$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: RvS+2njJ0D92HVhfO+mp4libF8fXPTG/LELr/WLvuCY= Subject key identifier: 93:A3:34:3C:A0:57:FC:BD:0B:0E:6C:18:4F:7D:2B:E3:BC:DD:24:E6 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 5F8729228641EC25690DFC1EE97245777F9A70B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 0191 Signing time: Sat 18 Apr 2026 00:32:26 +0000 Manifest this update: Sat 18 Apr 2026 00:27:26 +0000 Manifest next update: Tue 21 Apr 2026 10:14:26 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=) 2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: D4vjNJSXs09UUiRHZkLKJgWHpeKC/fLO58XSEttVZL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:87:29:22:86:41:ec:25:69:0d:fc:1e:e9:72:45:77:7f:9a:70:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Apr 18 00:27:26 2026 GMT Not After : Apr 21 10:14:26 2026 GMT Subject: CN=93A3343CA057FCBD0B0E6C184F7D2BE3BCDD24E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:6c:92:4e:e0:e3:01:6f:bc:03:11:24:f9: 9c:30:25:86:41:c7:80:e6:30:75:03:98:86:42:1a: f0:cf:de:fd:4d:e5:21:cb:1c:c1:6b:f1:84:9d:e9: 09:3e:77:19:7f:f2:4b:82:3b:21:64:83:9b:ae:48: 4a:fc:fd:b8:42:0e:38:a9:63:5c:0c:fd:b6:f2:e4: a9:99:a6:3a:3d:8e:25:26:3d:6d:ba:f7:1c:1c:51: 3f:79:2a:fd:ce:0b:a5:73:d7:e5:b8:ba:49:b6:88: a4:3e:9c:cc:f3:23:18:3a:72:c4:e6:e0:82:b1:29: 44:87:1e:32:bd:36:ef:e7:c3:02:4b:ce:d2:3d:11: e3:18:c3:14:bc:63:72:4d:f6:7c:2f:2c:e5:7d:c2: 28:0a:ed:fd:70:1a:6d:52:83:af:06:04:ba:6f:f4: d7:5e:da:3c:da:ad:d4:0d:48:16:03:90:02:dd:27: aa:71:2a:10:1f:1f:45:38:c0:35:58:72:da:48:9f: 5b:95:58:84:be:28:0e:dd:8b:5e:38:c4:97:e5:18: 81:f5:d5:88:28:5d:93:a5:a2:2d:c3:d2:c0:66:69: d4:75:69:9a:74:0d:be:d4:7d:09:30:7b:96:93:b1: 0b:0e:58:03:34:a5:72:6c:31:b0:d7:83:b2:e1:ca: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A3:34:3C:A0:57:FC:BD:0B:0E:6C:18:4F:7D:2B:E3:BC:DD:24:E6 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:06:bc:d2:e0:95:b3:b9:56:be:29:cc:8a:54:62:d0:83:06: a8:1c:02:d3:b5:0f:ee:f5:98:a8:d8:dc:da:70:79:d3:8d:78: 21:e5:3c:b8:8c:f8:e1:ef:fc:f8:c0:7b:49:93:ba:b6:c5:3c: 6e:7d:d3:c6:7b:ff:5a:7b:ae:66:77:05:98:6d:0d:1a:62:62: 27:03:a9:13:23:76:c5:f7:84:c9:1f:16:ac:6a:94:1e:d0:36: c3:b2:d1:d7:ed:de:90:2f:0f:0b:47:e2:cd:95:16:67:dc:30: af:68:71:73:6d:54:5c:29:8c:d7:fe:6e:6e:16:71:58:6c:7f: 87:ab:50:3c:8e:31:17:ce:2a:da:d9:77:60:d3:a0:fb:4e:13: 49:be:6c:a1:8a:52:66:a6:6b:2f:72:7e:12:13:2e:87:e6:d6: 05:62:55:09:67:3b:14:22:00:e6:12:49:0a:b4:af:22:ac:d5: 16:fd:d1:ab:63:01:53:be:ca:32:40:74:31:58:60:c1:03:0f: 20:9c:ed:91:88:ef:97:65:d1:a4:1d:96:e6:4c:86:fa:25:50: ce:02:ec:e7:6f:b7:d7:30:a6:9a:cb:a6:32:fe:83:ab:e8:20: fd:58:e9:c1:52:df:41:9a:d1:53:86:97:0c:fb:18:85:9c:bd: f1:7e:1b:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4cpIoZB7CVpDfwe6XJFd3+acLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNjA0MTgwMDI3MjZaFw0yNjA0MjExMDE0MjZaMDMxMTAvBgNV BAMTKDkzQTMzNDNDQTA1N0ZDQkQwQjBFNkMxODRGN0QyQkUzQkNERDI0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBGySTuDjAW+8AxEk+ZwwJYZB x4DmMHUDmIZCGvDP3v1N5SHLHMFr8YSd6Qk+dxl/8kuCOyFkg5uuSEr8/bhCDjip Y1wM/bby5KmZpjo9jiUmPW269xwcUT95Kv3OC6Vz1+W4ukm2iKQ+nMzzIxg6csTm 4IKxKUSHHjK9Nu/nwwJLztI9EeMYwxS8Y3JN9nwvLOV9wigK7f1wGm1Sg68GBLpv 9Nde2jzardQNSBYDkALdJ6pxKhAfH0U4wDVYctpIn1uVWIS+KA7di144xJflGIH1 1YgoXZOloi3D0sBmadR1aZp0Db7UfQkwe5aTsQsOWAM0pXJsMbDXg7LhypBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6M0PKBX/L0LDmwYT30r47zdJOYwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIGvNLglbO5Vr4pzIpUYtCDBqgcAtO1D+71 mKjY3NpwedONeCHlPLiM+OHv/PjAe0mTurbFPG5908Z7/1p7rmZ3BZhtDRpiYicD qRMjdsX3hMkfFqxqlB7QNsOy0dft3pAvDwtH4s2VFmfcMK9ocXNtVFwpjNf+bm4W cVhsf4erUDyOMRfOKtrZd2DToPtOE0m+bKGKUmamay9yfhITLofm1gViVQlnOxQi AOYSSQq0ryKs1Rb90atjAVO+yjJAdDFYYMEDDyCc7ZGI75dl0aQdluZMhvolUM4C 7Odvt9cwpprLpjL+g6voIP1Y6cFS30Ga0VOGlwz7GIWcvfF+G+k= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:37 2026 by rpki-client