$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: cylc6KZb7Mt5Cj3spjPDuz07U46msqoBHHx/b9CRuQs= Subject key identifier: D6:DE:51:EB:2C:2E:D5:10:0E:74:F6:6D:FF:44:A0:27:74:DA:76:28 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 711C7D2C5B2E49B3D046CE83BD7BD61468D3C194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 023C Signing time: Fri 17 Apr 2026 16:41:56 +0000 Manifest this update: Fri 17 Apr 2026 16:36:56 +0000 Manifest next update: Mon 20 Apr 2026 22:06:56 +0000 Files and hashes: 1: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 3: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: dzbpHCXI9YqRg5Nq1+PPBXWYSyIqsvbYY2hb5wQ5UKw=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1c:7d:2c:5b:2e:49:b3:d0:46:ce:83:bd:7b:d6:14:68:d3:c1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Apr 17 16:36:56 2026 GMT Not After : Apr 20 22:06:56 2026 GMT Subject: CN=D6DE51EB2C2ED5100E74F66DFF44A02774DA7628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:76:35:a9:0e:a4:42:b2:21:1d:6a:aa:9e: 1e:d5:8e:e6:7d:97:89:bb:11:65:93:82:14:ad:8b: 24:c4:e6:a2:93:29:d2:bd:b3:ef:7c:4d:18:58:06: 29:02:2c:f0:6c:94:a1:fd:be:8e:0a:a2:5b:79:67: d2:b8:38:ba:08:ef:a6:a0:03:31:b1:1e:f8:9f:ed: 26:79:e5:3b:1e:bf:50:eb:1f:3f:fa:9d:43:4a:c9: 1f:6e:5e:c6:f5:d6:4d:0c:de:4b:56:dd:7f:53:ed: dc:2d:6f:1c:e1:75:0d:9b:34:5b:2d:e3:b9:03:e0: 2e:5f:0c:8b:e6:3c:2d:86:95:43:c1:88:e7:0a:9e: 61:3e:49:7c:6f:06:e5:a3:df:c2:ba:67:40:95:03: 6c:fe:80:fa:8a:95:d0:d2:9f:4f:68:48:2e:a0:9e: ae:f1:d5:3e:a8:e3:dc:ae:80:b5:d3:c7:82:c0:65: 93:4f:a5:7c:8f:f0:2e:6b:1c:c6:47:04:f0:9d:6f: 66:8f:84:23:5d:20:ef:ac:b1:76:2c:06:55:62:c7: ce:b2:a1:7b:e5:21:62:c5:97:ea:38:17:97:de:d8: c1:d7:ba:fd:f9:06:ca:52:9c:7f:52:b8:e2:8a:97: 02:06:3b:24:90:4d:49:4d:82:fb:7b:60:be:05:89: c6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DE:51:EB:2C:2E:D5:10:0E:74:F6:6D:FF:44:A0:27:74:DA:76:28 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:81:e4:d2:44:ee:c7:a0:60:f2:0c:bb:10:c6:58:a2:b6: 71:a9:b2:9b:bb:64:9d:ec:50:50:68:df:e6:c6:26:30:30:d1: 48:e0:53:59:58:fb:d2:f2:92:ee:d5:4c:49:5b:9d:9e:7d:73: e7:78:a8:ed:d8:c1:69:21:e1:98:30:8e:d9:6a:e0:64:7e:b2: ac:21:b9:19:f2:6b:65:d6:65:d8:19:70:bf:6a:77:6b:24:3d: df:cf:cf:f6:2b:25:c4:11:dd:2b:dd:25:d0:1b:3a:27:49:ca: 20:c1:a2:19:1b:60:9b:48:9b:63:9a:af:44:7d:56:b8:f6:87: 9a:9e:b7:5c:5f:87:fd:47:14:3b:60:e6:d7:d4:6b:49:78:9b: 81:9c:a6:1f:1d:07:b4:b3:1c:88:6a:bc:db:ad:d4:49:98:3e: c1:87:3f:16:03:50:de:0c:cb:5a:b6:88:8b:89:95:5d:c1:67: 00:42:70:13:11:bc:36:ac:55:74:df:3f:81:7e:da:ed:a5:2e: 1b:85:cd:e0:39:25:16:a8:11:b8:da:14:c2:b1:6e:d8:f1:d3: ee:b6:fe:c6:74:cf:1c:04:a8:9c:d2:dd:c7:c3:6e:be:09:cc: 4d:b8:5c:d9:39:ad:4c:08:e2:99:eb:05:fa:97:18:d4:00:2b: e4:d6:a1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRx9LFsuSbPQRs6DvXvWFGjTwZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNjA0MTcxNjM2NTZaFw0yNjA0MjAyMjA2NTZaMDMxMTAvBgNV BAMTKEQ2REU1MUVCMkMyRUQ1MTAwRTc0RjY2REZGNDRBMDI3NzREQTc2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2nY1qQ6kQrIhHWqqnh7VjuZ9 l4m7EWWTghStiyTE5qKTKdK9s+98TRhYBikCLPBslKH9vo4Kolt5Z9K4OLoI76ag AzGxHvif7SZ55Tsev1DrHz/6nUNKyR9uXsb11k0M3ktW3X9T7dwtbxzhdQ2bNFst 47kD4C5fDIvmPC2GlUPBiOcKnmE+SXxvBuWj38K6Z0CVA2z+gPqKldDSn09oSC6g nq7x1T6o49yugLXTx4LAZZNPpXyP8C5rHMZHBPCdb2aPhCNdIO+ssXYsBlVix86y oXvlIWLFl+o4F5fe2MHXuv35BspSnH9SuOKKlwIGOySQTUlNgvt7YL4FicZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1t5R6ywu1RAOdPZt/0SgJ3TadigwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAlgeTSRO7HoGDyDLsQxliitnGpspu7ZJ3s UFBo3+bGJjAw0UjgU1lY+9Lyku7VTElbnZ59c+d4qO3YwWkh4Zgwjtlq4GR+sqwh uRnya2XWZdgZcL9qd2skPd/Pz/YrJcQR3SvdJdAbOidJyiDBohkbYJtIm2Oar0R9 Vrj2h5qet1xfh/1HFDtg5tfUa0l4m4Gcph8dB7SzHIhqvNut1EmYPsGHPxYDUN4M y1q2iIuJlV3BZwBCcBMRvDasVXTfP4F+2u2lLhuFzeA5JRaoEbjaFMKxbtjx0+62 /sZ0zxwEqJzS3cfDbr4JzE24XNk5rUwI4pnrBfqXGNQAK+TWobw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:59 2026 by rpki-client