$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: pq+R94D2kFHBI3g54DKAVyjt9oF6E1kN4JC5h34+sh0= Subject key identifier: 97:C2:C8:53:EF:9B:57:79:F0:59:F2:D7:B2:D2:29:F0:28:FD:7A:32 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 09EDEDDFC8531509E1B961B9C63DD4A9E13F8647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 0568 Signing time: Wed 15 Apr 2026 16:50:03 +0000 Manifest this update: Wed 15 Apr 2026 16:45:03 +0000 Manifest next update: Sun 19 Apr 2026 02:16:03 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: mbS0c8ZL7LfjHrJg4SSvM43LUB2Q19WGEw4p2QbpEE0=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ed:ed:df:c8:53:15:09:e1:b9:61:b9:c6:3d:d4:a9:e1:3f:86:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Apr 15 16:45:03 2026 GMT Not After : Apr 19 02:16:03 2026 GMT Subject: CN=97C2C853EF9B5779F059F2D7B2D229F028FD7A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:23:9c:ca:8a:3b:3f:5f:c3:d8:35:7f:12: 45:0c:6c:9e:d1:31:1d:0b:8c:1c:92:e3:5d:f8:e4: 7c:d4:d4:f0:53:eb:33:99:8b:6a:f6:be:10:a1:67: 3f:46:6a:f1:fe:52:a6:c1:7b:75:75:85:ce:2b:c9: c4:e6:94:f0:7e:67:7a:81:f4:5f:c4:fc:8f:03:c0: 5c:80:6c:3e:dd:76:f2:e7:7d:f1:c9:42:0d:a1:21: 57:7c:ac:77:7b:fc:3a:51:93:9b:14:18:a4:a9:50: e2:43:41:82:47:8f:64:c4:43:f5:56:02:64:e3:a0: 32:a6:8d:07:01:d1:d9:db:c3:f9:71:13:ee:80:f5: ce:19:0c:ce:41:3f:fb:59:d1:1b:8a:f2:a5:75:66: e0:4a:ed:ce:65:db:1e:ec:42:d5:8b:a0:a1:e5:25: 41:a9:d9:94:e1:9a:20:53:8b:30:bc:e2:c0:9a:ee: 72:e2:b3:1c:6f:01:56:2b:e0:d1:58:03:60:94:4e: 26:8f:ba:74:00:36:e7:f0:4a:4a:b4:48:4a:02:22: 86:e5:4e:1f:cb:4a:a6:6d:d1:8a:c0:57:72:80:5a: 55:d1:dc:35:8e:5d:98:10:26:e3:72:23:1e:81:7d: e5:5e:13:db:a9:1d:8c:30:5e:66:fc:c3:71:af:85: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C2:C8:53:EF:9B:57:79:F0:59:F2:D7:B2:D2:29:F0:28:FD:7A:32 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a6:e7:3a:10:c3:bd:9b:cd:e4:7d:bb:e9:82:e7:29:17:b0: d8:f8:78:8f:f5:f9:e4:fc:d9:3a:2f:2a:ba:7d:e7:4e:09:41: 14:58:e4:25:7a:91:4f:d9:2e:be:c6:8a:b0:33:c4:c9:b9:b2: 29:22:fd:c5:d1:91:8b:78:49:30:8c:81:8b:b2:a8:82:cc:a9: 96:99:18:fd:84:95:31:2d:c4:b2:a2:66:0a:b6:21:ef:1b:2c: a4:d0:0b:9c:2b:6a:04:06:c2:4c:74:95:c1:4d:15:7e:e1:4a: 73:2a:73:a4:21:88:6e:83:97:a5:f6:ed:02:28:08:81:35:2a: fd:76:da:6c:02:a0:df:75:a0:29:61:d3:57:a3:d8:47:b2:04: b5:fc:00:7f:ee:23:3a:0e:46:38:39:af:42:0d:7e:18:49:68: 0c:72:d9:bb:b5:af:8f:b4:32:ce:f0:09:62:21:30:91:de:e3: 09:27:74:34:90:7f:80:2c:f5:40:4c:58:7e:5d:d2:47:00:24: c2:db:56:43:2a:c2:ac:d9:00:9c:a8:13:50:c6:cb:80:50:85: e4:49:f4:d2:e2:06:d0:71:60:a9:00:ce:fd:9e:a5:7c:63:5c: 7d:f0:18:59:76:43:0c:b6:02:77:fc:3f:90:46:07:ec:e1:01: 0e:bb:aa:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe3t38hTFQnhuWG5xj3UqeE/hkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNjA0MTUxNjQ1MDNaFw0yNjA0MTkwMjE2MDNaMDMxMTAvBgNV BAMTKDk3QzJDODUzRUY5QjU3NzlGMDU5RjJEN0IyRDIyOUYwMjhGRDdBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sSOcyoo7P1/D2DV/EkUMbJ7R MR0LjByS41345HzU1PBT6zOZi2r2vhChZz9GavH+UqbBe3V1hc4rycTmlPB+Z3qB 9F/E/I8DwFyAbD7ddvLnffHJQg2hIVd8rHd7/DpRk5sUGKSpUOJDQYJHj2TEQ/VW AmTjoDKmjQcB0dnbw/lxE+6A9c4ZDM5BP/tZ0RuK8qV1ZuBK7c5l2x7sQtWLoKHl JUGp2ZThmiBTizC84sCa7nLisxxvAVYr4NFYA2CUTiaPunQANufwSkq0SEoCIobl Th/LSqZt0YrAV3KAWlXR3DWOXZgQJuNyIx6BfeVeE9upHYwwXmb8w3GvheYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8LIU++bV3nwWfLXstIp8Cj9ejIwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWm5zoQw72bzeR9u+mC5ykXsNj4eI/1+eT8 2TovKrp9504JQRRY5CV6kU/ZLr7GirAzxMm5siki/cXRkYt4STCMgYuyqILMqZaZ GP2ElTEtxLKiZgq2Ie8bLKTQC5wragQGwkx0lcFNFX7hSnMqc6QhiG6Dl6X27QIo CIE1Kv122mwCoN91oClh01ej2EeyBLX8AH/uIzoORjg5r0INfhhJaAxy2bu1r4+0 Ms7wCWIhMJHe4wkndDSQf4As9UBMWH5d0kcAJMLbVkMqwqzZAJyoE1DGy4BQheRJ 9NLiBtBxYKkAzv2epXxjXH3wGFl2Qwy2Anf8P5BGB+zhAQ67qo4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:22 2026 by rpki-client