$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: ma+vCrbe6Eyfle6hVYcpsQQ56qfuyX/FnWwiTdbZ9pk= Subject key identifier: 3C:6B:30:7E:AE:0E:68:68:60:BF:CF:6B:71:0D:FE:52:7B:7F:A4:95 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 51D7BDB6EE6C9F8B60892B95E6B66BB58CACD73B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 0220 Signing time: Thu 16 Apr 2026 02:21:40 +0000 Manifest this update: Thu 16 Apr 2026 02:16:40 +0000 Manifest next update: Sun 19 Apr 2026 12:16:40 +0000 Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: am2JtfSwVA0X+LL+QCxIbx88L22v5K0NqFcPZwkQ+XU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d7:bd:b6:ee:6c:9f:8b:60:89:2b:95:e6:b6:6b:b5:8c:ac:d7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Apr 16 02:16:40 2026 GMT Not After : Apr 19 12:16:40 2026 GMT Subject: CN=3C6B307EAE0E686860BFCF6B710DFE527B7FA495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:21:32:be:92:02:4c:93:78:a4:63:17:7c: 02:02:b4:29:0a:7d:0a:91:e9:3b:86:de:bb:7e:8b: 8b:3c:40:b9:7a:8f:24:49:03:e5:ff:07:00:d0:54: f6:b6:c9:ff:33:69:17:8b:fc:95:cd:eb:d9:b1:07: fb:67:21:26:2b:76:90:92:40:63:05:f8:15:28:5d: 8a:03:8f:57:17:44:8a:d8:19:e8:76:16:4e:0a:9e: a6:2e:fc:29:b5:69:57:03:3e:6f:bc:05:fe:b2:18: 63:e2:ab:34:bd:a8:18:f1:a5:96:12:8b:e8:db:a1: 08:34:b5:46:f9:fd:7d:35:bd:d7:86:1a:f8:35:00: 31:13:7c:ff:0f:e9:5c:6e:10:a0:45:d8:4d:36:90: c6:fa:c4:8a:de:b8:06:e7:0d:c4:ce:ea:be:07:02: 12:b3:cb:c3:13:66:82:0b:19:15:5d:fe:20:3c:d4: eb:77:e6:e6:f3:98:55:93:25:b1:22:4f:70:25:63: dc:00:2c:f9:20:e9:50:20:34:d6:0f:cf:1e:8f:0c: d4:8a:8d:b0:82:97:25:2d:f4:8e:52:fe:60:15:1d: 2f:e8:78:d4:f3:92:a5:ef:2f:0a:72:b7:80:a8:d6: 8b:bb:ef:63:ac:93:aa:15:32:25:39:63:fd:40:f1: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:30:7E:AE:0E:68:68:60:BF:CF:6B:71:0D:FE:52:7B:7F:A4:95 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:b5:f6:6b:de:8a:de:30:b4:d8:20:68:f9:d5:09:e4:f4:50: c3:1d:c2:3b:e4:ab:6f:21:10:2d:47:a4:ab:62:df:9b:1f:d1: d7:ae:e0:5b:04:d9:07:27:0f:db:8d:5b:6b:e6:3a:34:54:4c: e3:0c:6b:fc:b9:d0:79:6e:08:24:f7:ab:fd:d5:25:e3:59:f0: e7:b1:c8:b3:a4:f9:da:1e:0b:aa:3f:57:75:ad:93:da:59:c0: b3:ef:e9:4f:79:56:85:1d:6b:28:86:40:5b:8d:ab:63:96:bb: 9f:c7:27:ee:67:7f:93:36:a3:97:ec:39:bc:13:7e:99:af:00: 73:9b:0e:a3:53:bf:e8:6a:fc:92:e1:f0:92:1f:a1:a5:a1:d8: 11:90:b8:65:77:5f:f3:44:66:dc:76:f5:61:47:35:f7:65:3f: 93:49:63:e5:09:13:cf:f4:13:20:42:ff:e6:ac:2b:bd:12:13: 53:f7:39:a2:b5:0f:dd:9b:22:f5:bf:8b:22:4f:36:12:5a:ca: 61:ae:ee:48:c7:d4:23:e0:6a:c8:5b:64:c0:5c:4c:d6:e1:ed: f8:01:8f:4d:15:fd:4d:1c:20:ce:50:b0:45:dd:da:df:7a:b9: 01:cc:08:f3:ff:d0:68:bc:f4:15:e0:79:7d:28:f5:e3:10:7a: 82:bf:a0:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUde9tu5sn4tgiSuV5rZrtYys1zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjA0MTYwMjE2NDBaFw0yNjA0MTkxMjE2NDBaMDMxMTAvBgNV BAMTKDNDNkIzMDdFQUUwRTY4Njg2MEJGQ0Y2QjcxMERGRTUyN0I3RkE0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aCEyvpICTJN4pGMXfAICtCkK fQqR6TuG3rt+i4s8QLl6jyRJA+X/BwDQVPa2yf8zaReL/JXN69mxB/tnISYrdpCS QGMF+BUoXYoDj1cXRIrYGeh2Fk4KnqYu/Cm1aVcDPm+8Bf6yGGPiqzS9qBjxpZYS i+jboQg0tUb5/X01vdeGGvg1ADETfP8P6VxuEKBF2E02kMb6xIreuAbnDcTO6r4H AhKzy8MTZoILGRVd/iA81Ot35ubzmFWTJbEiT3AlY9wALPkg6VAgNNYPzx6PDNSK jbCClyUt9I5S/mAVHS/oeNTzkqXvLwpyt4Co1ou772Osk6oVMiU5Y/1A8RghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGswfq4OaGhgv89rcQ3+Unt/pJUwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMq19mveit4wtNggaPnVCeT0UMMdwjvkq28h EC1HpKti35sf0deu4FsE2QcnD9uNW2vmOjRUTOMMa/y50HluCCT3q/3VJeNZ8Oex yLOk+doeC6o/V3Wtk9pZwLPv6U95VoUdayiGQFuNq2OWu5/HJ+5nf5M2o5fsObwT fpmvAHObDqNTv+hq/JLh8JIfoaWh2BGQuGV3X/NEZtx29WFHNfdlP5NJY+UJE8/0 EyBC/+asK70SE1P3OaK1D92bIvW/iyJPNhJaymGu7kjH1CPgashbZMBcTNbh7fgB j00V/U0cIM5QsEXd2t96uQHMCPP/0Gi89BXgeX0o9eMQeoK/oHI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:00 2026 by rpki-client