$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: 5tzJffM7Fq2EdqVRerA5bVXrsVqqbf1zjy+hikqddYU= Subject key identifier: 92:5A:95:B8:8B:7D:F1:82:09:C7:3B:94:99:CE:38:78:E7:4D:E5:69 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 14FE349CE6E528403D3AF0393605782DE580C815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 010F Signing time: Sun 19 Apr 2026 23:11:13 +0000 Manifest this update: Sun 19 Apr 2026 23:06:13 +0000 Manifest next update: Thu 23 Apr 2026 09:17:13 +0000 Files and hashes: 1: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: HjEEqwFbisiB1HxpLqK9D5Yvdme8wEfM87Tmji4apoM=) 2: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) 3: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 09:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fe:34:9c:e6:e5:28:40:3d:3a:f0:39:36:05:78:2d:e5:80:c8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Apr 19 23:06:13 2026 GMT Not After : Apr 23 09:17:13 2026 GMT Subject: CN=925A95B88B7DF18209C73B9499CE3878E74DE569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:ea:01:22:a3:a0:46:5e:e7:28:fd:04:dc: a7:37:15:00:13:d3:31:0a:65:2a:9a:0f:18:54:f5: 01:cc:88:a1:6a:bb:35:5d:e6:83:30:77:0b:7a:1c: ed:89:62:73:1a:7c:95:c9:08:9d:0a:0b:e2:69:6a: c6:42:66:82:2c:34:25:bc:19:77:19:58:66:23:ae: 39:a1:c0:49:7d:34:ee:42:81:8e:6e:43:2f:41:be: 21:6f:33:e1:77:af:be:43:8c:27:57:ba:7a:41:b9: 82:4c:fd:05:c0:52:44:2d:92:0e:1c:1b:34:e0:17: df:f8:14:b1:a3:6d:6a:99:46:60:4c:f8:1f:7f:6a: b2:85:aa:e1:18:51:23:10:aa:84:50:5f:c3:56:f7: fe:25:05:ed:58:67:65:87:81:53:18:05:e9:22:cc: 34:6c:71:fa:27:4e:5e:4a:60:e9:93:13:2f:fd:4c: b8:b2:bc:ec:41:5d:fb:a1:47:3c:8a:57:11:2f:c9: 5e:17:26:1a:d1:fc:82:2f:d7:cd:bf:12:bc:dc:2b: e3:00:c2:e5:2b:bc:62:0e:97:85:23:05:25:dc:bf: 0c:7c:b6:a7:9b:3e:bf:d7:68:05:db:fa:7d:ae:e1: 51:54:ac:1e:5e:f1:e7:94:98:5e:e4:61:84:5b:86: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:95:B8:8B:7D:F1:82:09:C7:3B:94:99:CE:38:78:E7:4D:E5:69 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:dd:65:0e:b8:7b:c6:e8:18:77:49:d8:eb:11:a7:92:13:1a: 77:a8:c8:fb:14:73:83:f2:52:94:ca:56:b6:a0:58:d3:59:98: 86:5b:ea:fb:e3:84:30:e9:9d:61:19:5c:bf:99:83:60:2c:c0: bb:65:f2:69:da:4b:79:48:0a:6c:1b:70:09:e3:ba:50:d7:ea: 57:e5:22:68:de:ae:3e:d4:09:78:a7:77:9f:8e:98:97:8b:e7: 1e:40:30:4e:7a:1e:2a:ff:78:9f:4c:1c:93:ee:61:96:97:7d: 1e:de:e3:f3:7b:c6:cd:7e:6c:33:39:e3:33:4e:05:79:04:e2: 73:10:e4:6e:52:4f:9f:21:4e:b7:87:a1:da:57:ed:fd:70:74: 4a:1c:19:11:87:9d:2b:c3:37:3f:25:42:40:9d:fe:55:e2:17: 60:51:60:3a:6e:94:61:20:39:5e:98:dc:1d:48:49:b6:71:cd: 77:7e:f5:cd:db:73:90:34:87:df:b8:29:46:0f:f5:0a:d7:7d: cf:11:ce:93:8b:52:4b:f2:0a:b2:fa:45:34:88:4c:7b:80:96: ed:14:09:02:9e:83:e0:d3:4f:f0:1f:5e:4e:3a:f0:d6:6a:0f: b9:f8:ac:41:f0:b9:f7:30:8c:bb:15:e3:fd:ee:a3:fb:64:49: c3:8c:a6:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP40nOblKEA9OvA5NgV4LeWAyBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNjA0MTkyMzA2MTNaFw0yNjA0MjMwOTE3MTNaMDMxMTAvBgNV BAMTKDkyNUE5NUI4OEI3REYxODIwOUM3M0I5NDk5Q0UzODc4RTc0REU1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ReoBIqOgRl7nKP0E3Kc3FQAT 0zEKZSqaDxhU9QHMiKFquzVd5oMwdwt6HO2JYnMafJXJCJ0KC+JpasZCZoIsNCW8 GXcZWGYjrjmhwEl9NO5CgY5uQy9BviFvM+F3r75DjCdXunpBuYJM/QXAUkQtkg4c GzTgF9/4FLGjbWqZRmBM+B9/arKFquEYUSMQqoRQX8NW9/4lBe1YZ2WHgVMYBeki zDRscfonTl5KYOmTEy/9TLiyvOxBXfuhRzyKVxEvyV4XJhrR/IIv182/ErzcK+MA wuUrvGIOl4UjBSXcvwx8tqebPr/XaAXb+n2u4VFUrB5e8eeUmF7kYYRbhg0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklqVuIt98YIJxzuUmc44eOdN5WkwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITdZQ64e8boGHdJ2OsRp5ITGneoyPsUc4Py UpTKVragWNNZmIZb6vvjhDDpnWEZXL+Zg2AswLtl8mnaS3lICmwbcAnjulDX6lfl Imjerj7UCXind5+OmJeL5x5AME56Hir/eJ9MHJPuYZaXfR7e4/N7xs1+bDM54zNO BXkE4nMQ5G5ST58hTreHodpX7f1wdEocGRGHnSvDNz8lQkCd/lXiF2BRYDpulGEg OV6Y3B1ISbZxzXd+9c3bc5A0h9+4KUYP9QrXfc8RzpOLUkvyCrL6RTSITHuAlu0U CQKeg+DTT/AfXk468NZqD7n4rEHwufcwjLsV4/3uo/tkScOMpqM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:33 2026 by rpki-client