$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: tsaSE2mRdcyXidHFEoe8wg6ECQ+X9MCwKbf0Kft8fmg= Subject key identifier: F8:5A:B0:16:49:15:B1:A5:31:A9:55:3E:DB:3C:E7:31:50:38:03:CA Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 3B4DEF585D1184078FB2A9B30AB112BBC5993B4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: 013C Signing time: Sun 19 Apr 2026 23:41:21 +0000 Manifest this update: Sun 19 Apr 2026 23:36:21 +0000 Manifest next update: Thu 23 Apr 2026 09:57:21 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: NciicDhTc/8/2233jVvH+fvgTaawSNyZHCD06VMDrnQ=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: w9lRGM+KvbJcbB/B7Klf8XUb4JaKXd4lgNIVZ1rwkw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 09:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4d:ef:58:5d:11:84:07:8f:b2:a9:b3:0a:b1:12:bb:c5:99:3b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Apr 19 23:36:21 2026 GMT Not After : Apr 23 09:57:21 2026 GMT Subject: CN=F85AB0164915B1A531A9553EDB3CE731503803CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:18:a4:16:62:74:3f:f2:32:b3:59:ad:7f: d5:02:41:71:11:dd:ce:16:91:3f:da:e9:99:e2:55: 50:d0:4d:bd:8e:4d:80:b9:45:91:c2:80:60:dd:00: 16:dc:3a:48:ff:ca:98:c6:e0:4e:b7:3b:64:78:b9: 57:c3:77:31:58:4f:72:38:eb:41:ec:bc:5e:4a:d7: 07:8e:18:e4:0b:f7:34:aa:25:42:ee:41:48:11:d1: 29:af:4c:28:4e:1a:13:a5:21:08:f7:b1:49:98:d4: 0f:6f:a9:db:74:a8:63:df:56:6b:8a:69:2b:dd:74: 3d:1a:52:c9:79:f1:fc:9b:0e:de:f1:59:dc:48:cc: d2:aa:b6:a1:83:47:07:9e:41:4a:8d:ef:b1:b6:73: 54:67:93:b1:4b:eb:60:dc:58:03:56:e0:b0:85:7b: ae:73:81:07:42:6d:29:c0:7c:82:67:1b:63:6b:ea: bf:e8:d6:a8:5d:f1:1b:95:f4:54:bd:00:48:09:20: 3b:f8:ad:60:97:47:f9:e6:b6:75:63:e8:7a:68:e9: 4a:a4:c5:c0:98:fb:8a:77:e6:e9:22:ef:20:c6:05: 93:5a:d3:6a:0a:fe:5b:15:16:b7:21:ba:d7:62:1d: ca:4a:32:f1:2e:69:7d:5d:18:dd:27:f5:b3:9c:51: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5A:B0:16:49:15:B1:A5:31:A9:55:3E:DB:3C:E7:31:50:38:03:CA X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6a:c3:07:eb:85:59:18:82:a6:e0:87:a6:d5:63:8c:e3:7c: 8f:49:66:37:ff:3d:ce:d8:e3:fd:6a:25:1a:f2:95:0e:56:ab: be:17:2b:20:03:83:6e:e6:32:b6:95:63:dc:a3:ae:e7:76:d2: 9c:d4:0a:48:e0:51:70:6b:6a:cd:0a:e1:ed:f7:64:85:ed:8f: 32:66:13:f6:fa:5a:a2:80:06:15:c5:c3:3a:e5:a5:41:87:a3: 44:06:b0:6e:fa:ed:2c:c4:91:3a:f3:02:cd:8d:e4:1f:bc:85: 2b:0f:28:53:5c:04:e5:ba:d2:78:60:a1:13:e2:9f:fc:a6:ef: 94:04:e6:43:d8:ed:6b:22:66:91:69:78:de:37:65:85:52:01: 88:8a:d7:79:96:a5:a2:d7:45:3e:71:64:d6:8a:19:28:4e:52: b4:43:17:6c:9f:b5:0f:87:4c:13:0a:6e:1c:e0:00:f2:68:9b: 33:2c:6c:d0:4f:5b:16:27:52:df:f7:9d:b7:a9:04:a4:ed:3d: 57:55:5f:03:58:d9:b6:70:85:3c:d6:e9:46:ed:ce:74:d9:d1: 86:00:cb:c0:61:9c:36:b0:a8:fb:2c:85:0d:ce:c3:57:a2:b9: fe:00:7d:0f:f1:30:9c:2f:d7:9d:96:f5:3f:ac:8e:41:04:11: 1f:a8:ea:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO03vWF0RhAePsqmzCrESu8WZO0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNjA0MTkyMzM2MjFaFw0yNjA0MjMwOTU3MjFaMDMxMTAvBgNV BAMTKEY4NUFCMDE2NDkxNUIxQTUzMUE5NTUzRURCM0NFNzMxNTAzODAzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdxikFmJ0P/Iys1mtf9UCQXER 3c4WkT/a6ZniVVDQTb2OTYC5RZHCgGDdABbcOkj/ypjG4E63O2R4uVfDdzFYT3I4 60HsvF5K1weOGOQL9zSqJULuQUgR0SmvTChOGhOlIQj3sUmY1A9vqdt0qGPfVmuK aSvddD0aUsl58fybDt7xWdxIzNKqtqGDRweeQUqN77G2c1Rnk7FL62DcWANW4LCF e65zgQdCbSnAfIJnG2Nr6r/o1qhd8RuV9FS9AEgJIDv4rWCXR/nmtnVj6Hpo6Uqk xcCY+4p35uki7yDGBZNa02oK/lsVFrchutdiHcpKMvEuaX1dGN0n9bOcUQnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FqwFkkVsaUxqVU+2zznMVA4A8owHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJqwwfrhVkYgqbgh6bVY4zjfI9JZjf/Pc7Y 4/1qJRrylQ5Wq74XKyADg27mMraVY9yjrud20pzUCkjgUXBras0K4e33ZIXtjzJm E/b6WqKABhXFwzrlpUGHo0QGsG767SzEkTrzAs2N5B+8hSsPKFNcBOW60nhgoRPi n/ym75QE5kPY7WsiZpFpeN43ZYVSAYiK13mWpaLXRT5xZNaKGShOUrRDF2yftQ+H TBMKbhzgAPJomzMsbNBPWxYnUt/3nbepBKTtPVdVXwNY2bZwhTzW6UbtznTZ0YYA y8BhnDawqPsshQ3Ow1eiuf4AfQ/xMJwv152W9T+sjkEEER+o6n4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:35 2026 by rpki-client