$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: ciA/dk0v9p0Tbg/1a04rVMRP8EJVJxG7tolQqkrDmYI= Subject key identifier: 29:EB:EE:CC:79:E4:1C:99:58:AA:B8:2E:28:BC:97:CC:50:23:8D:E2 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 07EF1CBA3E981B246CAF97FBEE3EAE765EB2ED91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0174 Signing time: Thu 16 Apr 2026 12:02:53 +0000 Manifest this update: Thu 16 Apr 2026 11:57:53 +0000 Manifest next update: Sun 19 Apr 2026 15:31:53 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: LCwrdcNUaENcL28Vd10aV75uevHZj1Ko7eabzzoSH/E=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: SpBTBhOD8gBl/95/KbTc1qbkT3PqTsa6tJkl7ViI63w=) 3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: xOFYW7iQm5qoeDLJ0+fcBg/w78CpzGMdoNL2cYq7/Nk=) 4: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: uMixIBGfnJwbx8ZC7E3ZXlEGGIahQPMgxVwK42yhPM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ef:1c:ba:3e:98:1b:24:6c:af:97:fb:ee:3e:ae:76:5e:b2:ed:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Apr 16 11:57:53 2026 GMT Not After : Apr 19 15:31:53 2026 GMT Subject: CN=29EBEECC79E41C9958AAB82E28BC97CC50238DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:e7:39:53:2b:7a:25:8e:61:f0:92:27:f8: 2d:0d:f1:37:cd:6f:80:93:98:8c:b8:7f:b5:cc:d8: a4:dd:6b:70:51:16:02:90:dc:a8:57:fb:9b:0b:d4: af:c4:8a:27:47:68:22:14:a5:95:7c:7f:7d:dd:60: 1f:35:ae:53:70:b0:c0:90:f2:87:9c:2c:4f:be:88: 8f:a7:65:e0:77:cb:24:78:e4:71:90:d0:c3:8b:40: f8:b5:69:03:f1:f9:f4:70:09:ca:fd:56:4f:58:72: 99:d3:72:99:30:fa:5a:1b:d2:f6:c3:78:c0:19:86: ab:49:95:a0:47:5b:ad:e3:0e:6d:1e:1e:6b:01:59: 20:90:85:e8:59:c9:3a:39:ea:2d:05:91:55:b9:32: e1:db:c3:4d:f7:a2:25:d9:72:30:2a:6e:72:23:37: f9:67:fc:db:95:0c:ce:3d:61:4d:3b:92:de:03:7f: 95:e0:92:96:9d:46:a0:1d:50:15:7d:d8:2f:7f:52: f4:ba:57:c1:ec:a0:67:73:39:6d:01:a6:4c:30:b5: ce:37:9d:32:c2:62:96:1b:e6:f2:fc:fc:5a:56:de: 48:c1:1f:5b:b3:e9:ae:98:33:94:99:ef:67:49:f6: 1f:9d:32:2b:e7:ce:52:67:45:77:e2:ee:d9:df:6e: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:EE:CC:79:E4:1C:99:58:AA:B8:2E:28:BC:97:CC:50:23:8D:E2 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a8:be:20:48:e2:0d:22:76:52:e6:bf:8b:7b:19:84:2c:82: b3:da:78:c4:6f:da:4d:9d:9c:5f:de:4b:80:48:d8:2d:91:72: 16:04:cc:d5:c8:b5:ad:23:29:e8:83:20:a2:4e:a7:c7:8a:dc: 21:e1:b5:47:19:11:11:74:87:ba:c0:fc:20:dc:34:ce:be:49: bb:9f:4f:6b:31:b6:da:3c:24:d9:b5:30:65:f5:4b:3d:50:77: 6f:13:c8:74:b9:ea:65:50:81:f2:5d:30:71:ba:a1:a2:ab:75: 79:3e:c4:bd:47:c7:95:9d:4d:e2:10:32:6f:0a:a7:7a:b0:82: 6a:57:81:ba:0e:67:15:9f:6f:69:d6:30:b7:32:c0:4f:0a:b7: ea:a9:7c:07:d9:5e:54:c5:7a:d6:3b:e2:9d:b5:a2:b6:94:8b: cf:70:82:e5:c6:98:7c:f4:38:a7:15:41:36:b9:6e:7a:d6:79: 81:b2:94:27:44:36:07:ce:80:c4:c2:f5:40:c4:82:ea:50:14: a0:74:5a:79:07:8b:66:d7:c0:aa:a9:ea:80:09:0d:e0:4d:ab: e9:68:19:56:6a:71:14:7b:87:a3:97:28:f2:be:3f:d8:f0:24: eb:5e:2b:09:60:87:34:c2:b7:8f:39:42:d5:14:9d:43:62:aa: bc:f5:55:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+8cuj6YGyRsr5f77j6udl6y7ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNjA0MTYxMTU3NTNaFw0yNjA0MTkxNTMxNTNaMDMxMTAvBgNV BAMTKDI5RUJFRUNDNzlFNDFDOTk1OEFBQjgyRTI4QkM5N0NDNTAyMzhERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TOc5Uyt6JY5h8JIn+C0N8TfN b4CTmIy4f7XM2KTda3BRFgKQ3KhX+5sL1K/EiidHaCIUpZV8f33dYB81rlNwsMCQ 8oecLE++iI+nZeB3yyR45HGQ0MOLQPi1aQPx+fRwCcr9Vk9YcpnTcpkw+lob0vbD eMAZhqtJlaBHW63jDm0eHmsBWSCQhehZyTo56i0FkVW5MuHbw033oiXZcjAqbnIj N/ln/NuVDM49YU07kt4Df5XgkpadRqAdUBV92C9/UvS6V8HsoGdzOW0Bpkwwtc43 nTLCYpYb5vL8/FpW3kjBH1uz6a6YM5SZ72dJ9h+dMivnzlJnRXfi7tnfbjv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKevuzHnkHJlYqrguKLyXzFAjjeIwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2oviBI4g0idlLmv4t7GYQsgrPaeMRv2k2d nF/eS4BI2C2RchYEzNXIta0jKeiDIKJOp8eK3CHhtUcZERF0h7rA/CDcNM6+Sbuf T2sxtto8JNm1MGX1Sz1Qd28TyHS56mVQgfJdMHG6oaKrdXk+xL1Hx5WdTeIQMm8K p3qwgmpXgboOZxWfb2nWMLcywE8Kt+qpfAfZXlTFetY74p21oraUi89wguXGmHz0 OKcVQTa5bnrWeYGylCdENgfOgMTC9UDEgupQFKB0WnkHi2bXwKqp6oAJDeBNq+lo GVZqcRR7h6OXKPK+P9jwJOteKwlghzTCt485QtUUnUNiqrz1VYM= -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:11 2026 by rpki-client