$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: MT+s3yd8b4O2gqXQFGaSbwWngcLFpjCvE3Obxc4hpPY= Subject key identifier: 42:0F:29:5C:DB:55:64:57:D0:DE:A8:47:E5:BE:1C:32:7B:C7:4A:50 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 4882C5B8B4B1F8C83A22DA4AD7B368310C6411C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: 0108 Signing time: Thu 16 Apr 2026 00:12:23 +0000 Manifest this update: Thu 16 Apr 2026 00:07:23 +0000 Manifest next update: Sun 19 Apr 2026 01:54:23 +0000 Files and hashes: 1: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) 2: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: bcjPtipGfvm4ciNmTnkMAF8rkDer+/a36Da0T3g3IO0=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:82:c5:b8:b4:b1:f8:c8:3a:22:da:4a:d7:b3:68:31:0c:64:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Apr 16 00:07:23 2026 GMT Not After : Apr 19 01:54:23 2026 GMT Subject: CN=420F295CDB556457D0DEA847E5BE1C327BC74A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a2:b6:39:14:6f:aa:f8:a9:62:34:6b:fe:63: d7:dd:df:38:09:51:c7:4d:d0:e9:16:39:11:08:d4: c0:66:50:3c:f4:b0:67:b3:03:1d:42:ce:15:1e:65: 20:21:e2:1b:ea:2b:15:6a:70:c0:f6:f7:c1:73:69: 8f:07:b4:87:7f:fa:5b:b1:e4:6f:e6:a1:51:ad:e6: c9:77:d9:cd:2e:f2:fe:8f:0e:29:a0:cc:cf:76:b6: 12:c3:32:06:45:42:48:8a:26:c9:42:48:94:39:64: 42:2b:bd:48:8f:7b:8c:da:7d:f6:33:cc:8f:b0:30: dc:69:ef:2a:00:b2:ff:40:f4:84:1c:39:33:8c:79: 14:55:45:73:9d:ce:5c:24:9f:f0:e3:49:55:8d:4e: 09:64:89:9a:28:2f:eb:6d:59:8f:91:f8:78:f6:0c: fa:1a:f1:df:39:f6:31:ee:fe:37:8f:19:22:93:3a: 49:ea:e2:9a:c0:d1:a0:db:fd:83:e4:13:42:ed:25: 95:a6:4d:f2:9d:b5:80:a9:e3:13:2b:6f:1b:0a:c7: cc:99:e1:47:8b:b6:8f:ef:a4:c0:f7:46:ac:6a:63: 4c:76:f3:b6:46:6b:c9:2d:7b:0b:4d:cf:7f:0a:7d: 26:1c:40:de:0e:fc:94:1c:01:41:2c:74:d1:39:0c: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:29:5C:DB:55:64:57:D0:DE:A8:47:E5:BE:1C:32:7B:C7:4A:50 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:42:21:e3:ec:dc:bd:13:35:9d:0c:1f:c4:3e:cb:a0:aa:b3: 68:fd:70:71:68:2f:13:da:7d:70:85:cb:08:32:f1:f6:82:9b: 95:ab:c5:3f:1e:4c:51:62:db:d9:8d:02:f0:5f:72:22:ce:be: c0:e2:7c:d2:a2:54:b8:42:f8:e1:dc:1f:4d:b2:63:a6:d3:f0: 13:97:50:5c:29:90:70:bc:26:c3:25:27:91:8a:7f:10:5e:87: 95:c2:3b:06:6d:83:d5:08:18:83:46:0e:e6:60:f0:18:89:df: ed:c9:94:9b:5f:49:23:71:9c:aa:16:1b:f8:e2:25:d6:cd:c3: d3:82:4b:2e:f0:9f:cf:11:e8:8d:0d:87:8d:a7:5e:7e:16:9c: 13:99:c6:fd:80:63:ed:c6:08:2d:3d:96:04:f1:80:39:a4:13: 37:92:aa:87:32:cf:ab:34:3e:ff:22:d0:c3:24:04:07:16:0e: a1:17:1e:59:a9:8b:39:4d:3d:72:08:ba:20:aa:23:92:f2:63: eb:cb:e2:99:28:f4:9c:99:68:9a:69:20:1f:c1:79:1d:2b:e1: 18:3f:a7:79:a9:51:65:7a:63:9a:75:da:55:2a:72:90:20:1b: 89:4b:22:66:c7:d9:14:aa:5d:53:0e:cb:ca:40:c7:af:05:58: 56:6d:de:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSILFuLSx+Mg6ItpK17NoMQxkEcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNjA0MTYwMDA3MjNaFw0yNjA0MTkwMTU0MjNaMDMxMTAvBgNV BAMTKDQyMEYyOTVDREI1NTY0NTdEMERFQTg0N0U1QkUxQzMyN0JDNzRBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtorY5FG+q+KliNGv+Y9fd3zgJ UcdN0OkWOREI1MBmUDz0sGezAx1CzhUeZSAh4hvqKxVqcMD298FzaY8HtId/+lux 5G/moVGt5sl32c0u8v6PDimgzM92thLDMgZFQkiKJslCSJQ5ZEIrvUiPe4zaffYz zI+wMNxp7yoAsv9A9IQcOTOMeRRVRXOdzlwkn/DjSVWNTglkiZooL+ttWY+R+Hj2 DPoa8d859jHu/jePGSKTOknq4prA0aDb/YPkE0LtJZWmTfKdtYCp4xMrbxsKx8yZ 4UeLto/vpMD3RqxqY0x287ZGa8ktewtNz38KfSYcQN4O/JQcAUEsdNE5DFXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg8pXNtVZFfQ3qhH5b4cMnvHSlAwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtCIePs3L0TNZ0MH8Q+y6Cqs2j9cHFoLxPa fXCFywgy8faCm5WrxT8eTFFi29mNAvBfciLOvsDifNKiVLhC+OHcH02yY6bT8BOX UFwpkHC8JsMlJ5GKfxBeh5XCOwZtg9UIGINGDuZg8BiJ3+3JlJtfSSNxnKoWG/ji JdbNw9OCSy7wn88R6I0Nh42nXn4WnBOZxv2AY+3GCC09lgTxgDmkEzeSqocyz6s0 Pv8i0MMkBAcWDqEXHlmpizlNPXIIuiCqI5LyY+vL4pko9JyZaJppIB/BeR0r4Rg/ p3mpUWV6Y5p12lUqcpAgG4lLImbH2RSqXVMOy8pAx68FWFZt3gM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:16 2026 by rpki-client