$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: wRSXgGBX68QcrLiQGy/O1pvDa/OgpaK73Lvn0USOUPo= Subject key identifier: 2D:0B:9C:10:CF:59:75:9A:83:98:72:B4:D0:EE:86:64:A1:54:42:34 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 6FD641387805F0C32203B11119880C226F8E0463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 02E8 Signing time: Fri 17 Apr 2026 09:21:16 +0000 Manifest this update: Fri 17 Apr 2026 09:16:16 +0000 Manifest next update: Mon 20 Apr 2026 10:40:16 +0000 Files and hashes: 1: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: ZbhTpnhvlC+ot1vXIGnAO0O9YCHrvhbkpZrUJwD0KO4=) 2: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: XuqtygeQdlSLNBuSxJctQiS5wnI52yy4HzElprQTstE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d6:41:38:78:05:f0:c3:22:03:b1:11:19:88:0c:22:6f:8e:04:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Apr 17 09:16:16 2026 GMT Not After : Apr 20 10:40:16 2026 GMT Subject: CN=2D0B9C10CF59759A839872B4D0EE8664A1544234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:b7:b0:89:79:ab:83:0a:52:15:72:9e:e9: 23:d0:e7:da:e4:53:de:e8:8e:b6:f2:d2:f3:f4:b4: 2d:11:af:98:01:f2:1d:db:c7:9a:b4:c7:09:7a:ad: f1:38:e2:d4:7e:89:65:44:8c:83:e4:50:20:05:6d: 68:1a:55:9e:6d:ad:8b:dc:91:01:40:89:de:67:c2: 17:4f:01:95:80:5c:ec:4f:94:be:be:c2:b7:83:5c: c1:61:cc:f6:78:00:34:63:42:c0:c8:79:ab:92:6f: 04:67:6e:17:b5:52:74:c3:d9:66:cb:76:58:b4:e7: b5:dd:e6:66:e2:1d:b8:4e:3e:51:38:a9:75:ec:90: 1a:a8:42:cb:25:9c:13:17:a0:9b:6c:53:20:5c:dd: 7b:9b:bd:84:3b:26:b5:5f:1c:9d:b6:73:16:c1:50: f1:f2:e9:aa:a5:b2:f3:c2:00:1e:4b:a1:02:ad:54: 07:f8:78:fe:ea:12:08:f2:56:a2:a5:6b:37:ab:33: 68:48:35:97:bb:97:30:23:33:dd:98:3a:8e:b8:54: 9c:32:c4:47:81:09:33:65:71:f7:6a:ff:f7:b4:0b: 32:1f:4e:d9:55:d6:0b:8f:74:9d:c6:7a:05:f3:0e: bc:16:04:41:17:9d:72:a5:1c:87:5f:d2:92:8b:e2: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:9C:10:CF:59:75:9A:83:98:72:B4:D0:EE:86:64:A1:54:42:34 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:8b:5c:5e:72:d5:1e:e5:65:5d:0f:4b:46:96:8c:7e:cf: 01:ca:69:88:d2:96:c6:22:8d:00:f5:90:61:58:4d:a6:1e:57: 3c:2f:4f:53:35:cb:11:be:8d:31:79:fd:aa:42:57:70:6b:0a: bb:ff:4d:f7:d3:e3:83:7c:09:9c:24:60:0e:64:e6:8b:c8:b8: c0:fd:21:62:62:46:dc:c8:6e:34:60:01:17:60:1b:f2:11:e2: 3b:47:10:a4:cb:fa:fa:f2:ad:8f:22:c4:4a:d8:3c:9e:a0:3a: 19:b3:ff:4c:e4:6d:db:e6:b9:1e:fa:7c:0e:38:52:ed:8b:1c: ef:96:d7:54:ba:d3:61:e0:fe:bf:d4:a7:4c:90:ca:0b:f5:6f: 95:cd:4e:3c:93:81:65:0e:6b:a4:03:c6:e1:c5:b3:8c:35:0a: af:c2:a8:99:2a:0f:f8:e0:79:9c:bb:40:ed:4b:12:9f:07:4e: 0c:4c:49:0c:f0:8a:0b:9d:4a:43:50:07:4e:27:3c:39:a1:57: 89:d5:b6:09:97:a9:1f:4e:3d:15:b4:14:fe:05:b4:94:61:a6: 22:13:5c:4e:4d:9c:1d:3c:3f:6e:7e:29:17:5a:b4:ab:ea:f3: e8:29:0d:f0:73:2f:70:f3:58:92:f5:8a:f9:cc:d7:1c:2e:1d: 0a:da:34:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9ZBOHgF8MMiA7ERGYgMIm+OBGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNjA0MTcwOTE2MTZaFw0yNjA0MjAxMDQwMTZaMDMxMTAvBgNV BAMTKDJEMEI5QzEwQ0Y1OTc1OUE4Mzk4NzJCNEQwRUU4NjY0QTE1NDQyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zLewiXmrgwpSFXKe6SPQ59rk U97ojrby0vP0tC0Rr5gB8h3bx5q0xwl6rfE44tR+iWVEjIPkUCAFbWgaVZ5trYvc kQFAid5nwhdPAZWAXOxPlL6+wreDXMFhzPZ4ADRjQsDIeauSbwRnbhe1UnTD2WbL dli057Xd5mbiHbhOPlE4qXXskBqoQsslnBMXoJtsUyBc3XubvYQ7JrVfHJ22cxbB UPHy6aqlsvPCAB5LoQKtVAf4eP7qEgjyVqKlazerM2hINZe7lzAjM92YOo64VJwy xEeBCTNlcfdq//e0CzIfTtlV1guPdJ3GegXzDrwWBEEXnXKlHIdf0pKL4sk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQucEM9ZdZqDmHK00O6GZKFUQjQwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfdi1xectUe5WVdD0tGlox+zwHKaYjSlsYi jQD1kGFYTaYeVzwvT1M1yxG+jTF5/apCV3BrCrv/TffT44N8CZwkYA5k5ovIuMD9 IWJiRtzIbjRgARdgG/IR4jtHEKTL+vryrY8ixErYPJ6gOhmz/0zkbdvmuR76fA44 Uu2LHO+W11S602Hg/r/Up0yQygv1b5XNTjyTgWUOa6QDxuHFs4w1Cq/CqJkqD/jg eZy7QO1LEp8HTgxMSQzwigudSkNQB04nPDmhV4nVtgmXqR9OPRW0FP4FtJRhpiIT XE5NnB08P25+KRdatKvq8+gpDfBzL3DzWJL1ivnM1xwuHQraNKc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:42 2026 by rpki-client