$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: amZPCxBPr6dDpOiCUl+VZvcc67M3YW76BWQF8U2eepU= Subject key identifier: 59:23:96:27:65:33:AB:EC:D6:89:0E:E4:B1:97:E4:C3:2C:E5:D1:ED Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 51E0D78578B9089430FC678A39246D74745A401F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0159 Signing time: Tue 21 Apr 2026 06:11:23 +0000 Manifest this update: Tue 21 Apr 2026 06:06:23 +0000 Manifest next update: Fri 24 Apr 2026 10:29:23 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: 0aDrPlvHbiwgK1YaHLoirMOY+7CZe1wWdMsv7xrD4RE=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e0:d7:85:78:b9:08:94:30:fc:67:8a:39:24:6d:74:74:5a:40:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Apr 21 06:06:23 2026 GMT Not After : Apr 24 10:29:23 2026 GMT Subject: CN=592396276533ABECD6890EE4B197E4C32CE5D1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:bc:89:2a:bb:03:7c:4f:6d:39:35:2d:86: fc:a9:f0:25:bb:8b:51:3d:34:9c:9f:a7:74:71:d7: 9a:23:69:1c:bf:4b:13:21:59:ec:31:5f:2d:94:d7: 53:c8:12:22:8f:e6:1d:f5:df:5c:26:36:aa:b6:a1: d4:13:01:31:e4:94:cb:45:8a:7b:48:ab:e0:a7:9f: 09:16:50:72:1f:9c:2b:29:21:e5:fc:f4:7e:5e:a8: 66:a8:ca:02:4e:32:f7:ca:29:d3:3f:f9:78:26:e9: 22:5c:82:3c:40:e5:d0:3a:75:65:1b:de:52:40:a5: f9:bf:c8:e0:b3:8a:7e:27:ee:c3:a8:33:c5:ba:fd: f4:4c:92:e8:d2:59:2f:c7:de:0d:4a:69:ec:d7:2c: 5a:5b:24:c2:99:a1:a6:dc:f8:ab:5d:15:1d:a5:18: 47:80:c5:9a:18:1f:13:6c:10:34:32:aa:5a:37:3b: 7b:2e:68:d8:78:6a:25:90:74:cf:73:92:d2:dd:78: b0:6f:e0:c2:f4:8a:f7:01:ef:c0:50:af:ae:9c:d8: 0d:56:a1:5e:7b:22:3c:cc:47:ce:7f:1b:fa:b5:25: ad:b4:ae:15:e1:41:44:87:e8:2d:63:06:30:a5:a1: 04:ba:a1:d5:b5:a7:25:bd:16:03:92:93:ed:9b:ff: 5f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:96:27:65:33:AB:EC:D6:89:0E:E4:B1:97:E4:C3:2C:E5:D1:ED X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b1:fa:1b:f7:ff:37:8d:1e:ef:f9:cf:8b:5b:63:ba:04:4b: aa:5a:4d:e5:02:b0:31:96:5c:69:9e:76:52:71:f8:d4:68:d8: 3a:3b:44:fb:5f:89:a1:d0:8d:92:08:b1:9c:1a:20:b3:74:54: ca:b2:1c:51:f9:58:37:ce:c7:81:98:54:3e:52:70:60:9a:2d: 37:69:bf:ae:f1:b6:7b:b0:85:2c:db:39:47:91:43:7f:19:81: 3b:c9:e7:65:d9:11:eb:eb:b5:22:18:0c:ab:09:b7:eb:91:9a: a0:91:ff:dc:45:d6:4f:09:11:2d:3a:77:f2:81:70:ca:c6:10: 36:5f:4e:ce:9b:ed:99:8d:8a:c2:45:7a:c8:c9:97:07:2c:a1: 6a:d4:15:22:81:ad:40:34:41:ed:81:f3:6f:85:fd:97:04:ed: 05:1e:f5:f5:de:09:fd:f3:2d:63:da:63:b8:f0:50:c2:5b:e8: 2f:8b:8d:2c:ad:d8:e4:f0:04:8b:62:b1:3e:97:b3:15:0b:8d: 58:75:d5:63:0d:c1:82:e9:00:fd:f1:2c:c6:32:cb:d8:43:8b: 35:e6:a1:8e:b4:a3:2f:3e:70:c9:86:a5:5d:9d:03:8b:38:b8: a2:ee:db:0b:13:0d:03:f5:95:a2:48:31:0b:2a:2b:0f:c5:75: 71:7f:e8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeDXhXi5CJQw/GeKOSRtdHRaQB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNjA0MjEwNjA2MjNaFw0yNjA0MjQxMDI5MjNaMDMxMTAvBgNV BAMTKDU5MjM5NjI3NjUzM0FCRUNENjg5MEVFNEIxOTdFNEMzMkNFNUQxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AbyJKrsDfE9tOTUthvyp8CW7 i1E9NJyfp3Rx15ojaRy/SxMhWewxXy2U11PIEiKP5h3131wmNqq2odQTATHklMtF intIq+CnnwkWUHIfnCspIeX89H5eqGaoygJOMvfKKdM/+Xgm6SJcgjxA5dA6dWUb 3lJApfm/yOCzin4n7sOoM8W6/fRMkujSWS/H3g1KaezXLFpbJMKZoabc+KtdFR2l GEeAxZoYHxNsEDQyqlo3O3suaNh4aiWQdM9zktLdeLBv4ML0ivcB78BQr66c2A1W oV57IjzMR85/G/q1Ja20rhXhQUSH6C1jBjCloQS6odW1pyW9FgOSk+2b/1/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSOWJ2Uzq+zWiQ7ksZfkwyzl0e0wHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByx+hv3/zeNHu/5z4tbY7oES6paTeUCsDGW XGmedlJx+NRo2Do7RPtfiaHQjZIIsZwaILN0VMqyHFH5WDfOx4GYVD5ScGCaLTdp v67xtnuwhSzbOUeRQ38ZgTvJ52XZEevrtSIYDKsJt+uRmqCR/9xF1k8JES06d/KB cMrGEDZfTs6b7ZmNisJFesjJlwcsoWrUFSKBrUA0Qe2B82+F/ZcE7QUe9fXeCf3z LWPaY7jwUMJb6C+LjSyt2OTwBItisT6XsxULjVh11WMNwYLpAP3xLMYyy9hDizXm oY60oy8+cMmGpV2dA4s4uKLu2wsTDQP1laJIMQsqKw/FdXF/6DM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:33 2026 by rpki-client