$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: k6Z3asteDIlvmzg1/pTkm5Rwy4GsSbXCI1p1f96eeag= Subject key identifier: FE:1D:FD:1E:85:47:67:B5:8A:50:77:AD:33:3E:CB:E1:CB:36:AE:98 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 079D9D927D7BF7D4B75C042AC8211BC1CB9204A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 0161 Signing time: Fri 17 Apr 2026 03:22:27 +0000 Manifest this update: Fri 17 Apr 2026 03:17:27 +0000 Manifest next update: Mon 20 Apr 2026 10:21:27 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: MPZqyETdhdcLh/iNlxdunQbz8Ck9m93bOu5vZ7ReSfM=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: EWhTaEy0kSyTN6Oh9f79SCw3rvXkaSbLCftfTIrzMKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9d:9d:92:7d:7b:f7:d4:b7:5c:04:2a:c8:21:1b:c1:cb:92:04:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Apr 17 03:17:27 2026 GMT Not After : Apr 20 10:21:27 2026 GMT Subject: CN=FE1DFD1E854767B58A5077AD333ECBE1CB36AE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:60:f6:75:81:96:a4:d6:84:cc:0f:9b:92: c9:25:d7:f1:2e:90:b0:a7:84:50:c4:fc:11:30:30: f4:5f:e2:af:8b:07:a7:7a:30:37:d8:d6:20:7b:b9: c0:5c:42:05:88:c6:00:97:a3:62:04:8e:7b:63:57: e7:b3:42:7d:d7:09:4e:26:6d:a2:72:51:00:0d:e2: 32:c9:b6:ea:38:44:b0:fc:a7:d1:08:85:71:89:73: af:36:27:62:86:ae:06:ba:75:d1:4d:4f:4b:b9:5b: eb:4d:f1:a5:4d:48:e7:e9:bb:0f:24:ea:f9:70:de: 9a:27:c0:ed:47:83:2b:ec:2c:48:a1:a0:b4:64:3f: bb:1a:e7:ce:9e:25:9f:bd:bb:1a:fa:60:fd:8a:f4: 0f:4d:48:6a:dd:3a:31:d3:06:b9:7a:ff:a1:2c:83: 1f:7a:36:1c:09:cd:f8:f3:65:a0:45:a7:d9:dd:03: 93:08:f9:05:c9:05:dd:23:bf:e8:72:37:d0:01:05: 22:7d:b4:75:0a:42:3d:da:70:ce:e7:3a:21:6c:98: 3c:6f:9c:ea:7b:f3:49:7f:d3:5c:a8:49:1e:4d:32: c6:13:a4:c9:8c:ea:4c:a3:4b:82:27:ad:0b:a2:8b: c6:fa:d2:10:0f:7e:8e:e0:e6:57:21:cf:09:00:1e: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:FD:1E:85:47:67:B5:8A:50:77:AD:33:3E:CB:E1:CB:36:AE:98 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ea:ae:5a:07:8d:c1:6d:44:35:84:51:de:90:b6:17:7d:09: a9:9b:76:d2:9b:9a:bb:67:45:65:77:23:a2:18:7a:68:61:a2: e5:ed:ed:d9:cd:1e:2e:b6:77:83:18:e3:95:d3:f8:b3:7e:36: ab:3d:83:c2:40:df:d2:d0:51:e1:df:ac:7a:74:78:0f:e7:81: 71:a6:34:a3:06:5f:59:c2:af:c8:92:4a:12:5b:36:fb:07:ed: 75:73:f5:b2:12:b6:f7:2f:6b:0f:50:e7:32:d8:5a:f5:20:3f: 60:8c:41:35:36:70:2f:fa:4b:6a:d2:7b:0d:4d:8c:dd:48:50: 37:d0:1d:4d:2c:4d:b6:67:63:1b:9c:ef:14:76:6f:d4:5e:19: ec:9a:01:4d:a7:38:41:49:57:39:21:6b:58:da:c1:3b:ff:bb: 00:4f:20:e1:79:d9:e6:a5:c7:1e:4d:a4:a8:53:84:58:99:60: e5:26:a0:de:ca:40:52:30:8b:ed:ac:7b:e9:82:f5:16:be:e0: 8c:e0:f8:45:db:40:ea:73:a3:f9:8f:bb:1e:9d:bf:58:2f:5d: 38:87:e2:a9:8d:f5:df:92:7f:9f:34:12:74:c8:34:c5:c3:b4: 49:28:f6:f6:1a:8b:80:c4:cd:af:6e:12:2c:c4:65:16:66:c9: 20:e4:97:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB52dkn1799S3XAQqyCEbwcuSBKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNjA0MTcwMzE3MjdaFw0yNjA0MjAxMDIxMjdaMDMxMTAvBgNV BAMTKEZFMURGRDFFODU0NzY3QjU4QTUwNzdBRDMzM0VDQkUxQ0IzNkFFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreWD2dYGWpNaEzA+bkskl1/Eu kLCnhFDE/BEwMPRf4q+LB6d6MDfY1iB7ucBcQgWIxgCXo2IEjntjV+ezQn3XCU4m baJyUQAN4jLJtuo4RLD8p9EIhXGJc682J2KGrga6ddFNT0u5W+tN8aVNSOfpuw8k 6vlw3ponwO1HgyvsLEihoLRkP7sa586eJZ+9uxr6YP2K9A9NSGrdOjHTBrl6/6Es gx96NhwJzfjzZaBFp9ndA5MI+QXJBd0jv+hyN9ABBSJ9tHUKQj3acM7nOiFsmDxv nOp780l/01yoSR5NMsYTpMmM6kyjS4InrQuii8b60hAPfo7g5lchzwkAHvyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/h39HoVHZ7WKUHetMz7L4cs2rpgwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7qrloHjcFtRDWEUd6Qthd9CambdtKbmrtn RWV3I6IYemhhouXt7dnNHi62d4MY45XT+LN+Nqs9g8JA39LQUeHfrHp0eA/ngXGm NKMGX1nCr8iSShJbNvsH7XVz9bIStvcvaw9Q5zLYWvUgP2CMQTU2cC/6S2rSew1N jN1IUDfQHU0sTbZnYxuc7xR2b9ReGeyaAU2nOEFJVzkha1jawTv/uwBPIOF52eal xx5NpKhThFiZYOUmoN7KQFIwi+2se+mC9Ra+4Izg+EXbQOpzo/mPux6dv1gvXTiH 4qmN9d+Sf580EnTINMXDtEko9vYai4DEza9uEizEZRZmySDkl0M= -----END CERTIFICATE-----Generated at Sun Apr 19 10:33:56 2026 by rpki-client