$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: XUsYv69XaeiJz78lgP6R0anWmStu9HLC1OOsuKoXNPs= Subject key identifier: 89:A0:DE:73:83:1C:73:7A:99:C6:B5:2B:C3:6C:ED:47:8C:33:C1:40 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 74C641F2EF298182B964251A5EE875FD65ADC263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 0163 Signing time: Fri 17 Apr 2026 23:21:19 +0000 Manifest this update: Fri 17 Apr 2026 23:16:19 +0000 Manifest next update: Tue 21 Apr 2026 09:26:19 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: 4blY0KBpSzRUoyFaq35Eu1DEa3N9B3gRpwyZoNwNxRU=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: zHu+x2gGwUwgUlq5CctYUcopUHkJoC2ZyqysIaSRBBM=) 3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: nLZ/YQrX2E1vPpFNYYJt1rFZ9HbCnXnyNDcytSouMB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c6:41:f2:ef:29:81:82:b9:64:25:1a:5e:e8:75:fd:65:ad:c2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Apr 17 23:16:19 2026 GMT Not After : Apr 21 09:26:19 2026 GMT Subject: CN=89A0DE73831C737A99C6B52BC36CED478C33C140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:50:23:4e:89:bd:44:ad:e3:31:5c:3c:32: 7c:d1:31:4f:53:40:af:ae:4f:e8:58:2c:1b:73:b7: 77:d8:17:07:0f:81:58:bd:19:03:4f:38:26:19:08: 48:b1:1d:61:75:92:90:8b:02:29:66:a4:7d:60:91: 48:db:3e:83:cd:a6:ed:e2:c9:d3:5f:cb:2d:8c:43: 01:5a:78:a7:b3:63:5b:99:8a:70:8d:b7:2f:c5:ed: 1a:f4:87:ad:4b:30:6c:41:da:36:28:ff:94:7d:ed: 6e:26:a1:f6:17:5c:1a:eb:38:23:95:15:c2:62:82: 06:65:41:27:7a:f9:73:62:7c:41:3c:8d:e6:b2:fb: 8c:1a:be:a8:77:de:56:e1:a7:57:e2:ec:f6:6f:91: 8d:af:bf:18:04:3b:c6:7f:c7:5e:33:69:24:66:bc: 92:02:41:7c:cb:30:ff:a4:fc:4a:eb:39:40:8d:f8: d8:01:98:14:31:51:9d:79:b2:90:e0:aa:80:bb:da: 73:e8:4f:72:e7:b4:bb:82:31:10:5b:30:d9:ff:ad: c8:e8:00:e0:14:ce:4b:cd:bb:3c:6d:6b:46:ce:bc: 5e:47:71:bb:3b:e0:83:51:a8:09:33:fe:91:a0:1a: b0:8d:f6:f4:3c:66:48:5d:9a:25:93:23:80:97:32: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A0:DE:73:83:1C:73:7A:99:C6:B5:2B:C3:6C:ED:47:8C:33:C1:40 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:57:75:83:2d:e9:72:6b:0b:8b:d0:ba:72:69:4a:eb:eb:4e: 3a:a4:1c:0b:06:ea:ad:f3:ef:f6:b8:bf:32:2d:8b:69:b8:7a: 18:eb:01:93:e0:c8:14:6d:8d:14:05:42:61:b1:a1:43:bc:76: be:25:c9:98:5e:72:69:79:44:0d:a5:45:8c:07:a6:31:91:e0: c0:57:a9:3e:8e:36:17:45:cb:df:1a:77:a1:3d:13:38:c9:57: df:93:07:d3:66:33:0b:a9:bd:46:59:a3:48:52:3b:c1:35:de: 8a:33:71:75:4d:38:70:07:b0:6f:43:d7:62:63:ca:1d:6e:15: 5f:4f:02:a4:98:e5:c6:1f:fb:51:af:e9:4e:8f:d7:c7:db:10: c7:07:1a:a9:8c:71:de:97:9e:ce:ca:4e:9c:71:ef:71:54:93: 7a:a0:60:1b:26:64:9a:f3:74:63:64:30:95:1b:17:81:4c:3b: 4c:13:64:43:29:ff:47:ad:03:30:d9:f6:0e:9a:cc:a4:db:7a: 91:f0:7c:1f:fc:f4:f8:bb:69:df:71:ee:b2:06:3b:26:81:d1: 78:51:47:a5:4f:18:7e:6b:db:18:b4:6a:83:c8:59:7b:55:51: 9d:f6:f9:db:0e:22:00:17:b0:68:f3:9f:e4:06:35:58:0f:a6: c6:a6:f6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMZB8u8pgYK5ZCUaXuh1/WWtwmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNjA0MTcyMzE2MTlaFw0yNjA0MjEwOTI2MTlaMDMxMTAvBgNV BAMTKDg5QTBERTczODMxQzczN0E5OUM2QjUyQkMzNkNFRDQ3OEMzM0MxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCFAjTom9RK3jMVw8MnzRMU9T QK+uT+hYLBtzt3fYFwcPgVi9GQNPOCYZCEixHWF1kpCLAilmpH1gkUjbPoPNpu3i ydNfyy2MQwFaeKezY1uZinCNty/F7Rr0h61LMGxB2jYo/5R97W4mofYXXBrrOCOV FcJiggZlQSd6+XNifEE8jeay+4wavqh33lbhp1fi7PZvkY2vvxgEO8Z/x14zaSRm vJICQXzLMP+k/ErrOUCN+NgBmBQxUZ15spDgqoC72nPoT3LntLuCMRBbMNn/rcjo AOAUzkvNuzxta0bOvF5Hcbs74INRqAkz/pGgGrCN9vQ8ZkhdmiWTI4CXMmT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiaDec4Mcc3qZxrUrw2ztR4wzwUAwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1XdYMt6XJrC4vQunJpSuvrTjqkHAsG6q3z 7/a4vzIti2m4ehjrAZPgyBRtjRQFQmGxoUO8dr4lyZhecml5RA2lRYwHpjGR4MBX qT6ONhdFy98ad6E9EzjJV9+TB9NmMwupvUZZo0hSO8E13oozcXVNOHAHsG9D12Jj yh1uFV9PAqSY5cYf+1Gv6U6P18fbEMcHGqmMcd6Xns7KTpxx73FUk3qgYBsmZJrz dGNkMJUbF4FMO0wTZEMp/0etAzDZ9g6azKTbepHwfB/89Pi7ad9x7rIGOyaB0XhR R6VPGH5r2xi0aoPIWXtVUZ32+dsOIgAXsGjzn+QGNVgPpsam9h8= -----END CERTIFICATE-----Generated at Sun Apr 19 19:52:26 2026 by rpki-client