$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: Eb0s4Q1Q8WBvxx1vONi7nWX6/J51sz9kDE9XaP8RfXM= Subject key identifier: 9B:D3:AC:DA:C8:2F:1C:53:DF:55:6D:DA:AE:6B:79:E6:A9:D6:77:F0 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 7004B6951984C4E1C20FDD52F911A4C197540713 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01F4 Signing time: Sat 04 Apr 2026 14:52:07 +0000 Manifest this update: Sat 04 Apr 2026 14:47:07 +0000 Manifest next update: Wed 08 Apr 2026 01:22:07 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: mFejQ+rZMYWI2e2oK1mVjUKVpb9d3Kj3eFkk7uGq9z8=) 2: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: 2DUvdtUdde+A/KOhGtMnMWEqb4ZBoi2M1q6pkGC/iHc=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 1puyNHEGNNhGWrQg/vX5HkRvqQmry57OCK++TTBuetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 21:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:b6:95:19:84:c4:e1:c2:0f:dd:52:f9:11:a4:c1:97:54:07:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Apr 4 14:47:07 2026 GMT Not After : Apr 8 01:22:07 2026 GMT Subject: CN=9BD3ACDAC82F1C53DF556DDAAE6B79E6A9D677F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:ab:45:25:e8:cf:4f:c9:cf:31:a5:ae:18: 54:ec:4c:d9:67:55:75:af:8a:2b:8e:2d:91:ca:08: 51:8c:0f:e1:43:df:85:be:7b:ca:bc:ca:aa:44:c8: 51:5e:6c:04:f8:1d:59:53:34:9d:23:3b:60:0b:36: 01:50:b1:23:97:cb:15:d5:a6:c1:a6:ff:94:73:76: b2:d3:2e:50:c1:ba:aa:db:ee:7a:bf:98:57:a7:86: 09:de:b2:9d:a8:dd:a8:63:4a:e8:7f:22:d5:7f:ac: dd:54:93:3c:01:0b:22:a5:67:c6:e5:ce:d5:cc:11: 06:bc:0b:00:19:88:a8:4e:27:f9:c6:ec:62:d0:99: eb:1f:d3:40:98:50:c5:cc:f4:f5:f0:54:8f:2a:d0: 02:e7:57:b9:e6:2f:55:1b:3b:e6:f6:7f:59:66:74: 21:bd:76:d0:4e:9b:1d:bb:d1:30:db:3f:41:75:70: db:2d:6f:f5:eb:02:c9:1e:f6:6a:2d:d1:be:ba:e7: a3:a7:cc:d9:84:9c:ab:e1:d6:80:f4:dd:9c:af:10: dc:7a:b8:e5:3d:5a:ee:3b:5e:b0:cc:0d:d6:ce:8c: 4c:2c:3a:bd:6b:be:48:1b:4e:3b:fc:94:cf:e9:80: 44:b4:15:64:c1:88:4a:c9:d4:80:f2:13:0b:bb:2c: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:AC:DA:C8:2F:1C:53:DF:55:6D:DA:AE:6B:79:E6:A9:D6:77:F0 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:06:da:fd:3d:d4:c5:d5:f7:09:81:99:02:b5:56:66:75:00: cd:e4:ab:13:6f:e5:e9:83:6d:70:97:6b:c4:8a:97:1c:75:d6: 35:67:1c:af:30:29:f3:cf:5f:a5:d8:25:e3:0c:47:09:51:7f: a2:f3:6f:fd:ae:61:53:76:1e:18:41:fd:63:5f:b4:14:d7:2c: f5:c4:2d:9f:a4:20:7f:de:83:02:92:11:c1:ea:24:9a:2b:61: a1:73:99:e2:c9:58:9c:e7:50:b9:e7:c4:57:e2:64:3c:48:63: 08:43:8c:bf:91:01:4b:8e:f1:93:78:2c:0b:f3:0e:a1:fb:49: 60:1a:9c:89:38:e6:4e:dd:c2:b8:40:8e:49:ae:ee:f3:c7:d0: 0d:55:98:30:f3:3c:58:41:7e:f7:d6:bc:e5:03:74:7f:10:5b: 57:c7:b4:3d:71:b8:46:6d:0c:7c:77:0c:f5:3f:af:c8:f1:60: c2:6b:e7:d3:fe:42:50:12:b3:6a:64:4a:4c:0a:ba:7e:c5:53: 04:4d:08:a6:26:78:b7:c4:34:8c:c0:ce:cf:46:70:c1:e0:fc: 2f:bd:a5:f6:ba:96:aa:ef:d9:47:cf:bc:52:fe:75:41:ba:ec: 55:a0:7a:d8:8c:24:be:18:68:9a:df:7a:d0:a3:a1:79:7d:4a: c2:3a:4d:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAS2lRmExOHCD91S+RGkwZdUBxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNjA0MDQxNDQ3MDdaFw0yNjA0MDgwMTIyMDdaMDMxMTAvBgNV BAMTKDlCRDNBQ0RBQzgyRjFDNTNERjU1NkREQUFFNkI3OUU2QTlENjc3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXatFJejPT8nPMaWuGFTsTNln VXWviiuOLZHKCFGMD+FD34W+e8q8yqpEyFFebAT4HVlTNJ0jO2ALNgFQsSOXyxXV psGm/5RzdrLTLlDBuqrb7nq/mFenhgnesp2o3ahjSuh/ItV/rN1UkzwBCyKlZ8bl ztXMEQa8CwAZiKhOJ/nG7GLQmesf00CYUMXM9PXwVI8q0ALnV7nmL1UbO+b2f1lm dCG9dtBOmx270TDbP0F1cNstb/XrAske9mot0b6656OnzNmEnKvh1oD03ZyvENx6 uOU9Wu47XrDMDdbOjEwsOr1rvkgbTjv8lM/pgES0FWTBiErJ1IDyEwu7LOMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9Os2sgvHFPfVW3armt55qnWd/AwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4G2v091MXV9wmBmQK1VmZ1AM3kqxNv5emD bXCXa8SKlxx11jVnHK8wKfPPX6XYJeMMRwlRf6Lzb/2uYVN2HhhB/WNftBTXLPXE LZ+kIH/egwKSEcHqJJorYaFzmeLJWJznULnnxFfiZDxIYwhDjL+RAUuO8ZN4LAvz DqH7SWAanIk45k7dwrhAjkmu7vPH0A1VmDDzPFhBfvfWvOUDdH8QW1fHtD1xuEZt DHx3DPU/r8jxYMJr59P+QlASs2pkSkwKun7FUwRNCKYmeLfENIzAzs9GcMHg/C+9 pfa6lqrv2UfPvFL+dUG67FWgetiMJL4YaJrfetCjoXl9SsI6TWw= -----END CERTIFICATE-----Generated at Sun Apr 5 17:53:57 2026 by rpki-client