$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: jpzmoY+JeFsg7YTALhcyXxBPh3jgMQ3SvqrKI0LMC6g= Subject key identifier: 29:81:5A:77:E4:B4:89:8E:7F:8D:72:75:BB:6F:FF:63:BB:C7:B3:3E Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 5E694CA97E47E048983601C784128BEE6418B412 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 012A Signing time: Wed 15 Apr 2026 18:41:19 +0000 Manifest this update: Wed 15 Apr 2026 18:36:19 +0000 Manifest next update: Sun 19 Apr 2026 00:03:19 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: Ezyy7bGu/OWWmpdnqv9/f8YRiT925wkQz8f4Ipj3OtE=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:4c:a9:7e:47:e0:48:98:36:01:c7:84:12:8b:ee:64:18:b4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Apr 15 18:36:19 2026 GMT Not After : Apr 19 00:03:19 2026 GMT Subject: CN=29815A77E4B4898E7F8D7275BB6FFF63BBC7B33E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:b4:1a:f8:b8:8b:22:0e:15:26:2b:72:77: b7:c1:48:4c:94:0f:e5:6d:19:17:cb:24:83:8d:56: 60:f0:c9:4f:28:06:b3:55:d2:8a:82:92:49:87:4d: a2:e2:6b:2c:b4:c2:d2:e6:f5:80:37:2f:d1:a9:0a: 42:ea:5f:72:fa:4a:9a:de:88:40:e4:cd:73:da:08: bd:ce:a3:5f:51:1f:7d:75:40:97:59:2c:b7:a8:e8: 46:f1:4b:6c:f9:99:a2:be:fd:c7:ff:4f:15:b0:34: 9b:07:d6:3e:43:71:2e:39:22:0a:ed:5b:5d:21:72: 49:c6:75:6e:7f:44:ce:1c:74:30:d8:2d:ff:74:66: e4:73:77:27:c1:ec:09:a7:60:28:a2:5f:44:01:60: 64:07:a5:93:72:02:a9:50:6e:cb:42:3d:e7:c1:ae: 08:31:64:0f:a0:a9:d2:e6:d5:ba:74:cc:f6:88:47: 4a:9d:3b:ea:db:61:15:2c:32:d6:8c:47:a8:5f:2e: f4:37:c9:12:44:5c:e1:f3:cf:58:c2:d5:d3:e8:06: 5d:4f:59:d6:09:18:a2:63:62:19:95:cd:b6:9d:8f: eb:25:61:a9:7d:d9:94:67:4e:87:17:a9:b6:d4:6b: 8f:b5:0b:31:de:02:d4:3d:2b:3a:b1:8b:36:ba:0b: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:81:5A:77:E4:B4:89:8E:7F:8D:72:75:BB:6F:FF:63:BB:C7:B3:3E X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7e:bd:91:d3:ec:ca:c9:44:3a:df:fc:ce:f6:41:d5:a4:6e: 8d:37:b1:14:45:0a:51:17:9b:e8:73:dd:70:98:bb:cb:7e:0f: a2:00:df:85:b5:ed:a9:9d:ab:2b:a4:30:3d:b1:ff:10:ee:f3: 12:63:4e:dd:13:c6:59:ef:aa:30:5b:a2:19:af:99:39:0a:cb: 55:d1:70:f9:38:21:54:59:c4:1a:8c:f8:7f:20:17:92:24:c4: d3:c9:6c:72:77:81:8a:d7:b1:0d:a8:7f:d2:f0:25:4a:92:2b: 1a:15:19:9c:23:34:fa:13:bd:da:e5:72:bd:45:f2:e4:92:4c: 09:7f:47:c5:08:a5:cb:6d:1a:43:74:f9:29:35:c5:b6:91:f8: 94:16:15:70:33:cd:4a:78:25:34:24:31:26:89:7e:90:d8:74: ce:28:c0:74:3e:67:9b:94:e1:e8:b2:98:b5:06:8b:56:f2:c2: 25:c4:dc:09:69:04:5e:d6:60:9c:45:e4:76:11:2a:1d:46:27: f0:96:ed:ab:5e:b0:a8:91:b6:a0:57:35:3f:7f:8a:6b:86:50: fb:fb:45:a7:e7:60:38:33:2b:f0:33:9e:b3:39:ec:59:72:39: ef:db:2c:d3:1f:47:7b:0f:ce:20:a2:0a:b7:48:75:a2:9c:25: fb:f4:83:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmlMqX5H4EiYNgHHhBKL7mQYtBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNjA0MTUxODM2MTlaFw0yNjA0MTkwMDAzMTlaMDMxMTAvBgNV BAMTKDI5ODE1QTc3RTRCNDg5OEU3RjhENzI3NUJCNkZGRjYzQkJDN0IzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkt7Qa+LiLIg4VJityd7fBSEyU D+VtGRfLJIONVmDwyU8oBrNV0oqCkkmHTaLiayy0wtLm9YA3L9GpCkLqX3L6Spre iEDkzXPaCL3Oo19RH311QJdZLLeo6EbxS2z5maK+/cf/TxWwNJsH1j5DcS45Igrt W10hcknGdW5/RM4cdDDYLf90ZuRzdyfB7AmnYCiiX0QBYGQHpZNyAqlQbstCPefB rggxZA+gqdLm1bp0zPaIR0qdO+rbYRUsMtaMR6hfLvQ3yRJEXOHzz1jC1dPoBl1P WdYJGKJjYhmVzbadj+slYal92ZRnTocXqbbUa4+1CzHeAtQ9Kzqxiza6C8EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYFad+S0iY5/jXJ1u2//Y7vHsz4wHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR+vZHT7MrJRDrf/M72QdWkbo03sRRFClEX m+hz3XCYu8t+D6IA34W17amdqyukMD2x/xDu8xJjTt0TxlnvqjBbohmvmTkKy1XR cPk4IVRZxBqM+H8gF5IkxNPJbHJ3gYrXsQ2of9LwJUqSKxoVGZwjNPoTvdrlcr1F 8uSSTAl/R8UIpcttGkN0+Sk1xbaR+JQWFXAzzUp4JTQkMSaJfpDYdM4owHQ+Z5uU 4eiymLUGi1bywiXE3AlpBF7WYJxF5HYRKh1GJ/CW7atesKiRtqBXNT9/imuGUPv7 RafnYDgzK/AznrM57FlyOe/bLNMfR3sPziCiCrdIdaKcJfv0gyg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:12 2026 by rpki-client