$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json) Hash identifier: cTXUS2ShzubCGbokajHu4Io+Lt0DmILbegsm/WMMLoU= Subject key identifier: E5:F2:86:84:8A:90:E4:36:A3:4F:1B:92:09:7C:AB:E0:8A:67:5C:18 Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 2D5F3EFFA9AE28845BAFD6D41528A69E7E166AE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft Manifest number: 0128 Signing time: Thu 16 Apr 2026 01:12:21 +0000 Manifest this update: Thu 16 Apr 2026 01:07:21 +0000 Manifest next update: Sun 19 Apr 2026 06:05:21 +0000 Files and hashes: 1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=) 2: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: kEt+Y2PaLGpS4JJ75fayVyOh+aGMTthA23xxCyrKdMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5f:3e:ff:a9:ae:28:84:5b:af:d6:d4:15:28:a6:9e:7e:16:6a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Apr 16 01:07:21 2026 GMT Not After : Apr 19 06:05:21 2026 GMT Subject: CN=E5F286848A90E436A34F1B92097CABE08A675C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:bd:1c:dd:4a:b8:19:cb:a0:0a:02:2c:e6: de:12:3e:ab:0e:13:b8:31:68:64:77:e7:71:32:e2: b3:03:1b:a0:38:3a:d7:c6:18:e6:47:96:69:17:27: 0b:b6:c4:6f:98:9e:56:06:41:ff:e3:29:d5:77:d5: d6:fc:d6:02:55:0e:63:6a:fe:70:21:05:96:db:00: c6:20:38:71:f1:a4:10:c5:31:e4:be:1d:b3:d0:0b: e3:f6:6d:2e:81:a4:f4:c2:29:43:48:31:4f:3c:9d: 4a:cf:71:6f:44:f8:5a:f6:d1:01:59:57:da:4c:f1: 01:10:23:f9:9f:a3:49:c2:18:6d:d5:8f:81:55:e8: 77:a5:7a:81:06:f9:ca:f8:e2:ec:2e:32:75:94:87: 7e:d5:2b:fc:05:94:2d:d3:d2:13:74:cc:f0:74:c6: 9b:dc:9e:57:bd:c9:bb:84:d8:57:59:b2:45:66:15: f8:f3:ec:cc:5a:1f:a8:1b:94:88:0e:a0:db:94:f1: ab:9c:9e:e7:4d:64:29:c7:26:de:ac:c3:32:71:6c: 66:58:e1:b8:e6:e6:19:c6:39:f3:dd:fd:c7:30:20: 63:5c:1a:0d:ea:e2:de:35:8a:7c:c4:de:a9:f7:86: e0:9b:bd:12:82:0b:16:3b:7b:bf:a3:91:ce:19:37: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F2:86:84:8A:90:E4:36:A3:4F:1B:92:09:7C:AB:E0:8A:67:5C:18 X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:aa:ae:bf:55:85:b2:c0:02:53:e0:10:18:83:1a:1b:f7:fd: be:44:06:8e:9c:67:4f:c6:eb:94:cc:ce:e9:ed:67:40:e0:8d: 0f:f4:e7:cd:b1:c3:58:e9:29:04:d3:8b:0d:d2:45:97:00:30: f6:70:09:4d:f5:e2:a0:e1:c7:eb:4d:99:a8:e1:2c:66:6f:a8: 64:37:f6:6b:fc:22:ab:20:e1:67:a9:47:b9:f0:5e:e1:de:f2: c6:b4:37:e9:3e:22:71:3a:a6:6b:2c:c0:64:19:a8:79:44:36: d5:c6:a3:31:cc:de:5b:9b:e8:4a:4a:ff:57:66:b5:cf:e2:d2: 32:da:9b:bc:03:9e:f9:20:8c:35:aa:dd:cd:ea:17:6b:33:bf: 69:7f:d9:64:f6:93:f6:ed:88:0a:99:f4:2d:5c:b8:b6:91:14: 96:f7:b2:b6:00:4e:cb:5f:41:b5:3e:37:b9:0f:36:a6:0f:c1: 60:97:59:38:c8:f8:48:69:4c:ff:a3:ad:a0:21:c7:48:dc:70: 00:9f:90:db:93:e8:d0:2d:dc:2b:24:dc:cb:fd:04:9b:49:0d: 6f:a8:3c:ef:a8:05:9e:4b:3c:d3:11:7a:7d:24:84:27:80:6f: d2:30:56:37:de:9e:73:62:c3:1a:26:83:67:63:9c:d1:36:42: d4:9c:ba:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULV8+/6muKIRbr9bUFSimnn4WauIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNjA0MTYwMTA3MjFaFw0yNjA0MTkwNjA1MjFaMDMxMTAvBgNV BAMTKEU1RjI4Njg0OEE5MEU0MzZBMzRGMUI5MjA5N0NBQkUwOEE2NzVDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnL0c3Uq4GcugCgIs5t4SPqsO E7gxaGR353Ey4rMDG6A4OtfGGOZHlmkXJwu2xG+YnlYGQf/jKdV31db81gJVDmNq /nAhBZbbAMYgOHHxpBDFMeS+HbPQC+P2bS6BpPTCKUNIMU88nUrPcW9E+Fr20QFZ V9pM8QEQI/mfo0nCGG3Vj4FV6HeleoEG+cr44uwuMnWUh37VK/wFlC3T0hN0zPB0 xpvcnle9ybuE2FdZskVmFfjz7MxaH6gblIgOoNuU8aucnudNZCnHJt6swzJxbGZY 4bjm5hnGOfPd/ccwIGNcGg3q4t41inzE3qn3huCbvRKCCxY7e7+jkc4ZNwqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5fKGhIqQ5DajTxuSCXyr4IpnXBgwHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2 RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeqrr9VhbLAAlPgEBiDGhv3/b5EBo6cZ0/G 65TMzuntZ0DgjQ/0582xw1jpKQTTiw3SRZcAMPZwCU314qDhx+tNmajhLGZvqGQ3 9mv8Iqsg4WepR7nwXuHe8sa0N+k+InE6pmsswGQZqHlENtXGozHM3lub6EpK/1dm tc/i0jLam7wDnvkgjDWq3c3qF2szv2l/2WT2k/btiAqZ9C1cuLaRFJb3srYATstf QbU+N7kPNqYPwWCXWTjI+EhpTP+jraAhx0jccACfkNuT6NAt3Csk3Mv9BJtJDW+o PO+oBZ5LPNMRen0khCeAb9IwVjfennNiwxomg2djnNE2QtScujo= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:03 2026 by rpki-client