$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: nfLxGYJW2v+4LO4TbID2BNhuscQR1LDkTP7Xr8CfjkA= Subject key identifier: 99:4D:C5:1B:FB:82:76:AE:1D:0F:1D:6C:27:BE:AB:70:4C:57:0F:88 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 0AE7C4FA48DD770CD6C6826580935E7E1416FC64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 0564 Signing time: Wed 15 Apr 2026 22:31:38 +0000 Manifest this update: Wed 15 Apr 2026 22:26:38 +0000 Manifest next update: Sun 19 Apr 2026 03:05:38 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: Os5hiT0H7am5xCErvh+l6zaEVD+EHt4R7gp+tyTm824=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e7:c4:fa:48:dd:77:0c:d6:c6:82:65:80:93:5e:7e:14:16:fc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Apr 15 22:26:38 2026 GMT Not After : Apr 19 03:05:38 2026 GMT Subject: CN=994DC51BFB8276AE1D0F1D6C27BEAB704C570F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:e5:8d:2b:f1:a0:c5:32:0c:4d:c6:9a:85: 4a:0d:42:bc:a6:66:90:61:45:23:a0:df:13:43:5d: 2a:5f:83:a5:b7:ca:7e:46:83:a9:02:85:e7:c1:f1: 6a:20:b2:bc:ff:db:0c:1c:02:6e:82:e1:0d:9d:00: 7d:e9:cd:e0:70:c8:7a:35:07:de:b2:91:00:9a:97: 46:0a:7b:e0:a7:5e:2e:d4:fd:9d:96:ff:10:68:52: 24:99:9a:81:a0:26:9b:e6:d3:1b:23:c4:56:ca:24: bb:55:b8:27:ed:13:0d:7a:08:a8:83:d0:fa:c4:ce: 73:4b:ed:67:57:59:fe:fc:4a:d7:e5:62:ed:c4:3c: a2:3b:18:58:55:77:52:c5:b5:72:e4:5d:c1:44:24: cb:79:73:a9:b8:ac:a8:8e:9e:18:87:3a:50:04:95: 45:8d:89:32:82:93:4c:f9:0f:f4:32:00:37:8d:0e: e2:88:06:96:37:f0:d0:95:bc:17:02:b3:55:43:fd: 2d:c2:4c:c1:1c:a9:e7:33:45:06:65:d3:29:9b:ec: 6c:ac:f3:01:30:cb:d6:56:8e:00:96:83:26:89:79: 16:98:b2:43:52:a2:38:e1:d5:31:58:72:0b:1c:ed: 6b:8c:18:01:d9:dd:c5:eb:bf:34:4d:d6:80:75:95: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4D:C5:1B:FB:82:76:AE:1D:0F:1D:6C:27:BE:AB:70:4C:57:0F:88 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e7:be:64:2e:50:f5:1f:3f:d2:71:bd:07:fd:aa:15:08:7a: 80:9a:bb:47:1b:cd:5e:f6:39:d5:dd:2d:bf:fc:52:47:42:9c: da:65:5c:fa:e1:6c:47:84:30:58:7d:67:0c:ea:bb:df:7d:60: 24:58:db:5c:c5:bb:21:ff:b6:37:5a:0a:94:64:40:01:7e:78: 8a:ec:68:75:7b:49:28:51:b3:13:7d:7d:0b:f8:80:25:71:00: cf:96:e4:40:ff:15:52:5b:dc:a2:2c:3e:94:f0:a3:db:1c:46: 71:56:02:af:19:3e:bc:6e:b3:d5:e2:1b:c0:a7:ec:6c:3d:56: 72:5e:4c:f7:e2:1c:e5:0c:28:da:0a:54:ea:ed:da:a9:3b:00: da:99:c9:bb:70:64:a8:7c:e5:3f:03:6c:95:ac:ac:5d:57:20: 2f:48:a8:b6:20:72:95:9f:f3:c0:e3:c3:25:b9:ff:0e:ce:dd: 9a:90:18:c6:1f:a5:fd:3a:7e:63:da:4d:7e:03:b9:4f:61:20: 5b:b2:54:08:df:d1:0e:6a:98:1f:29:d9:3a:8f:14:3c:7c:34: 89:45:0e:02:fd:c0:aa:dc:c0:a4:96:0f:0e:5c:86:db:b9:bd: 17:a2:a7:92:1d:77:77:aa:fc:d1:8b:f0:dd:10:df:fb:2e:f6: f8:37:f6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCufE+kjddwzWxoJlgJNefhQW/GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNjA0MTUyMjI2MzhaFw0yNjA0MTkwMzA1MzhaMDMxMTAvBgNV BAMTKDk5NERDNTFCRkI4Mjc2QUUxRDBGMUQ2QzI3QkVBQjcwNEM1NzBGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiA+WNK/GgxTIMTcaahUoNQrym ZpBhRSOg3xNDXSpfg6W3yn5Gg6kChefB8Wogsrz/2wwcAm6C4Q2dAH3pzeBwyHo1 B96ykQCal0YKe+CnXi7U/Z2W/xBoUiSZmoGgJpvm0xsjxFbKJLtVuCftEw16CKiD 0PrEznNL7WdXWf78StflYu3EPKI7GFhVd1LFtXLkXcFEJMt5c6m4rKiOnhiHOlAE lUWNiTKCk0z5D/QyADeNDuKIBpY38NCVvBcCs1VD/S3CTMEcqeczRQZl0ymb7Gys 8wEwy9ZWjgCWgyaJeRaYskNSojjh1TFYcgsc7WuMGAHZ3cXrvzRN1oB1lfsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmU3FG/uCdq4dDx1sJ76rcExXD4gwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7nvmQuUPUfP9JxvQf9qhUIeoCau0cbzV72 OdXdLb/8UkdCnNplXPrhbEeEMFh9Zwzqu999YCRY21zFuyH/tjdaCpRkQAF+eIrs aHV7SShRsxN9fQv4gCVxAM+W5ED/FVJb3KIsPpTwo9scRnFWAq8ZPrxus9XiG8Cn 7Gw9VnJeTPfiHOUMKNoKVOrt2qk7ANqZybtwZKh85T8DbJWsrF1XIC9IqLYgcpWf 88DjwyW5/w7O3ZqQGMYfpf06fmPaTX4DuU9hIFuyVAjf0Q5qmB8p2TqPFDx8NIlF DgL9wKrcwKSWDw5chtu5vReip5Idd3eq/NGL8N0Q3/su9vg39tc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:54 2026 by rpki-client