$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: LK6UeZ9JpnlliXZFqrh/Dz04kRjN4m1pmGZNxUk7zsg= Subject key identifier: 3F:08:84:7E:35:D4:CC:C0:E5:DD:CF:15:21:02:B7:2E:47:98:2F:10 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 5E6A1429B5BB31C22691995D16E9E8F3FDE6C231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 025A Signing time: Fri 17 Apr 2026 19:10:57 +0000 Manifest this update: Fri 17 Apr 2026 19:05:57 +0000 Manifest next update: Tue 21 Apr 2026 05:56:57 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: tlMle0JEv91zK20BRRcaPVwYto47GPVpH39YWcVdA3s=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: QfBANB1HcZ4D5lNo0ikbhdMiTPwgCLxr47KuZgq3ysc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:14:29:b5:bb:31:c2:26:91:99:5d:16:e9:e8:f3:fd:e6:c2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 17 19:05:57 2026 GMT Not After : Apr 21 05:56:57 2026 GMT Subject: CN=3F08847E35D4CCC0E5DDCF152102B72E47982F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:ea:5d:69:6c:fe:c6:72:c5:b6:de:fc:94: 4e:e3:23:86:c1:a5:4f:82:d6:bc:94:96:84:72:3f: 87:63:9f:af:3c:ff:55:88:a3:cc:06:43:51:4f:16: 6c:f4:2d:38:83:7e:0b:8f:23:3f:2d:72:78:61:49: 4e:b9:8a:61:f0:1b:da:92:c5:b2:7c:52:6e:94:4a: 1a:6f:12:6c:61:f8:53:cf:ac:b8:1a:72:1a:07:32: 21:aa:bb:26:8e:b2:e7:d6:f1:4c:d8:b2:71:4a:ee: d3:2b:82:05:1d:22:8c:6d:0b:85:a2:dc:a2:23:2f: d8:85:6a:c8:87:57:b5:ad:46:74:08:58:ba:8f:a5: 13:ab:e2:d6:2c:3c:f3:72:3e:05:7e:09:7c:24:67: a4:3d:ce:66:ac:a8:0f:62:ef:70:75:84:4c:18:3b: 3f:0a:01:d0:fa:2e:79:ca:35:f0:6c:5b:d1:b3:18: 2c:b1:f0:91:d0:34:c5:7d:86:45:7b:c5:cc:3d:be: 1b:97:6e:db:66:ac:68:ba:ee:d2:fc:67:03:48:02: 64:db:9b:41:90:fd:34:86:7e:f6:66:7c:49:b9:b6: db:e4:76:22:a8:88:48:22:9b:28:22:a7:44:da:31: 21:3c:4d:a0:01:03:46:7a:fb:dc:8d:8c:5d:9c:20: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:84:7E:35:D4:CC:C0:E5:DD:CF:15:21:02:B7:2E:47:98:2F:10 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8e:6f:5d:eb:ce:15:03:32:a1:b2:b2:28:17:db:8f:b2:97: 30:cb:ea:26:e9:af:18:04:95:d6:ec:70:52:2c:f6:6b:86:60: 6b:1f:3b:97:f3:e6:16:83:00:49:8e:8f:7b:29:6e:cd:74:c0: 5d:dc:de:3c:fc:7a:1a:42:5f:83:b1:90:b0:95:2f:96:89:ba: e9:89:1e:7a:91:03:47:6b:85:01:07:59:40:8e:20:8a:fd:78: 7c:30:9b:3f:4f:b3:a5:02:d7:de:22:20:47:4b:3b:6c:35:3e: 0e:85:1a:47:13:3b:c3:1f:09:9c:78:c6:c9:f9:7e:23:b9:5a: 9d:06:ac:74:5f:f9:ce:5b:97:20:cd:1a:e0:b3:a6:f3:8b:a9: 70:3a:dc:9e:3c:49:e2:cc:82:d3:83:3b:d3:d9:0f:3b:b3:ca: d2:15:d9:51:d8:1e:c6:08:93:15:6a:8d:a0:7b:d5:14:e8:85: d0:1e:b2:33:ff:6a:a7:c7:98:bc:a9:cf:c7:4b:b6:d2:82:7e: 0c:f4:92:08:c9:1d:b4:27:cb:d0:71:a2:21:8b:58:40:99:91: 32:ad:7a:00:76:74:37:b4:1e:85:cd:0f:60:fb:29:eb:af:b0: 53:2f:41:a7:78:da:1c:ae:6d:51:c7:e2:eb:f4:2b:49:19:0d: d2:2c:14:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmoUKbW7McImkZldFuno8/3mwjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNjA0MTcxOTA1NTdaFw0yNjA0MjEwNTU2NTdaMDMxMTAvBgNV BAMTKDNGMDg4NDdFMzVENENDQzBFNUREQ0YxNTIxMDJCNzJFNDc5ODJGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOepdaWz+xnLFtt78lE7jI4bB pU+C1ryUloRyP4djn688/1WIo8wGQ1FPFmz0LTiDfguPIz8tcnhhSU65imHwG9qS xbJ8Um6UShpvEmxh+FPPrLgachoHMiGquyaOsufW8UzYsnFK7tMrggUdIoxtC4Wi 3KIjL9iFasiHV7WtRnQIWLqPpROr4tYsPPNyPgV+CXwkZ6Q9zmasqA9i73B1hEwY Oz8KAdD6LnnKNfBsW9GzGCyx8JHQNMV9hkV7xcw9vhuXbttmrGi67tL8ZwNIAmTb m0GQ/TSGfvZmfEm5ttvkdiKoiEgimygip0TaMSE8TaABA0Z6+9yNjF2cINeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwiEfjXUzMDl3c8VIQK3LkeYLxAwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2Ob13rzhUDMqGysigX24+ylzDL6ibprxgE ldbscFIs9muGYGsfO5fz5haDAEmOj3spbs10wF3c3jz8ehpCX4OxkLCVL5aJuumJ HnqRA0drhQEHWUCOIIr9eHwwmz9Ps6UC194iIEdLO2w1Pg6FGkcTO8MfCZx4xsn5 fiO5Wp0GrHRf+c5blyDNGuCzpvOLqXA63J48SeLMgtODO9PZDzuzytIV2VHYHsYI kxVqjaB71RTohdAesjP/aqfHmLypz8dLttKCfgz0kgjJHbQny9BxoiGLWECZkTKt egB2dDe0HoXND2D7KeuvsFMvQad42hyubVHH4uv0K0kZDdIsFI8= -----END CERTIFICATE-----Generated at Sat Apr 18 01:40:37 2026 by rpki-client