d:de:0c:dc:da:64:15:4a:a8:73:29:b7:8a:d6:77:6e: c4:76:1c:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOu+X5dW2bCQgD6wgZKNIbGIDQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNjA0MTcwOTQ3MzJaFw0yNjA0MjAyMTUxMzJaMDMxMTAvBgNV BAMTKDVCNjY1RTZCNzE1REQ4RTMxQTUwRjEwQ0Y0MDg3NjgxOEUzNEZDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6C4Jujq9v+kcATm4R69UInP1P wIqMMyquL9BNu2r7eFzklOyWelfPrBpHGn6RR1QqN6SHi8Aj7AbvWLjFP0QB71Lr 6Iugfu7A2pQT0wX8w84pBBwdLXVyIabUAVb0HAspXLGPpMC/alFNhChZw7+qblzG N31lvsdpLr7o4dn+IsB+Nd4E3qHrbPiumX6s90k2g3fYeqZ0a3c+V7OdPQDvXAEa ZB1uw/nD5JrEfBSyCkx+YUScE4JTkcFYnCWsbBiVCrgb/gj6/NSuz+tmojKIa6Bp vENDRBK4tgkFH0LuYlzK3aEDcRFfw30EXuBrV/2LWQ0OBOrwWyIS5UsAcChzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2Zea3Fd2OMaUPEM9Ah2gY40/LwwHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR7naTXi5OqpXzY8bnhgsbkV10duWrxECgR RoW5NtHvCajRJflPfpnuyStrGkeU/FxmVj/Ql8R6zCw9ZgX1IfZe8KN9Tii8ImDt C2w64YfjW25AmQ0aj7JpXOsQ7VpRwh9ay4VVICYJqzII9+w/5tE0nZ2v1eJFCpQT OvHInmwCgQeH6pzy6sPJMzyz2IEqsaSu16ZJO8JpT6iDcAIy0hwB9BhcJ3qUtXIP ZAimvHl090xKX6B2zDeVcZpto/zBA8w791Tw4lrYMJY6j8TSPUIdtZLZ/bg2BWv9 Lt337E5IVxlRQq2Tubb+u7i1Ld4M3NpkFUqocym3itZ3bsR2HNw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:25 2026 by rpki-client