$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: q13bdPlV6Gk7QqG2mU9xNSFU+509u29ZIiPaQmC/iyQ= Subject key identifier: 9B:CD:FD:6C:F8:D1:70:AC:0E:3F:94:A8:7C:1B:23:9A:1A:28:B9:1C Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 1E6EC220C928916D971C0E8921094208A11F637D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 01EC Signing time: Fri 17 Apr 2026 04:41:25 +0000 Manifest this update: Fri 17 Apr 2026 04:36:25 +0000 Manifest next update: Mon 20 Apr 2026 07:38:25 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: RIVcL3TsrfLMdeKg19E1VzQm/jtAbWoizmDI0Us3MzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6e:c2:20:c9:28:91:6d:97:1c:0e:89:21:09:42:08:a1:1f:63:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Apr 17 04:36:25 2026 GMT Not After : Apr 20 07:38:25 2026 GMT Subject: CN=9BCDFD6CF8D170AC0E3F94A87C1B239A1A28B91C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:a1:4f:22:e7:0d:7e:66:79:1a:a4:7e:a0: b9:15:d5:8e:e2:7d:8b:65:5e:28:1b:f7:78:f7:cd: 0b:96:26:8a:23:08:0a:65:e1:1d:fa:b6:42:97:75: 1b:15:57:16:8d:87:b5:02:87:66:5f:b7:68:66:4b: 8f:26:cc:ff:b0:95:fa:1a:7a:d5:f5:2e:07:f2:90: 63:30:3e:55:53:ca:22:5d:2d:2a:79:6f:19:18:71: 2e:91:af:68:f7:2b:b9:5a:6d:c4:97:c0:ae:4f:7d: 70:ad:14:41:e4:46:7b:b4:ce:be:39:f1:1d:04:c9: ab:74:9c:0d:13:d4:97:2d:ce:a1:fc:1c:05:3b:b2: b9:1a:09:b1:68:00:10:17:bd:f8:f3:a6:8d:c2:ca: 38:3f:dc:f6:d2:68:6a:0c:6a:84:fd:3a:cb:e6:36: 6b:21:21:5b:d5:1d:fa:57:89:ea:97:f0:21:65:e4: df:48:5f:de:44:bd:4f:bc:87:2e:0e:ce:29:7c:0e: 45:a9:68:a6:61:f2:43:a5:4e:41:44:55:32:d8:61: ef:58:85:a3:a1:a6:07:14:f5:0e:b7:68:99:d3:e6: d1:df:2c:4f:2e:43:a2:8e:7b:8c:40:b1:df:a7:9f: c1:6b:7e:3c:fa:cc:c0:9a:7c:55:79:f0:78:bf:ad: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:FD:6C:F8:D1:70:AC:0E:3F:94:A8:7C:1B:23:9A:1A:28:B9:1C X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:53:65:e5:d2:e2:d5:98:4b:ba:b3:ea:1e:d7:e1:bd:2a:11: 65:11:92:6c:d0:c9:37:24:7f:dc:28:87:e7:80:9f:da:fd:f9: a9:65:fb:b7:52:c0:3a:04:12:44:82:83:88:99:f8:19:f4:b1: f8:3b:3f:08:d6:30:74:f9:90:f4:79:e0:94:9c:93:fe:de:c2: bb:c0:64:ba:e5:35:f8:b3:89:f7:61:f3:00:9f:34:10:30:f2: 45:79:c2:f7:c8:89:a1:71:63:f1:b9:3f:ed:9c:d1:5f:7f:8e: 19:b2:d6:6c:9c:d6:6b:b7:33:3f:6a:1d:5a:a5:34:34:d8:67: b1:cd:69:75:ab:ad:ee:89:8c:e7:c2:46:6a:a2:ae:9d:67:a0: b8:34:29:96:3c:4d:6a:72:f7:f0:65:95:fc:bd:49:a6:e8:14: f5:40:1f:5e:7d:46:9c:df:43:cd:4c:90:c3:9e:e7:d5:de:63: d1:89:6e:14:c2:e4:f6:57:f3:c0:c9:d6:82:78:7e:4f:a4:04: 24:26:17:2a:b7:8d:b0:d1:eb:a3:b7:51:ec:7e:39:c0:c5:36: 34:cc:c7:e9:eb:45:bb:5a:0e:88:b8:49:8b:80:e6:cb:32:8f: 61:82:95:94:67:48:61:8d:7f:24:d4:85:d9:aa:cd:77:61:d6: 93:dc:b6:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHm7CIMkokW2XHA6JIQlCCKEfY30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNjA0MTcwNDM2MjVaFw0yNjA0MjAwNzM4MjVaMDMxMTAvBgNV BAMTKDlCQ0RGRDZDRjhEMTcwQUMwRTNGOTRBODdDMUIyMzlBMUEyOEI5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtqFPIucNfmZ5GqR+oLkV1Y7i fYtlXigb93j3zQuWJoojCApl4R36tkKXdRsVVxaNh7UCh2Zft2hmS48mzP+wlfoa etX1LgfykGMwPlVTyiJdLSp5bxkYcS6Rr2j3K7labcSXwK5PfXCtFEHkRnu0zr45 8R0Eyat0nA0T1JctzqH8HAU7srkaCbFoABAXvfjzpo3Cyjg/3PbSaGoMaoT9Osvm NmshIVvVHfpXieqX8CFl5N9IX95EvU+8hy4Ozil8DkWpaKZh8kOlTkFEVTLYYe9Y haOhpgcU9Q63aJnT5tHfLE8uQ6KOe4xAsd+nn8Frfjz6zMCafFV58Hi/rbz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm839bPjRcKwOP5SofBsjmhoouRwwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlTZeXS4tWYS7qz6h7X4b0qEWURkmzQyTck f9woh+eAn9r9+all+7dSwDoEEkSCg4iZ+Bn0sfg7PwjWMHT5kPR54JSck/7ewrvA ZLrlNfizifdh8wCfNBAw8kV5wvfIiaFxY/G5P+2c0V9/jhmy1myc1mu3Mz9qHVql NDTYZ7HNaXWrre6JjOfCRmqirp1noLg0KZY8TWpy9/Bllfy9SaboFPVAH159Rpzf Q81MkMOe59XeY9GJbhTC5PZX88DJ1oJ4fk+kBCQmFyq3jbDR66O3Uex+OcDFNjTM x+nrRbtaDoi4SYuA5ssyj2GClZRnSGGNfyTUhdmqzXdh1pPctoM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:18 2026 by rpki-client