$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: C0Agi6N7385hpkUD+Aj9lYwAtzk+Dw2nI8ulQsExkVI= Subject key identifier: 13:4B:7B:0B:5C:F0:75:1B:7D:83:9D:EA:6A:AE:B8:56:E7:FD:66:29 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 29F6076002CA9235D2D9506503EF546B450F32A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 028A Signing time: Fri 17 Apr 2026 00:41:01 +0000 Manifest this update: Fri 17 Apr 2026 00:36:01 +0000 Manifest next update: Mon 20 Apr 2026 02:59:01 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: /dJ5B7AWMFxsEqjQN9jWvDIC85rEOBUMDFNmOlCUGlI=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f6:07:60:02:ca:92:35:d2:d9:50:65:03:ef:54:6b:45:0f:32:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Apr 17 00:36:01 2026 GMT Not After : Apr 20 02:59:01 2026 GMT Subject: CN=134B7B0B5CF0751B7D839DEA6AAEB856E7FD6629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:4e:68:e4:01:8b:e1:e3:4f:30:97:3e:74: 00:25:65:c5:d7:6d:e1:50:9c:ea:15:7d:fd:bd:49: 79:89:c4:85:f8:3a:d7:76:e0:68:3d:1c:79:72:01: af:9b:8c:92:7a:e6:d4:c4:6b:ca:85:24:53:1f:9f: ba:db:14:55:ae:9a:db:2e:aa:65:62:e1:00:35:bb: b2:42:ea:2c:f4:14:02:45:fa:29:d6:9a:e5:44:41: 31:34:ed:17:b8:dd:8b:35:3f:49:07:76:9b:58:79: 4f:79:ae:19:0c:6f:75:7c:1f:c6:dc:a8:ec:91:68: dd:23:d9:2f:9c:7b:3e:51:11:ae:83:3d:4f:e2:e6: 0d:74:c0:a5:16:1b:29:4c:ef:90:76:48:9e:52:f4: fa:35:62:0d:80:e9:da:0b:28:7b:78:04:5f:de:e1: 5d:f3:5d:75:4e:67:05:3c:b8:33:fd:24:08:5d:5f: 1a:22:34:d1:32:56:68:97:58:22:4a:50:46:0c:cd: 2a:9b:fc:5e:26:58:f1:ee:f4:bd:8e:f5:88:99:2f: fd:4a:62:57:db:3e:9c:f4:44:92:b7:4e:bd:6c:69: 48:36:6b:2f:fb:f1:69:3c:b6:5d:a5:a6:3b:05:6b: 89:8e:a9:a2:93:f0:e4:d3:0d:3f:54:0f:24:a6:9c: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:7B:0B:5C:F0:75:1B:7D:83:9D:EA:6A:AE:B8:56:E7:FD:66:29 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:36:02:d2:7c:2d:35:6a:88:f7:09:4c:db:a0:22:04:1e:72: 40:ca:5b:2a:5d:01:bb:b9:1b:46:93:2e:a8:f3:3b:3d:68:01: e3:1b:78:ad:ae:d6:5b:01:37:bd:c3:46:32:ef:fd:25:54:38: 81:07:72:c0:b4:b5:5a:e6:04:31:ea:14:35:e1:5f:6f:a5:59: 94:11:6b:eb:e2:e2:ed:91:cb:ad:40:03:19:74:8d:4f:e7:76: 27:ff:82:be:c2:eb:33:4f:4c:14:aa:e1:2f:96:be:57:db:6b: 7c:1b:cb:5c:4f:94:4d:0a:0e:33:10:0a:55:4c:cc:25:09:32: eb:98:84:62:64:25:c5:b9:4b:f9:20:8c:a0:ca:cd:dc:50:60: ad:43:21:38:df:be:18:ec:f4:a1:53:e8:2e:d3:67:54:4e:da: e3:37:a6:1e:6d:a0:f2:d1:1d:45:54:fd:34:59:d2:1d:cf:a9: c2:0c:3e:08:dd:e0:e9:d1:5c:b5:1b:1d:7d:8d:0b:eb:e5:93: 83:88:7f:0d:59:b7:55:cf:72:05:6e:7f:d8:cf:b5:fe:47:a9: 7a:8f:52:68:07:61:f8:79:0a:b0:83:b5:c0:96:e3:79:f9:16: cf:6f:73:79:df:c0:9e:0e:5b:1f:f6:7b:05:b9:a3:8e:05:67: 07:34:39:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfYHYALKkjXS2VBlA+9Ua0UPMqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNjA0MTcwMDM2MDFaFw0yNjA0MjAwMjU5MDFaMDMxMTAvBgNV BAMTKDEzNEI3QjBCNUNGMDc1MUI3RDgzOURFQTZBQUVCODU2RTdGRDY2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzk5o5AGL4eNPMJc+dAAlZcXX beFQnOoVff29SXmJxIX4Otd24Gg9HHlyAa+bjJJ65tTEa8qFJFMfn7rbFFWumtsu qmVi4QA1u7JC6iz0FAJF+inWmuVEQTE07Re43Ys1P0kHdptYeU95rhkMb3V8H8bc qOyRaN0j2S+cez5REa6DPU/i5g10wKUWGylM75B2SJ5S9Po1Yg2A6doLKHt4BF/e 4V3zXXVOZwU8uDP9JAhdXxoiNNEyVmiXWCJKUEYMzSqb/F4mWPHu9L2O9YiZL/1K YlfbPpz0RJK3Tr1saUg2ay/78Wk8tl2lpjsFa4mOqaKT8OTTDT9UDySmnBO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0t7C1zwdRt9g53qaq64Vuf9ZikwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg2AtJ8LTVqiPcJTNugIgQeckDKWypdAbu5 G0aTLqjzOz1oAeMbeK2u1lsBN73DRjLv/SVUOIEHcsC0tVrmBDHqFDXhX2+lWZQR a+vi4u2Ry61AAxl0jU/ndif/gr7C6zNPTBSq4S+Wvlfba3wby1xPlE0KDjMQClVM zCUJMuuYhGJkJcW5S/kgjKDKzdxQYK1DITjfvhjs9KFT6C7TZ1RO2uM3ph5toPLR HUVU/TRZ0h3PqcIMPgjd4OnRXLUbHX2NC+vlk4OIfw1Zt1XPcgVuf9jPtf5HqXqP UmgHYfh5CrCDtcCW43n5Fs9vc3nfwJ4OWx/2ewW5o44FZwc0OdQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:57 2026 by rpki-client