$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: IT5aFDk3XMFUjb8oPFBf0gANrT992rIvwUdDdi9ll54= Subject key identifier: A3:02:F0:DE:05:A1:9D:90:62:D3:E0:C8:33:76:95:97:F1:55:05:4C Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 607BFE2AC36E1BE526450A5A573F76AAFF552E1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0135 Signing time: Fri 17 Apr 2026 07:32:12 +0000 Manifest this update: Fri 17 Apr 2026 07:27:12 +0000 Manifest next update: Mon 20 Apr 2026 12:41:12 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: NTLbEoPhk4nnrl2hoHzcpaUi/fILKmfVIFOI2PAPWF0=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:fe:2a:c3:6e:1b:e5:26:45:0a:5a:57:3f:76:aa:ff:55:2e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Apr 17 07:27:12 2026 GMT Not After : Apr 20 12:41:12 2026 GMT Subject: CN=A302F0DE05A19D9062D3E0C833769597F155054C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2b:55:24:74:fa:7c:b1:3b:54:e2:05:7f:ab: 6f:86:87:ed:c1:72:65:4c:29:61:a7:25:13:76:72: a2:86:43:71:81:a3:3c:12:10:bb:28:63:e4:19:8c: e1:0d:86:e4:cf:f5:f4:eb:54:a4:9f:d6:05:56:78: 07:1c:06:6a:48:50:2c:c7:66:6e:8a:e7:ea:95:ab: 04:95:15:a6:d8:01:32:87:00:22:01:28:1b:b3:05: 00:3a:ed:d2:b6:40:96:3b:0a:46:19:0c:47:f5:55: 11:e1:17:0d:bb:a6:8b:fd:1d:fa:65:af:f0:0e:f8: 8b:b2:a3:d0:e7:bd:93:04:70:56:9d:d7:f0:75:2c: 1b:1d:93:bd:f9:d3:bd:ff:c3:1a:31:af:5b:64:e0: e5:6b:d1:a3:e1:5b:e7:92:7a:e8:73:cf:60:de:75: 0e:19:1f:f3:3a:35:7f:47:55:13:a5:bc:85:4d:85: c5:bc:49:67:01:ee:0a:dc:7c:12:60:0d:78:b0:89: 55:5f:82:de:80:6b:1f:cd:0d:bb:1c:ae:8b:bf:dc: 17:7b:71:8e:b4:91:f9:52:23:c5:eb:c9:f0:ae:dc: 87:cd:20:f8:bc:e7:09:00:53:a7:cf:3c:4e:fb:99: 65:9b:6f:32:c4:e0:68:f6:ef:2c:a1:3f:7f:e4:61: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:02:F0:DE:05:A1:9D:90:62:D3:E0:C8:33:76:95:97:F1:55:05:4C X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:3c:e1:4c:1c:1d:13:ce:d8:c8:d9:f9:d2:91:f4:e4:6b: d3:4b:02:81:50:49:2d:04:8d:f1:10:20:cf:26:27:75:3b:fe: 85:2a:5e:64:38:88:c0:3f:5e:29:8a:78:9a:8a:6c:cf:b4:ea: 4e:d7:08:31:b8:93:89:8d:95:a5:55:bd:42:6e:d8:93:29:9b: 8e:57:54:eb:49:c2:93:d1:56:37:60:66:24:e5:cf:c1:24:c7: 41:e8:05:0c:52:f7:97:c2:19:3e:3d:e8:a6:47:2a:6f:d4:fd: 54:4d:bb:c7:7f:a4:80:69:22:7e:31:01:94:56:c5:51:52:a0: b8:99:8c:88:fa:a5:e3:88:bf:d2:9a:9f:b5:6d:ce:10:c3:5e: 37:49:de:f5:3e:e4:72:72:ef:b5:a6:36:e3:14:87:15:fd:f5: 13:ef:8e:8a:ed:5a:5d:01:55:9a:d0:2a:a6:0d:21:0a:e2:6f: 7b:90:33:2b:91:63:d0:c7:5c:70:13:73:55:5a:d4:52:3a:43: 33:0f:79:f7:dd:3a:fd:2e:06:b3:7f:b1:f6:36:0a:43:42:e7: a4:41:ec:ae:2b:95:cf:6d:f2:c1:11:c4:38:11:2e:20:76:28: a6:e9:1f:b2:62:46:98:ca:94:5f:b1:ec:a6:ff:60:c4:fe:b5: 56:5e:90:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHv+KsNuG+UmRQpaVz92qv9VLh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjA0MTcwNzI3MTJaFw0yNjA0MjAxMjQxMTJaMDMxMTAvBgNV BAMTKEEzMDJGMERFMDVBMTlEOTA2MkQzRTBDODMzNzY5NTk3RjE1NTA1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2K1UkdPp8sTtU4gV/q2+Gh+3B cmVMKWGnJRN2cqKGQ3GBozwSELsoY+QZjOENhuTP9fTrVKSf1gVWeAccBmpIUCzH Zm6K5+qVqwSVFabYATKHACIBKBuzBQA67dK2QJY7CkYZDEf1VRHhFw27pov9Hfpl r/AO+Iuyo9DnvZMEcFad1/B1LBsdk735073/wxoxr1tk4OVr0aPhW+eSeuhzz2De dQ4ZH/M6NX9HVROlvIVNhcW8SWcB7grcfBJgDXiwiVVfgt6Aax/NDbscrou/3Bd7 cY60kflSI8XryfCu3IfNIPi85wkAU6fPPE77mWWbbzLE4Gj27yyhP3/kYTZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUowLw3gWhnZBi0+DIM3aVl/FVBUwwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFloPOFMHB0TztjI2fnSkfTka9NLAoFQSS0E jfEQIM8mJ3U7/oUqXmQ4iMA/XimKeJqKbM+06k7XCDG4k4mNlaVVvUJu2JMpm45X VOtJwpPRVjdgZiTlz8Ekx0HoBQxS95fCGT496KZHKm/U/VRNu8d/pIBpIn4xAZRW xVFSoLiZjIj6peOIv9Kan7VtzhDDXjdJ3vU+5HJy77WmNuMUhxX99RPvjortWl0B VZrQKqYNIQrib3uQMyuRY9DHXHATc1Va1FI6QzMPeffdOv0uBrN/sfY2CkNC56RB 7K4rlc9t8sERxDgRLiB2KKbpH7JiRpjKlF+x7Kb/YMT+tVZekA8= -----END CERTIFICATE-----Generated at Sat Apr 18 01:52:18 2026 by rpki-client