$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: 2eTOLqOuiLL/gRLX/N8MKYjvZyMsCyfX4q3HfzhzR5U= Subject key identifier: F7:0B:A4:D9:E5:9D:F5:03:2B:1D:49:C7:B5:F0:30:8A:A0:76:0B:08 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 51951A87E6B6FC7D8F5B5B24070C95BEC184EB35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 01CE Signing time: Sun 19 Apr 2026 04:02:11 +0000 Manifest this update: Sun 19 Apr 2026 03:57:11 +0000 Manifest next update: Wed 22 Apr 2026 14:55:11 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: DOPOepaAi8jQQAkim1whsrxF6IAlF5VXL1gFoUAtiBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:95:1a:87:e6:b6:fc:7d:8f:5b:5b:24:07:0c:95:be:c1:84:eb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Apr 19 03:57:11 2026 GMT Not After : Apr 22 14:55:11 2026 GMT Subject: CN=F70BA4D9E59DF5032B1D49C7B5F0308AA0760B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:32:c2:33:ba:b2:99:d6:29:7b:27:f8:2e: c8:f5:a3:f2:a5:a3:1e:f2:a9:d0:10:85:3a:00:15: 24:47:30:03:8a:fb:9c:c1:5c:9b:1a:a4:b2:d3:28: 0b:c8:70:94:17:e1:18:22:ea:cb:15:03:07:38:c6: 8c:b2:a7:6d:08:5d:27:b7:ea:b0:6a:91:a9:13:fb: 6c:c2:f3:3f:0d:d9:47:93:df:83:9e:79:34:6c:d6: 2a:d5:b8:79:08:bf:29:9a:19:b2:d3:f9:d2:d6:7c: 54:90:31:ae:74:6a:7d:f2:49:c5:d0:86:57:35:ba: 20:49:2d:01:c3:91:87:74:8c:ab:78:a4:c9:4a:9e: 72:c7:17:36:bf:1a:19:b6:dd:70:2b:1b:1a:a0:da: 93:cd:03:0c:83:ff:ef:ea:60:08:aa:be:95:42:eb: ff:08:12:da:a6:6d:a2:71:f6:d5:6f:a2:06:3f:90: 2d:6b:e3:1c:3a:c6:b7:55:f9:ce:40:14:1b:da:db: ac:3f:13:75:89:a1:3a:48:5e:8d:47:9c:05:14:1f: 5f:3c:3e:3a:55:1e:06:5b:81:fd:d5:e0:19:1a:c4: 94:78:cf:ab:fc:0c:00:df:ea:5d:67:f0:cd:c9:fc: 56:9e:8c:f7:0c:68:ae:bf:ca:76:4a:8f:ad:7d:0f: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:A4:D9:E5:9D:F5:03:2B:1D:49:C7:B5:F0:30:8A:A0:76:0B:08 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7e:ae:c5:8a:17:2d:bc:c9:4d:e9:20:13:ba:36:80:4f:c8: c9:ec:bc:6b:b3:b9:19:f7:04:e4:f8:a8:78:0c:a1:c2:2f:c0: 25:cd:c7:a9:29:66:f4:bf:3f:9e:59:0d:24:2e:e3:ad:ac:07: a3:2c:cd:a4:49:b7:22:35:26:fb:aa:57:d8:3e:68:13:4f:9c: 58:77:70:38:a6:18:58:83:f7:73:2f:27:0f:97:c9:91:c8:de: 62:87:58:d0:da:5f:5b:ff:d9:bb:2b:87:b4:c7:97:e2:9d:8a: 75:34:03:13:e7:86:68:2e:7a:2c:9f:2a:3a:3c:aa:54:9a:56: 02:ca:f6:18:02:11:bd:ef:29:25:1e:87:8a:20:18:27:e4:47: 2b:78:71:70:58:72:49:9e:a0:bf:c7:59:c5:9a:a2:1f:23:03: 63:41:ad:ab:73:ef:f6:1f:19:34:42:c0:19:a6:88:c4:2c:e5: 08:cd:8f:b3:55:16:f7:79:9a:7c:c8:0d:fe:f8:92:35:17:1e: 30:ba:d2:da:e1:8a:d5:29:c5:c0:a7:11:55:82:7e:58:90:7d: a1:a5:6d:d0:69:0f:41:aa:85:c4:92:23:4e:e1:33:29:fe:91: 58:38:bf:2d:24:bc:b5:cc:75:0c:e2:61:7b:73:b3:87:cd:0c: bf:04:1b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZUah+a2/H2PW1skBwyVvsGE6zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNjA0MTkwMzU3MTFaFw0yNjA0MjIxNDU1MTFaMDMxMTAvBgNV BAMTKEY3MEJBNEQ5RTU5REY1MDMyQjFENDlDN0I1RjAzMDhBQTA3NjBCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ujLCM7qymdYpeyf4Lsj1o/Kl ox7yqdAQhToAFSRHMAOK+5zBXJsapLLTKAvIcJQX4Rgi6ssVAwc4xoyyp20IXSe3 6rBqkakT+2zC8z8N2UeT34OeeTRs1irVuHkIvymaGbLT+dLWfFSQMa50an3yScXQ hlc1uiBJLQHDkYd0jKt4pMlKnnLHFza/Ghm23XArGxqg2pPNAwyD/+/qYAiqvpVC 6/8IEtqmbaJx9tVvogY/kC1r4xw6xrdV+c5AFBva26w/E3WJoTpIXo1HnAUUH188 PjpVHgZbgf3V4BkaxJR4z6v8DADf6l1n8M3J/FaejPcMaK6/ynZKj619DyCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9wuk2eWd9QMrHUnHtfAwiqB2CwgwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1+rsWKFy28yU3pIBO6NoBPyMnsvGuzuRn3 BOT4qHgMocIvwCXNx6kpZvS/P55ZDSQu462sB6MszaRJtyI1JvuqV9g+aBNPnFh3 cDimGFiD93MvJw+XyZHI3mKHWNDaX1v/2bsrh7THl+KdinU0AxPnhmgueiyfKjo8 qlSaVgLK9hgCEb3vKSUeh4ogGCfkRyt4cXBYckmeoL/HWcWaoh8jA2NBratz7/Yf GTRCwBmmiMQs5QjNj7NVFvd5mnzIDf74kjUXHjC60trhitUpxcCnEVWCfliQfaGl bdBpD0GqhcSSI07hMyn+kVg4vy0kvLXMdQziYXtzs4fNDL8EGy0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:06 2026 by rpki-client