$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: 3Lnj1UNt0hkfQBho5Nt65En5CDddI/Ne0TBdTG7RBzw= Subject key identifier: C6:4D:BC:0F:BB:34:A7:DA:FF:A5:4D:E8:C1:2B:C6:58:3A:F3:94:C8 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 32EA9D3E099012D1CC06F8B6800F5010A6B0EC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04E3 Signing time: Fri 17 Apr 2026 02:22:39 +0000 Manifest this update: Fri 17 Apr 2026 02:17:39 +0000 Manifest next update: Mon 20 Apr 2026 13:50:39 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: TgvCLvc/6YC/JJoI8D/j8Fl1MPQljywVIWaKJMN6eHo=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ea:9d:3e:09:90:12:d1:cc:06:f8:b6:80:0f:50:10:a6:b0:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Apr 17 02:17:39 2026 GMT Not After : Apr 20 13:50:39 2026 GMT Subject: CN=C64DBC0FBB34A7DAFFA54DE8C12BC6583AF394C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:70:0f:12:68:65:d7:79:67:3d:98:33:26: ab:08:cc:1e:a4:a3:ed:c1:70:f0:31:5f:fc:fd:25: 11:1d:c5:22:11:94:26:63:96:76:c9:9d:ea:8d:2a: cf:46:3e:87:36:95:92:c7:d0:51:52:1f:ee:b8:ab: 52:1d:52:2b:ee:77:db:2a:b3:59:21:80:45:1c:de: c7:84:f7:4b:e6:4d:48:15:c7:17:28:f0:50:84:39: 64:07:ce:0e:31:17:e6:0d:65:a1:1c:f2:57:95:07: bd:5d:34:65:d6:31:61:97:5b:48:8b:8f:63:48:c7: 4a:05:ad:ff:6d:e1:24:80:97:8a:22:3b:a5:e4:7e: 5b:6a:5d:db:04:34:c2:1d:70:43:c7:05:42:4a:5c: 30:27:e0:c9:6b:d5:68:f6:8f:23:1a:5a:c3:77:a0: a1:35:7b:fc:dc:24:74:10:cc:66:03:db:41:0f:a6: ef:6b:bd:6b:f1:33:27:bb:9a:7d:83:a2:99:7f:54: 8e:89:0d:66:54:50:8c:2d:02:94:08:71:18:a0:0b: eb:f6:46:7c:d4:76:d1:77:69:2c:4b:21:dc:0e:3c: 74:3f:3b:20:80:6f:50:cf:6d:a5:2e:1f:e3:22:51: 2b:eb:03:f2:a3:7b:55:83:80:c6:ea:58:8b:75:de: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:BC:0F:BB:34:A7:DA:FF:A5:4D:E8:C1:2B:C6:58:3A:F3:94:C8 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a0:4d:eb:e1:c9:d0:27:c5:3c:22:50:9b:5d:5c:ea:e3:a2: 7e:ec:ab:e2:b5:ab:8d:f2:be:74:46:31:d6:55:cb:d4:8b:bd: 13:f1:99:0e:4f:32:d0:52:55:81:df:e0:1a:b4:26:73:87:09: 10:dd:e1:01:06:26:63:97:d1:91:38:e0:4b:a8:c6:a5:f8:9b: 8e:f9:5d:91:a3:bd:86:5b:99:91:14:dd:a0:48:3d:53:d5:4b: 02:ca:67:3e:50:e5:9a:ca:bc:04:8f:bd:bb:29:8d:70:83:f6: 32:33:b9:98:a2:98:ee:e0:a8:34:b1:7b:0b:b2:a7:8b:29:b7: 07:e1:bc:6b:de:8d:cc:34:de:3e:c7:83:95:73:db:d9:8b:d1: e4:ee:37:49:2b:03:46:b4:61:ff:86:27:74:77:9e:58:d3:5e: e9:92:1a:fe:f1:e0:46:28:c1:6a:c9:5d:e3:3a:10:7f:7e:7b: 03:30:7c:f9:21:22:14:53:45:28:1e:d0:f1:3a:11:3e:c3:49: ee:56:62:1d:7d:32:f1:c3:60:c8:58:77:c4:e6:df:61:66:02: cd:b4:86:fc:b1:ea:d1:0b:46:41:47:75:97:1f:2d:92:45:2d: 73:7c:e7:b4:48:31:64:af:09:0f:2a:e6:8c:bd:f1:69:25:4d: 4b:b5:5a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuqdPgmQEtHMBvi2gA9QEKaw7CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNjA0MTcwMjE3MzlaFw0yNjA0MjAxMzUwMzlaMDMxMTAvBgNV BAMTKEM2NERCQzBGQkIzNEE3REFGRkE1NERFOEMxMkJDNjU4M0FGMzk0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSXAPEmhl13lnPZgzJqsIzB6k o+3BcPAxX/z9JREdxSIRlCZjlnbJneqNKs9GPoc2lZLH0FFSH+64q1IdUivud9sq s1khgEUc3seE90vmTUgVxxco8FCEOWQHzg4xF+YNZaEc8leVB71dNGXWMWGXW0iL j2NIx0oFrf9t4SSAl4oiO6XkfltqXdsENMIdcEPHBUJKXDAn4Mlr1Wj2jyMaWsN3 oKE1e/zcJHQQzGYD20EPpu9rvWvxMye7mn2Dopl/VI6JDWZUUIwtApQIcRigC+v2 RnzUdtF3aSxLIdwOPHQ/OyCAb1DPbaUuH+MiUSvrA/Kje1WDgMbqWIt13sQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxk28D7s0p9r/pU3owSvGWDrzlMgwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWgTevhydAnxTwiUJtdXOrjon7sq+K1q43y vnRGMdZVy9SLvRPxmQ5PMtBSVYHf4Bq0JnOHCRDd4QEGJmOX0ZE44EuoxqX4m475 XZGjvYZbmZEU3aBIPVPVSwLKZz5Q5ZrKvASPvbspjXCD9jIzuZiimO7gqDSxewuy p4sptwfhvGvejcw03j7Hg5Vz29mL0eTuN0krA0a0Yf+GJ3R3nljTXumSGv7x4EYo wWrJXeM6EH9+ewMwfPkhIhRTRSge0PE6ET7DSe5WYh19MvHDYMhYd8Tm32FmAs20 hvyx6tELRkFHdZcfLZJFLXN857RIMWSvCQ8q5oy98WklTUu1Wqw= -----END CERTIFICATE-----Generated at Sat Apr 18 00:11:50 2026 by rpki-client