$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: 2HyGtpx4nri4xgHQ0YRHmALCsL/kqfVzRnq9ij3fpNQ= Subject key identifier: C2:F9:81:32:07:9C:1D:E3:BC:A9:91:D4:6F:A4:5A:99:4B:4D:25:D8 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 59F5CC9F2A39FBD03DA2F7C2E5F8F7137126E8D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 025B Signing time: Mon 20 Apr 2026 06:00:56 +0000 Manifest this update: Mon 20 Apr 2026 05:55:56 +0000 Manifest next update: Thu 23 Apr 2026 13:54:56 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: QfBANB1HcZ4D5lNo0ikbhdMiTPwgCLxr47KuZgq3ysc=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: kmlYqhywcWd3iHMr57ZOIiZXkte1xffxm5XAV2k/EC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f5:cc:9f:2a:39:fb:d0:3d:a2:f7:c2:e5:f8:f7:13:71:26:e8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 20 05:55:56 2026 GMT Not After : Apr 23 13:54:56 2026 GMT Subject: CN=C2F98132079C1DE3BCA991D46FA45A994B4D25D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:ff:60:c2:5a:29:d3:0a:95:98:2f:a0:bb: 09:0f:3c:f2:97:1e:a5:64:47:a0:14:17:be:3a:f8: 33:84:12:02:37:bc:ad:43:89:43:01:41:94:5f:1c: 55:de:f4:04:a0:4b:d2:d9:bb:57:36:04:ec:8a:14: 09:fd:cb:2c:ad:20:93:49:8c:98:49:bb:73:09:13: 45:fa:73:d1:9e:64:eb:0d:17:0d:a6:8b:94:58:1c: f8:0d:0f:50:0e:c6:36:f5:e8:15:37:ec:f2:45:89: 5c:d1:5e:b4:1e:10:f0:25:d3:97:57:5f:13:36:7e: 7f:84:76:ad:1e:df:b8:64:1d:ff:ff:27:0e:ed:ba: 0e:c9:2f:a4:57:7c:fa:2b:7c:04:f8:7a:b9:53:02: 9c:b0:06:44:17:5f:a3:3a:21:2c:cf:01:5d:4d:93: a3:77:60:5b:59:69:84:ed:71:a7:d4:2d:3f:6a:2a: a3:bc:cb:83:09:94:c8:6c:7a:c7:81:98:49:93:49: f6:9a:7a:78:9f:ec:03:06:b4:82:b0:2e:b7:d1:f8: 4d:18:1a:ae:4a:16:eb:13:2b:1a:c1:ff:f3:31:76: 39:30:c1:46:a2:59:d0:83:32:7a:96:47:e1:a2:65: 54:12:fd:be:f2:fa:1b:6e:78:1a:2c:37:ea:d9:8f: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F9:81:32:07:9C:1D:E3:BC:A9:91:D4:6F:A4:5A:99:4B:4D:25:D8 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:08:cb:f4:19:be:90:cf:3c:64:24:b5:e8:e6:2a:7e:57:b1: 1d:b6:1b:86:b9:01:ca:8b:f3:a6:f4:62:4d:77:aa:3d:84:e4: fc:f3:86:5a:19:02:88:23:0e:69:18:75:6b:8f:d5:b8:56:95: c0:b8:3b:f0:88:e2:b2:f3:bb:f0:ff:9b:a2:67:31:5e:9d:4f: 51:6e:0c:18:f1:24:ac:7f:73:6d:5c:46:bd:67:7b:c6:0c:e9: f6:9e:83:f5:f3:58:d5:6d:da:be:5a:d6:f3:48:ee:55:1f:04: 29:4d:b0:0f:35:8f:06:f9:d8:b1:0a:d8:cf:a3:60:d4:71:66: 1a:d9:77:41:bc:86:e3:cf:ad:f2:3c:ab:22:6f:7a:bf:60:e9: bc:4a:b7:9a:d5:5d:28:a0:95:44:a4:36:e3:63:b4:ea:51:33: 2c:2f:a6:47:d7:84:e8:f5:64:bb:96:7d:fb:ee:42:2e:f0:3e: 66:16:a7:b8:0b:82:c4:74:9a:59:3e:e3:aa:03:80:17:91:01: 09:f7:48:33:48:78:37:a7:00:d0:16:39:2b:2e:8b:d9:89:3c: b7:58:7d:95:31:6c:92:14:3f:da:6d:cd:43:2f:5f:a8:7f:26: ed:fb:e0:97:78:25:c2:e4:67:2d:48:7e:d8:bd:cb:b6:8d:d4: ac:6e:77:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfXMnyo5+9A9ovfC5fj3E3Em6NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNjA0MjAwNTU1NTZaFw0yNjA0MjMxMzU0NTZaMDMxMTAvBgNV BAMTKEMyRjk4MTMyMDc5QzFERTNCQ0E5OTFENDZGQTQ1QTk5NEI0RDI1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6/9gwlop0wqVmC+guwkPPPKX HqVkR6AUF746+DOEEgI3vK1DiUMBQZRfHFXe9ASgS9LZu1c2BOyKFAn9yyytIJNJ jJhJu3MJE0X6c9GeZOsNFw2mi5RYHPgND1AOxjb16BU37PJFiVzRXrQeEPAl05dX XxM2fn+Edq0e37hkHf//Jw7tug7JL6RXfPorfAT4erlTApywBkQXX6M6ISzPAV1N k6N3YFtZaYTtcafULT9qKqO8y4MJlMhseseBmEmTSfaaenif7AMGtIKwLrfR+E0Y Gq5KFusTKxrB//MxdjkwwUaiWdCDMnqWR+GiZVQS/b7y+htueBosN+rZj0bpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvmBMgecHeO8qZHUb6RamUtNJdgwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIIy/QZvpDPPGQktejmKn5XsR22G4a5AcqL 86b0Yk13qj2E5PzzhloZAogjDmkYdWuP1bhWlcC4O/CI4rLzu/D/m6JnMV6dT1Fu DBjxJKx/c21cRr1ne8YM6faeg/XzWNVt2r5a1vNI7lUfBClNsA81jwb52LEK2M+j YNRxZhrZd0G8huPPrfI8qyJver9g6bxKt5rVXSiglUSkNuNjtOpRMywvpkfXhOj1 ZLuWffvuQi7wPmYWp7gLgsR0mlk+46oDgBeRAQn3SDNIeDenANAWOSsui9mJPLdY fZUxbJIUP9ptzUMvX6h/Ju374Jd4JcLkZy1Ifti9y7aN1Kxud4k= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:23 2026 by rpki-client