$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: 0M/2u9BK8dGtV9DOX6bIaS9O6UoD1nlVliEjWrPHmhM= Subject key identifier: 00:AD:28:9E:B4:B2:44:97:7E:24:F2:73:D7:38:F2:1D:A3:E7:DB:F9 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 4085EA66E9ED2BC22D2FD0094AF772C34A7685A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: 0145 Signing time: Thu 16 Apr 2026 16:42:24 +0000 Manifest this update: Thu 16 Apr 2026 16:37:24 +0000 Manifest next update: Sun 19 Apr 2026 19:22:24 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: xFffnrBfGrqinSzTOcLoNlqUPiFPKVW2xknOINPEUaI=) 2: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: RowmG35PUWlTBVXWCWFnv7EvaYbGN8PKQsduBtyMpF4=) 3: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: IVmWA0sjnzoOPblA5LQxkIVu3A/hMUXTdT7CieN07mY=) 4: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: FRVcqRrcwL6Z+d/KWfIjhZ+u8giUqUhlkt2TKjK2eLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:85:ea:66:e9:ed:2b:c2:2d:2f:d0:09:4a:f7:72:c3:4a:76:85:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Apr 16 16:37:24 2026 GMT Not After : Apr 19 19:22:24 2026 GMT Subject: CN=00AD289EB4B244977E24F273D738F21DA3E7DBF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:04:55:27:4e:2f:65:dc:24:1a:17:88:26: 1f:d3:92:9e:6d:5c:62:57:d7:aa:cc:b2:37:cc:57: cc:1b:12:a8:88:58:83:79:c1:ac:18:7f:28:27:7e: 64:7b:35:fc:e2:86:82:11:2b:cc:56:12:da:89:ac: fb:f3:77:f1:71:1c:3c:f5:3f:fd:b2:93:54:23:9f: e5:71:85:ee:c2:10:c7:d4:19:a7:00:4c:dd:42:de: 6d:6b:69:22:6f:4b:a1:ed:e6:c1:cb:23:f6:f4:34: 24:c3:a2:1e:30:7f:3c:09:7d:5c:fa:8f:ab:20:0a: 16:60:7f:ee:57:eb:5b:49:e8:3f:c1:4f:43:39:9e: b6:8a:02:69:55:fd:0e:eb:bf:e8:be:ec:43:fe:29: 38:eb:96:0a:16:90:ad:00:5e:4b:8e:ac:bc:e5:91: 81:50:23:b3:0f:6b:ff:53:81:0f:cb:14:a3:3c:27: ad:75:84:b5:92:fc:c1:d5:89:0b:36:6e:3e:d3:50: 17:d0:19:98:ec:2e:a3:53:09:ef:8f:27:88:6d:c2: 90:0a:03:f7:37:99:7b:1d:7f:d6:af:68:15:88:81: 0d:4d:7c:7c:9f:b5:a6:0b:11:32:f8:19:3f:a1:2e: ea:6c:69:20:90:55:31:6a:1f:7c:00:ef:d6:56:10: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:28:9E:B4:B2:44:97:7E:24:F2:73:D7:38:F2:1D:A3:E7:DB:F9 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:de:35:d0:e0:40:92:ad:15:a9:3c:c5:eb:8b:f9:2c:ff:8d: 74:80:17:8b:02:ff:12:af:f6:b2:9f:f6:28:0f:d3:56:90:c8: 28:ec:6c:b4:d1:02:e3:50:3d:08:06:af:b3:b4:3a:1b:0f:17: 23:52:20:68:bf:4e:ba:47:c7:50:5e:04:5f:11:98:64:a5:0f: 03:24:8a:f8:a9:4c:b4:f9:03:c1:f8:e4:95:88:a6:3c:10:7e: 3e:cd:27:19:4e:23:23:1a:2d:e5:5f:6a:b7:d0:c7:58:6d:5a: e2:44:d3:51:53:01:c3:40:4d:fd:ef:39:4b:70:a6:ec:13:db: 85:2c:81:ea:e8:72:68:11:5e:d6:e3:cf:f9:2f:0b:cc:b5:22: 68:12:a5:af:21:f2:dc:da:a2:e1:38:11:3a:e8:2e:60:05:f4: df:15:97:ee:11:43:a9:5a:89:c6:ce:08:39:4e:6c:8e:23:70: 13:de:f6:fc:b7:8a:1e:de:ff:7d:ab:95:94:55:1d:37:54:b4: 9b:8c:c1:ba:c0:47:1d:42:c6:f6:fd:b0:b1:19:a7:f3:3f:6f: a9:b4:3d:9a:ca:5f:41:61:5a:d4:97:01:4c:71:94:fd:09:cc: 1a:42:01:bb:7a:14:68:20:ad:be:1d:4f:a5:ba:90:5a:2f:56: 0c:b5:85:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIXqZuntK8ItL9AJSvdyw0p2hacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNjA0MTYxNjM3MjRaFw0yNjA0MTkxOTIyMjRaMDMxMTAvBgNV BAMTKDAwQUQyODlFQjRCMjQ0OTc3RTI0RjI3M0Q3MzhGMjFEQTNFN0RCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRgRVJ04vZdwkGheIJh/Tkp5t XGJX16rMsjfMV8wbEqiIWIN5wawYfygnfmR7NfzihoIRK8xWEtqJrPvzd/FxHDz1 P/2yk1Qjn+Vxhe7CEMfUGacATN1C3m1raSJvS6Ht5sHLI/b0NCTDoh4wfzwJfVz6 j6sgChZgf+5X61tJ6D/BT0M5nraKAmlV/Q7rv+i+7EP+KTjrlgoWkK0AXkuOrLzl kYFQI7MPa/9TgQ/LFKM8J611hLWS/MHViQs2bj7TUBfQGZjsLqNTCe+PJ4htwpAK A/c3mXsdf9avaBWIgQ1NfHyftaYLETL4GT+hLupsaSCQVTFqH3wA79ZWEFB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAK0onrSyRJd+JPJz1zjyHaPn2/kwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXeNdDgQJKtFak8xeuL+Sz/jXSAF4sC/xKv 9rKf9igP01aQyCjsbLTRAuNQPQgGr7O0OhsPFyNSIGi/TrpHx1BeBF8RmGSlDwMk ivipTLT5A8H45JWIpjwQfj7NJxlOIyMaLeVfarfQx1htWuJE01FTAcNATf3vOUtw puwT24UsgerocmgRXtbjz/kvC8y1ImgSpa8h8tzaouE4ETroLmAF9N8Vl+4RQ6la icbOCDlObI4jcBPe9vy3ih7e/32rlZRVHTdUtJuMwbrARx1Cxvb9sLEZp/M/b6m0 PZrKX0FhWtSXAUxxlP0JzBpCAbt6FGggrb4dT6W6kFovVgy1hdQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:04 2026 by rpki-client