$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: sk5Ek3pd4FvOPVOg8XNefgbUtXxCX09YwmsME78hh4U= Subject key identifier: 42:7D:E6:16:62:83:03:05:1E:56:9B:CB:C1:1D:6C:F3:B9:A0:4B:AC Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 2F4B7CC9FF32F005E0853F2F76DCBA98344FEA89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 011E Signing time: Sun 19 Apr 2026 20:31:42 +0000 Manifest this update: Sun 19 Apr 2026 20:26:42 +0000 Manifest next update: Thu 23 Apr 2026 04:45:42 +0000 Files and hashes: 1: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: FsCPDDe5mqMg/pptECmNl96xefH29F4Gw9p7m+YiWbo=) 2: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 4: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4b:7c:c9:ff:32:f0:05:e0:85:3f:2f:76:dc:ba:98:34:4f:ea:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Apr 19 20:26:42 2026 GMT Not After : Apr 23 04:45:42 2026 GMT Subject: CN=427DE616628303051E569BCBC11D6CF3B9A04BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:62:1f:97:d1:fa:52:b3:e1:4a:8b:b6:ff: 61:12:9a:6c:2c:91:a5:6b:29:f1:b1:f9:59:6a:73: 6a:e1:5f:69:2b:a2:e7:0b:9b:d0:51:bc:ba:37:9b: 99:13:d2:59:3d:c8:a6:34:4e:c7:f8:70:2a:ef:6d: 48:24:ae:12:93:1c:e0:0a:bc:64:48:ea:e9:54:20: ef:a6:32:21:06:48:cd:4f:c5:68:b0:ed:4f:76:ef: 4d:a5:2b:4e:97:bc:b7:63:03:b6:20:f8:ee:e7:0f: 33:80:b8:c6:14:9a:03:82:7a:80:c8:76:5f:7f:67: df:d6:61:59:95:d5:d4:58:39:d3:f0:54:d3:0d:d3: c7:16:d3:67:79:44:4d:c6:8f:e8:0d:2b:d4:69:7f: 7d:f8:4c:58:0c:11:ce:8a:f7:7c:1a:c9:5e:1d:0e: c0:24:8d:6c:1c:41:35:24:4b:24:c3:e4:a9:27:5b: 51:5a:76:e7:4d:f0:cd:db:63:10:1f:6a:b8:af:64: 08:d8:5a:9d:da:92:ee:44:3f:72:88:cc:0c:4c:ec: da:b8:86:cc:9e:32:8e:48:85:18:35:78:5f:95:54: 73:1f:4c:99:1d:b8:4a:73:bd:94:17:f4:51:bc:cb: c2:67:d6:3f:b2:64:9e:54:6e:bb:93:1c:a4:f2:dc: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7D:E6:16:62:83:03:05:1E:56:9B:CB:C1:1D:6C:F3:B9:A0:4B:AC X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:25:93:af:b5:e4:3a:45:02:6d:24:14:c5:3d:b0:28:11:c9: 19:8f:1c:6e:3d:b6:69:a5:b9:b8:f4:1d:74:ee:3e:54:24:ad: 60:f9:2b:72:d1:d1:17:25:1c:47:83:13:98:64:4a:57:1e:93: 79:ea:31:3c:72:c7:d1:b8:f5:86:00:1f:30:ee:2c:e6:1a:b5: 4d:3a:c5:e9:33:a1:4f:5e:da:f6:a4:44:11:eb:42:a5:1e:ed: 0b:82:5b:e2:60:57:81:6d:d8:09:2c:67:d6:4c:88:e2:29:2d: 61:ed:11:9f:3b:df:3c:06:55:8f:e5:27:18:81:48:32:0f:3a: 8e:cc:8f:2a:a5:4e:6a:f3:09:c8:71:2e:65:b0:0b:0a:d0:70: bd:60:14:12:43:95:57:21:0f:a5:91:30:4f:cb:d9:a2:2b:df: 2a:b6:5b:6b:d1:28:13:50:ed:2d:4c:cb:3f:7d:85:e0:fe:ed: b9:bc:41:80:fd:ae:c9:db:ae:08:13:1d:7e:50:15:ba:67:cf: 24:20:fa:b3:bd:81:80:42:c3:8f:74:3c:18:f5:9c:b4:98:48: 1d:b3:7a:49:98:7f:f7:d8:47:a3:d9:79:83:89:5f:e9:77:d0: 3e:16:f0:d0:cd:38:ed:bc:30:df:08:2f:95:ff:b8:4f:3b:e0: f2:83:c6:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0t8yf8y8AXghT8vdty6mDRP6okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNjA0MTkyMDI2NDJaFw0yNjA0MjMwNDQ1NDJaMDMxMTAvBgNV BAMTKDQyN0RFNjE2NjI4MzAzMDUxRTU2OUJDQkMxMUQ2Q0YzQjlBMDRCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsWIfl9H6UrPhSou2/2ESmmws kaVrKfGx+Vlqc2rhX2kroucLm9BRvLo3m5kT0lk9yKY0Tsf4cCrvbUgkrhKTHOAK vGRI6ulUIO+mMiEGSM1PxWiw7U92702lK06XvLdjA7Yg+O7nDzOAuMYUmgOCeoDI dl9/Z9/WYVmV1dRYOdPwVNMN08cW02d5RE3Gj+gNK9Rpf334TFgMEc6K93wayV4d DsAkjWwcQTUkSyTD5KknW1FadudN8M3bYxAfarivZAjYWp3aku5EP3KIzAxM7Nq4 hsyeMo5IhRg1eF+VVHMfTJkduEpzvZQX9FG8y8Jn1j+yZJ5UbruTHKTy3DU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQn3mFmKDAwUeVpvLwR1s87mgS6wwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUlk6+15DpFAm0kFMU9sCgRyRmPHG49tmml ubj0HXTuPlQkrWD5K3LR0RclHEeDE5hkSlcek3nqMTxyx9G49YYAHzDuLOYatU06 xekzoU9e2vakRBHrQqUe7QuCW+JgV4Ft2AksZ9ZMiOIpLWHtEZ873zwGVY/lJxiB SDIPOo7MjyqlTmrzCchxLmWwCwrQcL1gFBJDlVchD6WRME/L2aIr3yq2W2vRKBNQ 7S1Myz99heD+7bm8QYD9rsnbrggTHX5QFbpnzyQg+rO9gYBCw490PBj1nLSYSB2z ekmYf/fYR6PZeYOJX+l30D4W8NDNOO28MN8IL5X/uE874PKDxtM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:18 2026 by rpki-client