$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: XQ8enFQytLf56vqsH4t9aHmIwYlpUGGPJvX5RCRvmAs= Subject key identifier: E3:D6:50:74:DB:AE:F2:4A:12:1C:15:90:48:C5:A4:F5:F0:19:81:8A Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 7CF052CFDA45378A5949D9E1C7EABE67AE2B90A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 0282 Signing time: Sun 19 Apr 2026 01:21:13 +0000 Manifest this update: Sun 19 Apr 2026 01:16:13 +0000 Manifest next update: Wed 22 Apr 2026 03:08:13 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: bKexSCiQub2nC2pwjDeaaVXnRIx0pBd9l4wReOuZfQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f0:52:cf:da:45:37:8a:59:49:d9:e1:c7:ea:be:67:ae:2b:90:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Apr 19 01:16:13 2026 GMT Not After : Apr 22 03:08:13 2026 GMT Subject: CN=E3D65074DBAEF24A121C159048C5A4F5F019818A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:2e:d4:83:8e:04:f8:81:f5:6b:63:4a:1a: f2:a0:86:d6:81:64:2d:b4:6e:87:92:fd:2e:d7:34: 1d:80:d7:64:dd:86:4d:9b:25:dc:b8:d2:0c:e8:0c: be:3b:bb:f2:99:04:48:65:50:c5:7f:e3:91:7c:ce: f3:f5:86:c1:ec:8f:3a:73:99:f5:e6:16:7b:d5:76: 80:5a:c3:35:48:97:cd:1a:0d:2d:d5:6a:d6:93:c8: 74:13:39:c6:5a:97:97:03:e2:12:46:2d:1b:f0:80: 35:ce:d6:59:64:ce:73:fb:c7:de:16:6a:ab:d2:fa: f6:8e:d1:f2:11:29:17:e1:c2:79:5b:7d:c5:86:92: e1:31:07:a8:1e:74:10:61:1c:13:46:e6:de:63:39: 3c:0a:d7:96:41:ad:a4:f2:b4:9a:fd:89:0e:22:47: c5:6c:83:4b:af:50:40:b2:c2:e0:9a:60:b9:4d:81: 2c:91:6c:11:d4:af:06:21:a6:15:a1:93:5d:d0:3d: 57:01:86:af:c3:a4:dc:a2:81:b5:df:e1:8a:1e:16: 95:cb:92:87:91:67:f7:e5:bf:3e:d7:49:97:e4:ce: ae:bb:cf:ee:c3:c2:c8:3b:32:36:1c:8a:49:4c:c7: d5:ef:e1:05:26:57:a7:c1:34:71:fc:87:84:58:81: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:50:74:DB:AE:F2:4A:12:1C:15:90:48:C5:A4:F5:F0:19:81:8A X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:75:c9:f3:67:28:c8:7c:60:ce:4b:0e:35:d8:cb:b5:7d:5a: 23:22:b8:7f:6f:49:5e:90:71:5d:2c:ea:2f:df:78:1f:ce:0e: e1:de:36:ca:c5:3a:2f:8a:45:2b:10:3e:99:3b:d8:af:e7:5d: 47:0e:ec:8d:e3:6d:5a:b7:e4:b6:65:48:50:b2:01:48:27:f3: 9e:00:d2:ef:6f:82:53:24:29:0e:12:72:cb:0a:38:02:69:d4: ed:c6:5b:87:7b:1c:63:9a:b0:2f:7f:d0:c2:95:e6:36:2e:a1: 57:58:fb:2d:e1:5d:69:da:00:5f:8b:71:b8:ee:2a:3d:34:26: f6:7a:d2:9a:c1:0b:ad:0d:af:6f:67:c2:92:18:b3:6c:b8:ee: 85:c0:f0:82:49:25:8d:81:a5:d6:8c:5d:a8:b8:24:73:a5:47: 8a:6b:44:c8:25:bb:00:6b:99:af:89:38:02:eb:85:fa:9b:c6: d7:25:34:6f:33:75:95:41:78:49:86:fc:f7:23:e0:96:c1:63: 5b:28:ce:f0:0a:73:02:fc:ce:58:75:ee:bf:06:c4:e4:9a:e5: bf:f2:98:f7:f9:30:68:64:51:e3:2e:2f:4b:88:33:b4:e7:63: b6:ec:24:f0:21:3b:4b:30:42:48:da:18:fe:fb:7f:48:18:87: ad:9d:fb:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPBSz9pFN4pZSdnhx+q+Z64rkKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNjA0MTkwMTE2MTNaFw0yNjA0MjIwMzA4MTNaMDMxMTAvBgNV BAMTKEUzRDY1MDc0REJBRUYyNEExMjFDMTU5MDQ4QzVBNEY1RjAxOTgxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lC7Ug44E+IH1a2NKGvKghtaB ZC20boeS/S7XNB2A12Tdhk2bJdy40gzoDL47u/KZBEhlUMV/45F8zvP1hsHsjzpz mfXmFnvVdoBawzVIl80aDS3VataTyHQTOcZal5cD4hJGLRvwgDXO1llkznP7x94W aqvS+vaO0fIRKRfhwnlbfcWGkuExB6gedBBhHBNG5t5jOTwK15ZBraTytJr9iQ4i R8Vsg0uvUECywuCaYLlNgSyRbBHUrwYhphWhk13QPVcBhq/DpNyigbXf4YoeFpXL koeRZ/flvz7XSZfkzq67z+7Dwsg7MjYciklMx9Xv4QUmV6fBNHH8h4RYgbSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49ZQdNuu8koSHBWQSMWk9fAZgYowHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ91yfNnKMh8YM5LDjXYy7V9WiMiuH9vSV6Q cV0s6i/feB/ODuHeNsrFOi+KRSsQPpk72K/nXUcO7I3jbVq35LZlSFCyAUgn854A 0u9vglMkKQ4ScssKOAJp1O3GW4d7HGOasC9/0MKV5jYuoVdY+y3hXWnaAF+Lcbju Kj00JvZ60prBC60Nr29nwpIYs2y47oXA8IJJJY2BpdaMXai4JHOlR4prRMgluwBr ma+JOALrhfqbxtclNG8zdZVBeEmG/Pcj4JbBY1sozvAKcwL8zlh17r8GxOSa5b/y mPf5MGhkUeMuL0uIM7TnY7bsJPAhO0swQkjaGP77f0gYh62d+54= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:02 2026 by rpki-client