$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: K2R5Y44juvTpo9nvg8C+050am/RTwdJR3ZUmvsh8jsA= Subject key identifier: 6F:2B:BD:F2:68:CC:E4:E4:E8:74:06:08:DF:57:05:71:FE:0A:F9:E1 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 74ABBB95BACA998B5DCB4DD31DD40B194562AAF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 0567 Signing time: Sat 18 Apr 2026 10:11:53 +0000 Manifest this update: Sat 18 Apr 2026 10:06:53 +0000 Manifest next update: Tue 21 Apr 2026 13:21:53 +0000 Files and hashes: 1: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) 2: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: NTSjFiqKg24pMi2vsAUJScF+qH9BRwwqlON52nVXP7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ab:bb:95:ba:ca:99:8b:5d:cb:4d:d3:1d:d4:0b:19:45:62:aa:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Apr 18 10:06:53 2026 GMT Not After : Apr 21 13:21:53 2026 GMT Subject: CN=6F2BBDF268CCE4E4E8740608DF570571FE0AF9E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:17:bc:ef:2d:6a:58:63:c0:d6:ea:a0:ea: 71:59:f5:ac:8a:77:72:e4:e6:cf:76:89:66:cd:07: fc:a6:69:a5:2d:a7:eb:33:b4:0c:b2:88:ea:14:81: 6d:a3:5d:5c:b7:64:2c:43:fa:8e:47:39:c6:14:be: 7b:7f:7b:e3:8d:bb:63:23:c5:af:24:84:70:c2:f7: c8:bc:1f:35:f9:7a:af:0b:c6:14:ac:4e:e8:50:2f: b2:74:e5:71:11:96:81:8b:a8:43:30:3c:3a:f2:9e: c1:ab:e7:c0:f1:53:f1:ad:60:15:e7:be:95:17:43: 88:ee:bf:93:29:75:14:7d:75:6a:2d:eb:5a:5f:91: 6b:67:44:b1:c4:71:f9:69:ac:62:10:e1:03:3a:46: 3a:34:67:4f:27:6e:df:61:35:cc:b6:6a:60:55:2e: 8d:b9:3d:e7:99:df:02:c7:3a:0c:24:87:73:3a:f6: 05:fa:fd:65:b1:49:75:fc:12:6e:8b:f7:21:33:a6: 0f:b3:8f:97:03:3d:ba:e3:58:8d:7a:7a:4b:10:ed: c3:2a:c0:ed:24:7d:63:8c:cb:8e:10:27:12:34:c0: 36:7e:1e:64:70:46:28:4d:cc:6e:fd:3d:3e:ee:93: 11:75:93:48:93:90:5a:3b:b3:5a:b5:81:2e:69:bf: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:BD:F2:68:CC:E4:E4:E8:74:06:08:DF:57:05:71:FE:0A:F9:E1 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3f:b2:5a:4c:83:45:02:3d:4b:76:88:80:3a:56:e5:42:72: 94:9a:44:c2:0e:a2:a6:38:86:26:d4:83:43:9f:96:11:5c:33: 3a:2d:f8:68:1c:3e:b8:b9:66:c5:b4:81:f3:58:0c:ab:84:d7: 65:c4:69:f6:bd:e5:08:23:36:42:d0:f9:51:68:46:45:7a:fc: 5f:a9:b3:dd:4d:c8:bb:6e:06:83:88:9d:c8:c2:2e:e7:67:30: a5:a1:87:75:fa:b4:bf:39:fa:53:60:18:1f:ba:33:72:c5:59: c1:10:31:47:be:db:79:f7:51:49:5a:0d:8c:19:84:58:2f:15: 67:bd:01:03:ba:97:2a:20:b2:2a:9e:52:a6:73:55:96:63:ea: 2d:b4:ce:25:07:be:ce:03:4d:d7:4c:13:0b:9e:ff:5a:16:42: d5:b1:38:73:af:6c:b2:13:c0:d7:95:03:e9:61:2e:37:24:7f: 37:37:7d:43:66:37:b4:af:5a:70:7f:fe:31:80:fd:52:0b:40: e4:8d:81:93:ec:b6:00:87:41:af:d9:3b:c2:98:bd:67:22:62: 61:fb:ce:fe:82:b7:48:32:78:41:ef:f0:1e:69:f3:2c:87:a5: c0:2f:e9:61:b7:09:a5:5d:a0:44:10:0c:ef:3a:f2:00:2e:82: 71:28:6c:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKu7lbrKmYtdy03THdQLGUViqvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNjA0MTgxMDA2NTNaFw0yNjA0MjExMzIxNTNaMDMxMTAvBgNV BAMTKDZGMkJCREYyNjhDQ0U0RTRFODc0MDYwOERGNTcwNTcxRkUwQUY5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJURe87y1qWGPA1uqg6nFZ9ayK d3Lk5s92iWbNB/ymaaUtp+sztAyyiOoUgW2jXVy3ZCxD+o5HOcYUvnt/e+ONu2Mj xa8khHDC98i8HzX5eq8LxhSsTuhQL7J05XERloGLqEMwPDrynsGr58DxU/GtYBXn vpUXQ4juv5MpdRR9dWot61pfkWtnRLHEcflprGIQ4QM6Rjo0Z08nbt9hNcy2amBV Lo25PeeZ3wLHOgwkh3M69gX6/WWxSXX8Em6L9yEzpg+zj5cDPbrjWI16eksQ7cMq wO0kfWOMy44QJxI0wDZ+HmRwRihNzG79PT7ukxF1k0iTkFo7s1q1gS5pv3KvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbyu98mjM5OTodAYI31cFcf4K+eEwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo/slpMg0UCPUt2iIA6VuVCcpSaRMIOoqY4 hibUg0OflhFcMzot+GgcPri5ZsW0gfNYDKuE12XEafa95QgjNkLQ+VFoRkV6/F+p s91NyLtuBoOIncjCLudnMKWhh3X6tL85+lNgGB+6M3LFWcEQMUe+23n3UUlaDYwZ hFgvFWe9AQO6lyogsiqeUqZzVZZj6i20ziUHvs4DTddMEwue/1oWQtWxOHOvbLIT wNeVA+lhLjckfzc3fUNmN7SvWnB//jGA/VILQOSNgZPstgCHQa/ZO8KYvWciYmH7 zv6Ct0gyeEHv8B5p8yyHpcAv6WG3CaVdoEQQDO868gAugnEobKE= -----END CERTIFICATE-----Generated at Sun Apr 19 14:23:48 2026 by rpki-client