$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: lwEuk11kmExyAnHHWVSxBIyBwxReBJXKnCk5GBiJ0Rw= Subject key identifier: AD:81:92:93:D4:64:4F:06:1D:30:21:C2:84:A4:D8:10:FB:B2:E2:B5 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 2642260CBC1765CCAAE6A178E7504502EEB9BBA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 056D Signing time: Wed 15 Apr 2026 18:00:48 +0000 Manifest this update: Wed 15 Apr 2026 17:55:48 +0000 Manifest next update: Sat 18 Apr 2026 23:50:48 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pwYSccPX545l6tOoGmQeGSusfNrCtCRh4u2GvYkMfU8=) 2: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: 7m0QSCyloL6293h/iAVfHEmDIOW+hDqf+006NWJ7o/U=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: 1XeF70BDEHHHcVh1tuDQSwar3IQqxD2CsqUhmn5Rqx8=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 6: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: sPZ/WWJp89WfKtGsgdXcgq6uHfOegaXwKPEvSF0w1jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:42:26:0c:bc:17:65:cc:aa:e6:a1:78:e7:50:45:02:ee:b9:bb:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Apr 15 17:55:48 2026 GMT Not After : Apr 18 23:50:48 2026 GMT Subject: CN=AD819293D4644F061D3021C284A4D810FBB2E2B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:bd:de:15:72:5b:0d:47:16:5b:ec:9e:d2:6f: fa:9c:45:f9:11:da:44:a5:4e:4b:8d:dc:ca:40:b3: f5:65:fc:5a:7d:28:c2:0a:54:7c:c3:80:26:91:d7: 1a:09:05:39:f3:03:fa:9f:2c:01:5e:25:ac:29:51: d9:80:29:05:b6:97:11:ee:4b:3d:c7:c1:3c:f0:1e: 79:b9:75:91:ab:86:69:94:4d:72:95:70:07:21:97: 25:16:ac:80:34:c8:a1:7c:d4:67:f3:ef:4d:1e:c6: eb:48:9a:0f:db:e6:a1:eb:7d:be:27:46:2a:0c:13: 3c:b5:55:bb:be:8e:43:06:55:97:73:cd:21:aa:8e: f3:0c:33:14:de:04:60:a5:54:53:54:62:09:26:9e: bd:22:f8:3a:8d:ba:04:7c:02:a8:26:5f:56:ac:72: 7b:22:3f:5d:82:1f:a9:2a:27:ff:fb:72:60:97:04: 6e:10:ae:ce:77:fe:79:01:88:52:79:3e:32:eb:10: 62:3f:f2:ce:6e:2d:43:27:f5:1b:2b:0b:68:06:b1: 2c:11:8f:5e:e7:6f:63:01:2a:c0:56:d4:e1:1a:91: 11:75:9c:80:bd:73:56:5e:6b:12:47:db:44:18:70: c4:e0:cc:f2:6c:71:21:98:5f:7d:84:90:56:2f:61: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:92:93:D4:64:4F:06:1D:30:21:C2:84:A4:D8:10:FB:B2:E2:B5 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f4:73:f1:c5:c3:86:02:6f:88:e2:cf:d6:d2:80:b0:ae:34: e4:74:e5:c1:25:51:42:5b:03:d2:a3:60:b2:ae:30:0a:f2:dc: 29:9b:78:9d:4c:4d:38:06:e5:93:22:37:cd:35:e0:ef:50:cf: fc:5d:c3:2e:e4:22:53:2e:64:bc:03:7d:7d:4c:de:08:b5:9e: 51:8e:56:98:b5:b1:68:35:e2:d7:63:a9:fc:e7:05:b1:c7:bd: 09:3d:0f:56:05:13:21:df:af:87:6e:e9:74:fc:1a:af:d8:47: 1a:eb:d7:60:0c:0a:31:02:13:6a:7b:b7:29:88:68:ce:f1:c3: a9:72:f1:0d:70:55:85:88:c8:66:87:46:cc:4b:57:46:f0:04: 76:d4:e5:b9:4c:10:83:22:49:bc:ae:b9:fe:0b:27:b7:28:20: 28:d8:66:36:b9:97:52:af:a0:cb:0c:d1:7c:59:38:5a:30:19: 48:05:2f:4c:21:4d:d7:de:42:24:11:66:5b:d5:d4:93:f1:fc: 1c:e5:ea:a4:7a:06:72:22:36:47:b0:1a:a2:d9:1d:cb:ee:d1: a3:a1:2a:15:83:d6:4b:f3:d5:65:7a:9c:bc:18:6f:48:bd:67: a5:1d:57:ea:f1:9c:1d:08:22:27:41:30:26:d1:3c:01:73:51: e5:41:ad:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkImDLwXZcyq5qF451BFAu65u6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNjA0MTUxNzU1NDhaFw0yNjA0MTgyMzUwNDhaMDMxMTAvBgNV BAMTKEFEODE5MjkzRDQ2NDRGMDYxRDMwMjFDMjg0QTREODEwRkJCMkUyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4vd4VclsNRxZb7J7Sb/qcRfkR 2kSlTkuN3MpAs/Vl/Fp9KMIKVHzDgCaR1xoJBTnzA/qfLAFeJawpUdmAKQW2lxHu Sz3HwTzwHnm5dZGrhmmUTXKVcAchlyUWrIA0yKF81Gfz700exutImg/b5qHrfb4n RioMEzy1Vbu+jkMGVZdzzSGqjvMMMxTeBGClVFNUYgkmnr0i+DqNugR8AqgmX1as cnsiP12CH6kqJ//7cmCXBG4Qrs53/nkBiFJ5PjLrEGI/8s5uLUMn9RsrC2gGsSwR j17nb2MBKsBW1OEakRF1nIC9c1ZeaxJH20QYcMTgzPJscSGYX32EkFYvYQfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYGSk9RkTwYdMCHChKTYEPuy4rUwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT0c/HFw4YCb4jiz9bSgLCuNOR05cElUUJb A9KjYLKuMAry3CmbeJ1MTTgG5ZMiN8014O9Qz/xdwy7kIlMuZLwDfX1M3gi1nlGO Vpi1sWg14tdjqfznBbHHvQk9D1YFEyHfr4du6XT8Gq/YRxrr12AMCjECE2p7tymI aM7xw6ly8Q1wVYWIyGaHRsxLV0bwBHbU5blMEIMiSbyuuf4LJ7coICjYZja5l1Kv oMsM0XxZOFowGUgFL0whTdfeQiQRZlvV1JPx/Bzl6qR6BnIiNkewGqLZHcvu0aOh KhWD1kvz1WV6nLwYb0i9Z6UdV+rxnB0IIidBMCbRPAFzUeVBrdU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:23 2026 by rpki-client