$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: gNqFdMvvnXPIBQR+HKfFh3fOGdqbWjPU5DEK0bA+Y4w= Subject key identifier: F3:2B:43:0C:DF:22:1D:8B:1B:8A:E3:84:B3:7E:5B:9F:13:FD:E4:3C Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 11C4AC092573164238A17762446180B44428C55F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 014E Signing time: Tue 21 Apr 2026 16:01:50 +0000 Manifest this update: Tue 21 Apr 2026 15:56:50 +0000 Manifest next update: Fri 24 Apr 2026 16:33:50 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: 7hpzLqi7bR7jbDpSmzzw0ceCBqRyTb6dTFitlDv7OLo=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: L5i/E5G2yR4p96EaiaxVuLqhNScyIzpSwsnYjpL8mEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c4:ac:09:25:73:16:42:38:a1:77:62:44:61:80:b4:44:28:c5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Apr 21 15:56:50 2026 GMT Not After : Apr 24 16:33:50 2026 GMT Subject: CN=F32B430CDF221D8B1B8AE384B37E5B9F13FDE43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:06:27:97:eb:66:3e:60:80:3c:e0:31:cd: 8e:c5:5e:04:a9:4b:0b:1f:b6:04:b5:eb:de:fd:19: e1:25:5b:f5:a2:43:47:90:e5:7d:2c:4b:53:14:4a: 77:7e:e4:af:8d:07:a4:33:c9:69:63:14:d4:03:37: 92:e4:91:98:a3:c0:bc:5c:2a:fe:70:87:f6:a6:de: 3a:5a:83:96:63:4c:c9:ca:33:6b:63:ab:3b:c6:db: 36:4d:a2:57:7c:75:58:73:9f:9b:16:8a:de:5e:64: 6f:3b:14:ce:82:04:77:09:73:07:67:81:f1:e5:1b: ac:21:0e:d3:af:39:3f:bf:3b:df:f4:ec:5c:d1:4c: b9:c2:95:04:c1:30:90:ba:f9:b7:19:7d:18:0f:0d: 7e:5a:56:1c:be:f1:0a:b4:88:d9:85:dd:44:2f:ae: 7b:23:0c:e6:e8:3e:84:e8:c6:27:2d:2a:f8:a8:92: 14:d3:20:46:d5:09:7e:c4:03:bc:f4:55:36:36:5d: 89:3e:b0:68:9d:c0:68:7e:5d:6d:ae:3d:1c:b8:c4: d2:ac:18:68:d3:df:99:b0:b2:34:59:a8:f7:ea:a1: 9a:74:a6:2a:26:ce:0c:32:9e:a6:5e:11:36:01:d0: 2f:f9:f4:d2:50:2d:b5:56:9e:cf:d4:fd:c4:63:5f: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:43:0C:DF:22:1D:8B:1B:8A:E3:84:B3:7E:5B:9F:13:FD:E4:3C X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bd:75:aa:65:dd:65:41:66:78:af:5f:28:de:02:09:c3:f7: 70:1b:d6:95:e0:ab:9f:83:69:88:9f:5f:25:f2:e3:28:f4:f6: 88:54:68:a3:a1:82:3f:82:42:bf:0d:82:c3:bb:76:95:31:3a: ef:f2:e0:37:0e:89:f9:32:08:6c:4f:2b:a1:8c:9b:6b:16:b2: 0c:c1:e4:cc:8f:17:d9:6c:c8:c5:6c:fa:4a:e0:2c:43:e9:f3: 9c:01:01:9f:2e:44:07:95:ac:60:42:d6:f2:b4:83:cc:9d:a4: b8:f7:09:0d:e0:3c:6a:dc:cb:1a:62:c8:f4:6a:da:c9:3a:7d: f4:a8:c1:04:d5:67:32:6c:38:b3:df:e9:8f:8b:6d:3f:de:5d: 96:4f:c5:db:9a:6c:e4:e0:27:25:0e:7c:9c:99:86:a7:02:c7: 16:4e:f1:58:09:0d:86:ed:e4:f2:47:a2:3a:b9:5a:fb:9d:d6: 22:2c:9b:ee:56:12:ea:99:aa:1a:4d:29:5b:de:67:b4:5a:d0: bd:ae:9e:37:92:ba:92:8b:82:08:37:cc:b0:80:cf:a7:96:e0: 23:ae:c3:68:24:ce:5f:2a:cb:78:70:2e:b9:7c:84:24:b6:6c: d5:29:82:fd:28:3d:12:3f:d3:cc:14:3a:d6:3a:8b:88:9c:98: 6a:88:ec:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcSsCSVzFkI4oXdiRGGAtEQoxV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNjA0MjExNTU2NTBaFw0yNjA0MjQxNjMzNTBaMDMxMTAvBgNV BAMTKEYzMkI0MzBDREYyMjFEOEIxQjhBRTM4NEIzN0U1QjlGMTNGREU0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVwYnl+tmPmCAPOAxzY7FXgSp SwsftgS16979GeElW/WiQ0eQ5X0sS1MUSnd+5K+NB6QzyWljFNQDN5LkkZijwLxc Kv5wh/am3jpag5ZjTMnKM2tjqzvG2zZNold8dVhzn5sWit5eZG87FM6CBHcJcwdn gfHlG6whDtOvOT+/O9/07FzRTLnClQTBMJC6+bcZfRgPDX5aVhy+8Qq0iNmF3UQv rnsjDOboPoToxictKviokhTTIEbVCX7EA7z0VTY2XYk+sGidwGh+XW2uPRy4xNKs GGjT35mwsjRZqPfqoZp0piomzgwynqZeETYB0C/59NJQLbVWns/U/cRjX99DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ytDDN8iHYsbiuOEs35bnxP95DwwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm9dapl3WVBZnivXyjeAgnD93Ab1pXgq5+D aYifXyXy4yj09ohUaKOhgj+CQr8NgsO7dpUxOu/y4DcOifkyCGxPK6GMm2sWsgzB 5MyPF9lsyMVs+krgLEPp85wBAZ8uRAeVrGBC1vK0g8ydpLj3CQ3gPGrcyxpiyPRq 2sk6ffSowQTVZzJsOLPf6Y+LbT/eXZZPxduabOTgJyUOfJyZhqcCxxZO8VgJDYbt 5PJHojq5Wvud1iIsm+5WEuqZqhpNKVveZ7Ra0L2unjeSupKLggg3zLCAz6eW4COu w2gkzl8qy3hwLrl8hCS2bNUpgv0oPRI/08wUOtY6i4icmGqI7Do= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:35 2026 by rpki-client