$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json) Hash identifier: BhDXUeZ5GctZDD7ck0q63HxZz7dzeJLgNfp9dzaA0FQ= Subject key identifier: D6:11:82:1B:2E:33:DF:BB:09:DA:73:E3:35:CE:56:7F:2B:B5:FF:2A Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Certificate serial: 263375A8604B3B1DF61E32160ECBE3EE09E7F795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft Manifest number: 0124 Signing time: Mon 20 Apr 2026 19:34:10 +0000 Manifest this update: Mon 20 Apr 2026 19:29:10 +0000 Manifest next update: Fri 24 Apr 2026 01:00:10 +0000 Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=) 2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: x2NFTfM4zgfoHt2ltuD1mmKZyy6n4+X7waNZS+/XRcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:33:75:a8:60:4b:3b:1d:f6:1e:32:16:0e:cb:e3:ee:09:e7:f7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Validity Not Before: Apr 20 19:29:10 2026 GMT Not After : Apr 24 01:00:10 2026 GMT Subject: CN=D611821B2E33DFBB09DA73E335CE567F2BB5FF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:7c:f0:17:15:74:97:10:ab:54:0b:66:fa: 43:e8:04:cb:99:48:73:39:7c:26:3d:0c:91:5f:64: 2f:33:e5:6f:bc:14:61:31:ce:8b:0f:6c:97:cb:6a: 59:9c:69:82:bf:0c:90:30:92:26:73:36:93:c3:8e: 0e:77:5a:9b:23:88:ff:96:aa:a7:49:35:21:e7:a8: 48:46:5f:bd:03:fe:c2:e8:40:6e:2f:e3:c7:e5:90: 29:dc:34:70:b2:38:87:8a:d2:80:2b:a6:df:6b:d8: 78:9b:48:42:bb:a7:aa:05:6d:53:21:90:cf:9e:fb: 28:4a:5f:64:9f:b0:a1:70:e4:f0:53:96:52:35:7f: 59:95:01:17:aa:f6:11:27:a2:01:bd:a5:62:7b:a4: 99:b5:3b:2e:e2:3b:8e:e6:c9:b5:28:55:51:16:47: 75:85:50:ad:1f:15:a3:3c:7d:30:62:5f:36:1c:ab: 3e:94:51:99:50:3c:aa:d9:91:ce:db:65:d4:41:1f: e1:86:6e:92:40:9c:59:d4:94:9a:7e:04:b0:45:5b: 8a:30:44:56:56:9c:19:26:e2:4c:61:c0:16:7f:19: 4e:a3:05:d5:e7:c0:49:b4:03:d5:76:f2:51:60:ce: 3a:b0:0e:2e:40:f0:1e:a9:56:5d:d3:b6:76:b1:9d: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:11:82:1B:2E:33:DF:BB:09:DA:73:E3:35:CE:56:7F:2B:B5:FF:2A X509v3 Authority Key Identifier: keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ae:87:eb:96:a9:f8:66:88:19:4e:99:f2:6e:6a:3d:4b:84: 74:f8:55:92:02:98:0e:09:7c:ca:ff:b5:55:30:11:a2:25:a6: f0:98:d2:09:05:a2:a0:a2:ce:8d:ef:5c:12:29:b7:f3:c4:e1: d2:62:b1:c2:08:e1:4d:b5:b3:3a:2e:cf:16:24:e0:b9:15:81: 44:50:6d:57:d7:b9:f5:fc:3b:4d:03:42:c3:8b:06:fa:a4:04: 26:0d:cd:e4:ba:6a:ac:42:01:f2:83:bb:2a:d3:21:4d:aa:54: 9d:bd:e7:1c:9d:4f:eb:4b:9f:75:3f:a9:9e:92:30:84:94:48: 24:dd:08:a8:2b:ad:b3:b4:81:d7:3a:eb:23:a8:24:1e:9f:82: d9:dc:24:84:c4:8e:18:4c:19:0e:23:ae:ec:7d:37:2a:c1:8e: dc:84:7e:28:64:5a:e7:67:68:20:ac:13:b1:1b:0e:27:8f:ae: ee:33:c7:60:a6:ea:fc:95:bb:35:65:ce:0e:72:1d:6d:dd:b3: ba:29:47:95:d7:29:19:b0:b1:c7:04:bf:4b:de:45:29:df:81: b8:32:09:c6:33:14:06:eb:c0:41:16:bb:46:14:49:91:33:8f: 85:9f:e4:8e:ea:49:fb:ef:f2:cc:cb:b4:dd:0f:e3:5c:22:2f: 45:b9:97:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjN1qGBLOx32HjIWDsvj7gnn95UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw MkUyQjdDMTAeFw0yNjA0MjAxOTI5MTBaFw0yNjA0MjQwMTAwMTBaMDMxMTAvBgNV BAMTKEQ2MTE4MjFCMkUzM0RGQkIwOURBNzNFMzM1Q0U1NjdGMkJCNUZGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+3zwFxV0lxCrVAtm+kPoBMuZ SHM5fCY9DJFfZC8z5W+8FGExzosPbJfLalmcaYK/DJAwkiZzNpPDjg53WpsjiP+W qqdJNSHnqEhGX70D/sLoQG4v48flkCncNHCyOIeK0oArpt9r2HibSEK7p6oFbVMh kM+e+yhKX2SfsKFw5PBTllI1f1mVAReq9hEnogG9pWJ7pJm1Oy7iO47mybUoVVEW R3WFUK0fFaM8fTBiXzYcqz6UUZlQPKrZkc7bZdRBH+GGbpJAnFnUlJp+BLBFW4ow RFZWnBkm4kxhwBZ/GU6jBdXnwEm0A9V28lFgzjqwDi5A8B6pVl3TtnaxnbapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1hGCGy4z37sJ2nPjNc5Wfyu1/yowHwYDVR0j BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy QjdDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUND ODYwMkUyQjdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKuh+uWqfhmiBlOmfJuaj1LhHT4VZICmA4J fMr/tVUwEaIlpvCY0gkFoqCizo3vXBIpt/PE4dJiscII4U21szouzxYk4LkVgURQ bVfXufX8O00DQsOLBvqkBCYNzeS6aqxCAfKDuyrTIU2qVJ295xydT+tLn3U/qZ6S MISUSCTdCKgrrbO0gdc66yOoJB6fgtncJITEjhhMGQ4jrux9NyrBjtyEfihkWudn aCCsE7EbDiePru4zx2Cm6vyVuzVlzg5yHW3ds7opR5XXKRmwsccEv0veRSnfgbgy CcYzFAbrwEEWu0YUSZEzj4Wf5I7qSfvv8szLtN0P41wiL0W5l5w= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:39 2026 by rpki-client