$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: LEuMkxJKYgn7VCDwiC6ppdYa1Chu/B6iuAC5GKeMgeU= Subject key identifier: 1D:3B:2E:9B:CB:5D:D5:C6:E0:44:FA:C8:9E:A6:17:22:0D:35:54:86 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 25E5C886B116475D06C7505E23C60526B990AEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0252 Signing time: Fri 17 Apr 2026 12:32:40 +0000 Manifest this update: Fri 17 Apr 2026 12:27:40 +0000 Manifest next update: Mon 20 Apr 2026 18:33:40 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: +23Scw5VdqcV8YFaspNCK32gQHff+6PSmzvpv0Sqg2U=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e5:c8:86:b1:16:47:5d:06:c7:50:5e:23:c6:05:26:b9:90:ae:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Apr 17 12:27:40 2026 GMT Not After : Apr 20 18:33:40 2026 GMT Subject: CN=1D3B2E9BCB5DD5C6E044FAC89EA617220D355486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:6f:0f:26:c3:a1:68:32:4a:36:67:be:98: 3d:ff:91:54:70:5e:bc:09:1b:5c:5a:70:ba:bb:42: 4b:ea:e8:6d:fd:e5:06:7a:26:31:9b:02:3b:5e:14: bc:72:41:24:8c:f1:12:a5:e2:49:db:5e:f0:e8:94: e3:00:82:21:c3:90:98:f3:ad:2a:e3:82:8b:7d:a4: 7a:2a:aa:f5:c3:51:4e:c5:31:a9:af:24:54:01:0b: af:88:db:8b:3f:46:8d:ef:e5:20:be:44:50:69:47: e9:47:4d:2d:e7:b7:d8:80:38:c3:38:3d:cf:a4:9f: 5a:a5:cc:71:09:20:34:4f:81:cc:27:24:89:3a:d3: 33:25:e6:07:01:6d:cd:5d:32:d5:e4:a3:5a:b3:52: a0:0d:16:53:10:91:be:05:46:9a:63:b3:93:56:cb: 9a:54:25:04:54:b5:5a:ba:3d:2e:0c:ec:69:be:a4: 9c:98:f4:5c:8e:ce:b9:f6:56:8e:60:7c:0b:2b:0d: 0b:26:4a:a1:52:18:c2:29:00:42:be:c6:a7:14:a7: 27:3f:60:25:8e:da:6a:fc:b0:82:43:70:07:72:5c: 93:99:9e:28:6d:d3:b5:76:18:bf:79:90:99:b5:6f: 91:76:8d:1d:c0:ed:b5:81:72:7e:20:a9:6f:7a:09: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:2E:9B:CB:5D:D5:C6:E0:44:FA:C8:9E:A6:17:22:0D:35:54:86 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c6:20:b0:41:4a:2e:bf:86:63:62:2e:42:59:67:c9:84:2e: b1:50:0a:56:2f:db:ab:f1:2b:7e:6d:c4:32:cf:8f:2e:37:c8: 4c:c1:e7:35:a6:c2:03:b1:6d:7e:ee:55:84:ef:5a:85:33:c7: cf:61:c1:49:35:08:23:d4:16:54:8d:76:3a:88:14:d4:0a:1d: 6e:68:34:fe:38:54:b0:ef:84:1f:0a:eb:d8:ab:3c:44:5d:3e: a5:9d:35:d7:b0:6d:d4:0a:b6:cb:45:e3:18:8b:73:fb:59:6d: 58:4c:ba:0d:59:ce:31:60:aa:d3:ce:cc:ff:5c:48:b1:0f:81: 71:61:1e:7e:c4:9c:30:58:85:2a:a0:fa:1f:c8:c4:01:94:b0: df:92:1c:f1:83:43:89:b3:5a:86:ac:b8:28:a9:c5:f3:81:c8: 34:2f:5e:bb:dc:1a:11:62:5f:24:a0:15:99:0d:18:6e:f0:ae: 10:47:66:d8:52:af:21:56:28:05:6e:43:f8:7b:2d:55:53:91: a2:46:f4:bc:6f:c1:ce:7d:50:2c:6b:f5:31:16:ea:bf:4c:f6: 14:64:36:f0:84:97:ce:29:05:14:24:0f:46:55:ae:07:15:9a: 46:b7:a1:32:22:75:44:36:c4:90:df:2d:0d:f1:96:ed:14:12: 7d:68:e5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeXIhrEWR10Gx1BeI8YFJrmQrtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNjA0MTcxMjI3NDBaFw0yNjA0MjAxODMzNDBaMDMxMTAvBgNV BAMTKDFEM0IyRTlCQ0I1REQ1QzZFMDQ0RkFDODlFQTYxNzIyMEQzNTU0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPG8PJsOhaDJKNme+mD3/kVRw XrwJG1xacLq7Qkvq6G395QZ6JjGbAjteFLxyQSSM8RKl4knbXvDolOMAgiHDkJjz rSrjgot9pHoqqvXDUU7FMamvJFQBC6+I24s/Ro3v5SC+RFBpR+lHTS3nt9iAOMM4 Pc+kn1qlzHEJIDRPgcwnJIk60zMl5gcBbc1dMtXko1qzUqANFlMQkb4FRppjs5NW y5pUJQRUtVq6PS4M7Gm+pJyY9FyOzrn2Vo5gfAsrDQsmSqFSGMIpAEK+xqcUpyc/ YCWO2mr8sIJDcAdyXJOZniht07V2GL95kJm1b5F2jR3A7bWBcn4gqW96Cd6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTsum8td1cbgRPrInqYXIg01VIYwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDGILBBSi6/hmNiLkJZZ8mELrFQClYv26vx K35txDLPjy43yEzB5zWmwgOxbX7uVYTvWoUzx89hwUk1CCPUFlSNdjqIFNQKHW5o NP44VLDvhB8K69irPERdPqWdNdewbdQKtstF4xiLc/tZbVhMug1ZzjFgqtPOzP9c SLEPgXFhHn7EnDBYhSqg+h/IxAGUsN+SHPGDQ4mzWoasuCipxfOByDQvXrvcGhFi XySgFZkNGG7wrhBHZthSryFWKAVuQ/h7LVVTkaJG9Lxvwc59UCxr9TEW6r9M9hRk NvCEl84pBRQkD0ZVrgcVmka3oTIidUQ2xJDfLQ3xlu0UEn1o5WE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:19 2026 by rpki-client