$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: vQACBHrJMlgj1Mgj9hGMjuclKuWASxEtx3ilQDeV9xo= Subject key identifier: 8E:64:C8:09:19:53:AB:39:31:31:57:86:88:C5:63:1C:37:C2:AE:F3 Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 0A90AFB0088E471CB2F07DADAC36835F70C663B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: EA Signing time: Mon 20 Apr 2026 13:21:26 +0000 Manifest this update: Mon 20 Apr 2026 13:16:26 +0000 Manifest next update: Thu 23 Apr 2026 14:48:26 +0000 Files and hashes: 1: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: mYboWts0PeXT5JigE6LXFZtnJ/w4AhETRzJ0ucY2uQw=) 2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:af:b0:08:8e:47:1c:b2:f0:7d:ad:ac:36:83:5f:70:c6:63:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Apr 20 13:16:26 2026 GMT Not After : Apr 23 14:48:26 2026 GMT Subject: CN=8E64C8091953AB393131578688C5631C37C2AEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:91:de:49:8a:d4:80:73:87:6b:52:3c:0c: 97:20:6a:0a:7e:02:30:1a:9f:02:0c:e9:f1:10:55: 7e:5c:f9:df:16:06:7d:68:35:6c:d0:d0:fd:f2:4b: a7:e2:33:5e:65:3a:f2:c7:bd:9c:10:96:58:54:35: 7e:3b:d3:20:67:ec:ae:96:c9:f4:43:de:ce:4a:67: 6e:e9:38:58:07:b2:a9:c0:5f:1c:85:f4:09:24:09: 14:ab:e2:4d:1e:1f:29:9c:68:a6:59:d0:b0:72:54: 6c:47:c3:12:b7:d8:8e:de:67:4d:15:3e:bc:09:98: ee:9b:c1:c6:40:69:7b:20:1e:2c:ed:3d:b2:9c:9c: e7:f6:6d:08:92:a4:c5:ac:ec:07:5b:cb:03:75:ff: 7e:d7:f6:8d:b7:80:0f:68:76:15:c7:c7:75:a0:4a: 82:51:27:8f:54:04:10:20:8f:1a:1f:59:ef:a0:b1: e0:0c:a8:c8:a6:04:be:e0:be:54:40:07:a6:ca:b1: 95:6f:80:f8:2a:1c:c9:01:3d:17:3b:cc:5e:33:16: 29:13:3b:e2:f3:62:a8:e8:e4:00:b8:e0:73:96:da: c2:f7:a1:f9:33:e3:b4:bd:06:d5:a6:3d:01:38:35: 2a:95:0e:9b:25:a2:06:68:4e:36:f4:f1:48:aa:ae: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:C8:09:19:53:AB:39:31:31:57:86:88:C5:63:1C:37:C2:AE:F3 X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bd:9b:99:d3:50:d3:95:c9:12:89:01:76:e3:9b:0c:98:46: cb:99:15:17:4b:f5:40:04:65:c7:a0:64:d0:86:2f:3e:0c:e6: de:48:6e:2a:8a:95:2c:f3:ad:13:a1:ab:57:d1:63:c3:09:63: 1f:da:36:8e:79:19:6e:80:7a:fd:1f:34:be:64:d1:f3:ae:d7: 51:7c:bb:df:91:a3:36:75:b4:0c:01:dd:ad:a0:15:00:b7:61: 48:5a:27:de:7c:0a:da:56:0a:f4:c1:81:de:eb:4b:c7:66:83: 7c:52:2f:bf:b5:4a:66:f2:00:09:87:16:6a:bd:bb:7d:c2:04: 37:4b:58:68:53:9c:05:6a:b6:a4:34:58:75:f5:a8:4c:17:cc: d1:d8:a9:c3:e5:8d:05:d3:94:d1:47:d8:d8:43:73:65:36:05: 2c:b3:cb:e4:0a:76:14:e7:e0:45:11:83:80:d3:bc:27:6c:8a: 16:c8:b8:a5:57:91:2c:5f:4a:0d:62:50:cc:33:49:21:ca:f1: d0:7c:e1:89:9f:12:00:a6:68:5a:19:44:8f:db:b2:8a:07:3c: a9:93:1f:9b:db:46:2b:29:3f:56:71:4d:39:9d:a1:99:51:1d: 07:c6:75:af:49:87:dd:fb:5e:29:9d:3c:3f:23:f1:d3:17:41: 56:c7:41:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpCvsAiORxyy8H2trDaDX3DGY7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNjA0MjAxMzE2MjZaFw0yNjA0MjMxNDQ4MjZaMDMxMTAvBgNV BAMTKDhFNjRDODA5MTk1M0FCMzkzMTMxNTc4Njg4QzU2MzFDMzdDMkFFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEq5HeSYrUgHOHa1I8DJcgagp+ AjAanwIM6fEQVX5c+d8WBn1oNWzQ0P3yS6fiM15lOvLHvZwQllhUNX470yBn7K6W yfRD3s5KZ27pOFgHsqnAXxyF9AkkCRSr4k0eHymcaKZZ0LByVGxHwxK32I7eZ00V PrwJmO6bwcZAaXsgHiztPbKcnOf2bQiSpMWs7AdbywN1/37X9o23gA9odhXHx3Wg SoJRJ49UBBAgjxofWe+gseAMqMimBL7gvlRAB6bKsZVvgPgqHMkBPRc7zF4zFikT O+LzYqjo5AC44HOW2sL3ofkz47S9BtWmPQE4NSqVDpslogZoTjb08UiqrssHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmTICRlTqzkxMVeGiMVjHDfCrvMwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS9m5nTUNOVyRKJAXbjmwyYRsuZFRdL9UAE ZcegZNCGLz4M5t5IbiqKlSzzrROhq1fRY8MJYx/aNo55GW6Aev0fNL5k0fOu11F8 u9+RozZ1tAwB3a2gFQC3YUhaJ958CtpWCvTBgd7rS8dmg3xSL7+1SmbyAAmHFmq9 u33CBDdLWGhTnAVqtqQ0WHX1qEwXzNHYqcPljQXTlNFH2NhDc2U2BSyzy+QKdhTn 4EURg4DTvCdsihbIuKVXkSxfSg1iUMwzSSHK8dB84YmfEgCmaFoZRI/bsooHPKmT H5vbRispP1ZxTTmdoZlRHQfGda9Jh937XimdPD8j8dMXQVbHQTU= -----END CERTIFICATE-----Generated at Wed Apr 22 10:27:54 2026 by rpki-client