$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json) Hash identifier: mAiiA24gUo4hUXGz051DGP3nHYJWQRdQlZrJrZJssZU= Subject key identifier: EA:78:C1:10:60:38:80:E7:C1:08:23:FC:03:53:48:23:12:C8:4B:77 Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 7938928A0C70CC2038F735F68307875A311B7A3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft Manifest number: 0197 Signing time: Thu 16 Apr 2026 23:32:44 +0000 Manifest this update: Thu 16 Apr 2026 23:27:44 +0000 Manifest next update: Mon 20 Apr 2026 10:16:44 +0000 Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: s9YO6rgovPFygVKDvxvdCQqCqWD4vEgIZoUoDmMCbHA=) 2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: fDXMTAj/S8oQs6LhTEcvx+m4yd6GabWyid1nJ3v2IOc=) 3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: GANBrhhf1CLfIUO/RP5eSUfs+eEIqqV2V9uQLhvhpgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:38:92:8a:0c:70:cc:20:38:f7:35:f6:83:07:87:5a:31:1b:7a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Apr 16 23:27:44 2026 GMT Not After : Apr 20 10:16:44 2026 GMT Subject: CN=EA78C110603880E7C10823FC0353482312C84B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:54:3c:d9:09:f5:b0:9f:f5:ff:b1:18:de: 16:b0:ee:0d:01:f4:65:c3:b1:23:3d:0d:10:05:79: ce:fa:36:a2:01:1c:f4:f0:37:9e:07:c2:80:3d:d7: 80:c4:06:5f:3a:4a:18:24:2f:08:e4:17:16:55:c2: ae:0f:8e:f1:13:ba:b8:c6:ae:09:9c:7e:d5:40:e1: 66:11:7e:ce:82:41:3f:09:1f:2e:1d:c6:eb:4f:38: bf:5f:bf:a5:b6:0f:32:07:c1:45:94:76:ff:e3:bd: c7:06:b4:b2:09:a8:56:c7:5a:36:c3:4f:c9:69:29: 2c:69:01:4c:12:01:c0:15:be:b9:59:5b:87:23:c5: 32:97:4e:45:81:02:fd:8e:b9:30:0f:1c:70:9a:5f: 18:c8:69:71:1a:27:51:57:af:ff:a4:da:a8:fe:59: bc:69:f9:aa:d6:cb:07:39:e9:4b:92:1d:30:eb:cf: b8:8b:cb:49:ae:01:f5:ba:3e:43:09:0b:f2:85:6b: 35:63:85:7b:51:19:cf:9e:2b:6a:50:1f:0b:bc:e6: c4:bf:6b:28:6a:e4:96:fb:a1:58:f8:01:38:18:77: 55:f3:70:41:71:5a:21:d2:21:16:e5:51:c3:7a:48: 60:05:ef:7f:27:69:90:28:8c:4d:f6:98:44:6a:52: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:78:C1:10:60:38:80:E7:C1:08:23:FC:03:53:48:23:12:C8:4B:77 X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:78:a1:49:37:61:d5:08:4b:2f:4a:fb:62:16:8a:c5:63:5f: 94:5c:ac:28:c3:54:2e:6e:92:88:c8:2d:22:9e:e6:c1:38:fa: d3:a3:f7:02:7f:e0:c1:19:8f:30:00:99:44:b8:cd:2d:35:5a: c5:aa:75:b9:87:54:f9:d3:42:3b:d4:97:62:ef:80:20:10:80: 27:b3:fe:72:6e:44:ba:76:be:08:8e:c0:56:5e:07:4f:e8:54: 90:7b:7e:20:ba:56:bd:5d:02:69:ff:ae:14:da:f0:13:cb:f6: c2:37:98:10:29:16:c5:3b:5d:70:5d:18:6f:a7:a9:ff:75:c1: f6:3d:2d:8c:21:df:57:1d:85:b8:19:8c:c5:ed:41:c4:e5:f9: 5f:23:db:c7:1d:6e:5a:da:4f:b1:ff:d2:d2:be:39:c7:4d:30: 14:b9:22:03:76:18:ba:45:49:85:3e:83:0e:c5:c9:f3:2e:b0: 37:d5:b1:31:0b:2e:c4:d8:2f:f3:c3:b1:ff:ac:c3:08:d3:ab: 63:27:d6:72:36:f6:b6:e3:5a:9e:ff:09:10:61:70:1c:28:3d: 9c:76:cd:77:b2:01:9a:a1:c6:eb:93:88:4a:b5:b1:93:9d:ff: 54:a5:81:f1:bb:d3:6a:1f:3d:c2:b0:e5:36:8f:c1:9c:fb:57: 09:15:35:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTiSigxwzCA49zX2gweHWjEbejowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNjA0MTYyMzI3NDRaFw0yNjA0MjAxMDE2NDRaMDMxMTAvBgNV BAMTKEVBNzhDMTEwNjAzODgwRTdDMTA4MjNGQzAzNTM0ODIzMTJDODRCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivlQ82Qn1sJ/1/7EY3haw7g0B 9GXDsSM9DRAFec76NqIBHPTwN54HwoA914DEBl86ShgkLwjkFxZVwq4PjvETurjG rgmcftVA4WYRfs6CQT8JHy4dxutPOL9fv6W2DzIHwUWUdv/jvccGtLIJqFbHWjbD T8lpKSxpAUwSAcAVvrlZW4cjxTKXTkWBAv2OuTAPHHCaXxjIaXEaJ1FXr/+k2qj+ Wbxp+arWywc56UuSHTDrz7iLy0muAfW6PkMJC/KFazVjhXtRGc+eK2pQHwu85sS/ ayhq5Jb7oVj4ATgYd1XzcEFxWiHSIRblUcN6SGAF738naZAojE32mERqUlqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6njBEGA4gOfBCCP8A1NIIxLIS3cwHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlF QUZGNDJBOTQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR4oUk3YdUISy9K+2IWisVjX5RcrCjDVC5u kojILSKe5sE4+tOj9wJ/4MEZjzAAmUS4zS01WsWqdbmHVPnTQjvUl2LvgCAQgCez /nJuRLp2vgiOwFZeB0/oVJB7fiC6Vr1dAmn/rhTa8BPL9sI3mBApFsU7XXBdGG+n qf91wfY9LYwh31cdhbgZjMXtQcTl+V8j28cdblraT7H/0tK+OcdNMBS5IgN2GLpF SYU+gw7FyfMusDfVsTELLsTYL/PDsf+swwjTq2Mn1nI29rbjWp7/CRBhcBwoPZx2 zXeyAZqhxuuTiEq1sZOd/1SlgfG702ofPcKw5TaPwZz7VwkVNfY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:10 2026 by rpki-client