$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: yOiUsfZYJC3CBJyLIN0L9gCI8N7LgOp5P6d4gyEXg6A= Subject key identifier: 4D:73:62:48:F0:6A:47:9B:FE:9B:DD:FB:7F:91:99:98:2A:43:B8:B1 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 4ACAF63ABF9270CC89E5E8D141A18E897B704FAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 01C9 Signing time: Fri 17 Apr 2026 11:00:49 +0000 Manifest this update: Fri 17 Apr 2026 10:55:49 +0000 Manifest next update: Mon 20 Apr 2026 12:48:49 +0000 Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: g8T/58GOmLY5VdbDQUJGLCr1Eb6BTPkfewqEqyP60Z0=) 2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: zDvtoTAK1b9uzi4VGyYehW7OiNl68BtnCvY/L/aalZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:f6:3a:bf:92:70:cc:89:e5:e8:d1:41:a1:8e:89:7b:70:4f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Apr 17 10:55:49 2026 GMT Not After : Apr 20 12:48:49 2026 GMT Subject: CN=4D736248F06A479BFE9BDDFB7F9199982A43B8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:43:29:f4:e7:18:07:90:a8:9d:6c:9e:98: 05:ec:30:a4:aa:f1:65:5f:0c:84:2b:31:36:3f:63: c4:1d:18:ef:f3:9b:07:f4:9a:38:ab:2a:be:ca:0a: 6e:ab:64:b7:de:c6:e1:9b:a5:0c:83:81:27:37:f1: c7:b8:ed:e8:e1:91:05:53:1e:ac:3f:90:8e:53:69: 4b:f8:b0:39:f9:da:ed:2f:4e:00:5d:73:08:97:2a: 09:f2:58:3b:a0:5c:68:13:2b:cd:41:08:2b:13:3f: 21:27:86:04:00:fe:d6:c7:c4:ba:38:96:32:f1:dd: 19:fd:1d:9f:0c:4e:ee:b4:60:49:dd:5b:2c:79:15: f7:2a:ff:28:d2:a9:c6:b4:90:56:ec:11:c7:8f:6b: ce:ad:1c:56:64:2c:94:27:b1:6e:f9:50:71:3b:d9: 8d:6c:76:c7:f3:aa:02:25:ff:f5:a1:c6:7d:86:62: 52:55:10:0f:af:6e:51:26:9a:4c:5f:ec:ed:f4:15: 6b:18:8f:c3:b4:71:0b:55:48:73:de:ae:89:ac:24: 65:da:a9:b0:6b:fe:1d:67:6c:0e:75:34:55:d8:3b: 4d:9c:48:cb:84:ae:cf:79:57:36:45:2a:76:b1:f9: d7:fb:6e:d8:4c:bd:58:33:5a:e5:b7:db:40:17:c6: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:62:48:F0:6A:47:9B:FE:9B:DD:FB:7F:91:99:98:2A:43:B8:B1 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d2:73:e4:27:62:1b:4d:41:9a:80:13:fb:ce:a6:09:b1:c7: e3:c7:82:e0:cc:71:41:aa:07:5d:8d:93:97:03:6c:ff:df:4f: 9f:74:b3:23:0c:ad:97:d0:e1:74:54:17:bd:77:fa:7d:b5:ab: 5b:c9:cb:62:0f:54:4a:0e:55:b0:ae:5a:da:42:9f:ae:2d:c6: e4:6a:d1:45:bd:6c:50:54:ce:0a:7e:e0:a9:53:80:28:f9:7f: f1:90:30:a2:ec:cb:18:68:37:a1:30:f0:c2:5b:5a:b6:8b:04: ee:1e:b2:77:e8:ab:c6:32:0b:b6:49:d7:74:58:de:c7:11:19: b6:87:65:ee:e4:7e:73:6f:35:eb:1f:6c:fe:8d:0e:91:ef:af: 05:c1:cb:7b:26:47:1a:ec:ad:da:28:d3:55:ce:64:0c:38:db: e2:c1:79:91:d9:45:05:57:48:95:dd:e3:45:c0:e8:e2:5c:d3: 28:d1:d6:4f:4c:5f:96:eb:20:c8:8a:04:ef:72:25:3a:3b:52: 7c:41:0b:f1:82:a1:52:fc:69:0c:e2:45:a7:fb:6b:fc:ea:9d: c1:ec:41:8f:51:c3:2e:c0:83:55:58:bb:ee:f9:9a:07:7b:5d: f4:94:02:4b:0b:09:e6:6d:63:b8:d7:de:9a:d4:ff:3f:67:32: f4:ba:12:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsr2Or+ScMyJ5ejRQaGOiXtwT6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNjA0MTcxMDU1NDlaFw0yNjA0MjAxMjQ4NDlaMDMxMTAvBgNV BAMTKDRENzM2MjQ4RjA2QTQ3OUJGRTlCRERGQjdGOTE5OTk4MkE0M0I4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yEMp9OcYB5ConWyemAXsMKSq 8WVfDIQrMTY/Y8QdGO/zmwf0mjirKr7KCm6rZLfexuGbpQyDgSc38ce47ejhkQVT Hqw/kI5TaUv4sDn52u0vTgBdcwiXKgnyWDugXGgTK81BCCsTPyEnhgQA/tbHxLo4 ljLx3Rn9HZ8MTu60YEndWyx5Ffcq/yjSqca0kFbsEcePa86tHFZkLJQnsW75UHE7 2Y1sdsfzqgIl//Whxn2GYlJVEA+vblEmmkxf7O30FWsYj8O0cQtVSHPeromsJGXa qbBr/h1nbA51NFXYO02cSMuErs95VzZFKnax+df7bthMvVgzWuW320AXxgoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXNiSPBqR5v+m937f5GZmCpDuLEwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXSc+QnYhtNQZqAE/vOpgmxx+PHguDMcUGq B12Nk5cDbP/fT590syMMrZfQ4XRUF713+n21q1vJy2IPVEoOVbCuWtpCn64txuRq 0UW9bFBUzgp+4KlTgCj5f/GQMKLsyxhoN6Ew8MJbWraLBO4esnfoq8YyC7ZJ13RY 3scRGbaHZe7kfnNvNesfbP6NDpHvrwXBy3smRxrsrdoo01XOZAw42+LBeZHZRQVX SJXd40XA6OJc0yjR1k9MX5brIMiKBO9yJTo7UnxBC/GCoVL8aQziRaf7a/zqncHs QY9Rwy7Ag1VYu+75mgd7XfSUAksLCeZtY7jX3prU/z9nMvS6Elc= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:01 2026 by rpki-client