$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: /Ykxe/xzVxUm29g/Nr4lyV7SPhCT6A1TX4tvenFBdsc= Subject key identifier: 53:A5:11:06:C9:71:9D:BA:18:76:0F:1C:CA:69:68:25:5A:A5:B9:46 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 13B1E22466DBB4FEDD3E312A138CC0D10DCB54E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 0208 Signing time: Sat 18 Apr 2026 04:01:48 +0000 Manifest this update: Sat 18 Apr 2026 03:56:48 +0000 Manifest next update: Tue 21 Apr 2026 04:58:48 +0000 Files and hashes: 1: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: 8+Flo6niPXQcep3efRRBme2+l1sdrscfQ44LWbeO9e8=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:e2:24:66:db:b4:fe:dd:3e:31:2a:13:8c:c0:d1:0d:cb:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Apr 18 03:56:48 2026 GMT Not After : Apr 21 04:58:48 2026 GMT Subject: CN=53A51106C9719DBA18760F1CCA6968255AA5B946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:3b:94:5c:44:64:d9:08:8b:62:99:f0:46: 14:70:a5:8f:a3:f0:8f:a4:78:4a:86:01:20:9b:ff: 09:db:12:40:49:2a:f5:e0:49:1d:8d:54:23:09:ff: b9:36:c7:a9:c8:c0:d4:e3:e8:04:3f:4c:07:d2:d6: d8:ee:72:bc:44:77:4e:da:27:0c:26:a3:0f:d4:96: 2a:90:8b:d5:db:b9:30:15:b1:2a:46:ff:f0:23:ec: d5:d0:99:0d:ab:f7:21:49:7b:b7:6e:8a:c6:e8:8b: 8c:bb:89:73:18:e2:b6:82:cd:49:fc:7b:b9:0f:cc: b3:8d:d4:ac:65:72:35:82:75:7a:1d:91:b5:cc:4e: e0:38:4d:11:3d:03:af:36:62:d1:83:da:cb:6a:c4: 50:56:6d:ba:98:85:64:25:07:1f:fb:bc:05:bb:75: 5b:9c:86:71:a4:96:0c:73:d6:c8:13:07:40:23:5f: 6e:3c:7a:85:e3:03:8a:ab:0f:84:9e:ba:85:0e:c6: f9:7d:82:46:25:31:c4:35:d3:5b:85:fc:06:2a:ce: 33:c0:71:a0:47:cb:84:32:40:e0:f7:e1:69:99:5c: 23:f2:19:3b:d4:84:a1:ec:e9:9e:06:d6:e3:d8:67: 34:1c:b4:70:ff:57:ee:d0:b8:0a:74:f8:d0:a6:21: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:11:06:C9:71:9D:BA:18:76:0F:1C:CA:69:68:25:5A:A5:B9:46 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:41:c8:04:62:84:4d:40:00:7d:b9:94:07:71:4b:20:4a:ba: 05:b4:24:29:82:9f:25:76:b2:a4:e4:c1:4f:47:a3:7c:ff:b7: 3e:fa:b1:9a:89:09:dc:10:78:93:e7:e3:6c:0d:a9:80:64:65: b0:63:ca:42:11:9e:d9:b2:8c:03:e3:6a:67:cc:0b:9b:c8:cc: f9:a7:20:5e:dd:19:a9:84:10:4f:de:d7:d6:73:1a:dc:ef:a1: a0:48:5f:07:93:59:a7:4f:97:ba:95:2c:7a:d1:34:27:84:97: a8:4f:76:26:5b:38:c5:a5:df:b4:a0:6a:2c:71:2c:a7:ba:6f: 38:3d:d9:90:83:75:ab:a6:f7:a9:46:a6:18:99:98:64:18:5f: 29:5f:f1:ec:f0:9d:a5:5a:da:5e:a9:22:d6:50:46:85:0d:77: 8a:96:0f:ad:b5:cf:5b:68:57:4b:9d:ee:73:2d:55:51:70:48: cc:6b:5e:e6:c1:9d:71:10:6d:78:24:f2:f7:62:2d:6d:fc:1c: c3:57:4a:d2:6c:f4:ed:09:2b:87:f4:b0:47:33:52:21:2d:5f: fd:06:e1:bd:6b:9a:9d:b7:f2:14:79:8c:9e:d1:99:c1:0c:6d: dc:3f:c7:13:bf:2b:ae:87:66:1c:bd:9f:9c:2d:d9:ee:b6:b8: 0f:e9:21:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7HiJGbbtP7dPjEqE4zA0Q3LVOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNjA0MTgwMzU2NDhaFw0yNjA0MjEwNDU4NDhaMDMxMTAvBgNV BAMTKDUzQTUxMTA2Qzk3MTlEQkExODc2MEYxQ0NBNjk2ODI1NUFBNUI5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mTuUXERk2QiLYpnwRhRwpY+j 8I+keEqGASCb/wnbEkBJKvXgSR2NVCMJ/7k2x6nIwNTj6AQ/TAfS1tjucrxEd07a Jwwmow/UliqQi9XbuTAVsSpG//Aj7NXQmQ2r9yFJe7duisboi4y7iXMY4raCzUn8 e7kPzLON1KxlcjWCdXodkbXMTuA4TRE9A682YtGD2stqxFBWbbqYhWQlBx/7vAW7 dVuchnGklgxz1sgTB0AjX248eoXjA4qrD4SeuoUOxvl9gkYlMcQ101uF/AYqzjPA caBHy4QyQOD34WmZXCPyGTvUhKHs6Z4G1uPYZzQctHD/V+7QuAp0+NCmIV//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6URBslxnboYdg8cymloJVqluUYwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1ByARihE1AAH25lAdxSyBKugW0JCmCnyV2 sqTkwU9Ho3z/tz76sZqJCdwQeJPn42wNqYBkZbBjykIRntmyjAPjamfMC5vIzPmn IF7dGamEEE/e19ZzGtzvoaBIXweTWadPl7qVLHrRNCeEl6hPdiZbOMWl37Sgaixx LKe6bzg92ZCDdaum96lGphiZmGQYXylf8ezwnaVa2l6pItZQRoUNd4qWD621z1to V0ud7nMtVVFwSMxrXubBnXEQbXgk8vdiLW38HMNXStJs9O0JK4f0sEczUiEtX/0G 4b1rmp238hR5jJ7RmcEMbdw/xxO/K66HZhy9n5wt2e62uA/pIU4= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:40 2026 by rpki-client