$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: 9SR+nRr/+e5q6JzMkRJ39YPb/R0bA0+IIcygM9OsEo4= Subject key identifier: 31:1F:DF:56:A3:61:13:FA:BF:AD:68:96:89:26:37:AE:14:E1:62:C6 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 0E435E47D01363DB3DB994F7040A3261FC3056B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0198 Signing time: Thu 16 Apr 2026 11:31:55 +0000 Manifest this update: Thu 16 Apr 2026 11:26:55 +0000 Manifest next update: Sun 19 Apr 2026 18:08:55 +0000 Files and hashes: 1: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) 2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) 3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: yaRJ2T/TxEUxCCMGTgs07kH2CgQfArlt3drJjZ6mylk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:5e:47:d0:13:63:db:3d:b9:94:f7:04:0a:32:61:fc:30:56:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Apr 16 11:26:55 2026 GMT Not After : Apr 19 18:08:55 2026 GMT Subject: CN=311FDF56A36113FABFAD6896892637AE14E162C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:16:67:ca:0c:a2:5b:58:86:36:6d:d3:57: 1c:45:ab:3e:a6:3c:2c:e1:cd:8b:15:c9:de:d7:81: 26:0e:b7:93:d4:9a:09:1a:eb:a5:28:b5:45:dc:77: 84:1f:23:52:93:bc:fa:56:d9:49:61:fe:94:d3:07: 22:ee:e0:d1:0e:3e:fa:df:2f:26:77:a2:2a:81:84: e2:5c:14:ff:b1:74:74:fc:e4:b5:bb:98:bc:35:45: eb:92:b6:3b:0c:2a:4d:bf:76:c3:d8:e7:7f:ca:e6: f1:78:e3:cf:fc:b2:35:e8:b9:c5:a9:a2:7b:53:05: 6a:be:d9:22:ac:53:8b:b7:ba:8a:1a:95:37:ae:44: 58:3c:15:52:5e:3e:a4:92:a7:59:e0:b3:a7:6f:bc: 94:71:60:aa:0d:f0:a2:5f:1d:7e:56:7a:c8:a4:5a: 9c:e2:27:0b:9d:b3:dc:8d:fd:4f:b5:5c:2e:6b:07: c7:06:f7:9a:55:b0:01:f9:06:e4:1f:fe:59:8d:b1: 82:31:a1:4b:c0:e4:2f:60:19:2b:1d:d7:c3:4e:07: 29:24:01:77:1a:6b:8e:d9:a0:d7:37:e9:5e:4a:02: 33:7b:1d:9d:a4:96:5d:be:91:a9:d9:2f:a6:75:1d: 5b:53:a1:cd:2c:cc:bb:ef:76:80:61:ef:a1:44:75: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:DF:56:A3:61:13:FA:BF:AD:68:96:89:26:37:AE:14:E1:62:C6 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:d1:58:df:6a:93:64:3f:ca:6c:5c:d6:89:93:df:9a:f3: 5f:1a:3b:a0:35:45:96:9f:2a:63:33:70:ab:8d:bb:a4:e6:22: 2c:c4:89:af:9c:a8:c3:92:85:ed:9f:b5:9e:75:61:97:50:98: b1:6d:6d:ba:65:5c:ad:5a:f7:73:5d:e1:e7:f7:4e:d4:1e:82: 7f:5b:22:be:2b:e6:70:19:b6:94:7a:44:f3:38:01:0a:b1:55: cd:0c:2c:35:67:87:26:6e:e6:a1:e9:6f:85:a4:d9:8b:06:cf: 59:a5:c1:8f:d9:13:91:33:b1:d8:80:59:d5:9c:aa:cf:8a:cd: b8:cc:85:86:94:31:e3:44:dc:da:c7:61:24:ca:1b:a1:69:48: 57:e7:f6:3c:c7:8a:23:9c:ab:45:58:8e:37:c7:d4:b1:22:a5: 16:84:f1:03:5a:58:a2:4d:ba:c5:f8:23:8b:9a:c3:95:72:1a: 60:56:1c:28:63:35:a1:1b:63:0f:25:8c:25:f7:e8:56:d0:c7: 11:2e:b5:37:ef:c6:4a:ee:d4:f5:41:5b:28:63:4b:50:14:51: 0a:e2:de:de:e4:43:88:76:65:51:58:12:07:a2:6a:89:9f:a0: 09:af:d2:41:98:36:84:c0:7b:13:6b:91:2b:97:9c:e4:77:86: 95:b7:eb:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkNeR9ATY9s9uZT3BAoyYfwwVrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNjA0MTYxMTI2NTVaFw0yNjA0MTkxODA4NTVaMDMxMTAvBgNV BAMTKDMxMUZERjU2QTM2MTEzRkFCRkFENjg5Njg5MjYzN0FFMTRFMTYyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSghZnygyiW1iGNm3TVxxFqz6m PCzhzYsVyd7XgSYOt5PUmgka66UotUXcd4QfI1KTvPpW2Ulh/pTTByLu4NEOPvrf LyZ3oiqBhOJcFP+xdHT85LW7mLw1ReuStjsMKk2/dsPY53/K5vF448/8sjXoucWp ontTBWq+2SKsU4u3uooalTeuRFg8FVJePqSSp1ngs6dvvJRxYKoN8KJfHX5Wesik WpziJwuds9yN/U+1XC5rB8cG95pVsAH5BuQf/lmNsYIxoUvA5C9gGSsd18NOBykk AXcaa47ZoNc36V5KAjN7HZ2kll2+kanZL6Z1HVtToc0szLvvdoBh76FEdSqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMR/fVqNhE/q/rWiWiSY3rhThYsYwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmM0VjfapNkP8psXNaJk9+a818aO6A1RZaf KmMzcKuNu6TmIizEia+cqMOShe2ftZ51YZdQmLFtbbplXK1a93Nd4ef3TtQegn9b Ir4r5nAZtpR6RPM4AQqxVc0MLDVnhyZu5qHpb4Wk2YsGz1mlwY/ZE5EzsdiAWdWc qs+KzbjMhYaUMeNE3NrHYSTKG6FpSFfn9jzHiiOcq0VYjjfH1LEipRaE8QNaWKJN usX4I4uaw5VyGmBWHChjNaEbYw8ljCX36FbQxxEutTfvxkru1PVBWyhjS1AUUQri 3t7kQ4h2ZVFYEgeiaomfoAmv0kGYNoTAexNrkSuXnOR3hpW36/A= -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:42 2026 by rpki-client