$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: niFSww7nW8QrPrCiev34cbfGw7r7hjabUD4kQ5FIRy8= Subject key identifier: 21:AB:BD:B5:83:E4:E0:49:75:3C:03:FF:D8:E3:34:B0:89:B4:0D:AC Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 7803E73F341756122BE6CAFFEF9FC2776C3F6BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 020A Signing time: Thu 16 Apr 2026 05:31:33 +0000 Manifest this update: Thu 16 Apr 2026 05:26:33 +0000 Manifest next update: Sun 19 Apr 2026 13:58:33 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: WhwdrhyAekEnDbQsoS2axUkOzO2rmmZrNNVZNDP0OYw=) 3: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: mQS4LiJE4ceMRDyobMHBeWNNLMr7gJoMOJ9JhAyQHto=) 4: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) 5: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: /7nSnTLbwVfpQ7BQMvH+hbu0RTezH74cMtOOEigk3zY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:03:e7:3f:34:17:56:12:2b:e6:ca:ff:ef:9f:c2:77:6c:3f:6b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Apr 16 05:26:33 2026 GMT Not After : Apr 19 13:58:33 2026 GMT Subject: CN=21ABBDB583E4E049753C03FFD8E334B089B40DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:da:c2:d8:fa:3c:43:c0:d5:e6:cd:82:bd: 84:ee:24:8c:f9:3f:a4:24:33:20:1c:ec:68:97:23: fe:ae:c1:cc:02:9d:fd:a1:14:bd:70:6b:9c:fe:40: 2f:91:bd:a7:76:b6:27:c9:69:20:25:00:92:1d:95: 43:28:35:b8:8b:1d:91:34:5c:af:fd:48:25:99:7f: 63:e3:4c:f2:ed:5f:b3:76:db:b4:81:b8:a7:3b:ef: 94:83:28:71:59:2c:f7:f4:cc:1d:4b:e7:2d:ab:58: 42:a7:95:1f:84:5f:60:b3:c1:fc:fa:c8:8a:47:ce: cb:06:97:27:4a:46:5d:54:58:97:5c:22:5b:8a:85: 6c:a3:3d:99:51:20:49:50:b8:0e:d7:57:05:31:a4: 0d:23:10:86:60:e2:1d:68:3b:00:33:99:8f:8e:1a: ff:29:42:c3:e8:0a:fc:ff:c7:5c:3b:c9:66:a3:d6: 71:f8:b1:55:e7:f2:c2:e3:1d:d7:eb:db:f2:19:ed: e8:6e:6c:d3:71:7c:00:4d:e7:e9:2b:74:f8:3c:96: 74:ad:2d:ed:48:af:76:d9:b5:9a:c1:4f:ad:a9:53: cb:38:0b:1b:f0:ac:24:9c:f9:0a:cd:84:a1:74:12: 86:ce:20:7d:c2:5b:5b:c0:a1:4d:51:0b:c3:02:09: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:BD:B5:83:E4:E0:49:75:3C:03:FF:D8:E3:34:B0:89:B4:0D:AC X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:e9:c8:b7:b6:2a:6c:28:c6:33:c3:a9:ad:35:14:97:37: 8e:9c:c3:c2:19:2e:bd:d6:a3:e0:0d:fc:e7:56:46:4e:5c:b7: 44:c3:0b:ec:ba:5d:ca:10:0b:2f:72:1b:9e:52:5f:4d:1a:83: f1:5b:23:18:d9:0e:85:77:62:55:aa:8c:ab:e7:39:2a:76:0e: be:c7:06:13:02:47:15:95:05:29:f3:db:50:91:8b:7c:32:1d: 53:77:45:2e:03:40:a1:97:08:68:68:27:4e:64:10:48:2a:e1: ca:93:23:bd:4e:4f:2f:53:89:72:c8:88:bf:ae:07:22:e0:f6: c9:61:0a:fe:b7:6d:39:c9:cd:68:b8:5c:af:dc:33:32:df:1d: ca:01:a6:de:c7:bb:b3:ea:71:99:de:f4:54:0b:11:df:f4:46: c4:28:74:30:40:14:a6:87:be:09:28:5a:3e:19:fc:a8:6d:da: 82:a2:eb:af:23:c2:2c:0f:cd:03:bc:10:de:30:ad:a3:cf:bf: f0:ae:d8:fb:d7:a0:ef:94:32:c0:81:fc:88:71:84:b8:c4:d9: e0:32:65:fe:45:56:b6:60:97:4c:93:6a:73:fb:ae:dd:71:37: c6:65:92:d1:fe:be:63:2f:ac:1e:20:1c:3c:e6:a3:39:ca:e1: 74:1b:b1:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAPnPzQXVhIr5sr/75/Cd2w/a9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNjA0MTYwNTI2MzNaFw0yNjA0MTkxMzU4MzNaMDMxMTAvBgNV BAMTKDIxQUJCREI1ODNFNEUwNDk3NTNDMDNGRkQ4RTMzNEIwODlCNDBEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbtrC2Po8Q8DV5s2CvYTuJIz5 P6QkMyAc7GiXI/6uwcwCnf2hFL1wa5z+QC+Rvad2tifJaSAlAJIdlUMoNbiLHZE0 XK/9SCWZf2PjTPLtX7N227SBuKc775SDKHFZLPf0zB1L5y2rWEKnlR+EX2Czwfz6 yIpHzssGlydKRl1UWJdcIluKhWyjPZlRIElQuA7XVwUxpA0jEIZg4h1oOwAzmY+O Gv8pQsPoCvz/x1w7yWaj1nH4sVXn8sLjHdfr2/IZ7ehubNNxfABN5+krdPg8lnSt Le1Ir3bZtZrBT62pU8s4CxvwrCSc+QrNhKF0EobOIH3CW1vAoU1RC8MCCRz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIau9tYPk4El1PAP/2OM0sIm0DawwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATa6ci3tipsKMYzw6mtNRSXN46cw8IZLr3W o+AN/OdWRk5ct0TDC+y6XcoQCy9yG55SX00ag/FbIxjZDoV3YlWqjKvnOSp2Dr7H BhMCRxWVBSnz21CRi3wyHVN3RS4DQKGXCGhoJ05kEEgq4cqTI71OTy9TiXLIiL+u ByLg9slhCv63bTnJzWi4XK/cMzLfHcoBpt7Hu7PqcZne9FQLEd/0RsQodDBAFKaH vgkoWj4Z/Kht2oKi668jwiwPzQO8EN4wraPPv/Cu2PvXoO+UMsCB/IhxhLjE2eAy Zf5FVrZgl0yTanP7rt1xN8ZlktH+vmMvrB4gHDzmoznK4XQbsTM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:52 2026 by rpki-client