$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: SxgP0EGnaYP+UUsR+rq5cbZgeHpvD3KUMe3DkS2yRYg= Subject key identifier: 65:7D:C2:3A:04:3A:3F:9A:22:13:81:6B:71:A5:EE:F8:B6:79:6D:2E Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 31F328A312F7D8DD9956DD5E203F4B59D3762665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 028D Signing time: Fri 17 Apr 2026 18:41:10 +0000 Manifest this update: Fri 17 Apr 2026 18:36:10 +0000 Manifest next update: Mon 20 Apr 2026 22:42:10 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: llXiNZXf91TBxby1jqvtQz0J/sW+9gn97kCPG5C8EsQ=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f3:28:a3:12:f7:d8:dd:99:56:dd:5e:20:3f:4b:59:d3:76:26:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Apr 17 18:36:10 2026 GMT Not After : Apr 20 22:42:10 2026 GMT Subject: CN=657DC23A043A3F9A2213816B71A5EEF8B6796D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:c7:f5:fd:ea:a3:39:b5:88:d9:e0:4c:8d: 8e:73:8b:eb:13:d6:f0:19:6a:a5:41:77:12:89:04: 73:e8:00:53:69:c6:c3:2c:e7:82:23:1d:63:aa:b2: 99:a5:9f:cc:d6:23:13:25:e3:61:28:f2:ae:fe:08: f1:49:2f:ee:25:05:d3:03:47:07:b0:ca:dc:12:49: 84:71:df:85:7d:ab:3c:76:94:2c:5a:31:dd:42:17: 49:5b:51:ee:95:a0:d6:b6:2c:ee:4e:6d:1f:e5:a9: 9c:fc:a9:79:b0:c7:44:70:56:fd:01:21:f6:34:7f: 4f:6a:20:65:5d:05:74:59:65:78:a6:b6:ab:28:00: 8e:5d:53:eb:74:c2:96:75:2e:83:3d:ed:bb:7b:eb: 28:ad:e0:66:3d:23:9b:5b:cc:9b:cc:59:99:75:8d: e6:55:c2:82:54:c4:dc:db:fb:bf:9f:e6:32:18:0b: c9:ff:0e:c4:66:87:50:eb:f6:f8:a8:ad:86:44:fb: 16:65:6f:60:69:3a:b8:c8:ab:66:9d:e8:7c:f6:f2: 4a:19:bd:e9:b9:0d:a4:07:a7:46:74:5f:69:a2:89: a3:53:3a:f8:05:26:98:03:ac:4d:7c:22:45:cf:24: 67:24:f2:a1:91:93:99:64:a6:e3:81:76:c9:94:55: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7D:C2:3A:04:3A:3F:9A:22:13:81:6B:71:A5:EE:F8:B6:79:6D:2E X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e0:d1:77:fb:b3:63:90:a9:3f:f9:39:9e:3d:55:0b:0a:a3: 3b:83:a4:ff:c5:ad:79:72:45:b8:68:06:29:11:52:1e:1f:f4: bb:24:cc:a2:10:58:c2:55:4a:58:22:d0:c4:b2:80:d8:88:83: d8:8f:0c:14:27:dc:c3:55:7d:5f:5f:58:01:1f:ba:83:0d:50: 87:9d:b4:2e:b8:8d:00:62:19:15:27:c2:3f:35:06:a1:7a:b3: c6:f6:b4:65:62:88:e8:58:a4:f0:30:23:51:65:e0:97:23:b6: 22:54:20:78:cf:6e:3d:e8:05:e6:13:a9:4a:6d:f7:a9:af:77: 1d:fc:1f:76:73:f0:91:7b:78:70:7f:ba:bc:cb:2f:bb:00:72: 99:40:d5:18:db:4d:39:2c:7d:aa:0b:1e:ea:8b:ee:3e:7d:c8: 80:02:bf:53:95:ca:dc:d9:7c:ee:f5:54:8a:15:e5:21:f6:ea: a3:8a:c1:f6:49:1c:3f:14:cd:2c:23:1b:bd:cb:18:d3:e0:c3: f5:15:cf:80:0d:b5:58:00:9f:1d:c3:df:a7:e7:e8:9f:38:4a: 46:5f:60:f3:25:5b:94:8b:0a:e6:7b:96:ba:f3:59:6a:a9:6f: f3:26:27:7d:82:56:5c:57:de:21:99:57:ae:87:5b:9f:90:ce: 16:22:2c:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfMooxL32N2ZVt1eID9LWdN2JmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNjA0MTcxODM2MTBaFw0yNjA0MjAyMjQyMTBaMDMxMTAvBgNV BAMTKDY1N0RDMjNBMDQzQTNGOUEyMjEzODE2QjcxQTVFRUY4QjY3OTZEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Fcf1/eqjObWI2eBMjY5zi+sT 1vAZaqVBdxKJBHPoAFNpxsMs54IjHWOqspmln8zWIxMl42Eo8q7+CPFJL+4lBdMD RwewytwSSYRx34V9qzx2lCxaMd1CF0lbUe6VoNa2LO5ObR/lqZz8qXmwx0RwVv0B IfY0f09qIGVdBXRZZXimtqsoAI5dU+t0wpZ1LoM97bt76yit4GY9I5tbzJvMWZl1 jeZVwoJUxNzb+7+f5jIYC8n/DsRmh1Dr9viorYZE+xZlb2BpOrjIq2ad6Hz28koZ vem5DaQHp0Z0X2miiaNTOvgFJpgDrE18IkXPJGck8qGRk5lkpuOBdsmUVQhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZX3COgQ6P5oiE4FrcaXu+LZ5bS4wHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/g0Xf7s2OQqT/5OZ49VQsKozuDpP/FrXly RbhoBikRUh4f9LskzKIQWMJVSlgi0MSygNiIg9iPDBQn3MNVfV9fWAEfuoMNUIed tC64jQBiGRUnwj81BqF6s8b2tGViiOhYpPAwI1Fl4JcjtiJUIHjPbj3oBeYTqUpt 96mvdx38H3Zz8JF7eHB/urzLL7sAcplA1RjbTTksfaoLHuqL7j59yIACv1OVytzZ fO71VIoV5SH26qOKwfZJHD8UzSwjG73LGNPgw/UVz4ANtVgAnx3D36fn6J84SkZf YPMlW5SLCuZ7lrrzWWqpb/MmJ32CVlxX3iGZV66HW5+QzhYiLMU= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:43 2026 by rpki-client