$ rpki-client -vvf repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft File: E380A055DD3B1E364672B9F0DD6852AE31F93906.mft (raw, json) Hash identifier: qaj8wg1XZw7S5U4Bd51TKpT6UJPht5wkOu9pFc/PPWE= Subject key identifier: D0:C4:73:11:B4:8B:75:9F:C5:0E:74:0F:74:7C:43:1C:C3:66:2F:C4 Authority key identifier: E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 Certificate issuer: /CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Certificate serial: 5F9408CD16E35A4866F29F6B96BE2BD061E61B7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft Manifest number: 012A Signing time: Mon 20 Apr 2026 15:31:25 +0000 Manifest this update: Mon 20 Apr 2026 15:26:25 +0000 Manifest next update: Fri 24 Apr 2026 02:07:25 +0000 Files and hashes: 1: E380A055DD3B1E364672B9F0DD6852AE31F93906.crl (hash: ij/rRLjYHKv5mU4zpobud3G8Huu80WezPPhUoH7alqM=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: KXi3wp4OORvn6TsBUOzJaVybFRf6vF3ckUcKEtOB1Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:94:08:cd:16:e3:5a:48:66:f2:9f:6b:96:be:2b:d0:61:e6:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Validity Not Before: Apr 20 15:26:25 2026 GMT Not After : Apr 24 02:07:25 2026 GMT Subject: CN=D0C47311B48B759FC50E740F747C431CC3662FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:1c:31:28:35:6d:7a:b0:8e:2f:f0:52:50: 9a:0e:f1:cc:e7:32:a2:83:a3:1a:37:6a:dd:7e:80: 18:fd:f6:14:41:81:7f:86:e6:5b:8e:a0:75:13:ac: 8e:3a:db:ac:9e:54:ba:cf:d9:fa:03:7f:27:e9:d8: 80:54:de:09:9c:63:32:65:6a:e6:80:64:54:fe:9a: dd:24:25:da:61:89:06:3a:ae:62:80:7d:1b:be:aa: 02:63:e9:02:01:1c:bb:76:ee:f9:dc:f6:a4:6b:2d: be:6c:e1:5d:5b:99:6f:ee:8d:e9:97:76:0b:c2:01: 21:e5:e0:41:7c:e7:6c:b7:41:7d:33:64:09:fa:0d: 01:b2:f1:d3:32:5f:2a:77:48:12:81:85:37:46:7d: 05:2f:a1:25:bd:1e:07:f5:79:96:81:2e:f3:31:b0: b4:fb:cf:93:8b:b0:6d:07:c5:ea:34:c6:4b:0c:6f: 5e:5a:44:cd:16:a9:97:0c:4c:17:2d:83:d7:5e:e4: 18:e9:07:93:e3:63:37:4a:b5:10:cb:a9:fc:3a:ee: 9b:47:62:58:e3:e2:1a:a9:09:4c:fd:4d:db:87:22: 9c:a6:bb:55:51:40:48:10:5a:32:91:69:d0:7b:15: 88:76:77:bd:7d:5a:4d:2b:53:de:22:df:31:2c:f5: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:73:11:B4:8B:75:9F:C5:0E:74:0F:74:7C:43:1C:C3:66:2F:C4 X509v3 Authority Key Identifier: keyid:E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:43:f5:11:5f:f4:1b:96:1b:1d:4e:9b:dc:2a:cd:8f:98:f8: 63:5d:16:22:34:fa:84:66:7f:c0:05:2c:5a:34:fc:6f:2f:60: b3:76:0e:68:0e:70:82:57:21:d1:70:ca:f3:ef:69:bf:d6:e5: fc:a0:f5:fd:f1:47:ee:a1:fe:05:fb:a3:4b:27:5c:7c:f2:6c: 02:74:dc:9b:95:53:c4:62:23:d7:86:84:cd:4c:30:11:3e:5a: 45:91:f7:05:d6:22:56:44:7b:aa:6d:e1:67:1b:78:48:89:74: c6:cb:ab:a5:48:46:72:19:6f:6a:fb:61:60:e6:cb:1b:8e:cb: 93:1e:2d:a9:48:0e:a6:7c:fc:26:5a:3c:89:76:24:44:c1:d9: 4e:95:9d:cb:19:7a:10:e3:a0:d2:f1:36:26:36:43:f4:ec:24: b6:e2:38:71:9e:77:eb:18:99:59:e7:be:25:2b:cc:bf:29:18: c1:00:2b:1c:d4:01:b8:d9:4e:33:e8:94:98:99:e2:50:97:69: 95:1f:38:3a:21:24:ad:60:02:cc:10:95:e7:88:64:22:01:25: 88:da:2f:1c:d5:a6:fe:54:73:3b:3c:9e:44:67:55:f4:cb:11: b0:9a:ba:7f:a6:74:32:95:e2:31:bb:99:c2:46:f0:df:c1:87: 92:9b:5b:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5QIzRbjWkhm8p9rlr4r0GHmG3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUz MUY5MzkwNjAeFw0yNjA0MjAxNTI2MjVaFw0yNjA0MjQwMjA3MjVaMDMxMTAvBgNV BAMTKEQwQzQ3MzExQjQ4Qjc1OUZDNTBFNzQwRjc0N0M0MzFDQzM2NjJGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1xwxKDVterCOL/BSUJoO8czn MqKDoxo3at1+gBj99hRBgX+G5luOoHUTrI4626yeVLrP2foDfyfp2IBU3gmcYzJl auaAZFT+mt0kJdphiQY6rmKAfRu+qgJj6QIBHLt27vnc9qRrLb5s4V1bmW/ujemX dgvCASHl4EF852y3QX0zZAn6DQGy8dMyXyp3SBKBhTdGfQUvoSW9Hgf1eZaBLvMx sLT7z5OLsG0Hxeo0xksMb15aRM0WqZcMTBctg9de5BjpB5PjYzdKtRDLqfw67ptH Yljj4hqpCUz9TduHIpymu1VRQEgQWjKRadB7FYh2d719Wk0rU94i3zEs9ZX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MRzEbSLdZ/FDnQPdHxDHMNmL8QwHwYDVR0j BBgwFoAU44CgVd07HjZGcrnw3WhSrjH5OQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmYyNjBjZS0yM2Y1LTQwOTUtODJkYi1lZjcxMTRlNDcxYjIvMC9FMzgwQTA1NURE M0IxRTM2NDY3MkI5RjBERDY4NTJBRTMxRjkzOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUzMUY5 MzkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUy QUUzMUY5MzkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJD9RFf9BuWGx1Om9wqzY+Y+GNdFiI0+oRm f8AFLFo0/G8vYLN2DmgOcIJXIdFwyvPvab/W5fyg9f3xR+6h/gX7o0snXHzybAJ0 3JuVU8RiI9eGhM1MMBE+WkWR9wXWIlZEe6pt4WcbeEiJdMbLq6VIRnIZb2r7YWDm yxuOy5MeLalIDqZ8/CZaPIl2JETB2U6VncsZehDjoNLxNiY2Q/TsJLbiOHGed+sY mVnnviUrzL8pGMEAKxzUAbjZTjPolJiZ4lCXaZUfODohJK1gAswQleeIZCIBJYja LxzVpv5Uczs8nkRnVfTLEbCaun+mdDKV4jG7mcJG8N/Bh5KbW5I= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:44 2026 by rpki-client