$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json) Hash identifier: BeIzENm9k/8TTQ3axzHddBmYRiMeZZlfGmHAzdvC0zI= Subject key identifier: 4D:A3:0E:68:DB:47:08:04:15:12:2F:2A:98:F8:4F:1E:05:B9:66:48 Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B Certificate serial: 228849B62E10DB0B71096084EE382967B3B86D4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft Manifest number: DD Signing time: Sat 18 Apr 2026 02:31:02 +0000 Manifest this update: Sat 18 Apr 2026 02:26:02 +0000 Manifest next update: Tue 21 Apr 2026 11:14:02 +0000 Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=) 2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: fuI3l++zjvaDp7VPvjnmKKvAQ6s0kvYAfuwGbcyu/Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:88:49:b6:2e:10:db:0b:71:09:60:84:ee:38:29:67:b3:b8:6d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Validity Not Before: Apr 18 02:26:02 2026 GMT Not After : Apr 21 11:14:02 2026 GMT Subject: CN=4DA30E68DB47080415122F2A98F84F1E05B96648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:90:41:a7:40:85:0a:28:55:27:61:1f:fd: 66:ec:10:8a:0a:8a:8d:9d:eb:30:54:ad:64:99:27: 72:5f:d0:3d:78:1e:36:3a:88:7b:01:c2:12:84:c3: 37:79:55:ad:e8:09:bc:13:be:25:5f:93:02:3e:6d: 99:16:bf:31:ec:99:2e:e0:12:63:82:c9:87:62:82: 7d:7f:f2:7c:3e:e9:2a:cf:ea:f3:0b:d0:f3:1c:e9: 98:2d:ae:70:ce:ba:18:12:90:ea:bf:bc:ff:50:0f: 51:0e:5f:85:a1:f2:80:e7:0b:18:ee:18:ca:f5:58: 30:ad:ca:82:44:03:4f:ab:e9:6a:af:86:f6:fc:df: 22:46:de:4b:36:51:62:da:fb:cb:e6:41:a2:4f:e3: fe:39:0b:f4:3b:11:f8:72:a7:02:02:6a:1b:fd:49: 06:4d:23:1d:81:8e:2c:9d:1a:6a:52:9d:19:19:2e: 43:54:39:00:83:3a:14:b5:11:70:a8:d3:30:78:03: 4e:a0:6d:92:7a:4e:9f:b9:fa:c5:a2:64:5f:52:bf: 90:81:8d:bf:7f:5b:b8:0b:4a:3c:69:50:4d:b0:03: 9c:b2:22:31:3c:e8:f3:29:fb:38:ab:af:a3:52:f5: ad:91:4a:6f:c7:50:20:d2:ff:e6:21:db:97:d4:3f: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:0E:68:DB:47:08:04:15:12:2F:2A:98:F8:4F:1E:05:B9:66:48 X509v3 Authority Key Identifier: keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c3:65:77:d5:a3:b0:4a:63:7a:48:92:c5:a8:ce:1c:00:28: 55:2f:61:f8:63:84:39:02:ad:63:1e:88:1c:d7:14:20:73:bb: 58:d8:3c:eb:b8:5f:ab:ca:a6:77:52:f8:17:3c:f8:3e:1f:13: 52:d9:13:df:65:2a:97:47:d0:55:01:e1:97:4e:d4:64:52:53: 32:8f:84:fd:ff:f7:94:8c:f7:49:2e:10:74:e4:77:03:9b:92: 76:93:31:91:8c:c3:dd:92:3f:6b:bb:9b:27:f7:2c:9f:46:f5: 2d:01:6a:a3:d6:c4:cd:d8:cb:99:78:e4:77:0a:1f:7e:5d:2b: 92:65:a9:45:4d:8f:1d:03:39:ff:6d:a5:e6:40:26:55:38:a0: f1:91:ec:04:fd:5c:4a:8f:26:d5:a1:45:0b:8f:27:c8:6a:a6: 9b:28:cd:3e:26:5e:4c:75:a9:40:59:02:e6:88:9e:dd:64:64: 15:8d:a2:45:9a:14:03:7d:74:2e:1b:96:e9:96:a2:54:54:a2: 6e:f5:3b:d5:60:8e:2f:78:07:54:09:cf:a4:fd:64:d9:a2:0d: 55:e8:9e:36:f8:d1:fc:10:74:28:f5:11:69:ba:da:b9:cd:48: 29:4b:e4:12:3c:17:c8:93:78:f6:f7:60:5f:a9:0e:a8:46:a2: 56:ac:23:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIohJti4Q2wtxCWCE7jgpZ7O4bUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0 MDdENTM1QjAeFw0yNjA0MTgwMjI2MDJaFw0yNjA0MjExMTE0MDJaMDMxMTAvBgNV BAMTKDREQTMwRTY4REI0NzA4MDQxNTEyMkYyQTk4Rjg0RjFFMDVCOTY2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs25BBp0CFCihVJ2Ef/WbsEIoK io2d6zBUrWSZJ3Jf0D14HjY6iHsBwhKEwzd5Va3oCbwTviVfkwI+bZkWvzHsmS7g EmOCyYdign1/8nw+6SrP6vML0PMc6ZgtrnDOuhgSkOq/vP9QD1EOX4Wh8oDnCxju GMr1WDCtyoJEA0+r6Wqvhvb83yJG3ks2UWLa+8vmQaJP4/45C/Q7EfhypwICahv9 SQZNIx2BjiydGmpSnRkZLkNUOQCDOhS1EXCo0zB4A06gbZJ6Tp+5+sWiZF9Sv5CB jb9/W7gLSjxpUE2wA5yyIjE86PMp+zirr6NS9a2RSm/HUCDS/+Yh25fUP7SpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaMOaNtHCAQVEi8qmPhPHgW5ZkgwHwYDVR0j BBgwFoAUTpIiznm5z+8mDIN1I/4mhEB9U1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMC80RTkyMjJDRTc5 QjlDRkVGMjYwQzgzNzUyM0ZFMjY4NDQwN0Q1MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0MDdE NTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2 ODQ0MDdENTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzDZXfVo7BKY3pIksWozhwAKFUvYfhjhDkC rWMeiBzXFCBzu1jYPOu4X6vKpndS+Bc8+D4fE1LZE99lKpdH0FUB4ZdO1GRSUzKP hP3/95SM90kuEHTkdwObknaTMZGMw92SP2u7myf3LJ9G9S0BaqPWxM3Yy5l45HcK H35dK5JlqUVNjx0DOf9tpeZAJlU4oPGR7AT9XEqPJtWhRQuPJ8hqppsozT4mXkx1 qUBZAuaInt1kZBWNokWaFAN9dC4blumWolRUom71O9Vgji94B1QJz6T9ZNmiDVXo njb40fwQdCj1EWm62rnNSClL5BI8F8iTePb3YF+pDqhGolasI6w= -----END CERTIFICATE-----Generated at Sat Apr 18 23:53:16 2026 by rpki-client