$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: 5jU7QzSPj7FABJCBpCmFUejdmd/RK29dq5VCmOtJ1uc= Subject key identifier: 60:FD:F1:F1:8F:0A:38:D7:84:5E:1F:3B:9B:89:83:B3:13:07:DD:91 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 3E56F43CC30858E421F7D2F191B6E964E964B929 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 0139 Signing time: Tue 21 Apr 2026 20:20:51 +0000 Manifest this update: Tue 21 Apr 2026 20:15:51 +0000 Manifest next update: Sat 25 Apr 2026 08:14:51 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: 2p8P8YpaZia7wGFP2JLRddyGfwytNMnDNZou8zSSAjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:f4:3c:c3:08:58:e4:21:f7:d2:f1:91:b6:e9:64:e9:64:b9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Apr 21 20:15:51 2026 GMT Not After : Apr 25 08:14:51 2026 GMT Subject: CN=60FDF1F18F0A38D7845E1F3B9B8983B31307DD91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:74:35:fa:33:c4:b1:9f:21:ef:09:34:6c: 4b:49:c3:60:c2:dc:c3:de:89:92:0e:b4:85:d9:b9: 21:16:b5:dd:1b:40:ad:26:ed:8e:a0:85:53:8d:5d: f8:b3:00:82:49:f6:cc:a1:5e:d6:66:15:6e:d6:fb: 97:37:9d:1f:26:e3:38:ee:5c:6d:15:df:b9:68:09: 75:7e:86:52:52:b7:c5:6d:d4:34:b2:c1:81:14:0b: f8:07:a4:7c:e0:45:63:56:7e:09:f6:41:cf:21:1a: ed:58:68:d2:a2:2c:99:9b:3d:af:21:6c:43:ab:1b: d8:c3:f4:ea:b6:3e:da:c5:91:cf:d1:62:ce:ef:10: 7f:a8:8e:fc:d7:be:3c:28:8b:21:1b:11:16:08:72: 00:b4:7c:37:3f:a9:00:18:76:48:2f:3c:cb:b1:f5: 26:03:56:64:3a:f4:c8:86:7e:40:46:67:9b:fd:82: 5e:0c:44:ac:c8:c1:0d:70:0e:78:87:12:ae:4c:29: 16:39:dd:cc:f0:67:9a:54:4e:03:34:40:96:f4:23: d0:fb:a1:4b:65:9f:63:7d:fb:fc:18:76:83:dc:eb: 7a:3f:d8:a5:93:72:27:32:65:6e:1c:4a:0a:3a:48: 30:5f:94:9d:3e:50:ca:e5:fc:dc:07:64:64:ea:f1: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:F1:F1:8F:0A:38:D7:84:5E:1F:3B:9B:89:83:B3:13:07:DD:91 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:70:2a:12:f7:eb:03:02:92:52:dc:4d:12:08:ea:fb:0d:71: e8:67:3e:39:e5:ce:ca:09:dc:5d:e3:e5:16:38:8a:7b:12:6f: a9:cf:10:fd:a0:f5:29:ac:b5:8e:85:43:3b:74:a3:b1:62:bf: 79:8e:26:0f:1e:16:a1:e0:5e:a7:cd:10:50:6f:ca:fc:15:b6: b0:79:37:2d:52:c0:76:21:4f:52:91:55:a3:7c:a2:07:02:a1: 4b:bc:11:11:08:b9:bc:d3:eb:ef:a4:28:66:68:76:47:09:4f: 87:b1:86:ee:97:38:22:1b:c6:3a:4d:6e:9d:39:cc:32:a3:2e: d4:01:31:12:ae:7d:3c:63:78:d0:d4:41:ac:f6:f6:51:cd:1f: 72:68:e0:2d:b3:45:92:07:8e:a9:08:94:41:a3:08:f2:82:33: ca:5b:cc:cd:0d:03:06:2c:a4:eb:60:6c:17:35:00:e3:e3:9e: 38:48:9e:c0:94:e4:c0:f5:b5:a2:4d:9e:ea:ef:38:a4:58:59: 5a:37:dd:ed:c9:5d:50:c4:22:9e:2f:8b:51:b9:55:5c:9d:15: b3:75:a8:50:af:f3:7f:fb:66:ce:54:06:79:72:52:a0:f2:15: eb:1c:7e:32:49:7c:cc:9c:62:52:bb:49:e0:a4:aa:c1:7a:10: 7d:1a:74:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlb0PMMIWOQh99LxkbbpZOlkuSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNjA0MjEyMDE1NTFaFw0yNjA0MjUwODE0NTFaMDMxMTAvBgNV BAMTKDYwRkRGMUYxOEYwQTM4RDc4NDVFMUYzQjlCODk4M0IzMTMwN0REOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8S3Q1+jPEsZ8h7wk0bEtJw2DC 3MPeiZIOtIXZuSEWtd0bQK0m7Y6ghVONXfizAIJJ9syhXtZmFW7W+5c3nR8m4zju XG0V37loCXV+hlJSt8Vt1DSywYEUC/gHpHzgRWNWfgn2Qc8hGu1YaNKiLJmbPa8h bEOrG9jD9Oq2PtrFkc/RYs7vEH+ojvzXvjwoiyEbERYIcgC0fDc/qQAYdkgvPMux 9SYDVmQ69MiGfkBGZ5v9gl4MRKzIwQ1wDniHEq5MKRY53czwZ5pUTgM0QJb0I9D7 oUtln2N9+/wYdoPc63o/2KWTcicyZW4cSgo6SDBflJ0+UMrl/NwHZGTq8Y4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYP3x8Y8KONeEXh87m4mDsxMH3ZEwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRwKhL36wMCklLcTRII6vsNcehnPjnlzsoJ 3F3j5RY4insSb6nPEP2g9SmstY6FQzt0o7Fiv3mOJg8eFqHgXqfNEFBvyvwVtrB5 Ny1SwHYhT1KRVaN8ogcCoUu8EREIubzT6++kKGZodkcJT4exhu6XOCIbxjpNbp05 zDKjLtQBMRKufTxjeNDUQaz29lHNH3Jo4C2zRZIHjqkIlEGjCPKCM8pbzM0NAwYs pOtgbBc1AOPjnjhInsCU5MD1taJNnurvOKRYWVo33e3JXVDEIp4vi1G5VVydFbN1 qFCv83/7Zs5UBnlyUqDyFescfjJJfMycYlK7SeCkqsF6EH0adLk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:18 2026 by rpki-client