$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: vEXfE/nIyz5lmfOI4cpNKl7LImuOQfZWzpPgMj5XAjs= Subject key identifier: 19:FC:1C:24:56:02:D1:C7:89:87:C7:9B:F4:3A:8C:42:E7:15:C3:C7 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 253FCE5C28D749846886E85B50C1E7FA87CEB074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: B0 Signing time: Fri 17 Apr 2026 16:52:19 +0000 Manifest this update: Fri 17 Apr 2026 16:47:19 +0000 Manifest next update: Tue 21 Apr 2026 00:55:19 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 015aA8T+8ETys0VPJF7SaN/NGUY5b/DbWClhBrzMd1I=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3Xgb+N3NB2TeJyMhydH37LrnvXNKcCYu+8Jn+LTb9Mk=) 3: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: Y1ny05mNou/baVnnlw5Szk6Hf+xlegCMMmeDqBwBjwQ=) 4: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: sN9oQCwDYePBe8r+43GJgwamWTT8YKpnPVKv3cAiMnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3f:ce:5c:28:d7:49:84:68:86:e8:5b:50:c1:e7:fa:87:ce:b0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Apr 17 16:47:19 2026 GMT Not After : Apr 21 00:55:19 2026 GMT Subject: CN=19FC1C245602D1C78987C79BF43A8C42E715C3C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:6c:df:12:d0:2a:b5:3f:53:25:93:95:bd: 6f:2f:15:5d:ea:ac:5d:df:51:41:1b:b5:8b:5e:8b: 6a:7d:66:9e:5a:ec:7f:62:b9:38:d7:11:07:cf:6b: 39:af:83:d9:8f:46:d5:04:5f:4e:59:de:36:d9:47: 6f:24:bf:97:a5:77:cd:38:73:90:52:86:72:56:ee: 1d:a4:b5:dc:a0:91:fb:60:6e:51:eb:c8:0f:8c:1b: d4:fd:b5:0b:1b:bf:16:c5:f9:9f:57:dc:b7:9d:7f: 34:7f:ad:83:39:37:57:46:8e:f1:96:78:11:ab:59: 9e:5e:6c:d6:b1:d1:3d:7b:fb:1d:65:92:90:1c:34: d3:c4:3e:25:31:d6:31:75:83:b8:ed:e9:99:c5:31: ce:07:67:2c:6b:f6:be:88:19:4c:0e:6c:bd:60:12: 21:73:9c:59:c6:95:a2:35:e7:e4:17:3a:24:66:ca: e3:8e:52:df:43:90:8f:4a:70:fe:70:b7:35:8a:65: a5:b6:f1:f3:1e:35:12:67:a5:62:20:75:eb:f1:ca: 3c:54:f6:34:ba:71:4a:73:41:cf:c0:ee:75:f9:3a: 88:24:e7:6d:dc:d0:d7:49:e5:26:e1:74:d5:53:64: b9:84:fa:e5:35:13:39:2f:87:1a:f5:75:7d:62:a6: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FC:1C:24:56:02:D1:C7:89:87:C7:9B:F4:3A:8C:42:E7:15:C3:C7 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:dc:0b:d3:bb:bc:c2:59:f6:8f:41:de:42:72:8f:98:37: f0:b1:24:6c:d2:51:8c:1e:57:44:96:03:03:5e:57:9c:aa:b3: 8d:a8:2b:2d:fc:bf:b6:aa:1c:a8:3e:60:ab:c0:12:01:cb:6d: e2:fd:90:f6:c8:3d:5c:ee:84:48:03:21:34:1c:75:d7:0b:5e: ac:5d:d5:80:2f:02:d2:ba:da:32:ae:42:67:65:4b:2c:10:b7: 19:80:63:0f:ee:9d:7a:9d:96:f5:08:9b:c9:e6:93:50:cf:de: 71:5f:ab:04:1c:b5:5c:a3:b9:b1:cf:3b:64:81:7c:9d:56:a0: 75:10:c0:6f:91:9c:a2:b4:a1:14:4d:8b:ee:23:61:59:1d:3f: 45:7a:79:c6:eb:ab:52:f3:9a:d9:ab:91:e4:e9:52:bf:63:4b: 2b:87:ff:a6:d0:ed:55:c7:27:7d:41:9f:6a:0e:f9:b8:3e:c6: 4d:15:c4:93:f8:7d:cd:cd:b5:26:4f:d3:11:0f:72:78:a3:a0: 8d:af:cc:c3:ae:e8:7e:a2:0d:f3:c6:6d:c3:34:d1:0e:13:36: 17:98:e1:b1:a9:26:00:1a:0d:05:68:35:b4:df:69:d8:17:3d: 99:c9:f6:06:70:ff:35:fa:3b:95:9e:f6:2c:0c:15:c7:f4:e9: 01:6f:10:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJT/OXCjXSYRohuhbUMHn+ofOsHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNjA0MTcxNjQ3MTlaFw0yNjA0MjEwMDU1MTlaMDMxMTAvBgNV BAMTKDE5RkMxQzI0NTYwMkQxQzc4OTg3Qzc5QkY0M0E4QzQyRTcxNUMzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC832zfEtAqtT9TJZOVvW8vFV3q rF3fUUEbtYtei2p9Zp5a7H9iuTjXEQfPazmvg9mPRtUEX05Z3jbZR28kv5eld804 c5BShnJW7h2ktdygkftgblHryA+MG9T9tQsbvxbF+Z9X3LedfzR/rYM5N1dGjvGW eBGrWZ5ebNax0T17+x1lkpAcNNPEPiUx1jF1g7jt6ZnFMc4HZyxr9r6IGUwObL1g EiFznFnGlaI15+QXOiRmyuOOUt9DkI9KcP5wtzWKZaW28fMeNRJnpWIgdevxyjxU 9jS6cUpzQc/A7nX5Oogk523c0NdJ5SbhdNVTZLmE+uU1Ezkvhxr1dX1ipqDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGfwcJFYC0ceJh8eb9DqMQucVw8cwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLm3AvTu7zCWfaPQd5Cco+YN/CxJGzSUYwe V0SWAwNeV5yqs42oKy38v7aqHKg+YKvAEgHLbeL9kPbIPVzuhEgDITQcddcLXqxd 1YAvAtK62jKuQmdlSywQtxmAYw/unXqdlvUIm8nmk1DP3nFfqwQctVyjubHPO2SB fJ1WoHUQwG+RnKK0oRRNi+4jYVkdP0V6ecbrq1LzmtmrkeTpUr9jSyuH/6bQ7VXH J31Bn2oO+bg+xk0VxJP4fc3NtSZP0xEPcnijoI2vzMOu6H6iDfPGbcM00Q4TNheY 4bGpJgAaDQVoNbTfadgXPZnJ9gZw/zX6O5We9iwMFcf06QFvEJA= -----END CERTIFICATE-----Generated at Sat Apr 18 10:09:18 2026 by rpki-client