$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: 5F3oYqoFLomaAYSmk3hNJ5XXd5toO/Hn5UNLGue/AfI= Subject key identifier: FC:5F:35:36:B5:DB:39:4A:D6:6B:AB:E8:7A:8B:65:B4:A7:6A:5E:A4 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 1EB5C94FDF4A0EE635981E9E0C4C23EBFB0B5FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 020C Signing time: Fri 17 Apr 2026 04:31:21 +0000 Manifest this update: Fri 17 Apr 2026 04:26:21 +0000 Manifest next update: Mon 20 Apr 2026 06:10:21 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: acHkQDc68Jj27op6u+60Ox/pAf3ZpE5ZeAF+XMaxR0M=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ=) 3: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: o2XpH3yHVtg8vP1EBSIml7yT1YsbSUBZI2p0mOdSprw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b5:c9:4f:df:4a:0e:e6:35:98:1e:9e:0c:4c:23:eb:fb:0b:5f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Apr 17 04:26:21 2026 GMT Not After : Apr 20 06:10:21 2026 GMT Subject: CN=FC5F3536B5DB394AD66BABE87A8B65B4A76A5EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:ed:4c:7f:db:12:2a:82:20:f2:ae:5d:20: 6d:91:0a:22:06:b2:99:ec:dc:db:f0:dc:ad:6e:ff: b4:61:a5:4c:73:da:3d:e1:32:fe:83:eb:b0:f9:a4: 09:02:90:9a:8c:02:0c:dd:ea:fd:2e:39:48:c0:7b: a0:56:d7:f4:36:ab:c2:90:a0:0f:82:6e:ba:d5:e8: f8:14:29:a9:4d:58:a9:d7:27:a1:ee:c6:b2:4d:fa: 32:67:0d:74:bb:87:df:12:28:97:60:99:06:0a:f8: bf:68:fb:0d:02:d7:d2:12:cc:d6:16:9e:e1:33:a5: 9b:6b:ae:37:05:47:e3:e5:dd:ce:c9:0d:a6:4d:69: e8:42:c8:67:43:b2:9d:bf:1a:52:3c:41:bc:38:64: e2:ef:a4:ed:c4:fe:26:91:7c:91:c6:0a:35:38:67: 4f:7d:83:c3:40:d4:f6:50:7e:0b:72:85:b1:b3:77: 74:a1:5e:9e:9d:aa:cf:0e:a3:d7:9e:ae:35:a6:b1: 53:fd:40:a9:0a:1d:f0:45:d1:a4:02:ce:e4:f7:c3: 1d:cd:91:39:9c:f7:16:d0:8b:45:9a:8a:20:78:75: 15:a1:db:03:f4:73:8f:d7:62:bd:46:34:3d:0b:d1: 9f:d4:ae:ab:0d:ee:58:8f:13:b0:87:20:57:d8:96: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5F:35:36:B5:DB:39:4A:D6:6B:AB:E8:7A:8B:65:B4:A7:6A:5E:A4 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:72:7d:c6:47:63:d6:de:61:22:2f:3b:1e:82:c1:c5:c2:30: 46:00:b9:a7:b0:4c:68:2b:66:80:db:98:86:4b:71:03:08:d0: f1:05:02:2b:f0:7b:97:aa:51:e3:90:57:ac:07:0b:3d:95:c5: 4f:c5:14:13:38:95:02:86:db:36:1b:8d:c2:d1:61:e9:ee:8f: e3:75:0a:f3:ea:90:8f:a8:38:3a:ed:e6:b2:78:c9:d3:89:47: 71:9c:cd:40:90:32:52:be:6d:cc:5d:47:97:5a:a5:47:83:d1: 1e:64:13:ad:67:7c:63:f5:8a:b8:74:bc:81:7c:82:e0:78:33: 4c:9a:77:58:d0:db:0a:20:cd:c1:cd:9c:29:6a:90:1e:17:2a: 56:05:a8:b5:2d:7a:b0:d7:a5:7e:b7:d7:4c:7d:47:1d:e2:6a: 3b:ec:6b:67:69:04:84:e2:5c:dc:5f:4e:30:72:ae:b2:ff:1e: 2f:63:34:a9:bd:4f:93:a6:03:83:1f:80:5f:c2:cb:c2:2e:6e: 1c:5b:9e:fc:c4:f7:e8:7a:5d:58:02:21:cf:25:ef:69:f4:7b: b5:8d:1a:11:1e:6a:f1:14:07:b8:54:85:58:3f:e8:a8:cb:54: 18:91:ca:32:fb:a0:9f:7b:d0:62:52:a4:21:93:7d:79:09:e0: 87:23:13:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrXJT99KDuY1mB6eDEwj6/sLX8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNjA0MTcwNDI2MjFaFw0yNjA0MjAwNjEwMjFaMDMxMTAvBgNV BAMTKEZDNUYzNTM2QjVEQjM5NEFENjZCQUJFODdBOEI2NUI0QTc2QTVFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEO1Mf9sSKoIg8q5dIG2RCiIG spns3Nvw3K1u/7RhpUxz2j3hMv6D67D5pAkCkJqMAgzd6v0uOUjAe6BW1/Q2q8KQ oA+CbrrV6PgUKalNWKnXJ6HuxrJN+jJnDXS7h98SKJdgmQYK+L9o+w0C19ISzNYW nuEzpZtrrjcFR+Pl3c7JDaZNaehCyGdDsp2/GlI8Qbw4ZOLvpO3E/iaRfJHGCjU4 Z099g8NA1PZQfgtyhbGzd3ShXp6dqs8Oo9eerjWmsVP9QKkKHfBF0aQCzuT3wx3N kTmc9xbQi0WaiiB4dRWh2wP0c4/XYr1GND0L0Z/UrqsN7liPE7CHIFfYlpkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/F81NrXbOUrWa6voeotltKdqXqQwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdyfcZHY9beYSIvOx6CwcXCMEYAuaewTGgr ZoDbmIZLcQMI0PEFAivwe5eqUeOQV6wHCz2VxU/FFBM4lQKG2zYbjcLRYenuj+N1 CvPqkI+oODrt5rJ4ydOJR3GczUCQMlK+bcxdR5dapUeD0R5kE61nfGP1irh0vIF8 guB4M0yad1jQ2wogzcHNnClqkB4XKlYFqLUterDXpX6310x9Rx3iajvsa2dpBITi XNxfTjByrrL/Hi9jNKm9T5OmA4MfgF/Cy8IubhxbnvzE9+h6XVgCIc8l72n0e7WN GhEeavEUB7hUhVg/6KjLVBiRyjL7oJ970GJSpCGTfXkJ4IcjE48= -----END CERTIFICATE-----Generated at Fri Apr 17 18:09:59 2026 by rpki-client