$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: Q5lYRbD7PTW+gYgVZhRGKO4KZ5KR+YizyCa3fkS4L58= Subject key identifier: 84:10:54:4F:03:20:5D:FE:86:2C:F2:70:CE:00:2E:3D:4F:B5:7C:FB Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 50902AC128B738648449FB2C9A0B4C71A5920B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0202 Signing time: Sun 19 Apr 2026 03:31:08 +0000 Manifest this update: Sun 19 Apr 2026 03:26:08 +0000 Manifest next update: Wed 22 Apr 2026 09:30:08 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: LC+EAT1UQ1iSm/vDUpydI5k8qHi7dXVa8k0otnd/Ouk=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: BXD0wRHHvZ7tvUsCrEkeYNeQx/wQOvq3rapVAJZzAJs=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: N89QBdgbynlTPf9e92O0WSzi8E87JnEMSvR4tVBmXXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:90:2a:c1:28:b7:38:64:84:49:fb:2c:9a:0b:4c:71:a5:92:0b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Apr 19 03:26:08 2026 GMT Not After : Apr 22 09:30:08 2026 GMT Subject: CN=8410544F03205DFE862CF270CE002E3D4FB57CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:7b:f1:3f:af:82:bc:69:29:fe:22:8e:3b: 9f:95:e5:10:31:44:82:7a:7e:f6:9a:00:31:24:49: 4e:6c:37:75:08:67:2c:1d:cf:ad:3b:7e:82:5a:2c: d3:2f:86:82:cc:f7:60:02:b0:31:70:50:a0:e9:55: c5:b5:65:5e:cd:a2:4d:d4:47:71:17:24:8c:40:9d: 35:72:0c:8d:cd:ed:a4:e9:70:d2:62:6b:ee:44:18: 4e:f0:84:3d:59:e2:4f:b3:d0:30:69:de:cc:90:47: ad:49:d4:21:1d:09:04:65:d6:88:f2:62:12:20:a2: 5e:11:ed:24:b7:d8:9c:84:7e:af:77:b5:c1:31:c3: 3a:bc:a8:6a:24:31:b0:5d:42:a4:c9:a6:ee:17:ab: e2:9b:f5:87:bc:ea:51:b8:d3:98:69:f3:48:a7:1c: 99:a3:f5:e9:c4:db:e0:ef:ce:8d:de:06:c8:9e:e2: 4d:6e:3c:0b:71:a3:77:c4:d7:85:cf:a6:46:39:65: 46:63:6d:a6:35:11:fe:b9:b4:0d:6c:9e:8b:bc:ad: 7c:a5:55:b3:1f:ca:e5:35:49:5a:c0:c9:8a:0d:28: 83:18:70:a0:c9:ab:dd:4c:2c:43:d5:80:d6:82:79: 0a:54:49:de:a4:f5:41:95:6d:c7:e8:20:7f:40:f3: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:54:4F:03:20:5D:FE:86:2C:F2:70:CE:00:2E:3D:4F:B5:7C:FB X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:df:b5:00:11:c7:b4:bc:4c:0e:ea:14:13:8d:f5:6d:b3:01: f7:70:c2:e5:52:29:3a:f9:86:9a:eb:69:0e:28:77:1e:63:5d: 7f:fa:de:20:e4:df:87:bd:38:9c:4a:1d:d5:d8:ce:0c:98:6c: 73:e1:63:af:26:a0:23:1d:a0:51:53:35:94:db:14:97:d8:27: bf:13:12:86:13:56:31:aa:99:f2:b6:d7:86:e6:34:08:fd:1d: 7b:ab:3c:c5:fc:5e:fb:5a:27:87:af:b5:fc:04:3e:f9:bc:84: 75:87:3e:ce:6e:10:06:68:50:67:3f:dc:bc:69:ab:3f:8d:6f: 45:58:82:15:3d:62:cf:91:75:e1:80:3e:64:f7:e5:fd:c2:35: 51:23:83:ec:33:32:fe:b0:41:38:bf:26:3e:f7:79:76:5d:4a: 20:8b:21:3a:7b:3e:38:fe:3e:23:e8:00:c5:08:c2:17:db:13: f8:bd:7b:1e:3d:72:eb:3e:2e:f4:90:c3:5f:ae:a9:b6:56:8c: f1:a4:ef:74:7c:54:f5:79:15:c2:ef:4e:bc:19:e7:54:6b:2c: e5:62:e4:ed:79:65:d6:1c:8f:f3:c2:83:de:3c:a5:34:18:03: 1c:33:83:b3:a0:78:fb:a8:20:7b:a7:4a:6b:c1:a5:26:3b:c5: 72:c6:57:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJAqwSi3OGSESfssmgtMcaWSC18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNjA0MTkwMzI2MDhaFw0yNjA0MjIwOTMwMDhaMDMxMTAvBgNV BAMTKDg0MTA1NDRGMDMyMDVERkU4NjJDRjI3MENFMDAyRTNENEZCNTdDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiHvxP6+CvGkp/iKOO5+V5RAx RIJ6fvaaADEkSU5sN3UIZywdz607foJaLNMvhoLM92ACsDFwUKDpVcW1ZV7Nok3U R3EXJIxAnTVyDI3N7aTpcNJia+5EGE7whD1Z4k+z0DBp3syQR61J1CEdCQRl1ojy YhIgol4R7SS32JyEfq93tcExwzq8qGokMbBdQqTJpu4Xq+Kb9Ye86lG405hp80in HJmj9enE2+Dvzo3eBsie4k1uPAtxo3fE14XPpkY5ZUZjbaY1Ef65tA1snou8rXyl VbMfyuU1SVrAyYoNKIMYcKDJq91MLEPVgNaCeQpUSd6k9UGVbcfoIH9A87E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBBUTwMgXf6GLPJwzgAuPU+1fPswHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLftQARx7S8TA7qFBON9W2zAfdwwuVSKTr5 hprraQ4odx5jXX/63iDk34e9OJxKHdXYzgyYbHPhY68moCMdoFFTNZTbFJfYJ78T EoYTVjGqmfK214bmNAj9HXurPMX8XvtaJ4evtfwEPvm8hHWHPs5uEAZoUGc/3Lxp qz+Nb0VYghU9Ys+RdeGAPmT35f3CNVEjg+wzMv6wQTi/Jj73eXZdSiCLITp7Pjj+ PiPoAMUIwhfbE/i9ex49cus+LvSQw1+uqbZWjPGk73R8VPV5FcLvTrwZ51RrLOVi 5O15ZdYcj/PCg948pTQYAxwzg7OgePuoIHunSmvBpSY7xXLGVzI= -----END CERTIFICATE-----Generated at Sun Apr 19 11:00:08 2026 by rpki-client