$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: scUdVqnztY8slm0CQbRxutQ/N80s/SsTPrjfqbZ2gIs= Subject key identifier: F3:CE:74:1C:2D:36:28:86:79:57:BD:73:7B:89:27:0E:B8:7E:5A:BF Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 2AF23589692ECA1B1C7027336F9060A24BD39F1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 14:12:29 +0000 Manifest this update: Thu 16 Apr 2026 14:07:29 +0000 Manifest next update: Sun 19 Apr 2026 16:50:29 +0000 Files and hashes: 1: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: iiHvwyY37kppGmfEyOF/IDbgt8ccHt1rOD0ib54miU0=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 3: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) 4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f2:35:89:69:2e:ca:1b:1c:70:27:33:6f:90:60:a2:4b:d3:9f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Apr 16 14:07:29 2026 GMT Not After : Apr 19 16:50:29 2026 GMT Subject: CN=F3CE741C2D3628867957BD737B89270EB87E5ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:8e:37:cb:68:d5:61:83:8b:14:7d:9b:26: 91:b8:de:26:e6:0d:95:84:3c:4d:f3:7e:89:61:a4: b3:ec:24:0a:b5:ff:85:32:f8:54:68:49:13:e4:9c: 22:15:e5:69:69:5e:73:50:b9:aa:fb:ff:b8:f7:49: e7:41:1a:48:8a:45:6f:0d:1d:e3:7b:9d:c2:86:d6: 97:51:1c:e6:63:4b:b4:23:e4:82:88:5a:46:2a:d9: 41:62:e5:21:45:61:3e:4d:a6:c2:94:01:35:f9:78: 7c:03:05:9a:3d:43:a3:43:36:68:44:0f:90:96:88: 72:5b:19:ca:64:ce:09:31:a4:45:88:d4:d4:f5:26: 10:fa:22:8c:e7:37:e9:41:b8:f0:d1:5d:02:ce:d7: 88:3e:22:cf:d0:2a:c0:c4:71:94:01:56:63:12:51: 89:eb:d8:a7:67:17:bc:91:d2:cb:40:52:91:a0:10: 1c:7f:74:e0:0b:38:a7:3a:1e:ba:a4:04:63:84:e6: ee:e0:c9:52:0e:ef:97:eb:d7:0d:82:52:a3:c9:b3: ec:c0:30:5c:a1:52:5e:c6:a5:ce:dc:c3:b5:77:e0: 81:6d:88:71:13:af:57:d5:df:09:3a:6b:3f:ca:85: e7:76:47:ce:55:56:48:05:0c:85:e2:46:5c:8e:67: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CE:74:1C:2D:36:28:86:79:57:BD:73:7B:89:27:0E:B8:7E:5A:BF X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:74:87:9f:ce:fd:54:39:c2:6a:20:ad:17:41:a3:fb:e6:c1: 84:91:df:bb:c4:ff:69:ba:13:82:ff:93:8a:25:6d:73:f6:a7: 8c:47:15:2a:67:db:b8:b8:3c:2e:27:be:9a:a3:84:53:23:bf: be:d0:52:5e:26:a6:d9:e1:dc:a9:8c:1c:67:17:9f:98:13:b7: 30:d3:6d:2d:74:01:2b:0a:29:54:d0:9b:61:de:f1:94:0d:6b: 2e:c1:09:e7:50:0a:91:64:58:62:ff:96:83:5e:41:c4:59:f7: a7:eb:bb:8f:96:c0:f3:1e:30:ad:78:58:76:00:e0:0d:10:77: 43:3e:78:57:66:01:7d:c5:87:05:b5:11:db:42:ed:62:67:41: e3:72:b3:8c:50:fb:14:0a:ac:72:24:72:d0:d4:f1:0f:75:b4: f6:6d:f8:22:37:7b:74:5c:e0:a8:a9:fa:92:df:f0:22:a0:99: 38:f8:6f:3c:5a:9c:3c:75:a3:bf:94:48:5b:1f:fe:f6:b6:68: 83:94:ae:2b:85:0b:92:9f:8a:71:73:06:b8:84:97:38:e6:38: b1:fc:6e:9d:ec:88:bb:3c:8d:a6:70:6a:1d:c4:ba:a3:bb:10: 21:84:92:2a:62:52:25:82:f5:10:8b:e1:54:cc:21:46:68:15: a1:18:ec:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvI1iWkuyhsccCczb5BgokvTnxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNjA0MTYxNDA3MjlaFw0yNjA0MTkxNjUwMjlaMDMxMTAvBgNV BAMTKEYzQ0U3NDFDMkQzNjI4ODY3OTU3QkQ3MzdCODkyNzBFQjg3RTVBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcY43y2jVYYOLFH2bJpG43ibm DZWEPE3zfolhpLPsJAq1/4Uy+FRoSRPknCIV5WlpXnNQuar7/7j3SedBGkiKRW8N HeN7ncKG1pdRHOZjS7Qj5IKIWkYq2UFi5SFFYT5NpsKUATX5eHwDBZo9Q6NDNmhE D5CWiHJbGcpkzgkxpEWI1NT1JhD6IoznN+lBuPDRXQLO14g+Is/QKsDEcZQBVmMS UYnr2KdnF7yR0stAUpGgEBx/dOALOKc6HrqkBGOE5u7gyVIO75fr1w2CUqPJs+zA MFyhUl7Gpc7cw7V34IFtiHETr1fV3wk6az/Khed2R85VVkgFDIXiRlyOZyQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8850HC02KIZ5V71ze4knDrh+Wr8wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABR0h5/O/VQ5wmogrRdBo/vmwYSR37vE/2m6 E4L/k4olbXP2p4xHFSpn27i4PC4nvpqjhFMjv77QUl4mptnh3KmMHGcXn5gTtzDT bS10ASsKKVTQm2He8ZQNay7BCedQCpFkWGL/loNeQcRZ96fru4+WwPMeMK14WHYA 4A0Qd0M+eFdmAX3FhwW1EdtC7WJnQeNys4xQ+xQKrHIkctDU8Q91tPZt+CI3e3Rc 4Kip+pLf8CKgmTj4bzxanDx1o7+USFsf/va2aIOUriuFC5KfinFzBriElzjmOLH8 bp3siLs8jaZwah3EuqO7ECGEkipiUiWC9RCL4VTMIUZoFaEY7E8= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:02 2026 by rpki-client