$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: AEGTOY+UgHfDkkyWiE94C52ZCI/H50lGs1X1eAIaXOw= Subject key identifier: DE:5C:70:62:4A:72:1D:63:77:11:C8:F0:24:0A:F2:72:B3:0B:35:D1 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 6A6335F0DB993AB012FECF01C2BB779B25EF9A4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 02AA Signing time: Wed 15 Apr 2026 09:50:45 +0000 Manifest this update: Wed 15 Apr 2026 09:45:45 +0000 Manifest next update: Sat 18 Apr 2026 16:06:45 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: U9egMyoSJSivpofCEQYQy7WmP2d90RJr4L9wNJ1QmOY=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:63:35:f0:db:99:3a:b0:12:fe:cf:01:c2:bb:77:9b:25:ef:9a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Apr 15 09:45:45 2026 GMT Not After : Apr 18 16:06:45 2026 GMT Subject: CN=DE5C70624A721D637711C8F0240AF272B30B35D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:09:92:d8:4e:cc:02:05:12:a6:da:66:27: 53:44:0e:76:17:c4:10:d1:30:cb:69:8d:c6:67:a6: a9:4f:b9:cc:12:f3:09:df:0d:41:4d:c7:c4:9d:bb: 95:e5:dc:69:b7:d2:74:86:8e:08:9c:be:eb:2b:6e: 3b:79:f2:7f:bc:c3:72:c7:6b:07:07:23:e0:b3:68: c9:7c:4d:4c:7a:14:50:54:0b:c5:7f:b4:0c:49:63: eb:ad:7b:b2:d0:91:f5:ef:9a:49:72:f6:67:1d:c3: a3:99:11:e4:38:bd:05:bc:4a:2d:d0:de:ed:82:b0: 22:39:90:29:77:0a:c9:86:e2:c9:65:17:73:0f:d6: 99:4e:cf:c4:8b:45:ac:16:28:62:6a:e7:f2:8d:4d: 63:8c:b9:64:f9:1f:d6:63:ca:c4:7a:0d:36:62:41: 1b:a0:13:5b:94:46:59:e8:14:2d:da:ca:4b:c2:b2: ba:ff:54:e1:d1:0e:6a:a4:fe:dc:a2:c9:b6:2d:b1: e5:9a:cd:f6:a4:85:d5:30:df:88:84:e9:07:ec:e1: 43:a4:b9:03:d4:d6:65:78:9e:eb:da:58:1d:4c:ae: d2:b7:73:59:00:a2:cb:61:c8:62:90:28:12:41:00: 7d:8f:50:6b:c7:03:a7:25:9c:1d:74:9f:91:ef:17: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5C:70:62:4A:72:1D:63:77:11:C8:F0:24:0A:F2:72:B3:0B:35:D1 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:53:70:79:aa:90:00:dd:de:c8:a2:66:af:7b:e0:04:3f:ca: 0f:6e:2f:2a:e7:c7:0b:50:98:92:38:18:b7:cc:2b:b9:bc:61: e0:34:b3:17:8f:1c:ba:e7:a4:64:ff:ea:2f:84:de:a1:59:18: 46:6c:b7:36:bd:36:95:ee:5e:8c:d7:a9:24:36:e3:a3:9b:ab: 08:1c:0a:9c:e8:11:3b:d1:13:5d:ed:63:67:93:51:60:73:c1: d2:01:86:c9:02:2f:52:57:0b:34:ba:b3:cd:ae:13:cd:3a:c8: 4f:ea:0d:f5:52:4e:70:ea:c5:48:84:a1:77:36:37:19:de:25: c7:81:2b:6e:fc:28:43:34:24:8a:d1:4b:e6:b2:6f:da:fe:e8: 06:38:df:99:60:13:c1:51:b7:8d:c5:88:70:98:03:0f:25:b3: 6a:cd:b0:31:85:03:90:b6:f7:9c:4d:ee:d3:11:4d:db:82:7b: be:95:86:94:1c:0f:a5:62:42:2d:d2:eb:c8:a7:a6:e7:ca:55: eb:62:b7:ec:fd:e2:72:75:f2:05:e4:ff:46:9c:36:2d:a5:df: 76:b6:37:7c:a1:c9:99:fd:72:72:c5:99:62:02:6e:52:97:a4: 9d:c7:a4:27:2b:cc:ef:71:64:6a:ac:9a:12:f5:9a:40:6f:1a: be:2a:2d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamM18NuZOrAS/s8Bwrt3myXvmkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjA0MTUwOTQ1NDVaFw0yNjA0MTgxNjA2NDVaMDMxMTAvBgNV BAMTKERFNUM3MDYyNEE3MjFENjM3NzExQzhGMDI0MEFGMjcyQjMwQjM1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjgmS2E7MAgUSptpmJ1NEDnYX xBDRMMtpjcZnpqlPucwS8wnfDUFNx8Sdu5Xl3Gm30nSGjgicvusrbjt58n+8w3LH awcHI+CzaMl8TUx6FFBUC8V/tAxJY+ute7LQkfXvmkly9mcdw6OZEeQ4vQW8Si3Q 3u2CsCI5kCl3CsmG4sllF3MP1plOz8SLRawWKGJq5/KNTWOMuWT5H9ZjysR6DTZi QRugE1uURlnoFC3aykvCsrr/VOHRDmqk/tyiybYtseWazfakhdUw34iE6Qfs4UOk uQPU1mV4nuvaWB1MrtK3c1kAosthyGKQKBJBAH2PUGvHA6clnB10n5HvF+xFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3lxwYkpyHWN3EcjwJArycrMLNdEwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdTcHmqkADd3siiZq974AQ/yg9uLyrnxwtQ mJI4GLfMK7m8YeA0sxePHLrnpGT/6i+E3qFZGEZstza9NpXuXozXqSQ246Obqwgc CpzoETvRE13tY2eTUWBzwdIBhskCL1JXCzS6s82uE806yE/qDfVSTnDqxUiEoXc2 NxneJceBK278KEM0JIrRS+ayb9r+6AY435lgE8FRt43FiHCYAw8ls2rNsDGFA5C2 95xN7tMRTduCe76VhpQcD6ViQi3S68inpufKVetit+z94nJ18gXk/0acNi2l33a2 N3yhyZn9cnLFmWICblKXpJ3HpCcrzO9xZGqsmhL1mkBvGr4qLao= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:47 2026 by rpki-client