$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: ll8m0xf4dR2VUadTXzRAy3aj7Btd8d8VcHrhUvCLY3I= Subject key identifier: 07:73:1D:A4:8B:41:E9:28:53:02:0A:4E:9C:35:5C:3F:74:5D:9E:BB Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 248DE0B9FDCBAF98F1646DDB1E970C2A827A540A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: 0147 Signing time: Mon 20 Apr 2026 20:52:24 +0000 Manifest this update: Mon 20 Apr 2026 20:47:24 +0000 Manifest next update: Thu 23 Apr 2026 22:32:24 +0000 Files and hashes: 1: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: k5j6uVZ3sSDT3EhIAPNUGYENw0p/P1eqgKx8w5/MK64=) 2: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: xFffnrBfGrqinSzTOcLoNlqUPiFPKVW2xknOINPEUaI=) 3: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: IVmWA0sjnzoOPblA5LQxkIVu3A/hMUXTdT7CieN07mY=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: RowmG35PUWlTBVXWCWFnv7EvaYbGN8PKQsduBtyMpF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8d:e0:b9:fd:cb:af:98:f1:64:6d:db:1e:97:0c:2a:82:7a:54:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Apr 20 20:47:24 2026 GMT Not After : Apr 23 22:32:24 2026 GMT Subject: CN=07731DA48B41E92853020A4E9C355C3F745D9EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:d5:eb:6e:5f:6a:29:70:25:e3:c9:15:01: 9d:7c:ed:0e:45:3b:c1:d4:ea:fb:38:8e:41:ba:31: 51:5d:cf:5c:90:ee:e8:92:72:37:ce:79:df:88:f5: 0b:42:1c:e0:e1:40:c8:d6:28:f2:f4:95:12:a2:ca: e8:a0:89:52:d1:ae:33:d1:0f:19:c4:6f:8a:e5:33: a8:02:55:16:25:f5:57:58:c3:f9:4f:4f:e3:0d:fe: 9d:de:92:37:da:05:75:79:1a:8e:84:8c:ed:ca:a9: 74:e4:5f:53:84:ab:24:b6:39:aa:e2:33:02:3a:87: 31:6c:68:13:0f:69:a4:48:0a:3c:58:8b:1d:74:9a: c6:12:5f:20:19:d8:e3:19:9a:d3:78:56:74:87:be: 0d:c6:c1:a3:58:84:69:83:a3:d3:d2:7a:a8:f2:1b: 37:26:b2:e0:d3:81:43:c4:9a:a3:cc:cf:a6:e5:b2: 63:9a:ad:9e:ff:0d:9f:eb:22:eb:a9:04:e3:46:b1: 20:93:91:48:c2:01:61:09:31:28:01:91:0c:85:d6: 6e:85:d8:2f:22:16:2f:58:df:8c:a2:79:c5:87:19: c6:d5:91:fe:2d:4d:92:57:06:aa:74:c4:77:ad:f4: 7b:43:48:9b:fa:5e:06:fa:c4:86:ca:16:95:23:e6: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:1D:A4:8B:41:E9:28:53:02:0A:4E:9C:35:5C:3F:74:5D:9E:BB X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:ea:2c:bf:84:10:fb:89:93:81:6f:5d:c1:cf:c1:ba:d2: 8d:3b:62:a6:24:46:26:be:85:d0:ea:98:6c:af:f2:a3:6f:d7: 65:8d:fd:35:3a:15:90:30:da:94:df:4f:c5:eb:eb:f7:8a:41: 68:d4:57:98:11:db:c3:50:02:01:0f:e2:d8:d9:bb:ec:4b:a9: 91:e5:7e:31:f5:ba:cc:95:80:8d:c4:d7:ca:5d:90:17:0f:e6: 7d:10:82:39:68:00:37:eb:38:dd:d7:a5:4e:a8:6f:38:36:ed: 50:b4:7e:54:08:f8:cc:77:bc:8e:08:95:e5:1c:fa:0d:e1:db: 43:6a:11:fa:4c:69:e8:06:f0:93:c5:24:6a:8a:d7:e7:cd:4c: 79:b6:b9:6a:9b:eb:f8:da:26:fe:00:a9:ee:7f:9b:17:c1:26: 36:14:0f:a4:68:a3:8e:24:08:70:6b:a9:b2:c0:f3:ac:3c:09: 41:ec:fc:f2:46:42:2d:7f:59:47:60:e4:a2:50:70:5c:a0:2f: f4:ca:f2:f1:95:5d:88:91:26:93:3a:8f:0d:2e:14:b2:bc:72: 9b:de:da:e1:a2:5b:8f:89:19:66:d2:11:9a:ef:b4:d6:65:ea: c7:cd:5f:c4:81:c4:dd:56:5d:66:72:d3:8b:49:56:bc:52:6b: cc:b8:58:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI3guf3Lr5jxZG3bHpcMKoJ6VAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNjA0MjAyMDQ3MjRaFw0yNjA0MjMyMjMyMjRaMDMxMTAvBgNV BAMTKDA3NzMxREE0OEI0MUU5Mjg1MzAyMEE0RTlDMzU1QzNGNzQ1RDlFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PtXrbl9qKXAl48kVAZ187Q5F O8HU6vs4jkG6MVFdz1yQ7uiScjfOed+I9QtCHODhQMjWKPL0lRKiyuigiVLRrjPR DxnEb4rlM6gCVRYl9VdYw/lPT+MN/p3ekjfaBXV5Go6EjO3KqXTkX1OEqyS2Oari MwI6hzFsaBMPaaRICjxYix10msYSXyAZ2OMZmtN4VnSHvg3GwaNYhGmDo9PSeqjy GzcmsuDTgUPEmqPMz6blsmOarZ7/DZ/rIuupBONGsSCTkUjCAWEJMSgBkQyF1m6F 2C8iFi9Y34yiecWHGcbVkf4tTZJXBqp0xHet9HtDSJv6Xgb6xIbKFpUj5q8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3MdpItB6ShTAgpOnDVcP3RdnrswHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiP6iy/hBD7iZOBb13Bz8G60o07YqYkRia+ hdDqmGyv8qNv12WN/TU6FZAw2pTfT8Xr6/eKQWjUV5gR28NQAgEP4tjZu+xLqZHl fjH1usyVgI3E18pdkBcP5n0QgjloADfrON3XpU6obzg27VC0flQI+Mx3vI4IleUc +g3h20NqEfpMaegG8JPFJGqK1+fNTHm2uWqb6/jaJv4Aqe5/mxfBJjYUD6Roo44k CHBrqbLA86w8CUHs/PJGQi1/WUdg5KJQcFygL/TK8vGVXYiRJpM6jw0uFLK8cpve 2uGiW4+JGWbSEZrvtNZl6sfNX8SBxN1WXWZy04tJVrxSa8y4WFw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:17 2026 by rpki-client