$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: CWqRTQLFRHfihC+cjXO6A06XFNompqpIHaSu8/K4B38= Subject key identifier: 80:D2:BC:B9:7D:E5:6F:19:29:1C:7E:08:16:40:5C:40:92:22:2F:78 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 789009FD899C776D6B45F8B29F0656DCCF841452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 0142 Signing time: Mon 20 Apr 2026 09:52:27 +0000 Manifest this update: Mon 20 Apr 2026 09:47:27 +0000 Manifest next update: Thu 23 Apr 2026 12:11:27 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: keCWY/HyA5TAQamwBAFQ0o5iuI4Y22LQjLkc+XtXxOI=) 2: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: ynrUYFMX2WQqBOOYyBPklFEPzwd1prDvOjCv/me+pIQ=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: VIqb9pZUOIk/h56HmOabKL1kmQSF75KeAohVGz1gmTo=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: Aa1CIAKAa9rniUhpuaF+1Qn3zV9sEB1p2m7o3WLv1qA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:09:fd:89:9c:77:6d:6b:45:f8:b2:9f:06:56:dc:cf:84:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Apr 20 09:47:27 2026 GMT Not After : Apr 23 12:11:27 2026 GMT Subject: CN=80D2BCB97DE56F19291C7E0816405C4092222F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:aa:9c:11:26:7d:b6:eb:93:95:24:e4:e4: 3f:0c:23:7f:d1:62:83:64:7f:58:98:e1:3d:30:56: c4:d8:3a:4d:8c:d0:e1:4e:73:9a:5c:bd:4f:95:83: 78:9c:76:8d:6f:a7:02:e2:13:d8:f1:4d:dc:ce:e1: fa:c5:32:37:81:a4:8f:a5:09:0a:d7:71:d5:3b:4a: 49:82:a0:50:b6:d9:0c:11:2e:aa:ca:db:7e:ff:3d: d1:96:4d:fd:3f:11:28:49:84:b6:68:72:86:31:c4: 19:2d:ea:47:a2:18:4e:cd:aa:03:62:c2:ab:a0:07: 1b:ab:f7:3b:a9:38:fe:82:6d:45:91:93:70:7a:00: 92:c9:85:99:c4:5d:78:5d:8b:8d:6a:65:2b:32:e4: 27:07:fd:68:a8:2a:f1:39:bb:49:5f:ea:a8:e9:4d: 46:1d:f2:cb:8f:df:c2:93:8a:3c:2d:10:0d:aa:4d: 9c:1a:4d:db:38:76:75:49:d1:b3:60:af:84:3f:74: e2:6a:d9:3d:71:d3:8a:99:77:5c:6a:23:0f:73:f0: 47:f1:90:99:be:97:d1:28:22:b7:7d:59:ac:9e:93: c1:20:d9:38:6c:67:ff:81:35:9c:4d:7f:85:c3:de: c5:54:e4:30:78:3a:75:e8:67:b0:86:4b:d4:01:e1: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:BC:B9:7D:E5:6F:19:29:1C:7E:08:16:40:5C:40:92:22:2F:78 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:14:43:eb:75:92:61:f4:bb:d5:7d:9a:82:2f:74:13:9b: 10:f4:87:dd:ee:95:44:0c:e2:90:d3:11:e5:ef:6f:e2:b5:36: 1b:b0:08:82:f3:bf:bb:ae:5d:31:2a:65:a5:08:4a:cc:a6:57: 85:96:3a:10:ff:35:20:e8:b4:03:c6:19:5b:9b:e8:91:a4:8c: 8b:3a:44:87:9a:9e:5c:45:c8:89:5f:97:31:3c:5d:ad:6a:90: fe:6b:9d:8c:ed:6a:1c:b0:b4:37:3f:f4:32:d8:3d:83:50:44: 13:ff:d7:76:87:e1:ed:ab:a7:94:68:a4:07:2d:f4:1b:7b:a2: 44:d0:5f:84:a0:4d:0a:f9:64:be:3d:e7:19:db:90:34:e1:f5: 52:3e:32:3d:e8:77:a2:54:b9:aa:65:45:c5:40:92:a7:3c:f2: ac:05:1d:a0:3c:58:0e:1d:fa:10:35:14:7f:ed:92:f8:0b:2f: 88:ae:fc:fa:32:df:01:f4:38:6f:fb:8c:81:00:04:9b:26:ae: 86:02:3e:03:92:c2:36:62:51:91:fe:06:c1:6d:25:3f:0b:1e: 9c:3a:1c:3b:56:36:41:60:4e:9f:63:b2:cd:e0:4f:5a:12:9f: 28:ac:60:14:5d:01:84:84:15:91:5f:76:03:d7:30:39:34:f3: a6:e7:f8:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJAJ/Ymcd21rRfiynwZW3M+EFFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjA0MjAwOTQ3MjdaFw0yNjA0MjMxMjExMjdaMDMxMTAvBgNV BAMTKDgwRDJCQ0I5N0RFNTZGMTkyOTFDN0UwODE2NDA1QzQwOTIyMjJGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMqqcESZ9tuuTlSTk5D8MI3/R YoNkf1iY4T0wVsTYOk2M0OFOc5pcvU+Vg3icdo1vpwLiE9jxTdzO4frFMjeBpI+l CQrXcdU7SkmCoFC22QwRLqrK237/PdGWTf0/EShJhLZocoYxxBkt6keiGE7NqgNi wqugBxur9zupOP6CbUWRk3B6AJLJhZnEXXhdi41qZSsy5CcH/WioKvE5u0lf6qjp TUYd8suP38KTijwtEA2qTZwaTds4dnVJ0bNgr4Q/dOJq2T1x04qZd1xqIw9z8Efx kJm+l9EoIrd9Wayek8Eg2ThsZ/+BNZxNf4XD3sVU5DB4OnXoZ7CGS9QB4e8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgNK8uX3lbxkpHH4IFkBcQJIiL3gwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsuFEPrdZJh9LvVfZqCL3QTmxD0h93ulUQM 4pDTEeXvb+K1NhuwCILzv7uuXTEqZaUISsymV4WWOhD/NSDotAPGGVub6JGkjIs6 RIeanlxFyIlflzE8Xa1qkP5rnYztahywtDc/9DLYPYNQRBP/13aH4e2rp5RopAct 9Bt7okTQX4SgTQr5ZL495xnbkDTh9VI+Mj3od6JUuaplRcVAkqc88qwFHaA8WA4d +hA1FH/tkvgLL4iu/Poy3wH0OG/7jIEABJsmroYCPgOSwjZiUZH+BsFtJT8LHpw6 HDtWNkFgTp9jss3gT1oSnyisYBRdAYSEFZFfdgPXMDk086bn+IE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:17 2026 by rpki-client