$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: H8Kvw8MbsQoR6GcQWzQqrlET7W0SZ9qgJBkcAA0zUII= Subject key identifier: 8C:98:32:48:5E:CA:2D:97:8C:01:11:BB:FB:C3:54:2A:1A:E2:20:A7 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 648234E47DE4CAE669F00453E49BCB4247E91155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 0200 Signing time: Fri 17 Apr 2026 17:50:49 +0000 Manifest this update: Fri 17 Apr 2026 17:45:48 +0000 Manifest next update: Tue 21 Apr 2026 04:05:48 +0000 Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: 8TtNjQ+jhYnQg+vAZWLjV1Il3diHaa3yfqTfU0ehlKE=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:34:e4:7d:e4:ca:e6:69:f0:04:53:e4:9b:cb:42:47:e9:11:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Apr 17 17:45:48 2026 GMT Not After : Apr 21 04:05:48 2026 GMT Subject: CN=8C9832485ECA2D978C0111BBFBC3542A1AE220A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:20:f2:79:ae:5a:3e:96:47:f0:65:76:0c: 40:d4:9f:ea:78:cd:fe:d7:e1:b9:47:b3:5e:79:1d: be:8f:4b:9e:3b:84:64:e4:87:55:d1:82:36:33:0d: 1e:66:42:be:b1:f6:05:5e:4e:42:5a:8f:dc:76:de: a3:9d:8c:69:88:0b:ae:19:21:ff:6f:aa:14:be:33: ea:79:73:13:3e:a8:77:18:46:1c:29:23:89:7c:e0: 60:de:d1:7e:f8:56:00:34:30:b9:dc:ab:7d:6c:a8: 25:bb:fc:95:f2:9f:38:89:11:91:ce:bd:70:cc:1e: eb:82:67:0d:fa:07:10:97:b7:45:38:3e:7c:e5:e7: fa:bc:2e:f2:a8:fa:3a:d9:48:f0:7a:8b:b1:c8:11: f3:b7:2f:63:a6:36:f9:70:53:2f:74:9e:a8:f5:cb: 50:b8:0e:75:6d:23:31:3d:e6:ee:7f:b3:c5:21:45: 78:c0:db:0e:61:60:af:49:3d:a8:c7:db:e7:87:e1: e0:cb:06:12:c9:07:af:65:82:06:5a:92:76:3b:43: 32:83:55:24:5a:c4:ce:c9:55:92:2b:da:60:10:32: 7d:05:75:86:95:48:d4:a0:f1:85:e3:39:43:42:df: 51:81:62:42:7e:73:63:c7:d2:b4:7e:d3:60:bf:2f: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:98:32:48:5E:CA:2D:97:8C:01:11:BB:FB:C3:54:2A:1A:E2:20:A7 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:54:c2:92:12:3d:6f:8a:45:67:48:03:c7:61:cb:dd:74: 1f:1d:88:a2:ac:2f:60:50:83:fe:04:3b:63:73:79:a7:20:65: 49:17:35:95:9f:ae:42:6d:37:9e:1b:7f:f7:9f:c8:ac:73:92: 63:0c:db:36:05:e8:51:f9:df:f3:2a:cc:be:f8:82:2a:19:6f: c1:21:b7:da:2b:25:60:7b:23:e0:16:ee:a0:87:1d:f6:c4:48: 40:16:00:be:4d:54:00:2b:fa:e9:c3:4a:43:b8:85:2f:b1:0e: 4b:71:1b:5c:1d:e2:87:57:fd:0f:2b:40:d9:9b:e5:18:af:bc: 0b:b3:26:ef:af:db:8c:18:07:f4:53:f2:12:06:c4:9e:c0:b3: f4:96:2f:7f:0b:79:9f:7d:84:a2:c4:97:b2:5b:0e:cd:55:5d: c5:96:4b:8a:69:f0:91:af:42:b6:20:7e:d7:74:58:d9:60:0c: 97:1f:f1:26:92:15:ea:61:f1:fa:71:46:2e:53:e0:3b:94:e0: 7c:a0:69:c5:da:f2:7d:37:43:79:b5:1a:c7:78:7a:9a:98:22: b9:0f:17:a5:97:38:b2:3f:27:60:61:e5:73:1d:87:ea:07:db: 64:22:b9:b5:af:e1:3f:76:73:dd:86:a9:bd:cf:c2:21:b5:17: ab:60:d6:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZII05H3kyuZp8ART5JvLQkfpEVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNjA0MTcxNzQ1NDhaFw0yNjA0MjEwNDA1NDhaMDMxMTAvBgNV BAMTKDhDOTgzMjQ4NUVDQTJEOTc4QzAxMTFCQkZCQzM1NDJBMUFFMjIwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6yDyea5aPpZH8GV2DEDUn+p4 zf7X4blHs155Hb6PS547hGTkh1XRgjYzDR5mQr6x9gVeTkJaj9x23qOdjGmIC64Z If9vqhS+M+p5cxM+qHcYRhwpI4l84GDe0X74VgA0MLncq31sqCW7/JXynziJEZHO vXDMHuuCZw36BxCXt0U4Pnzl5/q8LvKo+jrZSPB6i7HIEfO3L2OmNvlwUy90nqj1 y1C4DnVtIzE95u5/s8UhRXjA2w5hYK9JPajH2+eH4eDLBhLJB69lggZaknY7QzKD VSRaxM7JVZIr2mAQMn0FdYaVSNSg8YXjOUNC31GBYkJ+c2PH0rR+02C/L6T/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJgySF7KLZeMARG7+8NUKhriIKcwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvIVMKSEj1vikVnSAPHYcvddB8diKKsL2BQ g/4EO2NzeacgZUkXNZWfrkJtN54bf/efyKxzkmMM2zYF6FH53/MqzL74gioZb8Eh t9orJWB7I+AW7qCHHfbESEAWAL5NVAAr+unDSkO4hS+xDktxG1wd4odX/Q8rQNmb 5RivvAuzJu+v24wYB/RT8hIGxJ7As/SWL38LeZ99hKLEl7JbDs1VXcWWS4pp8JGv QrYgftd0WNlgDJcf8SaSFeph8fpxRi5T4DuU4HygacXa8n03Q3m1Gsd4epqYIrkP F6WXOLI/J2Bh5XMdh+oH22QiubWv4T92c92Gqb3PwiG1F6tg1nM= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:41 2026 by rpki-client