$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: bNIIXYZ6x0tWdhii+MfoSc/WGvMp1I467de0TLP6eAs= Subject key identifier: 9C:1D:CC:79:B6:99:90:CB:B5:37:E2:D3:8E:9B:51:06:BE:48:A5:00 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 2FCC4468E3E3434585D7980942F0E356078C7B20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0151 Signing time: Mon 20 Apr 2026 07:22:11 +0000 Manifest this update: Mon 20 Apr 2026 07:17:11 +0000 Manifest next update: Thu 23 Apr 2026 10:09:11 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: kSIUpz7wE1I4vrpz314AAJXf2X8CuM1WAOZm5ifQkgw=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: Re1BfpdFyUDYjfrU456vx+e4oEcGnjf9fKai/wOjz5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 10:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cc:44:68:e3:e3:43:45:85:d7:98:09:42:f0:e3:56:07:8c:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Apr 20 07:17:11 2026 GMT Not After : Apr 23 10:09:11 2026 GMT Subject: CN=9C1DCC79B69990CBB537E2D38E9B5106BE48A500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:e4:cc:c0:1c:fe:5a:5f:04:e4:3a:24:5e: e9:3c:11:0e:ce:39:67:f0:9e:23:22:60:a6:45:fb: 7b:a5:15:a0:9c:63:39:73:7e:73:57:bd:9b:cd:77: f2:ac:9d:99:0a:f2:71:bf:af:67:73:43:1d:02:b7: 15:a4:93:94:21:f1:38:2c:6c:91:bf:c0:c7:9f:aa: 4d:bf:2e:d2:71:61:4e:ee:fe:21:87:cd:00:38:4f: e1:ab:0f:68:22:81:99:64:a8:2f:6a:fa:e9:06:2e: 4c:91:2f:a7:4c:02:45:15:d1:1b:08:c7:e8:af:77: 21:f5:0e:da:36:2d:65:5b:01:21:95:33:98:bb:5b: c8:f7:53:3c:c3:ff:05:99:4e:f1:83:3f:79:05:6b: ac:2a:9f:6a:42:b6:ca:19:2c:96:66:33:e3:eb:ea: 4d:d2:ae:83:0e:42:06:bd:5b:05:9c:31:d1:27:ef: 8e:95:5f:7c:93:29:b1:33:b1:a7:ac:a4:3c:87:b8: a0:af:19:e3:87:85:76:89:f0:41:d6:f9:b7:5a:ce: f1:db:71:c6:5f:d2:c4:1d:69:51:b7:36:c5:1e:9b: b6:81:b3:c0:f2:59:2c:3c:df:cc:b0:50:00:66:f5: 66:c6:15:58:d5:27:c0:2e:c5:d3:0d:45:a5:58:f4: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1D:CC:79:B6:99:90:CB:B5:37:E2:D3:8E:9B:51:06:BE:48:A5:00 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:70:6a:58:9b:d7:da:63:3a:3d:48:89:38:a1:7c:1b:14:e8: 19:eb:0d:2c:dc:c8:62:58:d6:98:9e:11:94:d4:6b:8d:59:51: ae:c3:07:54:53:cb:e5:4b:cb:c2:1e:e0:67:d1:32:f7:1f:1a: 81:05:e8:0a:1e:15:ed:1c:2e:8b:54:8c:d4:cd:f6:a5:ee:11: 0d:8c:99:39:9a:5b:5c:49:6c:36:d6:b3:bd:2f:0d:0e:4e:6e: 7a:91:03:f4:56:3d:80:c8:7f:34:ba:7a:cc:23:89:30:c8:66: 33:eb:31:68:de:e1:fb:b2:fe:3d:44:7a:6a:06:0a:fe:8b:87: 61:e7:c9:2e:6b:33:70:7c:93:bc:0e:8d:3c:1f:20:37:3b:77: 10:f9:7f:0a:ca:23:44:73:03:aa:03:b3:29:77:39:27:10:16: 51:93:99:d0:e7:a7:1e:81:83:03:c7:25:41:77:7f:24:44:21: 41:1f:7d:13:a5:e7:3d:72:ae:46:3a:4e:c3:2d:8e:f8:e7:10: 4e:15:94:39:aa:ff:88:a6:f9:fe:c1:9e:00:5e:9a:1e:41:4b: d2:ce:11:d3:6b:79:e4:63:51:eb:66:03:d4:27:0b:1b:0d:23: e5:d5:37:b1:9a:92:69:85:27:87:ca:fd:fa:de:cd:bd:cd:56: ac:59:ab:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8xEaOPjQ0WF15gJQvDjVgeMeyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNjA0MjAwNzE3MTFaFw0yNjA0MjMxMDA5MTFaMDMxMTAvBgNV BAMTKDlDMURDQzc5QjY5OTkwQ0JCNTM3RTJEMzhFOUI1MTA2QkU0OEE1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTeTMwBz+Wl8E5DokXuk8EQ7O OWfwniMiYKZF+3ulFaCcYzlzfnNXvZvNd/KsnZkK8nG/r2dzQx0CtxWkk5Qh8Tgs bJG/wMefqk2/LtJxYU7u/iGHzQA4T+GrD2gigZlkqC9q+ukGLkyRL6dMAkUV0RsI x+ivdyH1Dto2LWVbASGVM5i7W8j3UzzD/wWZTvGDP3kFa6wqn2pCtsoZLJZmM+Pr 6k3SroMOQga9WwWcMdEn746VX3yTKbEzsaespDyHuKCvGeOHhXaJ8EHW+bdazvHb ccZf0sQdaVG3NsUem7aBs8DyWSw838ywUABm9WbGFVjVJ8AuxdMNRaVY9ITvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnB3MebaZkMu1N+LTjptRBr5IpQAwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJwalib19pjOj1IiTihfBsU6BnrDSzcyGJY 1pieEZTUa41ZUa7DB1RTy+VLy8Ie4GfRMvcfGoEF6AoeFe0cLotUjNTN9qXuEQ2M mTmaW1xJbDbWs70vDQ5ObnqRA/RWPYDIfzS6eswjiTDIZjPrMWje4fuy/j1EemoG Cv6Lh2HnyS5rM3B8k7wOjTwfIDc7dxD5fwrKI0RzA6oDsyl3OScQFlGTmdDnpx6B gwPHJUF3fyREIUEffROl5z1yrkY6TsMtjvjnEE4VlDmq/4im+f7BngBemh5BS9LO EdNreeRjUetmA9QnCxsNI+XVN7GakmmFJ4fK/frezb3NVqxZq/o= -----END CERTIFICATE-----Generated at Wed Apr 22 10:00:34 2026 by rpki-client