$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: ziWR350c1+EP8g/x0w0H3Zynh2R14oEKO4gB1p+Gg5c= Subject key identifier: 89:71:FE:FD:7B:8B:C0:8D:31:9D:16:0E:5A:9E:6E:70:AB:27:28:C8 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 2E3521768DE5532B364DAD4D1D4DC0BDED2C44A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 17:11:29 +0000 Manifest this update: Thu 16 Apr 2026 17:06:29 +0000 Manifest next update: Sun 19 Apr 2026 22:12:29 +0000 Files and hashes: 1: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) 2: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: GcV7+5Vrz21uU0/oKBclJiG2n5LMzlWAIBLri6j/xcw=) 3: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:21:76:8d:e5:53:2b:36:4d:ad:4d:1d:4d:c0:bd:ed:2c:44:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Apr 16 17:06:29 2026 GMT Not After : Apr 19 22:12:29 2026 GMT Subject: CN=8971FEFD7B8BC08D319D160E5A9E6E70AB2728C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:3c:13:8e:b1:ed:ea:50:f8:09:38:c8:c8: 91:31:3a:11:b5:73:ce:9a:1b:a8:f0:c9:49:17:9b: b3:de:99:c9:50:a1:3e:e3:72:f9:11:87:8c:c0:6d: d7:d9:a1:af:78:ca:fb:bd:89:37:24:71:7c:fd:d3: 0c:36:a4:4c:db:d5:2b:48:03:6d:58:c9:2c:9d:8a: 9b:90:e6:2b:69:05:73:d8:c5:ae:5b:4d:b4:2d:68: 49:9a:62:6c:ac:23:ad:bd:9f:03:ea:81:67:0e:98: 44:b2:90:ca:fd:ed:09:b7:65:6d:1d:c9:25:16:d3: 2f:ff:4b:94:9e:03:72:92:e4:ba:9b:4a:0a:e1:e9: 12:a9:63:23:5c:aa:7b:b0:2c:9d:a3:74:5f:b6:bb: 2f:2a:1a:87:78:0d:6a:7a:f6:ba:29:12:26:d5:02: be:84:6e:e2:dd:40:44:e3:25:ee:9b:f2:a6:36:07: 9b:e8:20:68:da:ff:d9:4f:b0:cf:62:c3:44:ab:89: 34:d6:b2:0c:8f:e8:ab:c5:6a:25:4e:63:f1:d2:cd: 85:80:ab:15:87:aa:83:8b:fa:bf:be:84:8a:50:95: 44:d7:ca:f7:39:fd:49:38:66:d1:84:58:07:5d:81: aa:ea:05:9a:8b:16:c0:06:1b:7a:85:3b:4c:2c:23: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:71:FE:FD:7B:8B:C0:8D:31:9D:16:0E:5A:9E:6E:70:AB:27:28:C8 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:64:81:2a:fd:76:0b:f8:98:25:5e:15:45:8f:5e:1c:e5:6e: 6f:08:5d:67:16:75:70:fd:3c:3f:75:5c:02:5d:e8:a1:6b:8e: d2:30:0f:ad:a0:e7:2b:23:ca:56:fc:a9:a1:f1:2f:79:28:f6: f7:db:01:18:60:21:0e:1c:30:41:a0:5d:53:10:72:72:a5:8c: 4e:22:ec:69:fd:c3:f6:f6:8c:de:65:11:7e:a9:09:be:91:c3: 31:db:1f:a6:19:ef:94:38:93:d3:2b:2b:0b:2c:02:58:10:4f: 32:a6:84:b7:9d:eb:ad:ac:80:90:b3:51:ed:ad:75:af:04:52: b1:d4:0e:17:50:58:72:c1:6d:c8:07:c6:8c:a7:be:72:23:cd: 14:3c:34:1d:81:69:d7:2f:d5:75:42:32:76:ab:e8:11:85:f1: 78:f7:2e:33:2f:b5:52:dc:4a:ff:0d:41:19:e8:4b:27:92:e5: 13:b1:a9:65:f3:a0:76:b0:5d:3e:c7:be:a9:10:99:ab:9a:1b: d8:50:9e:3f:a1:37:1d:04:dd:7c:da:0a:e3:dd:f3:76:7f:17: 73:c4:0d:98:d6:b2:75:69:3d:7f:54:c9:95:57:67:ae:b0:54: a6:d4:85:ef:34:a8:d4:6c:cd:c1:b1:3e:71:15:25:65:74:45: ca:8c:16:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjUhdo3lUys2Ta1NHU3Ave0sRKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNjA0MTYxNzA2MjlaFw0yNjA0MTkyMjEyMjlaMDMxMTAvBgNV BAMTKDg5NzFGRUZEN0I4QkMwOEQzMTlEMTYwRTVBOUU2RTcwQUIyNzI4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4TwTjrHt6lD4CTjIyJExOhG1 c86aG6jwyUkXm7PemclQoT7jcvkRh4zAbdfZoa94yvu9iTckcXz90ww2pEzb1StI A21YySydipuQ5itpBXPYxa5bTbQtaEmaYmysI629nwPqgWcOmESykMr97Qm3ZW0d ySUW0y//S5SeA3KS5LqbSgrh6RKpYyNcqnuwLJ2jdF+2uy8qGod4DWp69ropEibV Ar6EbuLdQETjJe6b8qY2B5voIGja/9lPsM9iw0SriTTWsgyP6KvFaiVOY/HSzYWA qxWHqoOL+r++hIpQlUTXyvc5/Uk4ZtGEWAddgarqBZqLFsAGG3qFO0wsIxSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXH+/XuLwI0xnRYOWp5ucKsnKMgwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRkgSr9dgv4mCVeFUWPXhzlbm8IXWcWdXD9 PD91XAJd6KFrjtIwD62g5ysjylb8qaHxL3ko9vfbARhgIQ4cMEGgXVMQcnKljE4i 7Gn9w/b2jN5lEX6pCb6RwzHbH6YZ75Q4k9MrKwssAlgQTzKmhLed662sgJCzUe2t da8EUrHUDhdQWHLBbcgHxoynvnIjzRQ8NB2Badcv1XVCMnar6BGF8Xj3LjMvtVLc Sv8NQRnoSyeS5ROxqWXzoHawXT7HvqkQmauaG9hQnj+hNx0E3XzaCuPd83Z/F3PE DZjWsnVpPX9UyZVXZ66wVKbUhe80qNRszcGxPnEVJWV0RcqMFn8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:38 2026 by rpki-client