$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: PK+Fsdo0jw+Z6CYMbf4jaHzlMFWOk3YzIvXGTRscuMg= Subject key identifier: 44:E2:3F:C0:98:2E:4D:9C:44:F2:6B:BB:F1:2A:32:E0:2A:D4:F3:61 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 078F1002A285801EBE44B4A83D19B18E887E18D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 0137 Signing time: Fri 17 Apr 2026 08:30:46 +0000 Manifest this update: Fri 17 Apr 2026 08:25:46 +0000 Manifest next update: Mon 20 Apr 2026 08:41:46 +0000 Files and hashes: 1: 020EA2304929066809CA6F723574798639D77438.crl (hash: KnNPAptveq5j8XjIu4bQcvxxPft2zHyTLT8zNSGkyaw=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 3: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8f:10:02:a2:85:80:1e:be:44:b4:a8:3d:19:b1:8e:88:7e:18:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Apr 17 08:25:46 2026 GMT Not After : Apr 20 08:41:46 2026 GMT Subject: CN=44E23FC0982E4D9C44F26BBBF12A32E02AD4F361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:ec:cd:02:30:8e:a6:fc:64:13:c3:04:46: e9:08:8b:42:c5:d8:57:1d:56:2c:27:0b:be:2d:60: 8c:02:f0:04:d0:e1:da:9f:02:3f:14:cf:dc:14:dc: 4d:07:6c:4d:66:20:0b:29:d0:21:14:e0:16:38:26: 04:65:ba:6e:c7:ac:0a:93:bd:fe:b3:af:af:df:06: 0c:51:ac:86:1f:d6:64:c4:09:2f:88:a1:42:e6:97: 8c:a1:f1:fb:cb:33:ec:18:d3:21:b0:aa:7d:85:e8: 12:13:06:1f:0c:1a:af:06:f2:8b:c4:85:3a:9b:81: 1f:4d:da:da:91:10:3e:cc:29:0d:fc:f5:d3:94:5a: 3b:a0:0f:1e:27:14:38:34:92:ed:22:33:1e:1c:37: 2c:83:1b:9c:8b:5c:17:ab:73:cb:cb:de:52:e1:59: 78:ae:97:ec:08:e8:b7:3a:65:fc:6c:01:43:8b:74: 24:95:9e:18:86:8d:17:76:9a:7b:7f:c2:12:62:49: b3:ed:dd:4a:53:63:d8:28:46:ba:4d:cb:31:fd:19: 1f:26:d3:05:dd:b4:15:b8:66:da:09:31:d5:53:c8: 83:33:fb:19:00:77:a6:17:44:fb:c6:b7:88:82:fb: ae:16:12:9b:1f:ca:ed:ac:2f:e0:72:04:22:ad:dd: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:3F:C0:98:2E:4D:9C:44:F2:6B:BB:F1:2A:32:E0:2A:D4:F3:61 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:85:69:fd:fb:9f:2e:52:a2:40:8d:9f:10:65:33:09:f1:56: 24:9f:5a:44:d9:e6:5a:07:1d:e2:4e:b8:00:96:1d:b4:db:b2: 3d:db:a3:83:e0:84:fc:c9:30:f7:bc:4b:92:58:18:2e:e5:91: 9a:2b:d6:7f:2b:41:af:69:f2:3e:19:3c:df:b9:d2:a5:81:d0: cf:39:e0:b9:ed:7d:ac:d3:09:3c:cf:e0:a2:20:b3:ad:fc:10: ef:b6:eb:aa:f4:08:26:9b:40:60:33:d9:a2:ca:6b:04:eb:a2: 2e:07:4a:a6:d6:c3:b9:8a:1f:3c:51:a9:49:b7:88:08:ef:ca: 0a:a7:c3:73:33:35:35:7b:e3:0d:8c:75:33:98:7b:51:56:8f: 29:9b:fd:9c:7f:04:e1:4f:0b:90:45:6f:c1:25:57:4d:b2:f9: 93:5b:2c:a2:e9:1f:bf:60:b0:2d:89:ff:73:21:bb:53:f7:7b: fb:90:3e:f1:d9:2a:3a:33:7b:42:71:13:4c:6a:f5:90:7f:03: fd:96:f1:69:9d:ca:85:8b:4a:02:fe:22:53:57:ef:1c:c5:a4: 45:52:49:50:60:fa:f6:a4:93:14:d1:5d:c0:c0:2c:03:75:1b: f8:e5:5a:9b:e1:0e:30:b3:7f:e6:ff:10:88:74:8f:fb:03:94: 4a:43:b3:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB48QAqKFgB6+RLSoPRmxjoh+GNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNjA0MTcwODI1NDZaFw0yNjA0MjAwODQxNDZaMDMxMTAvBgNV BAMTKDQ0RTIzRkMwOTgyRTREOUM0NEYyNkJCQkYxMkEzMkUwMkFENEYzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8W+zNAjCOpvxkE8MERukIi0LF 2FcdViwnC74tYIwC8ATQ4dqfAj8Uz9wU3E0HbE1mIAsp0CEU4BY4JgRlum7HrAqT vf6zr6/fBgxRrIYf1mTECS+IoULml4yh8fvLM+wY0yGwqn2F6BITBh8MGq8G8ovE hTqbgR9N2tqRED7MKQ389dOUWjugDx4nFDg0ku0iMx4cNyyDG5yLXBerc8vL3lLh WXiul+wI6Lc6ZfxsAUOLdCSVnhiGjRd2mnt/whJiSbPt3UpTY9goRrpNyzH9GR8m 0wXdtBW4ZtoJMdVTyIMz+xkAd6YXRPvGt4iC+64WEpsfyu2sL+ByBCKt3WhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROI/wJguTZxE8mu78Soy4CrU82EwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKFaf37ny5SokCNnxBlMwnxViSfWkTZ5loH HeJOuACWHbTbsj3bo4PghPzJMPe8S5JYGC7lkZor1n8rQa9p8j4ZPN+50qWB0M85 4LntfazTCTzP4KIgs638EO+266r0CCabQGAz2aLKawTroi4HSqbWw7mKHzxRqUm3 iAjvygqnw3MzNTV74w2MdTOYe1FWjymb/Zx/BOFPC5BFb8ElV02y+ZNbLKLpH79g sC2J/3Mhu1P3e/uQPvHZKjoze0JxE0xq9ZB/A/2W8WmdyoWLSgL+IlNX7xzFpEVS SVBg+vakkxTRXcDALAN1G/jlWpvhDjCzf+b/EIh0j/sDlEpDs/Y= -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:54 2026 by rpki-client