$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: Im85OSUYjROLyDtoL5ueMI9ZEhX2/2dG4ILaEmHJAdI= Subject key identifier: 7D:70:7D:84:2C:22:A6:4A:18:59:CA:79:D8:8E:06:5D:AF:49:59:10 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 09CBF3EA4C6C597C853696F56080CE1D52A9B623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0157 Signing time: Mon 20 Apr 2026 06:00:42 +0000 Manifest this update: Mon 20 Apr 2026 05:55:42 +0000 Manifest next update: Thu 23 Apr 2026 16:13:42 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: aIHodB1nz1DhifH6iuPw3Hsr0XqaD481RG1+0C9lrxQ=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: JrpOhdiy+mBFESSL7rD9ukXYen5fXGnMpvaEHRT8ihU=) 3: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: qz1dXSjmkF1AA5Ei88d+aInM4zHfe9p4wjNpf+FYrqI=) 4: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: K7aTblJpIY8rvkLUe79rl4qif5Ul1nPvKHa7AKbJsdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cb:f3:ea:4c:6c:59:7c:85:36:96:f5:60:80:ce:1d:52:a9:b6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Apr 20 05:55:42 2026 GMT Not After : Apr 23 16:13:42 2026 GMT Subject: CN=7D707D842C22A64A1859CA79D88E065DAF495910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:0e:d4:12:df:64:fc:4e:3c:8a:ce:17:e1: 84:11:84:7d:ff:a9:d8:5c:e9:ea:cd:5c:25:89:a2: 1a:89:52:79:8c:27:9e:2e:52:7c:26:1d:14:a0:c6: 5a:8a:f0:af:e6:43:20:0b:e7:15:04:7b:45:29:b6: 94:dd:b3:b2:ae:9e:b0:3f:7a:25:02:d1:14:5c:b3: aa:d5:c9:f1:d9:25:55:79:79:00:37:18:88:21:8f: 04:05:36:1e:cd:98:37:a0:a7:c2:90:83:07:8c:bb: 12:d1:41:ec:86:eb:a2:6b:8f:cd:32:8d:57:48:53: 48:a4:6c:08:ac:fd:5c:1f:38:5e:4d:68:00:da:f1: d8:d7:ee:98:d0:ab:36:06:55:95:1d:83:2d:46:59: f5:83:60:ee:8c:e4:73:73:99:11:fd:ff:5c:35:d4: 94:2f:5e:59:ff:18:f5:55:b3:20:6d:76:15:16:98: 01:8c:96:a9:5b:91:81:f9:ba:3c:2c:37:0a:ca:b9: 48:aa:04:92:1f:43:f2:89:a6:70:d2:07:02:8f:5c: c1:cf:70:d0:e1:60:bb:ca:e3:92:d5:0a:de:b0:cc: 09:80:02:28:17:a3:9b:8b:27:77:bc:cc:22:23:08: 55:06:70:49:70:59:a9:fc:46:a0:f6:08:b9:b4:9f: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:70:7D:84:2C:22:A6:4A:18:59:CA:79:D8:8E:06:5D:AF:49:59:10 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:af:4c:d2:15:b3:2e:72:b1:39:83:f4:c1:3c:e1:86:b1:d9: e5:68:4f:6e:52:2e:b7:bb:50:2a:fa:15:1a:97:ca:ce:10:26: e9:1f:10:53:da:00:37:de:63:ec:8c:d1:45:41:d1:fc:28:de: 31:95:b8:87:e5:f1:77:24:e3:9a:96:78:7a:50:85:af:84:c0: e1:71:83:b0:37:1b:76:bb:59:15:c6:84:08:96:3a:3b:90:c9: fc:dc:30:04:7e:ab:d3:45:0c:d1:2b:7c:bf:52:94:dd:a7:72: a6:57:81:92:f8:9d:35:d6:e0:f2:ed:4e:42:65:f9:bb:70:ab: 9d:3b:5e:83:a5:1c:4e:d4:43:66:9e:c4:5e:12:30:11:fe:ac: 56:00:66:33:a8:ac:b6:90:c5:7e:52:c4:53:11:2d:70:f9:cf: 91:1d:3d:b1:9b:35:e6:05:38:f7:d4:84:a6:01:14:d8:f1:5f: c1:63:a1:e8:01:84:11:e4:99:40:5e:de:6e:7f:d0:69:ec:38: 20:79:37:c3:2f:a9:58:08:95:b7:52:34:1a:13:6a:9d:a0:9c: 79:44:fc:a7:5f:c3:5e:f2:41:c0:b5:18:8d:bd:51:c3:0b:bc: 0b:78:0c:07:ee:c2:35:5e:d0:f9:79:72:e1:2c:96:79:e7:91: 28:8d:37:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcvz6kxsWXyFNpb1YIDOHVKptiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjA0MjAwNTU1NDJaFw0yNjA0MjMxNjEzNDJaMDMxMTAvBgNV BAMTKDdENzA3RDg0MkMyMkE2NEExODU5Q0E3OUQ4OEUwNjVEQUY0OTU5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYw7UEt9k/E48is4X4YQRhH3/ qdhc6erNXCWJohqJUnmMJ54uUnwmHRSgxlqK8K/mQyAL5xUEe0UptpTds7KunrA/ eiUC0RRcs6rVyfHZJVV5eQA3GIghjwQFNh7NmDegp8KQgweMuxLRQeyG66Jrj80y jVdIU0ikbAis/VwfOF5NaADa8djX7pjQqzYGVZUdgy1GWfWDYO6M5HNzmRH9/1w1 1JQvXln/GPVVsyBtdhUWmAGMlqlbkYH5ujwsNwrKuUiqBJIfQ/KJpnDSBwKPXMHP cNDhYLvK45LVCt6wzAmAAigXo5uLJ3e8zCIjCFUGcElwWan8RqD2CLm0nyY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXB9hCwipkoYWcp52I4GXa9JWRAwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALavTNIVsy5ysTmD9ME84Yax2eVoT25SLre7 UCr6FRqXys4QJukfEFPaADfeY+yM0UVB0fwo3jGVuIfl8Xck45qWeHpQha+EwOFx g7A3G3a7WRXGhAiWOjuQyfzcMAR+q9NFDNErfL9SlN2ncqZXgZL4nTXW4PLtTkJl +btwq507XoOlHE7UQ2aexF4SMBH+rFYAZjOorLaQxX5SxFMRLXD5z5EdPbGbNeYF OPfUhKYBFNjxX8FjoegBhBHkmUBe3m5/0GnsOCB5N8MvqVgIlbdSNBoTap2gnHlE /Kdfw17yQcC1GI29UcMLvAt4DAfuwjVe0Pl5cuEslnnnkSiNN+s= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client