$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: VqQtsS+qJV1b4n7Nf0PKl5WecV/bnBEMlYLDsXyps3E= Subject key identifier: D1:88:F4:B2:38:37:73:48:22:3F:55:9C:1B:20:D3:A7:F9:85:57:1B Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 7D19F0CCD25B2F4BA86D75222D8B4A9F4F6A9D8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 04B4 Signing time: Sun 19 Apr 2026 05:10:51 +0000 Manifest this update: Sun 19 Apr 2026 05:05:51 +0000 Manifest next update: Wed 22 Apr 2026 11:05:51 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: 2v9oUZ9uGqYprVgwZP4jIiKCQFxExa0f8mzdsXFZISU=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:19:f0:cc:d2:5b:2f:4b:a8:6d:75:22:2d:8b:4a:9f:4f:6a:9d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Apr 19 05:05:51 2026 GMT Not After : Apr 22 11:05:51 2026 GMT Subject: CN=D188F4B238377348223F559C1B20D3A7F985571B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:ee:de:c9:36:2e:e9:90:63:26:33:e7:5f: 38:2e:87:e8:b4:88:13:bd:b1:6b:80:d2:32:d1:2d: b7:2c:e4:2b:e5:08:7d:a2:0e:2c:21:c2:32:8b:36: 29:f7:52:18:15:cd:eb:b9:1c:5d:4c:9f:18:29:59: f8:4b:fe:6f:40:c6:63:c5:81:fe:4a:8a:a2:65:13: 9c:53:74:44:a9:7e:ae:20:55:13:1a:b6:1d:6f:d6: c3:23:1e:ef:7e:e3:fb:fc:26:24:57:c1:d4:e4:bc: 44:b6:be:26:aa:07:63:f7:e4:d8:fd:87:67:82:eb: 20:58:7e:9b:3a:dc:44:a8:54:25:92:39:37:c3:d5: 27:a3:e4:79:c4:49:c4:9c:5c:68:d8:38:34:b1:8a: 14:4b:26:e9:30:b0:e7:00:85:06:86:00:65:9d:c8: 5c:47:45:14:54:a3:61:11:3e:42:49:29:cc:1e:64: 4e:7a:63:5d:b0:5b:28:2b:1e:05:19:d2:c0:35:13: 8e:56:cd:1b:88:8c:bc:83:a1:e3:ef:bf:bf:97:74: 15:64:cb:57:63:88:3d:b9:0a:83:ba:c8:79:80:c9: b5:0e:69:95:d6:6e:6a:7f:88:57:90:37:48:f8:bf: c2:96:06:06:14:0d:bb:55:a7:db:6a:2d:7e:9f:8e: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:88:F4:B2:38:37:73:48:22:3F:55:9C:1B:20:D3:A7:F9:85:57:1B X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:48:6f:7f:ee:45:44:64:77:65:75:05:3b:f5:f4:3a:46:26: f4:5d:f9:5a:c5:17:47:eb:19:f1:4b:18:42:b8:19:36:ed:9e: 20:1f:09:4a:f1:d2:50:ee:06:ed:68:45:ec:2c:bb:4b:1d:b1: 67:84:c2:b8:53:33:d0:66:bd:2f:5c:bb:e3:58:d6:19:23:c1: b4:a4:92:76:8e:cd:50:32:34:47:44:31:f2:33:9a:25:e3:55: aa:9e:c3:e9:7d:8e:25:cd:01:f4:79:d3:6e:a8:e8:4f:fa:c9: 79:b8:e7:24:a3:2c:99:5e:b6:4e:50:8b:39:49:f8:a4:88:00: e6:7c:b8:3f:66:ea:0d:e8:50:3c:12:d0:ab:18:62:f7:f6:6b: e2:8e:e1:c9:e4:b3:16:5e:3c:9c:70:09:88:68:7b:ce:cd:1b: 8f:d3:e3:73:36:ec:47:58:48:3f:0e:4f:17:e7:0b:a7:bc:4d: 37:4b:5f:71:83:a8:54:f0:88:51:53:aa:a8:e9:c0:cb:47:33: 0d:cd:da:80:4b:4b:59:73:37:ae:4f:53:76:67:41:9d:5d:dd: 85:cc:9b:09:0a:45:3b:f4:c2:39:57:f2:b9:cd:6c:48:9d:9a: 05:be:61:95:3e:2e:d3:9b:a8:cd:5a:ff:97:3d:ae:a3:4a:27: b2:88:9f:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRnwzNJbL0uobXUiLYtKn09qnY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNjA0MTkwNTA1NTFaFw0yNjA0MjIxMTA1NTFaMDMxMTAvBgNV BAMTKEQxODhGNEIyMzgzNzczNDgyMjNGNTU5QzFCMjBEM0E3Rjk4NTU3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYe7eyTYu6ZBjJjPnXzguh+i0 iBO9sWuA0jLRLbcs5CvlCH2iDiwhwjKLNin3UhgVzeu5HF1MnxgpWfhL/m9AxmPF gf5KiqJlE5xTdESpfq4gVRMath1v1sMjHu9+4/v8JiRXwdTkvES2viaqB2P35Nj9 h2eC6yBYfps63ESoVCWSOTfD1Sej5HnEScScXGjYODSxihRLJukwsOcAhQaGAGWd yFxHRRRUo2ERPkJJKcweZE56Y12wWygrHgUZ0sA1E45WzRuIjLyDoePvv7+XdBVk y1djiD25CoO6yHmAybUOaZXWbmp/iFeQN0j4v8KWBgYUDbtVp9tqLX6fjoHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Yj0sjg3c0giP1WcGyDTp/mFVxswHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpIb3/uRURkd2V1BTv19DpGJvRd+VrFF0fr GfFLGEK4GTbtniAfCUrx0lDuBu1oRewsu0sdsWeEwrhTM9BmvS9cu+NY1hkjwbSk knaOzVAyNEdEMfIzmiXjVaqew+l9jiXNAfR5026o6E/6yXm45ySjLJletk5QizlJ +KSIAOZ8uD9m6g3oUDwS0KsYYvf2a+KO4cnksxZePJxwCYhoe87NG4/T43M27EdY SD8OTxfnC6e8TTdLX3GDqFTwiFFTqqjpwMtHMw3N2oBLS1lzN65PU3ZnQZ1d3YXM mwkKRTv0wjlX8rnNbEidmgW+YZU+LtObqM1a/5c9rqNKJ7KIn0c= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:12 2026 by rpki-client