$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: tooUxcvJmM5JEUToAPH0Otkb0l81k0UI1v63rkBXn1I= Subject key identifier: CA:8F:E2:6A:58:A0:7A:27:55:87:FB:98:F8:FA:1D:30:EC:D2:75:8F Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 2DA9868615C5139A21FD032D2E8FD436D7107771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 023B Signing time: Fri 17 Apr 2026 03:01:08 +0000 Manifest this update: Fri 17 Apr 2026 02:56:08 +0000 Manifest next update: Mon 20 Apr 2026 14:39:08 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) 2: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: TLPrsQak9hQTGV25DRxFDtntgB7XmjkG5ELlcAXrfs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a9:86:86:15:c5:13:9a:21:fd:03:2d:2e:8f:d4:36:d7:10:77:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Apr 17 02:56:08 2026 GMT Not After : Apr 20 14:39:08 2026 GMT Subject: CN=CA8FE26A58A07A275587FB98F8FA1D30ECD2758F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:11:d2:98:04:9c:9b:11:f5:57:c8:8b:88: 69:4b:60:c3:c9:0a:3c:a8:ba:cd:ad:29:e1:ff:72: 26:e9:c9:63:a5:54:87:c0:00:f1:8f:98:94:40:81: d2:06:68:76:ca:a3:0c:4d:e0:21:d2:01:14:5d:7e: 40:f2:71:f3:fc:05:40:37:7c:76:cd:aa:48:28:99: 85:12:cb:c5:62:fb:76:2c:74:31:b7:b3:4e:6a:96: c0:86:6e:64:23:22:cb:0b:f8:f9:a8:74:bd:53:25: f5:3b:8c:80:b9:3a:3e:9c:4b:11:7d:61:ce:c2:e3: 57:29:d7:21:02:63:5d:95:6c:7f:cd:ed:a7:7a:92: 93:74:bd:23:45:b8:56:c3:a1:bb:f7:ca:3d:0c:ed: dd:0e:3e:ba:25:0a:9a:b4:be:f0:a8:73:73:93:cc: 41:bd:28:08:81:06:db:b2:d9:72:25:5a:7a:02:7a: 90:35:33:56:12:1d:ab:f3:cb:2c:3c:e3:51:00:fe: da:6d:1d:b8:c9:8e:a6:20:fc:36:e0:cb:85:c5:29: dd:06:e1:fa:c4:eb:23:96:cb:30:bf:33:8f:e2:cf: 05:ab:26:49:fb:22:30:3f:e9:ce:05:2e:bf:60:2b: 4d:13:42:7a:0e:fa:7e:a8:bf:cf:b0:58:a5:6f:c7: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:E2:6A:58:A0:7A:27:55:87:FB:98:F8:FA:1D:30:EC:D2:75:8F X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:87:51:2b:39:fa:f7:03:14:c7:2f:08:28:ff:96:f3:a3:a6: ab:18:53:20:88:19:a7:32:49:a6:84:7c:82:3a:0a:03:f3:55: f9:73:7f:83:b5:29:fa:6c:34:8e:45:60:c3:23:3e:98:f4:58: 5e:a6:66:92:a2:b4:e6:5e:92:b7:54:7c:8f:c6:87:bb:ea:ed: 2e:2b:92:a6:8a:c4:f9:ec:48:be:84:c2:04:02:04:0b:26:b5: 52:08:90:e7:02:93:3e:6b:41:40:4c:37:1a:65:22:9c:7b:0a: 8d:43:a9:ba:d9:9f:3c:13:a3:d5:7c:e4:08:fc:8e:47:1b:59: 83:7d:f8:fb:b5:05:04:32:dd:80:c9:74:06:5c:5c:e9:86:78: b5:44:3f:d8:0f:60:99:6e:e8:b9:37:00:1d:67:99:79:32:01: c6:7f:d3:56:68:b2:a9:9b:81:19:97:9c:31:77:00:4c:f8:f7: b4:57:1b:19:03:71:d2:24:03:77:f4:4f:e8:19:0d:39:cb:1c: b5:49:33:5e:92:3f:85:3e:a7:7d:a3:10:e0:7e:63:22:ee:e3: 2f:15:80:85:58:82:2b:b5:5c:4a:26:2f:93:40:bc:9d:89:27: 0c:8f:7a:2c:ef:db:ab:2f:51:db:2f:2d:7d:81:37:81:00:7b: 12:2e:7a:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULamGhhXFE5oh/QMtLo/UNtcQd3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNjA0MTcwMjU2MDhaFw0yNjA0MjAxNDM5MDhaMDMxMTAvBgNV BAMTKENBOEZFMjZBNThBMDdBMjc1NTg3RkI5OEY4RkExRDMwRUNEMjc1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfBHSmAScmxH1V8iLiGlLYMPJ Cjyous2tKeH/cibpyWOlVIfAAPGPmJRAgdIGaHbKowxN4CHSARRdfkDycfP8BUA3 fHbNqkgomYUSy8Vi+3YsdDG3s05qlsCGbmQjIssL+PmodL1TJfU7jIC5Oj6cSxF9 Yc7C41cp1yECY12VbH/N7ad6kpN0vSNFuFbDobv3yj0M7d0OProlCpq0vvCoc3OT zEG9KAiBBtuy2XIlWnoCepA1M1YSHavzyyw841EA/tptHbjJjqYg/Dbgy4XFKd0G 4frE6yOWyzC/M4/izwWrJkn7IjA/6c4FLr9gK00TQnoO+n6ov8+wWKVvx1YpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyo/ialigeidVh/uY+PodMOzSdY8wHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiHUSs5+vcDFMcvCCj/lvOjpqsYUyCIGacy SaaEfII6CgPzVflzf4O1KfpsNI5FYMMjPpj0WF6mZpKitOZekrdUfI/Gh7vq7S4r kqaKxPnsSL6EwgQCBAsmtVIIkOcCkz5rQUBMNxplIpx7Co1DqbrZnzwTo9V85Aj8 jkcbWYN9+Pu1BQQy3YDJdAZcXOmGeLVEP9gPYJlu6Lk3AB1nmXkyAcZ/01Zosqmb gRmXnDF3AEz497RXGxkDcdIkA3f0T+gZDTnLHLVJM16SP4U+p32jEOB+YyLu4y8V gIVYgiu1XEomL5NAvJ2JJwyPeizv26svUdsvLX2BN4EAexIuerA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:04 2026 by rpki-client