$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: 07U1osGi2d91YhkB2D99pT1RdsaUj7xGqeig8X9nhFM= Subject key identifier: 20:8A:F8:F2:49:6A:DA:FB:01:3C:CC:F8:02:DF:DC:FF:C4:8A:B8:65 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 4942B2C29C6136023EA5580DED5A203F4330D9D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 011F Signing time: Thu 16 Apr 2026 22:51:37 +0000 Manifest this update: Thu 16 Apr 2026 22:46:37 +0000 Manifest next update: Sun 19 Apr 2026 23:02:37 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: urtgUYbcx2gytlBhM4p5dgZOXBrHzTqA0gycjFxEv78=) 2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 3: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: t3b8YOYRqSY9YXbwvxqP9FQN/IvfVvUTl+dIAK2p5Fo=) 4: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 5: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: vIO6PhCd4cB1k0BQaAZQv7MW8qfuF2ReRTB65p41S5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:42:b2:c2:9c:61:36:02:3e:a5:58:0d:ed:5a:20:3f:43:30:d9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Apr 16 22:46:37 2026 GMT Not After : Apr 19 23:02:37 2026 GMT Subject: CN=208AF8F2496ADAFB013CCCF802DFDCFFC48AB865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:e3:32:52:77:db:c1:e4:07:6f:84:9c:b2: fd:68:86:d5:f2:e3:10:75:a1:4f:87:1e:01:98:d1: 13:a7:9d:44:72:1d:63:7f:0c:33:1c:16:68:83:ec: db:36:cd:c0:9f:44:a2:8c:b4:5c:4b:99:0a:9c:67: 71:c5:90:02:ef:8f:1f:04:e6:08:22:61:04:4a:9a: cd:ea:54:cd:0e:1e:e4:2f:85:4f:60:9b:af:b2:b4: 13:ab:55:6e:45:08:53:3d:f1:df:dc:6f:51:6a:ce: b6:a8:e0:4c:cf:db:f7:ba:ad:07:23:76:75:cd:10: eb:cf:71:b2:b4:f9:97:c0:82:1e:0f:d4:83:a2:98: be:bc:28:40:03:77:6e:70:54:4d:13:50:37:c6:a8: 3a:54:cd:79:cc:28:56:a9:47:80:42:bf:c9:22:85: 31:1c:f4:82:d2:b7:48:78:d5:7a:a1:cc:01:ef:52: 53:4d:83:cc:55:0b:e4:32:72:e3:49:f8:15:c7:a7: c7:81:40:57:8d:d4:60:3a:73:88:9e:a5:7e:8f:e4: 22:40:72:8a:cc:38:f6:9d:c0:0a:91:35:f1:f7:a8: ef:93:56:70:6a:52:21:84:5a:3c:cf:ef:16:45:00: f2:ad:f5:d1:de:06:c0:d7:73:c4:44:8e:fa:c4:38: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:F8:F2:49:6A:DA:FB:01:3C:CC:F8:02:DF:DC:FF:C4:8A:B8:65 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d4:a1:41:b4:c6:83:71:86:59:19:86:26:a6:23:55:f8:8f: 28:47:30:39:32:44:fe:42:f3:93:d6:b6:96:52:6f:d7:5b:7d: ff:9e:63:d1:fa:19:8a:f3:59:07:6e:40:65:39:fa:18:af:b5: 3e:3c:01:d1:e7:85:d0:c3:e0:96:aa:22:4d:83:6c:f1:a2:53: 39:1f:2a:3f:5b:54:c6:e6:f1:bf:16:dd:9c:3d:3a:84:70:29: bc:3e:4e:03:70:9f:d0:e7:d2:3c:47:9d:d2:9e:0d:d6:13:2a: 8d:a6:37:fb:45:ac:ff:39:bc:d5:01:94:84:58:ae:b9:76:70: 5f:ac:bb:9b:c2:e7:3c:c2:39:d9:a4:a9:2b:89:cf:f0:c3:75: 3e:40:e0:9f:8e:a4:01:fc:0e:c0:92:a2:b7:42:8f:bc:ce:da: 40:3d:06:3f:45:1a:52:30:f5:a4:95:b8:0b:4b:d5:fc:b6:be: d3:fc:0b:e3:a4:80:21:e9:9c:1b:f4:ca:6f:30:78:d8:9e:e0: 70:67:21:e0:30:4c:c6:b2:91:8e:37:2f:fd:8a:9e:b2:72:a6: a0:71:a0:c6:d0:8e:b5:ab:10:a8:a1:c4:dc:d7:8d:c0:e4:2b: 0f:f7:bd:cb:5a:9d:d9:45:23:15:72:b9:f8:b3:0a:d2:63:10: 03:e5:a8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUKywpxhNgI+pVgN7VogP0Mw2dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNjA0MTYyMjQ2MzdaFw0yNjA0MTkyMzAyMzdaMDMxMTAvBgNV BAMTKDIwOEFGOEYyNDk2QURBRkIwMTNDQ0NGODAyREZEQ0ZGQzQ4QUI4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3OMyUnfbweQHb4Scsv1ohtXy 4xB1oU+HHgGY0ROnnURyHWN/DDMcFmiD7Ns2zcCfRKKMtFxLmQqcZ3HFkALvjx8E 5ggiYQRKms3qVM0OHuQvhU9gm6+ytBOrVW5FCFM98d/cb1Fqzrao4EzP2/e6rQcj dnXNEOvPcbK0+ZfAgh4P1IOimL68KEADd25wVE0TUDfGqDpUzXnMKFapR4BCv8ki hTEc9ILSt0h41XqhzAHvUlNNg8xVC+QycuNJ+BXHp8eBQFeN1GA6c4iepX6P5CJA corMOPadwAqRNfH3qO+TVnBqUiGEWjzP7xZFAPKt9dHeBsDXc8REjvrEOMxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIIr48klq2vsBPMz4At/c/8SKuGUwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/UoUG0xoNxhlkZhiamI1X4jyhHMDkyRP5C 85PWtpZSb9dbff+eY9H6GYrzWQduQGU5+hivtT48AdHnhdDD4JaqIk2DbPGiUzkf Kj9bVMbm8b8W3Zw9OoRwKbw+TgNwn9Dn0jxHndKeDdYTKo2mN/tFrP85vNUBlIRY rrl2cF+su5vC5zzCOdmkqSuJz/DDdT5A4J+OpAH8DsCSordCj7zO2kA9Bj9FGlIw 9aSVuAtL1fy2vtP8C+OkgCHpnBv0ym8weNie4HBnIeAwTMaykY43L/2KnrJypqBx oMbQjrWrEKihxNzXjcDkKw/3vctandlFIxVyufizCtJjEAPlqKU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:57 2026 by rpki-client