$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: l2JNlHWGypQKdAA9r85zJkE30Eyd0tAMuYQN3XqhGcA= Subject key identifier: E2:55:BC:34:02:4E:07:78:4D:24:ED:37:B7:04:91:A7:AC:F5:D8:28 Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 17981157DFDF97652C89EC28293554B7004782AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 02C8 Signing time: Thu 16 Apr 2026 12:21:23 +0000 Manifest this update: Thu 16 Apr 2026 12:16:23 +0000 Manifest next update: Sun 19 Apr 2026 18:33:23 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: MmuXAKKjfDSx5uMJ92RoI47O3gaQ+ApBdube+8uCMpY=) 2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: rVp0PhtB9FxASug5zNb2eqzON5fEUYWqJvySPkXgHc8=) 3: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: T9YXzECK/+yPsc0MjXlDkJh+Di90dnJO766syYdRfEY=) 4: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:98:11:57:df:df:97:65:2c:89:ec:28:29:35:54:b7:00:47:82:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Apr 16 12:16:23 2026 GMT Not After : Apr 19 18:33:23 2026 GMT Subject: CN=E255BC34024E07784D24ED37B70491A7ACF5D828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:ee:44:d5:ab:cc:a0:ec:f3:81:3b:f5:6f: f0:42:41:84:79:b7:7c:b0:b8:8c:1a:27:16:80:cd: 40:6c:81:e0:09:30:79:9a:1b:a0:19:f3:1c:4c:08: 61:6c:b0:0a:0e:f8:e7:6b:3d:61:2b:b8:4c:7c:ce: 7e:bd:bb:66:18:f2:66:26:b5:c0:12:5d:36:93:91: 6e:02:14:82:fd:25:bf:c8:4f:06:ec:24:50:fa:18: 0a:99:05:18:4f:62:e5:04:ad:70:be:22:18:3c:bc: 44:0b:62:f6:93:e6:7d:46:25:a6:6f:12:79:81:11: 8b:8c:90:74:28:83:56:08:34:df:20:d7:9f:56:ed: b6:10:07:08:e7:b6:13:68:07:35:24:a4:e2:71:fe: 7b:5c:96:72:29:63:ed:d1:f2:69:0f:7b:cf:ff:e4: 95:3b:33:75:07:2f:d5:76:27:72:39:16:94:80:9d: 12:10:ed:f7:d0:8f:c5:6a:01:7b:15:aa:46:56:1a: f8:36:95:ad:a2:a3:26:fc:7e:ca:99:3e:1c:d1:5a: 3d:bd:a5:15:f2:e0:3c:65:e7:95:37:2b:77:20:68: 84:6a:ef:d5:69:38:bd:39:34:06:c1:04:49:57:fd: 26:fe:ba:f0:8d:8b:6f:9c:ba:45:ea:54:11:2d:28: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:55:BC:34:02:4E:07:78:4D:24:ED:37:B7:04:91:A7:AC:F5:D8:28 X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c3:06:e3:dc:22:a2:5a:ad:af:74:ac:49:f8:32:d9:d4:6c: 07:cb:a3:b5:75:0f:3b:79:a2:a6:ac:36:6c:e1:7c:3a:99:41: 3c:3e:1a:52:08:7c:47:09:09:98:40:29:75:eb:70:eb:6e:be: 18:d1:b7:ac:a0:8e:cb:83:bb:f5:b4:16:4e:01:9a:b1:66:35: d6:6a:7d:b0:a2:80:d9:ca:4b:9b:9a:6c:b5:9a:76:ba:51:56: 78:39:c4:81:e7:bf:82:01:cc:3d:ac:ed:75:72:9b:5d:61:80: 1f:de:66:04:6a:45:3f:7e:99:28:3d:d2:f4:8f:ea:20:b7:67: 3c:0a:14:05:37:40:7b:67:09:56:2a:15:51:58:3b:bd:52:41: 9f:34:ac:3f:14:e8:fc:8a:d5:6a:48:25:b2:a1:bc:36:7a:b9: ee:5e:18:fd:fd:aa:8b:b4:a8:b8:d4:be:37:95:77:6a:af:ff: 59:26:78:bd:61:db:60:8c:7c:a8:1b:95:bf:35:3c:9f:ab:67: 8c:ad:33:5f:53:cd:0a:74:6a:f9:f4:8f:4d:4f:cc:cc:c2:f3: e4:8a:ee:22:4f:f7:ba:2e:38:8c:ac:6c:01:07:84:74:1b:db: 60:c1:18:6e:85:f0:81:3d:3f:71:ac:07:42:26:e8:17:aa:78: f7:6e:c2:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5gRV9/fl2UsiewoKTVUtwBHgq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNjA0MTYxMjE2MjNaFw0yNjA0MTkxODMzMjNaMDMxMTAvBgNV BAMTKEUyNTVCQzM0MDI0RTA3Nzg0RDI0RUQzN0I3MDQ5MUE3QUNGNUQ4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsM+5E1avMoOzzgTv1b/BCQYR5 t3ywuIwaJxaAzUBsgeAJMHmaG6AZ8xxMCGFssAoO+OdrPWEruEx8zn69u2YY8mYm tcASXTaTkW4CFIL9Jb/ITwbsJFD6GAqZBRhPYuUErXC+Ihg8vEQLYvaT5n1GJaZv EnmBEYuMkHQog1YINN8g159W7bYQBwjnthNoBzUkpOJx/ntclnIpY+3R8mkPe8// 5JU7M3UHL9V2J3I5FpSAnRIQ7ffQj8VqAXsVqkZWGvg2la2ioyb8fsqZPhzRWj29 pRXy4Dxl55U3K3cgaIRq79VpOL05NAbBBElX/Sb+uvCNi2+cukXqVBEtKIytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lW8NAJOB3hNJO03twSRp6z12CgwHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHDBuPcIqJara90rEn4MtnUbAfLo7V1Dzt5 oqasNmzhfDqZQTw+GlIIfEcJCZhAKXXrcOtuvhjRt6ygjsuDu/W0Fk4BmrFmNdZq fbCigNnKS5uabLWadrpRVng5xIHnv4IBzD2s7XVym11hgB/eZgRqRT9+mSg90vSP 6iC3ZzwKFAU3QHtnCVYqFVFYO71SQZ80rD8U6PyK1WpIJbKhvDZ6ue5eGP39qou0 qLjUvjeVd2qv/1kmeL1h22CMfKgblb81PJ+rZ4ytM19TzQp0avn0j01PzMzC8+SK 7iJP97ouOIysbAEHhHQb22DBGG6F8IE9P3GsB0Im6BeqePduwjo= -----END CERTIFICATE-----Generated at Fri Apr 17 19:58:01 2026 by rpki-client