$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: ZXww3cucwndY23ohZTac0ax3Bm2T1RIZ8XQ/phxf/PM= Subject key identifier: E7:B3:BC:E5:E9:AD:80:5E:57:65:1B:73:28:8E:41:AF:4A:29:47:B6 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 7E15AE20C7C17267E19763CA25B565C6089C88BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 056B Signing time: Mon 20 Apr 2026 00:22:31 +0000 Manifest this update: Mon 20 Apr 2026 00:17:31 +0000 Manifest next update: Thu 23 Apr 2026 06:17:31 +0000 Files and hashes: 1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=) 2: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: O7DnkxU1zjt4++aMxttSfR+u4Fiu3rRrkel07iZFcJk=) 3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=) 4: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:15:ae:20:c7:c1:72:67:e1:97:63:ca:25:b5:65:c6:08:9c:88:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Apr 20 00:17:31 2026 GMT Not After : Apr 23 06:17:31 2026 GMT Subject: CN=E7B3BCE5E9AD805E57651B73288E41AF4A2947B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:cf:76:47:05:49:f4:7d:d7:f0:13:34:84: 41:05:62:85:4a:93:1f:87:21:01:43:5a:d4:df:66: 7f:7b:4f:2a:3c:40:1a:5f:3f:b6:98:45:e1:63:e7: 7b:27:84:cf:8a:6d:33:ac:89:6a:41:4e:f9:45:17: d7:f5:08:4b:7f:ea:18:e7:54:0b:b3:de:df:d1:b0: 4f:d9:da:1f:5d:26:19:a2:eb:00:f7:d4:5c:c6:48: 8b:39:6c:a8:db:87:1d:08:38:b0:68:3e:95:04:83: b5:53:91:c0:7a:bd:7a:a5:df:b8:6c:54:4a:e8:d6: d5:89:f4:5c:2c:5a:5c:83:6c:df:3f:19:06:e8:ef: ff:12:3a:e1:10:1c:62:00:e8:99:58:7c:8b:11:64: 3d:0e:df:b1:2b:5e:f5:7e:5c:82:4b:4a:46:52:9e: a4:ee:79:8f:8f:28:e6:17:57:13:56:b2:f9:10:1c: 63:e3:20:e0:46:32:e3:80:75:d7:a0:48:38:19:24: a1:31:a8:15:32:93:d7:59:c6:f4:62:ee:50:23:53: c8:6d:ef:fa:64:e4:3f:71:1a:fc:67:b1:60:15:74: 31:2b:cb:dd:18:08:67:34:71:3e:b0:76:d8:ba:e4: 44:af:cd:a8:5a:aa:dc:8c:f9:df:32:c6:3e:f2:cc: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B3:BC:E5:E9:AD:80:5E:57:65:1B:73:28:8E:41:AF:4A:29:47:B6 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9f:5e:7a:db:9c:7f:c6:6d:a8:ab:97:e6:6a:2f:07:84:df: 3a:f6:1b:06:36:51:28:8a:5e:48:1d:6f:90:89:a5:fd:16:6e: 6b:de:e9:9b:22:66:d9:63:24:87:32:00:d1:38:2c:0e:11:f5: 8c:ac:77:81:16:ab:a5:d1:68:d4:65:fa:fb:a2:f6:de:8c:66: d1:3b:cb:d3:f1:3e:0f:4f:2b:aa:2b:8a:b3:56:e0:c7:ec:d0: 59:c8:dc:b1:49:c0:c7:c1:37:5d:dd:32:c0:fc:5e:f5:2a:48: 95:75:02:b0:90:a6:23:c9:46:7b:56:ec:c4:25:d8:f3:e4:36: c2:31:41:22:d3:d4:af:d6:2d:f9:dd:a9:08:ab:5f:3e:d8:81: 66:28:a4:5b:7d:94:f5:04:d9:50:98:96:21:26:9e:30:df:28: 1a:aa:46:c9:a8:39:53:cc:7c:2e:6d:07:bd:d5:27:a7:26:9b: 33:41:1e:e8:21:8f:28:6e:f6:cb:e2:4f:58:c9:a1:68:74:ff: d5:c5:82:85:9e:d4:39:5f:29:83:3a:96:2e:a9:f8:eb:e1:5e: eb:69:87:5f:8c:38:0a:90:f4:02:1b:e0:ac:88:7a:d5:5d:4c: ac:76:1b:4b:37:ba:e5:ed:28:bf:19:4f:eb:aa:d5:80:b9:44: ba:21:e0:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhWuIMfBcmfhl2PKJbVlxgiciLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNjA0MjAwMDE3MzFaFw0yNjA0MjMwNjE3MzFaMDMxMTAvBgNV BAMTKEU3QjNCQ0U1RTlBRDgwNUU1NzY1MUI3MzI4OEU0MUFGNEEyOTQ3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdH892RwVJ9H3X8BM0hEEFYoVK kx+HIQFDWtTfZn97Tyo8QBpfP7aYReFj53snhM+KbTOsiWpBTvlFF9f1CEt/6hjn VAuz3t/RsE/Z2h9dJhmi6wD31FzGSIs5bKjbhx0IOLBoPpUEg7VTkcB6vXql37hs VEro1tWJ9FwsWlyDbN8/GQbo7/8SOuEQHGIA6JlYfIsRZD0O37ErXvV+XIJLSkZS nqTueY+PKOYXVxNWsvkQHGPjIOBGMuOAddegSDgZJKExqBUyk9dZxvRi7lAjU8ht 7/pk5D9xGvxnsWAVdDEry90YCGc0cT6wdti65ESvzahaqtyM+d8yxj7yzN+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57O85emtgF5XZRtzKI5Br0opR7YwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHifXnrbnH/Gbairl+ZqLweE3zr2GwY2USiK Xkgdb5CJpf0Wbmve6ZsiZtljJIcyANE4LA4R9Yysd4EWq6XRaNRl+vui9t6MZtE7 y9PxPg9PK6orirNW4Mfs0FnI3LFJwMfBN13dMsD8XvUqSJV1ArCQpiPJRntW7MQl 2PPkNsIxQSLT1K/WLfndqQirXz7YgWYopFt9lPUE2VCYliEmnjDfKBqqRsmoOVPM fC5tB73VJ6cmmzNBHughjyhu9sviT1jJoWh0/9XFgoWe1DlfKYM6li6p+OvhXutp h1+MOAqQ9AIb4KyIetVdTKx2G0s3uuXtKL8ZT+uq1YC5RLoh4HY= -----END CERTIFICATE-----Generated at Wed Apr 22 07:06:51 2026 by rpki-client