$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json) Hash identifier: cFrj3RcdOXamavBysJ+wcob5dWT/N0JW8S7fe7ebK3o= Subject key identifier: D3:DF:5A:9C:6B:07:F4:17:91:86:85:A4:FA:B4:5C:77:8A:1E:0D:CA Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Certificate serial: 6D0062A700DDF2CF30680D20813E4063CFAA0FB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft Manifest number: 02EC Signing time: Fri 17 Apr 2026 16:01:31 +0000 Manifest this update: Fri 17 Apr 2026 15:56:31 +0000 Manifest next update: Mon 20 Apr 2026 21:41:31 +0000 Files and hashes: 1: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: d9cbbbtThqmuG/xJdZo1TGQBdB4nFux+YrQhFEnoj1g=) 2: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=) 3: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: hKnfQop/N4cek6efrNNaKJaJd9cFCSd3e1z+gUbsidI=) 4: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:00:62:a7:00:dd:f2:cf:30:68:0d:20:81:3e:40:63:cf:aa:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Validity Not Before: Apr 17 15:56:31 2026 GMT Not After : Apr 20 21:41:31 2026 GMT Subject: CN=D3DF5A9C6B07F417918685A4FAB45C778A1E0DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:ec:75:33:13:9c:27:b4:fc:dd:14:e7:55: 07:7b:23:30:00:e8:bb:72:19:2c:3a:02:a4:08:f3: 61:1a:63:04:b0:1b:7b:98:cf:86:9e:48:9a:ba:95: 78:71:16:6f:8f:20:c3:4b:91:c7:5e:0f:fb:cf:38: e5:3e:58:88:58:6e:e3:a4:6e:65:6d:13:88:4f:0e: 9e:e0:df:02:c8:57:2b:f6:ed:4d:0e:99:09:a9:18: 89:28:75:ce:e3:3d:18:e0:d3:e1:36:00:29:4c:f2: 71:a6:63:36:2e:5b:b2:98:6b:24:7d:3d:92:39:9a: 81:10:bb:43:42:7b:e2:e3:9d:98:fe:50:ec:cb:3f: ca:d3:89:b2:9c:fe:71:cf:a4:23:ce:73:99:e6:69: 46:99:8e:e0:c3:f7:3f:cd:d2:ce:d1:d4:ba:3e:96: 44:73:ca:e8:4e:8b:a1:3e:0b:b6:90:57:c1:4b:47: ef:6f:3c:ff:6a:55:4a:38:3e:6d:0b:3f:7c:22:a6: 4e:b6:d3:4e:07:cf:4c:a5:c4:d1:ac:89:d6:fb:cb: ce:ae:29:fe:2c:34:b4:60:48:df:71:53:9d:a1:05: 6e:7e:ef:17:54:8b:ed:7f:d3:d6:7d:26:55:1a:0b: ee:4d:41:04:be:1d:ee:b5:2f:51:18:30:c6:d7:18: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:5A:9C:6B:07:F4:17:91:86:85:A4:FA:B4:5C:77:8A:1E:0D:CA X509v3 Authority Key Identifier: keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:2f:3b:b5:32:ec:05:b6:ed:75:5b:74:cb:ed:76:3b:07: ee:4d:1d:34:01:1f:7c:51:65:38:f7:42:0c:5a:5d:6f:3c:e6: fe:43:99:16:a6:40:e4:c0:f0:ea:df:d8:22:d0:71:9c:69:ba: 72:40:a0:a0:00:2a:5c:64:89:f3:6d:79:3d:15:3e:43:89:96: cf:89:a4:44:ef:f3:8d:7c:12:b3:4d:88:c4:cf:12:cb:9b:8e: b4:4d:03:b4:24:9d:1e:0a:11:5c:01:f6:a9:bf:95:22:07:7d: 5a:ee:3f:18:2a:18:37:b2:54:d7:f3:00:12:d1:94:d0:8e:c9: 2e:44:22:a2:1a:ad:7f:9d:a4:68:42:e6:62:bc:1f:01:ba:e5: a0:17:07:12:d9:d7:e0:f3:fb:cb:64:39:ce:16:ee:ff:13:09: 56:9d:43:c1:da:1d:03:49:e4:12:89:be:8c:c1:f2:2c:db:17: 12:40:37:ed:21:33:95:8f:d7:3a:b6:24:51:65:fb:64:a9:e0: 72:a4:c3:44:8a:73:eb:17:fa:c8:93:19:3b:28:02:7d:e2:f9: df:31:11:14:14:53:23:ae:3b:6b:2e:37:6c:04:52:0d:48:e9: a3:54:3a:7d:2d:97:d8:e4:ab:36:78:6c:63:09:46:0e:66:e4: bd:cb:04:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQBipwDd8s8waA0ggT5AY8+qD7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3 QzE1RDE5MjAeFw0yNjA0MTcxNTU2MzFaFw0yNjA0MjAyMTQxMzFaMDMxMTAvBgNV BAMTKEQzREY1QTlDNkIwN0Y0MTc5MTg2ODVBNEZBQjQ1Qzc3OEExRTBEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6ex1MxOcJ7T83RTnVQd7IzAA 6LtyGSw6AqQI82EaYwSwG3uYz4aeSJq6lXhxFm+PIMNLkcdeD/vPOOU+WIhYbuOk bmVtE4hPDp7g3wLIVyv27U0OmQmpGIkodc7jPRjg0+E2AClM8nGmYzYuW7KYayR9 PZI5moEQu0NCe+LjnZj+UOzLP8rTibKc/nHPpCPOc5nmaUaZjuDD9z/N0s7R1Lo+ lkRzyuhOi6E+C7aQV8FLR+9vPP9qVUo4Pm0LP3wipk62004Hz0ylxNGsidb7y86u Kf4sNLRgSN9xU52hBW5+7xdUi+1/09Z9JlUaC+5NQQS+He61L1EYMMbXGLtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU099anGsH9BeRhoWk+rRcd4oeDcowHwYDVR0j BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1 RDE5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQy MjY3QzE1RDE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCrLzu1MuwFtu11W3TL7XY7B+5NHTQBH3xR ZTj3QgxaXW885v5DmRamQOTA8Orf2CLQcZxpunJAoKAAKlxkifNteT0VPkOJls+J pETv8418ErNNiMTPEsubjrRNA7QknR4KEVwB9qm/lSIHfVruPxgqGDeyVNfzABLR lNCOyS5EIqIarX+dpGhC5mK8HwG65aAXBxLZ1+Dz+8tkOc4W7v8TCVadQ8HaHQNJ 5BKJvozB8izbFxJAN+0hM5WP1zq2JFFl+2Sp4HKkw0SKc+sX+siTGTsoAn3i+d8x ERQUUyOuO2suN2wEUg1I6aNUOn0tl9jkqzZ4bGMJRg5m5L3LBF0= -----END CERTIFICATE-----Generated at Sat Apr 18 04:41:53 2026 by rpki-client