$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: YgCGu39BGjXdlbtJsIyp3UCcciAhjG92xF7AfaZWufQ= Subject key identifier: D5:E0:B4:10:44:0C:A1:F9:55:2E:E1:CF:1B:07:A4:A5:09:32:80:E3 Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 6E892438CE6F1A5643D867B919649BEA663A66F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 01E1 Signing time: Fri 17 Apr 2026 21:40:02 +0000 Manifest this update: Fri 17 Apr 2026 21:35:02 +0000 Manifest next update: Tue 21 Apr 2026 02:14:02 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=) 2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: g1VjtWEllN4t/UQPbTIpgishy5DOUMWaVAMLY19wTTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:89:24:38:ce:6f:1a:56:43:d8:67:b9:19:64:9b:ea:66:3a:66:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Apr 17 21:35:02 2026 GMT Not After : Apr 21 02:14:02 2026 GMT Subject: CN=D5E0B410440CA1F9552EE1CF1B07A4A5093280E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:88:1d:f2:4d:73:a0:66:cd:78:c1:7c:42: 94:4f:1e:72:e0:f5:67:dd:d9:48:ed:59:3e:5d:8f: ce:81:1f:6f:f4:f8:3e:5f:72:c9:c5:54:12:6c:ae: ef:c1:8c:5c:cb:ab:72:e1:f0:54:dc:16:4e:3e:53: ca:64:e7:18:42:44:a6:e6:51:a1:0a:6b:6a:95:45: b0:a2:41:42:f6:d5:8a:2a:4c:a5:c3:a0:06:bb:a7: 75:e8:b6:11:6a:de:be:f4:d1:42:a2:e2:74:20:e5: 3b:4c:27:ef:d0:1d:da:6f:31:4c:df:0c:67:6b:ac: 11:d5:3a:f9:16:23:7c:25:8a:91:66:d7:88:58:bc: 23:06:d3:69:c7:86:cb:fa:e3:71:eb:75:4a:24:96: f4:04:7d:9e:52:90:09:f4:5e:97:67:20:e4:f8:8d: a7:91:a7:96:c3:97:cd:56:6f:e1:72:a0:28:4b:44: 38:bf:ad:23:8b:06:0f:89:d7:65:55:af:51:8f:d0: ef:db:cb:b5:b0:cd:60:ea:d0:90:6f:77:f6:47:0d: 02:3f:6f:b9:9f:1c:30:27:c2:36:6a:f6:7f:5d:1e: 7b:78:36:ee:e6:14:5e:9d:d0:f9:28:8e:12:72:db: cc:20:7b:f3:b9:5b:33:ae:66:d1:2c:8f:59:a5:6c: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E0:B4:10:44:0C:A1:F9:55:2E:E1:CF:1B:07:A4:A5:09:32:80:E3 X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:25:a2:b3:7b:77:18:16:a2:ed:ea:7b:58:26:38:96:8e: de:d7:24:39:d9:36:44:bf:4f:05:73:6b:0a:90:53:a9:8d:48: fd:ff:84:04:e4:01:51:b5:ca:f5:48:c4:fe:4c:ad:87:fd:2f: be:e1:80:76:32:07:3e:33:0b:05:66:e9:dc:1b:3d:64:ca:ba: 95:f5:29:a9:45:e0:0c:89:89:09:f2:13:fc:da:60:6e:00:2a: 54:28:fc:0c:67:19:31:05:8b:83:a0:23:19:64:a9:f8:e1:bb: e0:ba:a3:f4:76:d7:36:d4:21:bb:9c:dd:e1:14:6c:ff:a1:2a: 97:37:77:a0:3d:c3:79:6f:e8:9c:e1:c1:60:ca:5c:18:38:54: 37:56:0c:3e:8b:a7:a2:ab:f7:58:97:8e:b3:e8:0f:ab:36:18: ed:0e:45:15:75:e4:e6:1c:95:a0:18:2d:34:20:94:a1:2a:c0: 12:4a:01:97:16:aa:ae:ef:61:51:ba:5f:ea:e7:4b:24:12:00: 9d:fa:36:1d:38:83:4a:cf:07:a5:57:e0:37:cd:29:9c:96:1f: 4f:ac:bd:dd:f7:fc:9b:09:76:2a:19:81:94:36:d8:5c:13:43: 79:9b:d0:7b:cc:06:05:a1:63:58:21:af:83:2a:42:59:f6:7c: 62:ed:4b:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbokkOM5vGlZD2Ge5GWSb6mY6ZvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNjA0MTcyMTM1MDJaFw0yNjA0MjEwMjE0MDJaMDMxMTAvBgNV BAMTKEQ1RTBCNDEwNDQwQ0ExRjk1NTJFRTFDRjFCMDdBNEE1MDkzMjgwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC14gd8k1zoGbNeMF8QpRPHnLg 9Wfd2UjtWT5dj86BH2/0+D5fcsnFVBJsru/BjFzLq3Lh8FTcFk4+U8pk5xhCRKbm UaEKa2qVRbCiQUL21YoqTKXDoAa7p3XothFq3r700UKi4nQg5TtMJ+/QHdpvMUzf DGdrrBHVOvkWI3wlipFm14hYvCMG02nHhsv643HrdUoklvQEfZ5SkAn0XpdnIOT4 jaeRp5bDl81Wb+FyoChLRDi/rSOLBg+J12VVr1GP0O/by7WwzWDq0JBvd/ZHDQI/ b7mfHDAnwjZq9n9dHnt4Nu7mFF6d0PkojhJy28wge/O5WzOuZtEsj1mlbMEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1eC0EEQMoflVLuHPGwekpQkygOMwHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy5JaKze3cYFqLt6ntYJjiWjt7XJDnZNkS/ TwVzawqQU6mNSP3/hATkAVG1yvVIxP5MrYf9L77hgHYyBz4zCwVm6dwbPWTKupX1 KalF4AyJiQnyE/zaYG4AKlQo/AxnGTEFi4OgIxlkqfjhu+C6o/R21zbUIbuc3eEU bP+hKpc3d6A9w3lv6JzhwWDKXBg4VDdWDD6Lp6Kr91iXjrPoD6s2GO0ORRV15OYc laAYLTQglKEqwBJKAZcWqq7vYVG6X+rnSyQSAJ36Nh04g0rPB6VX4DfNKZyWH0+s vd33/JsJdioZgZQ22FwTQ3mb0HvMBgWhY1ghr4MqQln2fGLtS4k= -----END CERTIFICATE-----Generated at Sat Apr 18 08:08:31 2026 by rpki-client