$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: 7LrQfGmfBGRqFEHj9HRpjZ9COg5MQLR3E8rojPir6lg= Subject key identifier: 1C:26:5E:E4:59:1C:5A:51:BC:CC:C3:D9:A5:3D:B1:88:A3:47:3B:2E Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: F7AB50AB27ADE47C8918D8ABAC502A2742E1EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 03B4 Signing time: Wed 15 Apr 2026 15:32:09 +0000 Manifest this update: Wed 15 Apr 2026 15:27:09 +0000 Manifest next update: Sat 18 Apr 2026 20:57:09 +0000 Files and hashes: 1: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: BHXE0BMpHpnFdZGPguswxUrCP1YR2djFJUaKaIRbMIY=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 3: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f7:ab:50:ab:27:ad:e4:7c:89:18:d8:ab:ac:50:2a:27:42:e1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Apr 15 15:27:09 2026 GMT Not After : Apr 18 20:57:09 2026 GMT Subject: CN=1C265EE4591C5A51BCCCC3D9A53DB188A3473B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:16:5d:e9:f5:e0:e3:f7:d0:84:ad:4f:81: be:3f:ab:4b:0d:f2:36:37:ce:85:00:e0:29:32:75: ec:6c:6d:13:97:23:66:f7:0c:16:2e:3f:7e:90:0e: dc:6b:28:7d:7b:db:98:81:8d:41:dd:c2:98:16:92: 2d:cd:5b:7a:dd:39:bd:6d:bd:f9:e4:6c:75:2b:17: 2d:30:10:11:43:55:e8:07:ad:76:b6:77:cc:30:83: 09:11:74:69:a3:8d:d2:e8:d4:00:57:3a:2f:9d:62: 1a:3f:c0:ad:d1:3c:80:af:dd:dc:1b:10:53:3d:26: 6c:55:6c:7f:d8:40:6c:47:6a:f6:55:e4:f5:8e:48: d2:6e:69:cc:f5:4e:f5:26:b0:0e:53:4f:28:cb:d4: e5:00:2b:f4:f2:21:95:9a:98:c0:f1:60:83:fe:21: e6:db:eb:8c:e5:d6:5e:89:5a:f2:69:ce:a0:31:71: 1b:8b:d6:19:ec:47:7b:c4:53:ab:e7:dc:90:ef:22: b6:9e:40:8d:8a:2e:8e:7e:a9:24:b1:a8:bb:d5:c6: 16:23:0e:ec:0e:fc:1b:d4:e6:e0:4c:2e:49:e0:56: 38:37:9b:a2:13:10:c0:73:4e:a7:47:b4:d9:38:38: 5e:e3:0a:a2:6d:c8:31:15:84:aa:a7:0f:69:7a:d6: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:26:5E:E4:59:1C:5A:51:BC:CC:C3:D9:A5:3D:B1:88:A3:47:3B:2E X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:21:a8:a1:cf:fa:a6:ae:40:26:cf:ba:b9:88:68:7d:d1:29: 17:3f:f2:0f:ca:04:6c:4b:01:00:25:98:5f:31:f4:29:bb:be: da:d7:9e:39:9b:c5:2e:a5:c8:8b:27:a4:9f:99:4b:b9:54:cd: 73:6a:f4:a2:1f:a2:b6:b1:42:a2:ad:ea:71:4a:20:80:96:ad: 17:cb:89:66:ca:e6:6e:e3:75:74:16:cf:91:ce:d6:70:e8:ca: 7a:67:e2:f4:5a:16:d8:6a:ff:ea:17:78:10:dd:ac:5a:1e:1e: 57:ac:a0:e5:78:a5:ca:0f:0a:72:e9:ca:88:e6:47:e7:a7:13: a1:84:63:83:6d:36:83:6b:d6:f0:b8:78:c2:64:59:a8:a7:fa: ca:b2:09:68:e4:c5:67:31:3a:cf:42:9e:95:67:2f:79:9b:6b: a5:9b:27:9f:cd:7d:63:b5:13:30:d8:68:5a:a9:b7:98:2c:e4: 96:d5:b3:9e:35:29:b4:25:38:65:76:09:00:36:01:04:0b:aa: 27:11:e2:64:fd:d6:8d:ef:fd:15:de:52:52:13:90:89:ba:14: 91:03:ec:17:5b:c2:1c:2e:67:d3:f4:2f:71:47:78:12:41:ed: d9:2a:60:a7:e4:d5:46:d4:b2:29:2c:8a:2d:61:b0:7d:47:7c: 73:38:d6:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPerUKsnreR8iRjYq6xQKidC4ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNjA0MTUxNTI3MDlaFw0yNjA0MTgyMDU3MDlaMDMxMTAvBgNV BAMTKDFDMjY1RUU0NTkxQzVBNTFCQ0NDQzNEOUE1M0RCMTg4QTM0NzNCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdixZd6fXg4/fQhK1Pgb4/q0sN 8jY3zoUA4CkydexsbROXI2b3DBYuP36QDtxrKH1725iBjUHdwpgWki3NW3rdOb1t vfnkbHUrFy0wEBFDVegHrXa2d8wwgwkRdGmjjdLo1ABXOi+dYho/wK3RPICv3dwb EFM9JmxVbH/YQGxHavZV5PWOSNJuacz1TvUmsA5TTyjL1OUAK/TyIZWamMDxYIP+ Iebb64zl1l6JWvJpzqAxcRuL1hnsR3vEU6vn3JDvIraeQI2KLo5+qSSxqLvVxhYj DuwO/BvU5uBMLkngVjg3m6ITEMBzTqdHtNk4OF7jCqJtyDEVhKqnD2l61mX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCZe5FkcWlG8zMPZpT2xiKNHOy4wHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAhqKHP+qauQCbPurmIaH3RKRc/8g/KBGxL AQAlmF8x9Cm7vtrXnjmbxS6lyIsnpJ+ZS7lUzXNq9KIforaxQqKt6nFKIICWrRfL iWbK5m7jdXQWz5HO1nDoynpn4vRaFthq/+oXeBDdrFoeHlesoOV4pcoPCnLpyojm R+enE6GEY4NtNoNr1vC4eMJkWain+sqyCWjkxWcxOs9CnpVnL3mba6WbJ5/NfWO1 EzDYaFqpt5gs5JbVs541KbQlOGV2CQA2AQQLqicR4mT91o3v/RXeUlITkIm6FJED 7BdbwhwuZ9P0L3FHeBJB7dkqYKfk1UbUsiksii1hsH1HfHM41iM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:35:16 2026 by rpki-client