$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: 7cjRhddxIaZPrNBteVOtr1E+yIp0wscA0h4zw6yGcZo= Subject key identifier: 86:3B:64:53:4F:BD:81:BC:9F:81:8F:33:03:95:89:DA:62:94:C8:27 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 452D0B4E37768E9946FD69E65C74A677CEF3A42C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 028E Signing time: Sun 19 Apr 2026 22:51:06 +0000 Manifest this update: Sun 19 Apr 2026 22:46:06 +0000 Manifest next update: Thu 23 Apr 2026 05:59:06 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: 6tQdcUyfNqzTt7T2LagPnXQYrl3wqOaeMiyyzPwT0B8=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2d:0b:4e:37:76:8e:99:46:fd:69:e6:5c:74:a6:77:ce:f3:a4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Apr 19 22:46:06 2026 GMT Not After : Apr 23 05:59:06 2026 GMT Subject: CN=863B64534FBD81BC9F818F33039589DA6294C827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:5b:e1:12:51:35:59:3c:3c:56:5e:2f:72: 23:55:08:d5:5a:fc:d1:27:a6:3d:95:92:e4:4c:09: be:5b:5f:2e:9f:fa:cf:15:67:94:75:e9:3e:e3:3a: c4:70:3e:ae:45:79:3a:30:2f:e0:57:65:bf:76:ff: 6c:ea:1c:a5:a9:28:71:f1:54:3f:03:2d:56:ef:5a: 13:2e:31:64:42:19:e4:cc:a9:75:0d:99:41:0d:43: 4e:18:67:50:80:e7:51:7a:e4:ab:ff:f7:51:f3:17: eb:6b:a0:c6:70:c7:3b:7b:c4:62:7a:da:bf:5d:3e: 3e:0c:85:fc:05:3a:33:a4:76:8d:17:95:cb:05:1c: 6a:7f:72:0e:42:2b:61:e0:ba:55:98:59:81:e5:b4: 71:c7:a3:c8:52:92:4b:f0:2f:78:01:e0:f4:6e:8b: 54:60:08:3b:e1:62:da:4e:77:ab:15:50:1e:1b:3d: 16:55:21:37:97:3d:4f:fa:58:a2:bc:62:20:66:10: 9d:2e:56:4c:53:16:12:51:2c:f7:5b:b0:10:05:8e: 57:6b:f5:10:94:44:20:91:30:38:18:13:31:af:5a: 64:dc:02:5c:04:23:3a:15:29:79:04:f6:78:7e:b5: 2d:b5:a7:f9:21:b9:44:a3:c3:71:d3:42:af:25:d8: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3B:64:53:4F:BD:81:BC:9F:81:8F:33:03:95:89:DA:62:94:C8:27 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a4:71:9a:6e:38:10:58:f6:cb:c7:80:ff:bc:9d:7a:52:de: 6a:f2:33:20:9b:1e:1e:de:68:89:0f:6f:19:fa:de:3a:bf:51: 64:3e:2b:a5:f3:bf:1d:04:6e:0b:68:72:10:52:3e:ce:45:fc: 5d:24:c6:e3:60:7a:d0:c7:ec:3f:89:50:c6:7a:60:b3:84:bc: 51:26:a7:37:da:39:d9:f0:6f:5f:b8:96:e7:15:bd:ca:5f:cd: ba:10:02:0f:c5:2d:60:88:6f:aa:3f:40:6d:de:16:0b:12:29: f1:bd:a4:8b:c2:cb:dd:0b:21:8b:b4:3b:ee:c2:60:18:80:69: 7d:d0:aa:bf:20:41:b8:1c:e3:d7:86:6b:3b:cc:e5:2d:23:82: 67:09:2a:fb:1b:8c:10:dd:68:5e:67:9e:c8:fa:ce:50:14:b3: 86:9a:3d:54:57:fb:f5:bf:ec:c7:0d:19:cc:c2:ec:1d:80:79: fd:12:0f:ce:fb:ee:e0:80:1e:1c:00:42:4e:10:3e:9c:82:02: a6:7a:ab:e9:1f:78:26:92:aa:39:f7:0b:8c:e1:b4:a1:1d:03: f8:f4:1d:0b:97:09:32:a4:bc:56:09:af:76:06:d3:b2:f2:13: 02:73:37:3e:b7:d7:ba:7d:8c:f9:43:b0:b0:0c:a3:cd:54:ab: cc:b7:c9:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS0LTjd2jplG/WnmXHSmd87zpCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNjA0MTkyMjQ2MDZaFw0yNjA0MjMwNTU5MDZaMDMxMTAvBgNV BAMTKDg2M0I2NDUzNEZCRDgxQkM5RjgxOEYzMzAzOTU4OURBNjI5NEM4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ11vhElE1WTw8Vl4vciNVCNVa /NEnpj2VkuRMCb5bXy6f+s8VZ5R16T7jOsRwPq5FeTowL+BXZb92/2zqHKWpKHHx VD8DLVbvWhMuMWRCGeTMqXUNmUENQ04YZ1CA51F65Kv/91HzF+troMZwxzt7xGJ6 2r9dPj4MhfwFOjOkdo0XlcsFHGp/cg5CK2HgulWYWYHltHHHo8hSkkvwL3gB4PRu i1RgCDvhYtpOd6sVUB4bPRZVITeXPU/6WKK8YiBmEJ0uVkxTFhJRLPdbsBAFjldr 9RCURCCRMDgYEzGvWmTcAlwEIzoVKXkE9nh+tS21p/khuUSjw3HTQq8l2HlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjtkU0+9gbyfgY8zA5WJ2mKUyCcwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmkcZpuOBBY9svHgP+8nXpS3mryMyCbHh7e aIkPbxn63jq/UWQ+K6Xzvx0EbgtochBSPs5F/F0kxuNgetDH7D+JUMZ6YLOEvFEm pzfaOdnwb1+4lucVvcpfzboQAg/FLWCIb6o/QG3eFgsSKfG9pIvCy90LIYu0O+7C YBiAaX3Qqr8gQbgc49eGazvM5S0jgmcJKvsbjBDdaF5nnsj6zlAUs4aaPVRX+/W/ 7McNGczC7B2Aef0SD8777uCAHhwAQk4QPpyCAqZ6q+kfeCaSqjn3C4zhtKEdA/j0 HQuXCTKkvFYJr3YG07LyEwJzNz6317p9jPlDsLAMo81Uq8y3yXE= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:22 2026 by rpki-client