$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: U+j+KIGzl4NRag+z3cuMboCdhPNDGTCK3e731pO02/8= Subject key identifier: 38:D9:C9:78:E2:4E:A5:0F:13:06:0B:58:FE:40:D5:39:4F:D2:05:44 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 576B6FFDE00BC5E95E7A012026F57B22085303E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 057A Signing time: Thu 16 Apr 2026 16:31:05 +0000 Manifest this update: Thu 16 Apr 2026 16:26:05 +0000 Manifest next update: Sun 19 Apr 2026 23:45:05 +0000 Files and hashes: 1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 2: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: ci+leQjY09eABwmnKxlr/iaiD5pwVQknT1GtJPm5v30=) 3: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 4: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 5: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0=) 6: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: tYzvnm/bKabZ0lC7zrGJWB9MDY8UVJOHdIV1ii9uRtA=) 7: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 8: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=) 9: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: aZa5Hs2uGug6GjMwLF5YwcWPnEFLLnOxavB7Mt6JmdE=) 10: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: ufKsPniiFRSsgc/WFAQe9jhnABGc5OI7vdAa3yvURg4=) 11: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: zYSXmMIYnVcnyUqfnxKNKO1jJpruvRifzdtqmQbpII4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6b:6f:fd:e0:0b:c5:e9:5e:7a:01:20:26:f5:7b:22:08:53:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Apr 16 16:26:05 2026 GMT Not After : Apr 19 23:45:05 2026 GMT Subject: CN=38D9C978E24EA50F13060B58FE40D5394FD20544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:5a:ce:e2:eb:4b:98:c5:d5:c2:c2:3b:7c: 85:d9:ca:06:61:20:81:a6:30:71:ee:fc:37:3d:e2: 3e:53:b0:c0:fd:1a:fc:f6:39:9d:fc:41:0f:53:63: 25:80:bb:63:1f:4e:e0:54:36:81:29:5c:e4:95:08: ab:20:12:a7:58:77:06:d8:be:7e:5a:b9:d2:a7:99: 92:1c:15:08:bb:8e:4e:bd:10:15:ee:71:61:0d:06: 4e:47:77:14:07:21:36:09:a4:4d:fd:83:99:4b:6c: 78:74:a8:74:1e:73:af:7d:4b:12:d4:88:58:1e:41: 78:c1:6d:55:27:e5:41:1f:99:84:17:b2:1d:70:a8: c8:2a:e8:1a:1d:bf:7d:66:8e:c1:bd:03:a9:e5:27: 37:67:69:67:03:76:55:36:7f:86:0d:f6:1b:81:7a: 1e:61:69:90:a4:7c:f3:53:99:e3:ce:22:d8:8b:0c: a8:ea:a5:5c:57:f2:16:7e:ee:4c:f3:bc:c7:52:0d: e3:ba:98:d1:37:0f:30:28:fc:be:39:89:d6:74:32: 9e:6f:20:d5:7a:b4:cb:ec:b5:3d:2f:ef:c2:3e:6f: 20:13:36:f9:e3:d4:38:89:d2:c1:74:e8:41:00:ee: f1:ed:e5:61:5f:0e:2c:ce:0f:8f:48:fc:17:65:c2: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:C9:78:E2:4E:A5:0F:13:06:0B:58:FE:40:D5:39:4F:D2:05:44 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:35:85:1b:22:01:ac:4a:61:4e:e9:fb:a4:09:fe:09:29:57: 1f:dc:02:5e:01:9e:62:52:dd:97:b5:2d:d9:19:e1:d5:65:ed: 6a:62:ee:ac:c7:ce:c2:ff:40:43:66:79:71:af:0b:84:e3:3f: 30:3a:c0:d8:30:9d:1c:1f:ca:61:56:ad:49:f3:4b:5f:2d:fd: aa:22:60:6d:03:76:60:a1:63:4f:fb:d4:23:17:8b:4e:59:39: 5e:c2:c8:16:98:50:3e:db:cf:51:a2:06:c3:dc:c3:af:2f:44: 8f:87:a6:8a:48:d2:76:b9:91:60:6d:c8:53:ee:3f:55:3e:a5: 4c:6a:da:0d:14:22:eb:c0:b5:1a:9c:a5:57:c2:4a:17:9d:b1: 40:93:05:66:15:97:23:83:0c:8e:49:e4:b8:83:ce:db:1a:a7: 83:08:b2:22:fc:d9:81:36:54:bd:a5:e8:e8:35:25:b6:a3:0f: 0a:c6:88:58:d6:43:c4:59:28:ec:60:46:a5:00:93:46:31:08: 1d:39:1d:b8:46:a6:28:de:09:7d:21:7f:a8:9a:30:b4:10:ee: 1d:bf:31:b1:80:bf:1d:f4:36:6f:e3:77:d6:d4:6c:62:04:20: 08:2b:56:ee:29:25:be:76:0f:1b:06:95:b5:73:71:4f:08:7d: be:a1:01:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2tv/eALxeleegEgJvV7IghTA+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjA0MTYxNjI2MDVaFw0yNjA0MTkyMzQ1MDVaMDMxMTAvBgNV BAMTKDM4RDlDOTc4RTI0RUE1MEYxMzA2MEI1OEZFNDBENTM5NEZEMjA1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhf1rO4utLmMXVwsI7fIXZygZh IIGmMHHu/Dc94j5TsMD9Gvz2OZ38QQ9TYyWAu2MfTuBUNoEpXOSVCKsgEqdYdwbY vn5audKnmZIcFQi7jk69EBXucWENBk5HdxQHITYJpE39g5lLbHh0qHQec699SxLU iFgeQXjBbVUn5UEfmYQXsh1wqMgq6Bodv31mjsG9A6nlJzdnaWcDdlU2f4YN9huB eh5haZCkfPNTmePOItiLDKjqpVxX8hZ+7kzzvMdSDeO6mNE3DzAo/L45idZ0Mp5v INV6tMvstT0v78I+byATNvnj1DiJ0sF06EEA7vHt5WFfDizOD49I/BdlwtBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONnJeOJOpQ8TBgtY/kDVOU/SBUQwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo1hRsiAaxKYU7p+6QJ/gkpVx/cAl4BnmJS 3Ze1LdkZ4dVl7Wpi7qzHzsL/QENmeXGvC4TjPzA6wNgwnRwfymFWrUnzS18t/aoi YG0DdmChY0/71CMXi05ZOV7CyBaYUD7bz1GiBsPcw68vRI+HpopI0na5kWBtyFPu P1U+pUxq2g0UIuvAtRqcpVfCShedsUCTBWYVlyODDI5J5LiDztsap4MIsiL82YE2 VL2l6Og1JbajDwrGiFjWQ8RZKOxgRqUAk0YxCB05HbhGpijeCX0hf6iaMLQQ7h2/ MbGAvx30Nm/jd9bUbGIEIAgrVu4pJb52DxsGlbVzcU8Ifb6hASs= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:44 2026 by rpki-client