$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: 9MvJSeME95dO3918wNsWB3p8agJNsblLIBbe5VjEATE= Subject key identifier: 9C:77:3F:15:B9:F7:37:F4:F6:05:AC:B2:6D:A8:C0:2F:25:30:5F:0B Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 6AD4C3E3690C0D8E3A28D454F0C7AE074571D784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 044D Signing time: Fri 17 Apr 2026 08:52:18 +0000 Manifest this update: Fri 17 Apr 2026 08:47:18 +0000 Manifest next update: Mon 20 Apr 2026 10:37:18 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: EMXeS91M8GymWV9vVZR2OqqJEu8W+rfcxN4W9dxSdb8=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d4:c3:e3:69:0c:0d:8e:3a:28:d4:54:f0:c7:ae:07:45:71:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Apr 17 08:47:18 2026 GMT Not After : Apr 20 10:37:18 2026 GMT Subject: CN=9C773F15B9F737F4F605ACB26DA8C02F25305F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:4a:75:05:82:f2:f1:2a:bf:77:68:6d:97: 04:f4:8d:3b:39:ba:5b:01:4b:bb:56:8e:01:a3:74: 00:b9:b8:ea:a7:0c:1f:bb:20:69:0f:db:d9:08:42: 3c:1b:48:f2:77:ec:bb:58:ad:42:67:51:32:f2:7c: e6:b7:15:03:61:28:2a:b2:83:48:31:58:55:30:a5: 24:c8:ca:fd:64:74:03:2d:8d:9f:a3:18:29:c1:1b: b1:5c:7b:f7:48:43:6b:d1:63:39:43:a7:3b:57:f5: 46:bd:66:46:a1:b9:1d:3b:74:1b:ad:5d:71:50:e9: 50:c0:e7:37:f3:81:25:72:82:41:62:84:98:5a:78: 44:46:81:56:59:31:3b:8d:15:1c:ae:02:b8:cf:f8: 89:7c:95:f2:4b:f7:ee:f1:8f:36:92:dd:3d:4c:6b: bd:40:5e:6e:50:33:3b:90:7b:70:4c:8b:87:e9:df: 08:f0:69:b6:06:35:f4:91:bf:89:bf:fe:96:63:88: 05:7f:ee:07:04:50:0d:29:75:07:34:4c:a0:87:07: f3:f3:47:9d:ff:cd:45:16:2a:2d:88:5a:4c:e7:4c: 71:c0:7a:0c:fd:65:c9:ad:90:79:d7:b0:10:ef:31: a8:3d:33:b9:dd:d9:9a:bd:da:3a:d4:b6:90:7a:39: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:3F:15:B9:F7:37:F4:F6:05:AC:B2:6D:A8:C0:2F:25:30:5F:0B X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:99:8d:60:0e:f9:11:a2:e3:ac:d2:9c:46:9e:1c:f0:77:5c: d4:6e:12:a4:39:ad:6c:27:04:ef:ea:07:b3:bc:a8:64:58:ce: 91:55:cf:da:8e:29:e6:bc:45:6d:4a:30:bb:64:d0:a3:15:e8: f0:df:3b:1f:97:e9:0e:3a:22:d7:f9:23:b6:c1:d1:c1:3b:e5: 3c:4f:06:f6:27:72:76:be:9a:21:1f:ad:01:a6:ba:11:aa:fb: 13:6a:df:14:ba:1d:63:c3:d0:ca:e0:e0:6c:52:25:24:42:f3: b4:23:f8:f7:fc:1c:53:94:35:6e:3f:86:39:9c:ac:68:87:7d: d7:3c:98:b2:14:b0:58:c7:3c:28:a1:79:28:c3:04:82:de:28: 3c:a5:4e:7e:4e:3f:3b:a3:eb:27:50:0e:2a:db:7e:92:07:f1: 97:16:4f:93:97:62:97:21:ab:47:28:ff:a8:b5:b3:a9:83:12: ab:11:ee:fe:01:57:44:13:1c:ed:5d:d0:d1:c2:1e:34:b9:5b: 71:00:92:ec:22:96:e9:9a:33:65:c2:fb:5c:a0:58:85:c1:e0: bf:99:15:8f:48:ab:fa:db:33:63:ce:5f:8f:ca:1b:d9:8d:33: 79:59:66:08:25:31:87:e0:6e:bd:8f:28:86:ed:11:a5:11:00: c3:95:fe:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatTD42kMDY46KNRU8MeuB0Vx14QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNjA0MTcwODQ3MThaFw0yNjA0MjAxMDM3MThaMDMxMTAvBgNV BAMTKDlDNzczRjE1QjlGNzM3RjRGNjA1QUNCMjZEQThDMDJGMjUzMDVGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2p0p1BYLy8Sq/d2htlwT0jTs5 ulsBS7tWjgGjdAC5uOqnDB+7IGkP29kIQjwbSPJ37LtYrUJnUTLyfOa3FQNhKCqy g0gxWFUwpSTIyv1kdAMtjZ+jGCnBG7Fce/dIQ2vRYzlDpztX9Ua9ZkahuR07dBut XXFQ6VDA5zfzgSVygkFihJhaeERGgVZZMTuNFRyuArjP+Il8lfJL9+7xjzaS3T1M a71AXm5QMzuQe3BMi4fp3wjwabYGNfSRv4m//pZjiAV/7gcEUA0pdQc0TKCHB/Pz R53/zUUWKi2IWkznTHHAegz9ZcmtkHnXsBDvMag9M7nd2Zq92jrUtpB6OTdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHc/Fbn3N/T2BayybajALyUwXwswHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmZjWAO+RGi46zSnEaeHPB3XNRuEqQ5rWwn BO/qB7O8qGRYzpFVz9qOKea8RW1KMLtk0KMV6PDfOx+X6Q46Itf5I7bB0cE75TxP BvYncna+miEfrQGmuhGq+xNq3xS6HWPD0Mrg4GxSJSRC87Qj+Pf8HFOUNW4/hjmc rGiHfdc8mLIUsFjHPCiheSjDBILeKDylTn5OPzuj6ydQDirbfpIH8ZcWT5OXYpch q0co/6i1s6mDEqsR7v4BV0QTHO1d0NHCHjS5W3EAkuwilumaM2XC+1ygWIXB4L+Z FY9Iq/rbM2POX4/KG9mNM3lZZgglMYfgbr2PKIbtEaURAMOV/jY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:45 2026 by rpki-client