$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: NgTOSznmpyx8Td2SILIoMMAyq4C/a4ZTIo+LN5FE7ms= Subject key identifier: E7:0D:84:22:7D:C3:73:B4:69:13:51:79:3C:12:3A:AA:3F:B1:B9:47 Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 38F3AFDEB22DEF44BC23D6370D43F696B9199B6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: 0129 Signing time: Fri 17 Apr 2026 09:31:33 +0000 Manifest this update: Fri 17 Apr 2026 09:26:33 +0000 Manifest next update: Mon 20 Apr 2026 18:58:33 +0000 Files and hashes: 1: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: qiGqW+OzcuMvbgYj0jj16DZ2lUdRa7DCVoeWOMEPfQw=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: aEavLtAbdRxoRXxDQMLv+ovCw/uDfoEk+/AelkTfu1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:af:de:b2:2d:ef:44:bc:23:d6:37:0d:43:f6:96:b9:19:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Apr 17 09:26:33 2026 GMT Not After : Apr 20 18:58:33 2026 GMT Subject: CN=E70D84227DC373B4691351793C123AAA3FB1B947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e4:7f:1b:7a:f4:72:15:fe:bd:f2:e6:35:54: b5:b4:84:3d:7f:03:d1:77:15:35:40:e6:37:24:b7: 96:41:c0:d1:f0:8e:ee:fa:80:2d:8e:53:3b:b8:e0: 57:aa:9c:75:79:4c:6f:6c:da:71:2d:4c:cf:21:0a: 45:22:b8:9e:7b:0e:64:a2:b4:0b:2a:17:46:9f:69: ac:8b:cd:dc:e1:84:05:57:e0:42:1c:81:28:fb:ba: 41:28:ac:2a:55:5a:3e:d7:34:b0:fc:ac:2a:8d:6a: c7:54:f4:19:d2:08:25:d0:ca:26:93:9c:bf:2c:4f: 27:38:8a:43:a3:e9:79:3e:e4:fc:d2:19:b9:ee:f3: dc:49:70:b8:c3:6d:72:65:0c:5d:a9:94:df:d0:31: 7b:a5:6e:a4:cd:76:f0:c9:8a:19:33:c1:3a:5b:8a: f7:cd:05:9c:48:34:18:63:e1:c5:27:89:8d:82:49: c1:c8:14:be:fc:d5:92:e4:59:ef:08:b6:0e:15:8b: 9e:c4:28:b4:e6:74:f9:91:0c:79:c9:00:54:41:3f: 46:1a:49:4b:1e:ac:6a:37:b8:92:c4:85:61:2f:9e: 7f:82:1d:91:fe:d5:47:86:e1:26:a8:fb:01:32:b7: 1b:22:22:eb:a4:55:98:90:f8:b4:d3:ad:f9:3e:1d: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0D:84:22:7D:C3:73:B4:69:13:51:79:3C:12:3A:AA:3F:B1:B9:47 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b9:ea:f7:76:6d:e0:43:e7:d6:33:48:d7:bd:6b:fe:80:d1: 08:b0:b7:b0:bb:85:4d:b6:04:d6:fe:a0:4d:8e:db:1c:a4:96: 0c:59:10:11:ad:bc:90:e1:8b:5f:29:60:67:02:cf:41:d3:ed: 63:27:c8:7e:53:01:cd:3e:f5:7a:34:40:eb:fc:de:d3:d1:67: d0:49:5e:78:34:26:83:72:44:67:e6:fe:54:c8:ab:df:71:0d: f2:66:ca:19:8b:fc:d9:3e:37:34:f6:25:bf:97:97:45:1c:50: 75:c2:5a:a4:d7:4e:e6:75:b8:b7:89:0d:46:da:92:05:cb:e9: 7e:26:46:f3:6c:08:9e:c2:56:60:a7:35:ae:d7:a3:ea:4d:f4: 8f:7e:3b:db:4c:f0:73:2e:75:d5:b5:b5:3e:f4:47:5f:61:27: eb:39:e3:fc:00:a1:6c:df:0f:1f:12:8a:5c:ba:e0:b0:ac:3e: 7e:df:d4:27:98:5b:24:ce:36:c1:dc:f6:39:1e:10:1f:a8:72: 77:d9:33:fe:54:57:39:1e:94:86:22:ae:31:ba:27:44:d7:d0: cd:9d:34:91:35:d0:c8:d5:13:8a:2a:42:76:cb:5d:ee:72:d2: d2:94:bc:a1:d8:10:01:b5:31:fe:3b:cf:4e:50:ad:78:7e:f8: be:e3:6e:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPOv3rIt70S8I9Y3DUP2lrkZm20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNjA0MTcwOTI2MzNaFw0yNjA0MjAxODU4MzNaMDMxMTAvBgNV BAMTKEU3MEQ4NDIyN0RDMzczQjQ2OTEzNTE3OTNDMTIzQUFBM0ZCMUI5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD55H8bevRyFf698uY1VLW0hD1/ A9F3FTVA5jckt5ZBwNHwju76gC2OUzu44FeqnHV5TG9s2nEtTM8hCkUiuJ57DmSi tAsqF0afaayLzdzhhAVX4EIcgSj7ukEorCpVWj7XNLD8rCqNasdU9BnSCCXQyiaT nL8sTyc4ikOj6Xk+5PzSGbnu89xJcLjDbXJlDF2plN/QMXulbqTNdvDJihkzwTpb ivfNBZxINBhj4cUniY2CScHIFL781ZLkWe8Itg4Vi57EKLTmdPmRDHnJAFRBP0Ya SUserGo3uJLEhWEvnn+CHZH+1UeG4Sao+wEytxsiIuukVZiQ+LTTrfk+HSALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5w2EIn3Dc7RpE1F5PBI6qj+xuUcwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKu56vd2beBD59YzSNe9a/6A0Qiwt7C7hU22 BNb+oE2O2xyklgxZEBGtvJDhi18pYGcCz0HT7WMnyH5TAc0+9Xo0QOv83tPRZ9BJ Xng0JoNyRGfm/lTIq99xDfJmyhmL/Nk+NzT2Jb+Xl0UcUHXCWqTXTuZ1uLeJDUba kgXL6X4mRvNsCJ7CVmCnNa7Xo+pN9I9+O9tM8HMuddW1tT70R19hJ+s54/wAoWzf Dx8Sily64LCsPn7f1CeYWyTONsHc9jkeEB+ocnfZM/5UVzkelIYirjG6J0TX0M2d NJE10MjVE4oqQnbLXe5y0tKUvKHYEAG1Mf47z05QrXh++L7jbjU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:18 2026 by rpki-client