$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: 2BGpcVGb/W6o6WP+p6gwxT3oWPjUk/YeuUnCqg5jsaA= Subject key identifier: 53:E4:51:56:2D:1D:6E:71:37:7E:8C:1E:39:75:0D:85:5E:36:B6:54 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 58711C202511A78D86EE9641F8950CD38777A5B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: 011D Signing time: Tue 21 Apr 2026 17:20:54 +0000 Manifest this update: Tue 21 Apr 2026 17:15:54 +0000 Manifest next update: Fri 24 Apr 2026 18:59:54 +0000 Files and hashes: 1: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: jA7N45j76tbHgbeWrF7x/W6Vt7m5g8u03e0mwDWMeEE=) 2: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:71:1c:20:25:11:a7:8d:86:ee:96:41:f8:95:0c:d3:87:77:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Apr 21 17:15:54 2026 GMT Not After : Apr 24 18:59:54 2026 GMT Subject: CN=53E451562D1D6E71377E8C1E39750D855E36B654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:39:cb:39:de:8f:70:6e:34:49:a5:2a:48:79: 0b:b7:cc:56:87:7d:d9:8e:93:0f:ae:b4:c2:6a:a8: 54:c7:27:53:87:25:b0:25:62:aa:08:01:e5:c1:9d: 96:6b:08:61:40:79:da:29:03:60:40:0a:54:b9:d5: f3:00:ba:8d:ee:be:88:99:e7:72:3a:e7:77:72:08: 22:f3:cd:f1:94:f9:07:ef:a3:33:1a:60:fd:c3:16: 81:6a:d5:b7:35:b1:f8:76:d9:e2:b5:fa:b1:87:93: c5:90:2b:d5:d1:ad:23:8f:15:32:3a:45:5f:ed:fc: d7:5f:7b:3d:45:27:8b:9a:d2:bd:19:45:b6:cb:7c: 17:94:a4:e3:f3:cc:9c:bc:26:9c:31:91:b9:34:e2: 9a:32:cf:5b:2a:5a:2e:9d:91:00:c2:e8:c7:d9:d5: 60:5c:41:5c:1c:8b:f8:e6:51:ab:72:f6:74:73:e8: 59:25:ff:5d:2a:17:4f:7a:2c:c6:20:ff:c0:57:2e: 41:55:4e:6e:ea:ba:8c:6e:ad:75:89:ba:c2:8d:06: 31:73:4e:e1:cd:af:c9:dd:7e:d7:45:0a:1c:7e:55: e1:0a:91:9f:90:f8:b1:af:f5:3b:6f:65:4d:77:1d: 1f:dc:f5:aa:58:ac:bb:45:35:33:48:e1:1c:de:4f: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E4:51:56:2D:1D:6E:71:37:7E:8C:1E:39:75:0D:85:5E:36:B6:54 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0c:01:74:db:bd:c1:d1:33:b2:d8:54:67:1c:1b:63:20:8f: 68:f3:d3:8b:54:ae:de:68:75:fd:b0:65:eb:e4:eb:28:11:c8: a8:d7:5a:43:47:f6:80:d7:67:d7:92:56:40:e8:8c:d9:9c:d6: aa:da:7f:96:12:30:78:eb:50:44:e8:12:0f:17:f5:00:b7:89: aa:a2:bb:9b:1e:5f:a7:05:80:9d:70:10:86:dc:66:dd:8b:f9: d0:f1:63:8f:93:be:e7:bc:02:a3:4d:86:48:29:7b:8b:71:8a: 06:8a:b4:f4:cf:30:db:38:f7:26:a4:67:0b:78:cb:f3:5f:05: 91:d2:1d:f9:42:07:4a:5e:03:2f:bb:69:ce:79:17:18:41:5a: 26:1c:da:d1:de:95:ee:00:09:b9:d6:d8:fb:ef:4d:24:94:a9: 88:7d:d6:f7:40:50:9a:ea:c9:72:dc:ac:72:e4:09:2c:bc:57: 79:f9:26:3d:a9:25:4e:70:00:f0:10:35:c0:0c:f8:fe:76:fb: bc:82:db:e7:ca:86:70:aa:40:e6:02:ae:5e:2c:b6:68:4f:6c: f1:9d:71:91:69:e4:0b:71:9e:86:c7:35:b3:d1:d0:8f:2a:72: 99:7b:10:2c:3d:aa:a9:21:eb:8a:6f:28:a0:e9:a7:83:c5:6b: c1:59:2b:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHEcICURp42G7pZB+JUM04d3pbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNjA0MjExNzE1NTRaFw0yNjA0MjQxODU5NTRaMDMxMTAvBgNV BAMTKDUzRTQ1MTU2MkQxRDZFNzEzNzdFOEMxRTM5NzUwRDg1NUUzNkI2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOcs53o9wbjRJpSpIeQu3zFaH fdmOkw+utMJqqFTHJ1OHJbAlYqoIAeXBnZZrCGFAedopA2BAClS51fMAuo3uvoiZ 53I653dyCCLzzfGU+QfvozMaYP3DFoFq1bc1sfh22eK1+rGHk8WQK9XRrSOPFTI6 RV/t/Ndfez1FJ4ua0r0ZRbbLfBeUpOPzzJy8Jpwxkbk04poyz1sqWi6dkQDC6MfZ 1WBcQVwci/jmUaty9nRz6Fkl/10qF096LMYg/8BXLkFVTm7quoxurXWJusKNBjFz TuHNr8ndftdFChx+VeEKkZ+Q+LGv9TtvZU13HR/c9apYrLtFNTNI4RzeT5/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+RRVi0dbnE3foweOXUNhV42tlQwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkMAXTbvcHRM7LYVGccG2Mgj2jz04tUrt5o df2wZevk6ygRyKjXWkNH9oDXZ9eSVkDojNmc1qraf5YSMHjrUEToEg8X9QC3iaqi u5seX6cFgJ1wEIbcZt2L+dDxY4+Tvue8AqNNhkgpe4txigaKtPTPMNs49yakZwt4 y/NfBZHSHflCB0peAy+7ac55FxhBWiYc2tHele4ACbnW2PvvTSSUqYh91vdAUJrq yXLcrHLkCSy8V3n5Jj2pJU5wAPAQNcAM+P52+7yC2+fKhnCqQOYCrl4stmhPbPGd cZFp5AtxnobHNbPR0I8qcpl7ECw9qqkh64pvKKDpp4PFa8FZKys= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:56 2026 by rpki-client