$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: rQOdDGkitBKDx8I9S2fp4CYGsfnE9opDQy+M4hnanh4= Subject key identifier: 17:76:81:5F:66:6E:8C:1B:42:4D:C4:35:95:B4:13:C8:95:75:20:33 Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 20707B89E59225762B986DFD1AE0C64C50208524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 029C Signing time: Sun 19 Apr 2026 09:21:51 +0000 Manifest this update: Sun 19 Apr 2026 09:16:51 +0000 Manifest next update: Wed 22 Apr 2026 17:58:51 +0000 Files and hashes: 1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 87R1PuyhfrxdjwQzRqLTxL2d+b662e1JTgNI5Ta3odE=) 2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: C5Tq331HOxIpoDyCifcP3xL7Rqpg2//FSSaLWr+UtUo=) 3: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: HCZA2Dkaf0AYhdHhm+/ujp4EakaURfA1i4HAbOdk6Co=) 4: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: c0Tt810s0A4yuv3LtXg5VGz99zbTTmsH5CTwnSdAgpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:70:7b:89:e5:92:25:76:2b:98:6d:fd:1a:e0:c6:4c:50:20:85:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Apr 19 09:16:51 2026 GMT Not After : Apr 22 17:58:51 2026 GMT Subject: CN=1776815F666E8C1B424DC43595B413C895752033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:23:ca:8d:6d:34:c9:32:05:a8:08:1a:35: 82:06:2b:37:ae:b0:1f:35:d7:af:d0:9d:6e:de:45: b5:fe:5d:19:8c:18:98:34:3e:d4:36:5d:9c:d7:58: 31:c6:bc:54:7b:fc:f8:0d:49:da:6c:56:fb:23:df: b0:83:1f:1e:ae:6b:de:41:ee:ea:62:fe:14:7c:0c: b9:a8:84:99:25:76:52:17:7e:b4:9c:10:f9:d8:3c: b9:65:67:51:e4:7c:54:6b:53:08:17:84:68:4b:bf: cf:59:e9:db:36:f2:ef:fe:fb:6c:96:2f:ef:23:8f: d4:b7:39:47:4c:8c:de:25:01:59:b8:bd:85:c7:32: 99:39:66:78:3f:28:a3:95:0f:4e:2a:0d:31:eb:96: 79:1d:9c:fc:82:5a:8e:d8:3b:d1:94:87:ba:40:02: de:87:bc:41:64:b6:69:b9:21:af:56:66:e0:54:8c: 27:56:98:38:d9:d5:fb:62:13:4b:16:50:ba:a4:6d: a8:0a:0c:8c:a6:26:c2:74:3c:ad:02:ce:e2:c4:b4: f3:00:11:9f:94:a3:59:c0:44:61:7e:b1:74:9b:33: 16:f0:1b:1b:08:45:49:f4:7d:69:09:53:45:95:17: 27:cf:5c:06:11:6d:6b:80:ab:f2:4e:9f:e8:bc:21: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:76:81:5F:66:6E:8C:1B:42:4D:C4:35:95:B4:13:C8:95:75:20:33 X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:5f:1c:37:b6:df:1c:42:dc:9d:d8:fc:7a:ef:a1:18:55: 0c:ef:1d:bf:93:3c:82:17:fb:39:b4:a7:98:a8:dc:cf:8f:4d: 90:57:48:ae:ed:ac:f0:18:10:e9:0b:dd:79:4d:7b:dc:b7:c4: 1b:56:c5:f8:a0:6e:ba:91:1a:c4:0a:87:46:e6:b7:e3:4b:9f: 41:58:0b:f5:06:19:b8:d7:b1:09:a9:db:c1:bc:c8:67:bf:83: 47:88:af:51:68:a5:fa:38:72:67:58:3a:73:a5:25:64:50:9b: 28:92:3a:6f:8d:00:12:c3:d2:dd:c9:e8:f2:e5:41:54:78:52: 84:50:9e:bd:f7:0c:28:1c:e3:1b:08:3b:d8:a2:d3:62:18:d7: b2:b5:b8:50:32:62:9e:31:f8:1c:ee:26:29:08:34:42:4a:da: f0:70:73:3a:25:03:f8:35:1c:f4:92:66:1a:7f:fa:38:e9:e6: 3a:36:08:48:29:e4:2d:cb:e2:9c:61:77:c5:4e:26:b8:2d:64: 11:9e:54:9d:0d:95:4b:bb:cf:6e:df:3a:8b:6c:e7:af:de:d3: 61:6d:e9:d2:e1:ef:2b:f8:3f:68:1f:9c:4a:83:fd:92:d3:40: d4:9a:9f:57:3f:02:4c:87:2a:c0:41:25:e8:ad:19:96:50:4a: 00:cc:bf:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHB7ieWSJXYrmG39GuDGTFAghSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNjA0MTkwOTE2NTFaFw0yNjA0MjIxNzU4NTFaMDMxMTAvBgNV BAMTKDE3NzY4MTVGNjY2RThDMUI0MjREQzQzNTk1QjQxM0M4OTU3NTIwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iSPKjW00yTIFqAgaNYIGKzeu sB8116/QnW7eRbX+XRmMGJg0PtQ2XZzXWDHGvFR7/PgNSdpsVvsj37CDHx6ua95B 7upi/hR8DLmohJkldlIXfrScEPnYPLllZ1HkfFRrUwgXhGhLv89Z6ds28u/++2yW L+8jj9S3OUdMjN4lAVm4vYXHMpk5Zng/KKOVD04qDTHrlnkdnPyCWo7YO9GUh7pA At6HvEFktmm5Ia9WZuBUjCdWmDjZ1ftiE0sWULqkbagKDIymJsJ0PK0CzuLEtPMA EZ+Uo1nARGF+sXSbMxbwGxsIRUn0fWkJU0WVFyfPXAYRbWuAq/JOn+i8IZW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3aBX2ZujBtCTcQ1lbQTyJV1IDMwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyXXxw3tt8cQtyd2Px676EYVQzvHb+TPIIX +zm0p5io3M+PTZBXSK7trPAYEOkL3XlNe9y3xBtWxfigbrqRGsQKh0bmt+NLn0FY C/UGGbjXsQmp28G8yGe/g0eIr1Fopfo4cmdYOnOlJWRQmyiSOm+NABLD0t3J6PLl QVR4UoRQnr33DCgc4xsIO9ii02IY17K1uFAyYp4x+BzuJikINEJK2vBwczolA/g1 HPSSZhp/+jjp5jo2CEgp5C3L4pxhd8VOJrgtZBGeVJ0NlUu7z27fOots56/e02Ft 6dLh7yv4P2gfnEqD/ZLTQNSan1c/AkyHKsBBJeitGZZQSgDMv4A= -----END CERTIFICATE-----Generated at Sun Apr 19 14:25:04 2026 by rpki-client