$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: IUTQ2W2Uib3oC0CW7bAMmSCP4G0uF/30MVCnbWDjees= Subject key identifier: CF:71:64:A5:76:B1:A4:87:28:61:1C:C8:D0:A3:16:71:BC:26:35:C0 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 7C21B00EA429D862E2584E2A503E23D88D9C70B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 0274 Signing time: Thu 16 Apr 2026 20:40:45 +0000 Manifest this update: Thu 16 Apr 2026 20:35:45 +0000 Manifest next update: Mon 20 Apr 2026 04:07:45 +0000 Files and hashes: 1: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: KhYyo2N/Y4xLaKR6MqWLU8yAPYXZh3xZMjmxhL/Q2/0=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: 9EFR87wZIqKvTNa5TzL8/XFYW6SMsPZkr/Iw4J7GW14=) 3: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: Rc2DErsyjigrY0WguoKyWlWN27lUZbqBBcHG2nvqvJ4=) 4: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: QYlUXfKWA965xzCDK8ro8JUbxZ5m1lC+Ave4oLx7z7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:21:b0:0e:a4:29:d8:62:e2:58:4e:2a:50:3e:23:d8:8d:9c:70:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Apr 16 20:35:45 2026 GMT Not After : Apr 20 04:07:45 2026 GMT Subject: CN=CF7164A576B1A48728611CC8D0A31671BC2635C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:64:f3:bc:74:37:5e:50:9a:1d:e0:ca:f0: e0:5c:69:d9:9e:74:f5:9a:92:4f:f7:6a:d9:a8:ff: 92:38:e6:d2:9e:79:bb:57:ed:11:2d:8e:61:9d:95: 46:5f:24:2a:37:06:30:92:24:81:0f:f7:d1:73:39: a2:b0:4b:f3:43:ea:c2:0d:db:d2:04:ae:86:fa:ba: 11:80:cd:f4:30:79:1b:a8:a4:d6:6b:ca:cf:ea:5f: 9d:cb:93:b9:da:41:fe:31:9f:ce:83:8b:e1:6c:3e: 6a:0e:6f:fe:92:4e:a2:f3:af:02:a1:75:58:ee:af: 5d:de:74:a4:ae:39:0c:18:09:61:e2:c8:74:ec:54: a5:55:77:f6:04:c5:c3:94:fb:6c:c6:fa:7c:d9:68: 20:ae:29:e8:82:13:18:b5:7a:b4:61:f1:80:a0:01: 7e:46:08:eb:e0:44:c9:ec:01:58:b2:33:98:6b:33: 24:06:a9:23:46:72:47:a2:f8:43:2a:97:5e:43:0f: b3:39:ce:af:97:86:31:4d:31:13:5e:81:4e:57:82: e1:54:a7:ba:e8:a9:92:fe:4a:94:66:5f:c5:c3:ae: 69:62:fb:9e:86:7d:22:df:58:0d:c9:f4:d8:09:72: 75:bb:0f:da:cd:6d:14:b2:e3:e1:a5:98:00:18:5e: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:64:A5:76:B1:A4:87:28:61:1C:C8:D0:A3:16:71:BC:26:35:C0 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8d:e4:80:74:9e:84:be:7d:b2:ae:1e:53:6a:69:e6:32:54: f7:c1:9b:1a:45:ff:ff:4b:6b:c5:6c:a0:de:ce:4f:58:d4:66: 5b:3e:e9:67:82:76:92:18:f0:a4:94:f5:22:0e:8b:1e:86:61: cc:21:4e:3e:f9:da:b9:e2:08:a8:3c:3e:3e:e2:f1:01:87:cd: 16:0c:78:15:16:f8:e6:36:63:10:29:cb:72:f4:14:0f:8f:38: 67:fe:0f:84:2b:a8:ec:4c:f1:3c:83:ce:5a:b7:a7:82:ff:c6: 8d:e3:7a:9e:bd:9a:9d:96:b8:5f:7d:ba:9a:e3:9f:14:bd:a0: 8d:77:ed:1b:54:af:cc:25:e6:5e:47:18:88:90:e6:7f:24:3d: 7a:91:2b:ab:30:1a:fa:1e:82:a6:0b:01:3a:d7:8f:b5:93:5c: e4:a9:f5:db:74:95:3e:37:2b:d2:e0:ad:56:ef:0c:ca:8c:be: 62:a9:a5:b7:48:cb:df:48:8c:f5:28:2d:ce:35:f9:20:48:a1: 59:61:cf:31:83:d0:f6:c3:8e:5a:5d:74:f1:cb:1e:32:6b:1c: 53:ec:a2:55:2a:bb:0f:9c:61:cf:50:87:06:ce:ff:94:94:f0: c2:e6:a1:6c:bf:b9:4d:83:17:e5:3d:0a:85:4d:80:d8:e3:2f: f5:1e:4c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCGwDqQp2GLiWE4qUD4j2I2ccLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNjA0MTYyMDM1NDVaFw0yNjA0MjAwNDA3NDVaMDMxMTAvBgNV BAMTKENGNzE2NEE1NzZCMUE0ODcyODYxMUNDOEQwQTMxNjcxQkMyNjM1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xmTzvHQ3XlCaHeDK8OBcadme dPWakk/3atmo/5I45tKeebtX7REtjmGdlUZfJCo3BjCSJIEP99FzOaKwS/ND6sIN 29IErob6uhGAzfQweRuopNZrys/qX53Lk7naQf4xn86Di+FsPmoOb/6STqLzrwKh dVjur13edKSuOQwYCWHiyHTsVKVVd/YExcOU+2zG+nzZaCCuKeiCExi1erRh8YCg AX5GCOvgRMnsAViyM5hrMyQGqSNGckei+EMql15DD7M5zq+XhjFNMRNegU5XguFU p7roqZL+SpRmX8XDrmli+56GfSLfWA3J9NgJcnW7D9rNbRSy4+GlmAAYXhpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz3FkpXaxpIcoYRzI0KMWcbwmNcAwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaN5IB0noS+fbKuHlNqaeYyVPfBmxpF//9L a8VsoN7OT1jUZls+6WeCdpIY8KSU9SIOix6GYcwhTj752rniCKg8Pj7i8QGHzRYM eBUW+OY2YxApy3L0FA+POGf+D4QrqOxM8TyDzlq3p4L/xo3jep69mp2WuF99uprj nxS9oI137RtUr8wl5l5HGIiQ5n8kPXqRK6swGvoegqYLATrXj7WTXOSp9dt0lT43 K9LgrVbvDMqMvmKppbdIy99IjPUoLc41+SBIoVlhzzGD0PbDjlpddPHLHjJrHFPs olUquw+cYc9QhwbO/5SU8MLmoWy/uU2DF+U9CoVNgNjjL/UeTGM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:19 2026 by rpki-client