$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: TZXeJFOr0tKjrJ7kFT4DZ1HBgpUYuCUqKUAyo0Ma+x4= Subject key identifier: CF:CD:BD:7D:62:E6:EF:8F:BF:D8:BB:08:AB:E4:3F:14:5F:2C:A8:35 Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 62F4217A3BFD729F607E4DAD1DF5CE82228FFACA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 0204 Signing time: Fri 17 Apr 2026 05:23:28 +0000 Manifest this update: Fri 17 Apr 2026 05:18:28 +0000 Manifest next update: Mon 20 Apr 2026 09:15:28 +0000 Files and hashes: 1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: uQsxGbefiEsVtpCcyhbMnpmwezO+DzoY1mF96tzo5Pg=) 2: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: RVo6qspo0NsN9BxZrHPSAeKSfxIe7qLdXa5VG0+wvkA=) 3: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: W9uG3lp6UnhNKD0tAAXjqdzBwK1JaHI+s6+dToAt00g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f4:21:7a:3b:fd:72:9f:60:7e:4d:ad:1d:f5:ce:82:22:8f:fa:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Apr 17 05:18:28 2026 GMT Not After : Apr 20 09:15:28 2026 GMT Subject: CN=CFCDBD7D62E6EF8FBFD8BB08ABE43F145F2CA835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:6b:93:3a:e8:dd:7c:a9:10:3b:66:b3:62: 75:d9:8d:26:f6:83:08:ab:83:12:ce:85:5d:3f:da: e5:86:6a:38:57:94:25:cc:e2:7e:56:eb:aa:7a:f8: 96:96:4f:34:b5:ad:7b:23:7f:93:bd:91:8a:8e:bd: 65:8d:fc:f3:c6:cc:91:fd:23:29:98:80:28:37:6e: 9a:20:b3:e9:f3:56:a0:73:9e:8e:65:b8:4b:00:a7: 49:f1:0d:8c:3d:7a:18:f1:ca:84:21:bc:d9:1e:a4: d8:6c:fd:cb:c3:0d:19:52:fb:33:63:82:e2:30:e3: b0:57:3b:25:e2:74:b6:25:ec:63:49:62:0a:09:1b: cb:62:cb:1e:06:d7:e2:0b:01:85:57:55:f1:49:f1: f4:e1:ac:15:9b:dc:62:c3:5d:8a:46:c4:40:41:7c: c5:d6:ac:c7:e1:5f:b9:67:a9:bb:0a:ea:13:dc:0e: 80:25:c6:19:56:60:bc:b6:4d:ea:83:f3:c6:68:0e: fd:60:e4:eb:c9:c1:94:5f:92:b3:bf:15:39:a9:fb: 03:ce:d2:1d:a7:16:e6:a0:ff:98:c9:9d:a5:2e:df: fd:05:5b:be:03:8a:1b:5d:60:26:9a:b0:8e:9c:63: e6:ce:80:01:71:33:69:fb:b6:a8:d7:a5:a4:1f:70: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:BD:7D:62:E6:EF:8F:BF:D8:BB:08:AB:E4:3F:14:5F:2C:A8:35 X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:38:40:cd:c9:2e:42:c8:cc:1b:17:cd:c5:c1:88:a8:60: f2:32:60:90:bd:f3:dd:9d:63:97:0b:93:8c:5e:e7:f9:72:d0: 36:01:de:50:ef:9a:59:46:a3:cb:c7:83:73:40:6d:47:df:cb: 2e:10:0f:eb:8f:27:db:1c:73:97:e2:26:7d:be:5c:e2:56:37: 43:28:d1:2b:97:30:a9:93:89:e2:54:ba:88:c4:8a:9d:76:2b: 56:ac:28:04:97:97:b3:3d:b8:90:e0:00:01:42:bb:87:a6:7f: 30:79:64:43:10:58:8c:ce:e2:ee:14:48:3c:14:a0:18:f1:42: b6:6a:24:56:44:ba:44:e1:53:cc:3c:0f:b8:e9:7e:c8:c9:ba: 9d:8d:b8:f2:a5:8f:f1:d5:85:a0:7a:3d:37:97:69:20:4e:a7: 99:37:07:78:77:1b:a4:24:bb:52:5e:b0:e7:14:c2:7d:3c:2a: 46:b0:ac:cc:34:66:fa:3a:01:3d:c5:14:f3:e5:3c:cd:96:a0: 4c:27:d6:d6:fb:65:51:4e:de:5f:61:4e:2b:b3:c9:fb:c2:c1: 69:88:5a:cb:b2:ae:aa:91:3c:55:cf:e3:0b:f4:2a:80:31:3a: 0e:c9:42:aa:ed:06:93:d8:e7:09:2a:a2:8e:e2:0f:b0:eb:77: af:40:05:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvQhejv9cp9gfk2tHfXOgiKP+sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNjA0MTcwNTE4MjhaFw0yNjA0MjAwOTE1MjhaMDMxMTAvBgNV BAMTKENGQ0RCRDdENjJFNkVGOEZCRkQ4QkIwOEFCRTQzRjE0NUYyQ0E4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hGuTOujdfKkQO2azYnXZjSb2 gwirgxLOhV0/2uWGajhXlCXM4n5W66p6+JaWTzS1rXsjf5O9kYqOvWWN/PPGzJH9 IymYgCg3bpogs+nzVqBzno5luEsAp0nxDYw9ehjxyoQhvNkepNhs/cvDDRlS+zNj guIw47BXOyXidLYl7GNJYgoJG8tiyx4G1+ILAYVXVfFJ8fThrBWb3GLDXYpGxEBB fMXWrMfhX7lnqbsK6hPcDoAlxhlWYLy2TeqD88ZoDv1g5OvJwZRfkrO/FTmp+wPO 0h2nFuag/5jJnaUu3/0FW74DihtdYCaasI6cY+bOgAFxM2n7tqjXpaQfcCIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz829fWLm74+/2LsIq+Q/FF8sqDUwHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRhOEDNyS5CyMwbF83FwYioYPIyYJC9892d Y5cLk4xe5/ly0DYB3lDvmllGo8vHg3NAbUffyy4QD+uPJ9scc5fiJn2+XOJWN0Mo 0SuXMKmTieJUuojEip12K1asKASXl7M9uJDgAAFCu4emfzB5ZEMQWIzO4u4USDwU oBjxQrZqJFZEukThU8w8D7jpfsjJup2NuPKlj/HVhaB6PTeXaSBOp5k3B3h3G6Qk u1JesOcUwn08KkawrMw0Zvo6AT3FFPPlPM2WoEwn1tb7ZVFO3l9hTiuzyfvCwWmI WsuyrqqRPFXP4wv0KoAxOg7JQqrtBpPY5wkqoo7iD7Drd69ABcY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:26 2026 by rpki-client