$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: nlwzIHhDA9LuMH1xRuwZUOYMbkZeR+JUWgXUy98QbQM= Subject key identifier: 98:88:02:1E:AF:2B:9B:33:08:80:0C:05:AB:82:6E:D8:90:40:BA:5A Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 7A8F633EFA9C8B8A668F94B3D12D4099441AE429 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: 011C Signing time: Wed 15 Apr 2026 15:32:38 +0000 Manifest this update: Wed 15 Apr 2026 15:27:38 +0000 Manifest next update: Sat 18 Apr 2026 17:52:38 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) 2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: 1MOV/wG9aoJQr6kAiPIFFesiKn96w+o0cxdesL5gq1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8f:63:3e:fa:9c:8b:8a:66:8f:94:b3:d1:2d:40:99:44:1a:e4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Apr 15 15:27:38 2026 GMT Not After : Apr 18 17:52:38 2026 GMT Subject: CN=9888021EAF2B9B3308800C05AB826ED89040BA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:19:a3:4b:6f:2e:cb:43:6a:4f:c6:24:47: aa:f5:f0:22:52:1a:2c:15:cb:25:c2:a1:f3:4a:3d: 85:5d:8f:fd:16:16:08:10:ab:b0:3e:11:db:a7:b4: 78:0f:63:45:2d:a7:e8:c0:99:bd:dc:91:07:c8:79: 22:ec:2a:67:68:1e:40:13:bf:35:f7:86:19:93:86: 0f:0d:58:12:8d:71:d9:7f:df:6f:4d:85:9f:f5:af: 96:b0:bb:d3:f8:5a:b8:6b:fd:e9:5d:a1:f3:64:4b: 2f:31:cb:2b:1b:8e:2b:10:79:31:c2:c6:f4:ee:9b: b2:9e:4a:2a:c3:ac:3c:04:07:1c:79:61:60:47:03: 53:8d:65:7d:e8:e4:1d:8a:03:38:e0:49:93:e6:4b: 00:5d:61:09:7f:05:9a:85:ff:e1:ee:5a:e5:60:9d: 5f:ea:40:b7:5c:77:8e:d9:44:d9:2e:ae:6b:d1:ea: f6:84:15:d3:28:5e:52:a0:df:41:ee:1a:6d:e6:ff: 48:07:ba:57:4c:80:ad:c8:7b:62:4b:6c:9d:06:d8: df:af:dd:7d:86:f9:e0:82:26:bb:04:71:22:f7:c1: 7c:e2:44:4d:a1:71:40:a9:90:56:d9:b8:7b:d4:69: 31:6d:3c:56:e1:f7:55:bf:5b:fe:f3:51:b0:9e:b8: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:88:02:1E:AF:2B:9B:33:08:80:0C:05:AB:82:6E:D8:90:40:BA:5A X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:27:bb:dd:ba:6e:99:d2:c4:9e:9f:65:19:38:40:4d:0f:fa: de:7f:cf:28:8d:7d:03:f9:f7:3a:66:6a:b1:86:b9:3e:e4:cd: dd:22:c9:2b:95:b9:4f:a5:81:0e:d5:8e:8f:a2:d7:72:c6:2d: e9:df:15:a5:ce:2d:49:b6:73:1d:37:ad:85:af:af:0c:5c:cb: 3c:33:18:24:32:f8:9e:a7:53:87:66:b5:af:1e:82:92:5e:ac: 66:0d:78:6b:de:2d:b0:92:d4:2e:44:da:45:e8:b2:ac:90:2d: 92:eb:5f:a8:8c:ce:fb:dd:7e:21:e2:ee:32:76:a9:cf:8a:fe: 34:05:ba:d7:82:15:b8:b7:69:2e:50:43:81:e0:6f:bc:ce:e2: cb:59:29:bd:9a:56:33:d7:5f:24:17:36:b8:20:d0:6a:a9:97: fa:2d:4c:5f:44:c8:6c:d6:08:5f:1f:25:27:37:b0:cb:32:46: c8:a8:7a:95:f9:7b:bd:88:39:fe:a4:5b:a8:ae:4a:ad:55:3d: 07:86:78:80:0e:5e:12:a5:ee:17:e4:5c:4b:5d:c0:86:b0:2b: e4:c5:33:02:8c:02:35:a1:81:2c:df:49:5a:eb:91:f4:e4:fb: 5d:d7:d5:ee:51:40:10:f3:32:1b:ee:b0:ac:3b:76:9f:d4:3f: 76:b9:e9:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeo9jPvqci4pmj5Sz0S1AmUQa5CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNjA0MTUxNTI3MzhaFw0yNjA0MTgxNzUyMzhaMDMxMTAvBgNV BAMTKDk4ODgwMjFFQUYyQjlCMzMwODgwMEMwNUFCODI2RUQ4OTA0MEJBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8BmjS28uy0NqT8YkR6r18CJS GiwVyyXCofNKPYVdj/0WFggQq7A+EduntHgPY0Utp+jAmb3ckQfIeSLsKmdoHkAT vzX3hhmThg8NWBKNcdl/329NhZ/1r5awu9P4Wrhr/eldofNkSy8xyysbjisQeTHC xvTum7KeSirDrDwEBxx5YWBHA1ONZX3o5B2KAzjgSZPmSwBdYQl/BZqF/+HuWuVg nV/qQLdcd47ZRNkurmvR6vaEFdMoXlKg30HuGm3m/0gHuldMgK3Ie2JLbJ0G2N+v 3X2G+eCCJrsEcSL3wXziRE2hcUCpkFbZuHvUaTFtPFbh91W/W/7zUbCeuEN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIgCHq8rmzMIgAwFq4Ju2JBAulowHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQnu926bpnSxJ6fZRk4QE0P+t5/zyiNfQP5 9zpmarGGuT7kzd0iySuVuU+lgQ7Vjo+i13LGLenfFaXOLUm2cx03rYWvrwxcyzwz GCQy+J6nU4dmta8egpJerGYNeGveLbCS1C5E2kXosqyQLZLrX6iMzvvdfiHi7jJ2 qc+K/jQFuteCFbi3aS5QQ4Hgb7zO4stZKb2aVjPXXyQXNrgg0Gqpl/otTF9EyGzW CF8fJSc3sMsyRsioepX5e72IOf6kW6iuSq1VPQeGeIAOXhKl7hfkXEtdwIawK+TF MwKMAjWhgSzfSVrrkfTk+13X1e5RQBDzMhvusKw7dp/UP3a56eE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:29 2026 by rpki-client