$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: oWNebwvqqrr5gMtnmF2yz0kPvI+uNvXJrOxCLUCj/Bw= Subject key identifier: 6D:61:7B:26:F1:F7:CA:90:D9:E2:61:BA:F9:EF:D8:A2:CA:85:55:0F Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 454D539F9BDFEB59D00E7D58623F0AFC92E662E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0157 Signing time: Thu 16 Apr 2026 21:41:21 +0000 Manifest this update: Thu 16 Apr 2026 21:36:21 +0000 Manifest next update: Mon 20 Apr 2026 05:11:21 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 4: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: bKsEBsrmdk7rmnZCxq4zJsnZ0cDwa7fvj6Foq+GCWO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4d:53:9f:9b:df:eb:59:d0:0e:7d:58:62:3f:0a:fc:92:e6:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Apr 16 21:36:21 2026 GMT Not After : Apr 20 05:11:21 2026 GMT Subject: CN=6D617B26F1F7CA90D9E261BAF9EFD8A2CA85550F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:45:78:92:da:f9:58:07:8b:cd:27:42:a0: 53:39:6f:43:e3:4f:c5:1a:75:20:ed:b3:9f:6a:28: 55:57:43:d5:f7:05:e6:36:b7:ef:27:e1:ee:c4:f4: f9:92:11:47:ba:7f:dd:cf:01:ad:5a:47:9d:6b:b1: 91:70:4d:4d:f3:07:ad:93:5d:59:41:7a:f4:c5:a8: a4:a9:9c:32:ca:67:f5:ca:62:90:0d:cc:bd:69:35: 49:ba:f8:b5:f9:c4:b3:83:63:7d:68:76:9f:3a:b0: 5d:7c:8f:c3:1b:a1:d9:3a:87:ce:2f:d2:7a:f7:86: c6:2d:1b:6b:15:ae:a1:0d:ab:a4:72:21:14:23:2c: e2:ea:88:3a:09:10:04:02:28:a6:ab:7e:d4:9a:dd: 77:95:b0:88:9b:d6:20:a0:00:d2:60:d8:9f:5e:f5: 7b:d3:2f:20:70:94:98:7a:19:f6:68:bf:1c:ee:56: ec:f2:4d:18:f2:ed:2b:c2:9d:fc:60:52:5f:28:45: c8:33:0f:9c:45:92:e6:e1:1b:c8:78:9c:62:c9:77: d5:0c:93:4b:ea:23:07:d0:bb:2d:21:07:0b:b8:6c: 9e:c7:68:0b:9f:e0:d4:98:fb:e2:5d:51:4b:e5:00: 75:4e:5a:43:81:b7:49:f3:54:74:1e:a7:2c:c0:2d: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:7B:26:F1:F7:CA:90:D9:E2:61:BA:F9:EF:D8:A2:CA:85:55:0F X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:20:98:ba:54:f5:90:50:3b:9d:34:9d:e5:f0:c9:17:3c:9b: c6:df:76:24:09:1b:af:57:d4:41:a3:e0:69:75:31:2e:78:f1: 5f:81:f6:ec:76:2a:a4:6c:75:4f:65:0c:60:2c:4e:d0:9a:58: 9a:f5:2b:5f:21:49:a4:d4:c0:e5:d5:cd:c0:b4:58:83:e9:0d: 67:d1:4a:5a:b7:b5:90:2a:6f:85:aa:24:22:d6:d4:de:1c:6f: 0b:7c:15:6b:3e:e5:45:89:5e:f8:e4:96:fe:e5:0e:f1:be:5e: 76:d8:e3:5e:f1:92:ae:44:43:62:d4:39:de:56:e6:c0:1a:97: 70:34:05:d1:b3:2e:6d:a6:92:5c:d3:71:c0:25:bc:5e:83:eb: 7a:3a:9a:c2:b4:c9:66:fd:e2:d4:9c:2e:ad:30:88:d4:90:cf: e0:95:c4:9d:b4:70:d7:85:06:f2:0c:69:af:7e:de:29:02:4a: 77:43:8f:55:d8:b3:49:1a:b4:c9:b2:4a:2b:8e:5e:83:5f:52: 75:dd:17:06:02:df:2a:76:24:74:7c:86:0c:73:32:12:a1:4c: 46:41:8e:16:02:47:2d:af:63:d9:41:0b:58:e9:61:e5:65:f3: 4a:c6:7d:7f:57:ff:41:1d:96:0e:99:7d:53:20:82:d9:41:99: 13:65:5a:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURU1Tn5vf61nQDn1YYj8K/JLmYugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNjA0MTYyMTM2MjFaFw0yNjA0MjAwNTExMjFaMDMxMTAvBgNV BAMTKDZENjE3QjI2RjFGN0NBOTBEOUUyNjFCQUY5RUZEOEEyQ0E4NTU1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VkV4ktr5WAeLzSdCoFM5b0Pj T8UadSDts59qKFVXQ9X3BeY2t+8n4e7E9PmSEUe6f93PAa1aR51rsZFwTU3zB62T XVlBevTFqKSpnDLKZ/XKYpANzL1pNUm6+LX5xLODY31odp86sF18j8Mbodk6h84v 0nr3hsYtG2sVrqENq6RyIRQjLOLqiDoJEAQCKKarftSa3XeVsIib1iCgANJg2J9e 9XvTLyBwlJh6GfZovxzuVuzyTRjy7SvCnfxgUl8oRcgzD5xFkubhG8h4nGLJd9UM k0vqIwfQuy0hBwu4bJ7HaAuf4NSY++JdUUvlAHVOWkOBt0nzVHQepyzALV1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWF7JvH3ypDZ4mG6+e/YosqFVQ8wHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQgmLpU9ZBQO500neXwyRc8m8bfdiQJG69X 1EGj4Gl1MS548V+B9ux2KqRsdU9lDGAsTtCaWJr1K18hSaTUwOXVzcC0WIPpDWfR Slq3tZAqb4WqJCLW1N4cbwt8FWs+5UWJXvjklv7lDvG+XnbY417xkq5EQ2LUOd5W 5sAal3A0BdGzLm2mklzTccAlvF6D63o6msK0yWb94tScLq0wiNSQz+CVxJ20cNeF BvIMaa9+3ikCSndDj1XYs0katMmySiuOXoNfUnXdFwYC3yp2JHR8hgxzMhKhTEZB jhYCRy2vY9lBC1jpYeVl80rGfX9X/0Edlg6ZfVMggtlBmRNlWuY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:01:26 2026 by rpki-client