$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: S1fx+8t3wnTW1ihuzxb1bpwCT/TFxjBmFbPK3zy0mWo= Subject key identifier: D5:32:CB:6B:33:23:36:4E:26:DE:99:1B:FB:52:96:8B:80:52:B1:F7 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 4E3EF23CF689E34BBE0988B9253C0246A4889574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 0133 Signing time: Thu 16 Apr 2026 04:50:44 +0000 Manifest this update: Thu 16 Apr 2026 04:45:44 +0000 Manifest next update: Sun 19 Apr 2026 06:35:44 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: 3Xl6+PETgkNcb+2A/6iUEkNDi4Z73c5U6+oiR4SCPC4=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3e:f2:3c:f6:89:e3:4b:be:09:88:b9:25:3c:02:46:a4:88:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Apr 16 04:45:44 2026 GMT Not After : Apr 19 06:35:44 2026 GMT Subject: CN=D532CB6B3323364E26DE991BFB52968B8052B1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:70:40:1f:94:e0:dc:da:54:91:34:a2:81: 18:64:6d:63:e4:ac:b5:9a:77:65:44:07:63:fa:5f: 48:70:c6:29:9a:f3:82:9f:0a:67:5b:87:f3:94:e8: df:80:31:18:53:1a:b5:63:52:b0:77:2e:a8:c4:4f: 52:89:b9:cf:2f:b2:95:93:de:a8:36:06:58:7f:92: cf:b2:ac:00:05:81:bc:4c:95:4a:86:31:43:5f:e1: 2a:ea:48:df:d9:4b:0b:b2:f2:8a:91:c5:d7:a8:e1: 37:4f:72:84:a5:ce:1b:b6:08:34:a8:14:86:1c:8a: 63:af:68:0f:c7:fe:b9:e5:c3:7f:62:a6:a0:9a:00: 0c:ae:9b:4b:e5:25:85:ca:69:af:d6:0c:b3:82:40: e4:46:4c:b0:f6:2a:83:f2:8e:e5:07:68:ab:d9:a7: d4:ba:c2:c2:59:d5:d0:59:5f:7b:e2:7f:34:e6:03: d2:ee:84:ac:dc:95:72:3e:3d:5a:fc:a3:38:9d:2a: 72:bd:3b:5e:0b:e9:02:7f:65:04:f4:24:c5:d9:c5: 26:a8:ef:ae:db:8b:4a:75:03:58:10:54:10:e7:7e: 25:b9:d6:86:84:3b:5b:36:04:d9:a4:96:3e:ea:df: f0:1d:11:f8:53:2c:61:53:a3:27:18:a8:a8:c4:d4: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:32:CB:6B:33:23:36:4E:26:DE:99:1B:FB:52:96:8B:80:52:B1:F7 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fb:25:94:05:93:c2:a9:6e:07:a2:4b:03:c8:f4:13:a8:0f: 9d:a6:60:1f:ae:3c:d4:64:b7:dd:98:7b:d2:8a:d1:0f:fd:de: 19:a4:81:d7:b4:d8:19:e6:96:0b:d9:b9:b7:dc:79:86:f0:25: 2f:b8:0f:31:34:17:76:7f:63:e9:fd:3d:84:60:ab:bc:e9:c7: 95:bf:fe:a3:d2:ef:f5:1f:bd:21:cb:05:f4:b1:18:e7:25:3c: b8:34:ac:27:f4:90:7f:8e:0d:23:60:2f:53:37:18:64:15:53: 96:4d:dc:08:d5:52:b0:eb:29:59:68:29:a6:86:c8:e8:20:87: 8b:fa:44:6a:3d:6d:17:4d:7b:d2:7d:91:ac:e2:ad:2a:39:2c: c5:98:f3:83:17:ba:a1:03:d7:d4:76:59:d6:b5:8e:bf:56:13: 1e:4a:79:0b:8e:93:e1:7f:f1:41:e7:36:74:bb:14:fd:03:33: 53:d7:77:43:78:fc:13:16:e7:90:1a:fa:0c:b1:5a:5b:b6:5d: 85:36:5a:20:78:78:d0:2a:b8:15:76:60:7a:cd:dd:cb:8e:82: 74:a3:45:38:fc:92:41:50:47:20:d8:22:8a:ad:b4:3d:c8:d6: ec:c2:52:fb:7f:15:7c:57:e3:29:62:2e:d6:e0:a1:88:20:3a: 2a:c0:9c:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTj7yPPaJ40u+CYi5JTwCRqSIlXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNjA0MTYwNDQ1NDRaFw0yNjA0MTkwNjM1NDRaMDMxMTAvBgNV BAMTKEQ1MzJDQjZCMzMyMzM2NEUyNkRFOTkxQkZCNTI5NjhCODA1MkIxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrI3BAH5Tg3NpUkTSigRhkbWPk rLWad2VEB2P6X0hwxima84KfCmdbh/OU6N+AMRhTGrVjUrB3LqjET1KJuc8vspWT 3qg2Blh/ks+yrAAFgbxMlUqGMUNf4SrqSN/ZSwuy8oqRxdeo4TdPcoSlzhu2CDSo FIYcimOvaA/H/rnlw39ipqCaAAyum0vlJYXKaa/WDLOCQORGTLD2KoPyjuUHaKvZ p9S6wsJZ1dBZX3vifzTmA9LuhKzclXI+PVr8ozidKnK9O14L6QJ/ZQT0JMXZxSao 767bi0p1A1gQVBDnfiW51oaEO1s2BNmklj7q3/AdEfhTLGFToycYqKjE1PRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1TLLazMjNk4m3pkb+1KWi4BSsfcwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL7JZQFk8KpbgeiSwPI9BOoD52mYB+uPNRk t92Ye9KK0Q/93hmkgde02BnmlgvZubfceYbwJS+4DzE0F3Z/Y+n9PYRgq7zpx5W/ /qPS7/UfvSHLBfSxGOclPLg0rCf0kH+ODSNgL1M3GGQVU5ZN3AjVUrDrKVloKaaG yOggh4v6RGo9bRdNe9J9kazirSo5LMWY84MXuqED19R2Wda1jr9WEx5KeQuOk+F/ 8UHnNnS7FP0DM1PXd0N4/BMW55Aa+gyxWlu2XYU2WiB4eNAquBV2YHrN3cuOgnSj RTj8kkFQRyDYIoqttD3I1uzCUvt/FXxX4yliLtbgoYggOirAnJI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:57 2026 by rpki-client