$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: zAwAhWQiFhwC+T2R6IvYEnD6Tkpy11/51BzEBPA0/LQ= Subject key identifier: E7:C4:A2:A7:2A:FD:53:77:53:3A:B3:38:D1:7F:D0:B9:0B:57:25:FA Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 5C2887B81E634F7FE2E5A4F261DEF2776F657585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 01E4 Signing time: Sun 19 Apr 2026 02:11:45 +0000 Manifest this update: Sun 19 Apr 2026 02:06:45 +0000 Manifest next update: Wed 22 Apr 2026 02:59:45 +0000 Files and hashes: 1: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: m4ViumcELnmTEOm1lC7IILmCKR0iORVCKRB1cr57nyM=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: beCtemM4s/SA3SfDRr9e13l9xGpis0BmdDGhxecgHkk=) 3: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: n7eWIcnUuPxT4uKWSwqzx/Xe+eF7FqVCQsseGr+M6EE=) 4: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: dP8kIpDP7okpX5JnaRmLzFVvH0tciUd4qyAgw5M5DdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:28:87:b8:1e:63:4f:7f:e2:e5:a4:f2:61:de:f2:77:6f:65:75:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Apr 19 02:06:45 2026 GMT Not After : Apr 22 02:59:45 2026 GMT Subject: CN=E7C4A2A72AFD5377533AB338D17FD0B90B5725FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:99:80:76:c5:2b:9f:8b:0d:85:85:70:5e: a7:58:88:05:c5:c8:3f:40:a5:dd:5a:f6:fb:7e:80: 68:6a:ec:94:00:42:32:ce:51:9a:c1:6b:a8:45:7d: ab:4c:d1:af:e3:5d:b1:e3:73:26:21:5f:0e:5c:03: 41:8e:40:1f:d8:59:c4:4b:7c:d2:f5:66:13:0b:54: e6:bf:9f:7e:5d:24:0c:41:e8:0c:45:59:71:91:f0: 7a:0b:09:ff:d3:84:1e:d1:56:ff:51:21:37:5a:12: 5c:1c:33:be:72:f3:b3:db:43:6e:e8:57:98:32:6e: c4:b5:1b:7d:03:e8:dc:99:b4:e7:72:35:ab:b2:3d: d0:f4:96:c9:85:84:7f:0d:9a:95:78:b4:7e:a0:14: 19:31:6f:b5:26:2a:3c:00:f3:f4:69:e8:a4:e1:9f: 22:e8:b1:db:75:a2:ef:d0:cb:a7:88:c0:9f:b9:36: bc:38:1d:55:02:a0:d4:0b:10:f0:80:dc:7b:0a:11: 82:a8:0f:f5:dc:1f:f5:c2:49:90:b2:86:a9:a9:1d: 3e:93:08:b6:17:dd:e3:5a:65:a0:84:13:8b:c2:12: 7d:37:5e:04:ec:c5:34:18:29:a0:ef:db:c4:b8:eb: b7:ac:00:3c:56:57:60:5a:55:72:25:df:aa:e0:0a: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C4:A2:A7:2A:FD:53:77:53:3A:B3:38:D1:7F:D0:B9:0B:57:25:FA X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:37:6f:d6:25:c9:b2:df:d2:25:f9:39:1c:d0:ae:87:5e: e7:04:2c:0c:b8:27:4b:aa:a0:e7:66:d5:9f:fc:75:0f:95:d4: b8:49:51:25:b9:c1:0c:c7:8f:94:de:9a:a2:f0:f8:5a:d4:ed: ce:66:0f:3a:e3:71:54:c6:ca:e8:be:7b:a0:84:43:c3:08:fe: b4:3d:da:ca:52:1a:6a:c5:97:ed:2f:29:69:2f:59:b4:98:ea: 61:0a:7c:a6:a4:79:68:64:77:00:01:d6:43:1c:b6:3d:f5:07: 52:77:fe:e0:59:15:45:b9:4f:a5:28:58:8c:63:9e:27:e2:c1: df:45:e1:8a:b1:e5:d1:26:79:e8:82:ef:05:9f:e7:02:af:c9: db:70:a5:8a:af:44:25:70:2e:a6:16:06:4f:4b:60:4f:a2:27: 8e:10:95:42:a4:f5:d3:d9:e7:c7:3d:c7:79:19:c9:a5:28:05: 5b:eb:3f:87:a8:aa:f7:63:54:74:c6:bb:fe:23:de:cd:c4:46: 7f:82:7a:57:64:66:61:96:9a:4a:33:22:ca:4b:4a:ea:71:ad: 6d:81:9a:20:be:23:6d:a8:f4:31:0b:e2:22:4f:d1:d8:64:f6: b9:ed:34:f2:a9:ed:4a:23:bc:ee:2f:e5:0e:bc:7f:b6:6d:95: 3b:8d:c3:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCiHuB5jT3/i5aTyYd7yd29ldYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNjA0MTkwMjA2NDVaFw0yNjA0MjIwMjU5NDVaMDMxMTAvBgNV BAMTKEU3QzRBMkE3MkFGRDUzNzc1MzNBQjMzOEQxN0ZEMEI5MEI1NzI1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiZmAdsUrn4sNhYVwXqdYiAXF yD9Apd1a9vt+gGhq7JQAQjLOUZrBa6hFfatM0a/jXbHjcyYhXw5cA0GOQB/YWcRL fNL1ZhMLVOa/n35dJAxB6AxFWXGR8HoLCf/ThB7RVv9RITdaElwcM75y87PbQ27o V5gybsS1G30D6NyZtOdyNauyPdD0lsmFhH8NmpV4tH6gFBkxb7UmKjwA8/Rp6KTh nyLosdt1ou/Qy6eIwJ+5Nrw4HVUCoNQLEPCA3HsKEYKoD/XcH/XCSZCyhqmpHT6T CLYX3eNaZaCEE4vCEn03XgTsxTQYKaDv28S467esADxWV2BaVXIl36rgCnVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58Sipyr9U3dTOrM40X/QuQtXJfowHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiVN2/WJcmy39Il+Tkc0K6HXucELAy4J0uq oOdm1Z/8dQ+V1LhJUSW5wQzHj5TemqLw+FrU7c5mDzrjcVTGyui+e6CEQ8MI/rQ9 2spSGmrFl+0vKWkvWbSY6mEKfKakeWhkdwAB1kMctj31B1J3/uBZFUW5T6UoWIxj nifiwd9F4Yqx5dEmeeiC7wWf5wKvydtwpYqvRCVwLqYWBk9LYE+iJ44QlUKk9dPZ 58c9x3kZyaUoBVvrP4eoqvdjVHTGu/4j3s3ERn+CeldkZmGWmkozIspLSupxrW2B miC+I22o9DEL4iJP0dhk9rntNPKp7UojvO4v5Q68f7ZtlTuNwwQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:37 2026 by rpki-client