$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: 4i6LEzhIc3INNUnryXe+wCco1TGg8uVNKtF9i80dvRw= Subject key identifier: 30:3D:72:1D:F9:A8:4F:25:4D:FF:1A:F5:A1:03:5F:38:7A:F9:23:EC Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 623868671E6204E4A151223FFE6F717767A48189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04D8 Signing time: Fri 17 Apr 2026 06:52:35 +0000 Manifest this update: Fri 17 Apr 2026 06:47:35 +0000 Manifest next update: Mon 20 Apr 2026 10:16:35 +0000 Files and hashes: 1: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 2: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 3: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: UBHBGTib8y9mi+OZW1d9lmfP06xOhGbXV5Kdq3lEhI8=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:38:68:67:1e:62:04:e4:a1:51:22:3f:fe:6f:71:77:67:a4:81:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Apr 17 06:47:35 2026 GMT Not After : Apr 20 10:16:35 2026 GMT Subject: CN=303D721DF9A84F254DFF1AF5A1035F387AF923EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:2f:5c:4e:50:49:80:90:6b:50:6b:7b:24: df:4e:b9:7a:ac:67:2f:48:47:1b:63:51:05:20:d1: 3f:65:45:ce:b1:bb:a5:f9:27:28:37:99:55:e8:13: c1:c8:68:65:a0:7b:89:4c:cb:55:2e:7d:a3:d4:a7: d9:cc:fb:a6:5e:44:e3:63:54:9f:14:6c:91:dc:42: f1:f4:67:16:11:91:f7:a2:07:12:be:e3:77:47:6f: 59:9a:c2:3e:02:8c:be:1c:35:96:42:a0:e1:a2:8e: e3:d5:e7:ec:bb:99:84:68:0f:16:81:70:a9:c8:78: 25:4a:02:dc:a1:d2:fb:cd:5d:3d:28:41:29:0c:8b: 91:c4:ef:8f:b5:db:4c:bb:70:f1:2b:5f:59:1e:54: 4b:45:32:c9:b9:19:5a:db:44:c8:07:90:70:b6:62: b0:de:06:7d:80:f3:b9:2c:a5:c6:21:57:77:5c:83: 43:28:82:47:5b:c3:08:00:24:66:9c:95:12:23:ec: f3:0d:9c:f7:23:cc:3d:58:ac:4a:4d:68:0b:c7:e4: 7b:36:1c:46:85:bf:f8:c4:03:1c:30:cc:fc:82:b9: 34:50:c1:29:8e:4c:06:f1:27:11:c9:41:2a:29:66: 6f:bd:20:49:20:60:06:99:ae:21:3f:bb:11:a9:a7: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:72:1D:F9:A8:4F:25:4D:FF:1A:F5:A1:03:5F:38:7A:F9:23:EC X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:66:f7:47:7e:ef:56:8e:f1:77:41:6e:05:bf:0a:4e:03:ad: 21:88:26:39:40:75:c7:65:bf:4c:cf:8e:7c:95:09:84:12:de: 83:fd:72:dd:6d:82:03:45:c0:08:54:74:9f:0a:79:e8:a4:1a: 74:18:ba:b5:c2:01:2f:6e:26:41:c1:85:7c:44:2d:24:d1:2b: 68:a6:91:43:cd:6d:4a:fc:1f:b2:23:32:b8:e0:25:87:89:23: df:1f:9b:95:da:2e:a5:f0:a6:31:ee:1a:fe:2f:57:60:c5:29: b6:9d:72:37:d3:e8:1e:2f:71:c9:18:76:45:e3:c5:0e:81:00: 6b:fd:08:38:13:e1:7a:36:af:d7:33:70:42:7a:a0:36:92:e7: 64:f5:0d:7c:a6:2a:8a:28:27:2b:2d:c9:f2:c1:25:df:98:9a: ca:fb:6e:43:ca:07:1b:05:6e:a8:04:4f:be:d2:96:1a:42:fe: 63:ee:13:92:02:db:48:00:6a:9f:18:21:9a:44:6a:d9:5f:51: eb:c3:6e:e6:68:ed:ce:24:c1:06:5e:26:10:da:72:18:4a:52: aa:cf:20:57:73:97:63:83:89:a6:ce:87:44:ce:4e:8e:51:c0: 27:b9:15:6a:57:a9:7b:fc:90:4f:73:2e:51:fc:49:9d:00:45: 35:0f:de:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjhoZx5iBOShUSI//m9xd2ekgYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNjA0MTcwNjQ3MzVaFw0yNjA0MjAxMDE2MzVaMDMxMTAvBgNV BAMTKDMwM0Q3MjFERjlBODRGMjU0REZGMUFGNUExMDM1RjM4N0FGOTIzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKy9cTlBJgJBrUGt7JN9OuXqs Zy9IRxtjUQUg0T9lRc6xu6X5Jyg3mVXoE8HIaGWge4lMy1UufaPUp9nM+6ZeRONj VJ8UbJHcQvH0ZxYRkfeiBxK+43dHb1mawj4CjL4cNZZCoOGijuPV5+y7mYRoDxaB cKnIeCVKAtyh0vvNXT0oQSkMi5HE74+120y7cPErX1keVEtFMsm5GVrbRMgHkHC2 YrDeBn2A87kspcYhV3dcg0MogkdbwwgAJGaclRIj7PMNnPcjzD1YrEpNaAvH5Hs2 HEaFv/jEAxwwzPyCuTRQwSmOTAbxJxHJQSopZm+9IEkgYAaZriE/uxGpp+bHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD1yHfmoTyVN/xr1oQNfOHr5I+wwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1m90d+71aO8XdBbgW/Ck4DrSGIJjlAdcdl v0zPjnyVCYQS3oP9ct1tggNFwAhUdJ8KeeikGnQYurXCAS9uJkHBhXxELSTRK2im kUPNbUr8H7IjMrjgJYeJI98fm5XaLqXwpjHuGv4vV2DFKbadcjfT6B4vcckYdkXj xQ6BAGv9CDgT4Xo2r9czcEJ6oDaS52T1DXymKoooJystyfLBJd+Ymsr7bkPKBxsF bqgET77SlhpC/mPuE5IC20gAap8YIZpEatlfUevDbuZo7c4kwQZeJhDachhKUqrP IFdzl2ODiabOh0TOTo5RwCe5FWpXqXv8kE9zLlH8SZ0ARTUP3nQ= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:36 2026 by rpki-client