$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: gxeD2MIv6IjDTX6MQlek4xIwNPdT2b31XeAnUeS+voE= Subject key identifier: E9:89:43:EA:58:30:D9:29:42:0F:A5:69:51:53:D3:79:BD:23:E0:8E Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 7DA90C2F7EDF1CA2418733B0679D2BFB0D0F7C64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 021A Signing time: Wed 15 Apr 2026 10:51:32 +0000 Manifest this update: Wed 15 Apr 2026 10:46:32 +0000 Manifest next update: Sat 18 Apr 2026 17:55:32 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 9XvG7lgnGTa2TMybG5m34Ghm7U76tWIWHi96o5X/RSg=) 3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: Q6VUjqVpf1oIiyWJUBtriWkW2srFcKPBSdgqK2PStxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:0c:2f:7e:df:1c:a2:41:87:33:b0:67:9d:2b:fb:0d:0f:7c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Apr 15 10:46:32 2026 GMT Not After : Apr 18 17:55:32 2026 GMT Subject: CN=E98943EA5830D929420FA5695153D379BD23E08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:94:f1:0d:99:34:64:a8:23:75:fe:7f:b9: 99:62:3e:c3:43:e0:a0:5b:76:8d:59:c6:ec:b0:c7: b0:52:ae:11:95:22:ed:4a:85:64:86:70:ea:f4:b1: fe:50:d6:a5:0f:7e:d2:9b:59:d7:ad:c8:77:8d:eb: dd:c6:22:c3:af:1c:ef:b2:83:cb:36:30:d5:b9:fa: e3:a8:da:f7:c8:a1:34:c6:2b:dd:0e:bb:0f:4d:58: 38:20:9b:ec:e6:7e:00:5c:99:9e:c7:04:50:98:2f: a8:92:fb:8b:e3:b6:a2:e2:38:cb:ec:96:d4:63:4f: ea:21:50:c0:65:5b:2d:21:77:c7:49:af:d7:e9:d4: 12:f6:a5:92:ff:86:d1:69:3d:04:65:ed:5f:63:12: 10:ba:a3:75:9d:e0:fc:9d:79:3b:50:cc:c6:93:8f: bf:ef:ee:19:ce:a9:ca:88:36:ec:b4:f9:70:67:3d: d2:53:aa:dc:e9:7c:28:2f:6d:d7:e6:d1:9f:8b:41: d5:62:d4:c1:ae:d3:11:92:15:68:72:0c:c0:61:83: d3:48:38:94:86:1a:a4:5c:61:ec:a1:33:55:ed:f8: ba:01:b7:dc:a6:31:b2:42:fd:f9:36:fc:6b:2f:8c: 5a:27:5a:bc:23:00:5b:38:8b:b6:1f:0f:66:46:f7: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:89:43:EA:58:30:D9:29:42:0F:A5:69:51:53:D3:79:BD:23:E0:8E X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:40:07:a2:74:7c:88:40:8c:d9:b6:94:af:07:2e:b8:f9:17: cc:c9:64:4e:e7:7d:c5:8b:63:92:89:12:25:05:d9:b3:18:bc: 2c:02:1e:78:74:67:1d:c9:ad:d4:87:78:81:74:66:26:20:19: 19:d8:fa:37:06:70:7f:57:d0:08:3a:df:26:93:44:83:ee:fd: e5:24:c3:03:fc:c6:fe:e7:86:47:40:51:a9:94:f0:f5:2f:ec: 9f:26:f8:fb:fe:58:7a:55:fc:07:32:15:49:d6:34:b7:f5:a8: 6f:04:ad:45:19:a4:d1:ae:b1:4a:5b:2f:c5:0c:03:aa:76:db: 95:54:68:4e:f7:9e:4a:72:59:bb:2e:b3:50:2e:9f:c2:59:21: 74:92:b8:6b:1e:6f:b2:fb:34:ca:da:fa:3a:3a:a1:07:b7:a1: 85:4e:d8:8a:13:12:20:84:e9:da:a9:c6:58:d2:85:bc:81:a7: 0b:d7:47:c1:15:26:02:86:5b:21:38:dd:83:1c:33:63:f1:75: 77:77:3f:cb:da:1f:78:12:fd:90:f5:67:6a:5e:2e:01:a4:e9: 67:b2:0c:63:06:0d:ba:25:52:f1:7e:26:be:ab:b8:71:8e:28: e2:df:d3:88:5c:0b:dc:a3:0d:8e:07:9c:6b:0d:66:25:21:d3: c5:f2:f1:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfakML37fHKJBhzOwZ50r+w0PfGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNjA0MTUxMDQ2MzJaFw0yNjA0MTgxNzU1MzJaMDMxMTAvBgNV BAMTKEU5ODk0M0VBNTgzMEQ5Mjk0MjBGQTU2OTUxNTNEMzc5QkQyM0UwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOZTxDZk0ZKgjdf5/uZliPsND 4KBbdo1Zxuywx7BSrhGVIu1KhWSGcOr0sf5Q1qUPftKbWdetyHeN693GIsOvHO+y g8s2MNW5+uOo2vfIoTTGK90Ouw9NWDggm+zmfgBcmZ7HBFCYL6iS+4vjtqLiOMvs ltRjT+ohUMBlWy0hd8dJr9fp1BL2pZL/htFpPQRl7V9jEhC6o3Wd4PydeTtQzMaT j7/v7hnOqcqINuy0+XBnPdJTqtzpfCgvbdfm0Z+LQdVi1MGu0xGSFWhyDMBhg9NI OJSGGqRcYeyhM1Xt+LoBt9ymMbJC/fk2/GsvjFonWrwjAFs4i7YfD2ZG9yPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6YlD6lgw2SlCD6VpUVPTeb0j4I4wHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdAB6J0fIhAjNm2lK8HLrj5F8zJZE7nfcWL Y5KJEiUF2bMYvCwCHnh0Zx3JrdSHeIF0ZiYgGRnY+jcGcH9X0Ag63yaTRIPu/eUk wwP8xv7nhkdAUamU8PUv7J8m+Pv+WHpV/AcyFUnWNLf1qG8ErUUZpNGusUpbL8UM A6p225VUaE73nkpyWbsus1Aun8JZIXSSuGseb7L7NMra+jo6oQe3oYVO2IoTEiCE 6dqpxljShbyBpwvXR8EVJgKGWyE43YMcM2PxdXd3P8vaH3gS/ZD1Z2peLgGk6Wey DGMGDbolUvF+Jr6ruHGOKOLf04hcC9yjDY4HnGsNZiUh08Xy8W8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:16 2026 by rpki-client