$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: eR/w1JZmBSknxperSDYEUOP+FZ90Hc8Sg7G+KUSZGSk= Subject key identifier: D4:2A:06:FC:9C:C9:A3:61:98:57:E2:C3:00:FF:3D:36:EE:3B:AD:A5 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 2DA72B2C7B3A64E4D6C60D140045430E130DD7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 027B Signing time: Wed 15 Apr 2026 23:32:26 +0000 Manifest this update: Wed 15 Apr 2026 23:27:26 +0000 Manifest next update: Sun 19 Apr 2026 10:29:26 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: uFmBVOauDxyFmJh4IK3hlVUYnFizoaY30PZq6wsxA+k=) 2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 4: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: izl9BqkwauCkLbgApJ4wfAogR3JV/MkutriJnz1pzzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a7:2b:2c:7b:3a:64:e4:d6:c6:0d:14:00:45:43:0e:13:0d:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Apr 15 23:27:26 2026 GMT Not After : Apr 19 10:29:26 2026 GMT Subject: CN=D42A06FC9CC9A3619857E2C300FF3D36EE3BADA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:22:45:f3:03:43:c0:81:44:74:fc:c6:78:37: 31:a8:03:db:40:bc:af:8a:de:0d:41:de:dc:b0:33: fa:b6:87:15:a6:67:0f:d4:ac:1f:de:07:ef:12:fc: b6:f5:37:42:a6:aa:07:86:15:81:93:33:b6:ed:86: 6a:60:74:4c:cf:77:15:f2:80:9b:89:76:c9:f2:5c: 44:16:5f:ed:97:0b:7e:95:29:61:97:1c:87:4e:2c: 32:fa:fd:29:a3:47:f4:c6:65:64:01:4f:4b:34:99: 7c:92:02:72:47:90:59:24:1f:84:59:c8:28:eb:27: 6c:03:84:98:ef:36:bf:7a:c6:59:e8:61:0e:c8:6f: 44:07:b3:57:72:fb:02:ea:56:81:c4:3b:68:f7:78: d1:49:cb:fc:39:c5:75:c0:ed:0c:e5:e6:f8:39:43: 01:ba:98:68:f0:63:66:76:8e:d1:7a:19:4c:f1:f7: 1c:3e:6e:99:2f:27:52:12:55:36:2e:32:5f:34:61: 16:54:6a:7c:c3:cf:79:55:66:3c:fd:41:fb:d8:e7: 45:85:66:58:11:9c:1f:4e:1c:de:29:95:a4:dc:26: f2:80:63:3c:61:41:d8:bb:07:c5:0d:cc:60:32:0a: 2d:ab:f3:77:7d:c1:f7:41:6f:b5:35:76:1a:48:f4: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2A:06:FC:9C:C9:A3:61:98:57:E2:C3:00:FF:3D:36:EE:3B:AD:A5 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:04:67:14:ec:0d:3b:70:ce:e6:89:21:f3:5e:81:5c:45:f3: d5:b8:95:44:6d:f8:33:09:fb:a7:30:50:70:45:d9:56:ee:a1: 37:d5:65:0d:33:d9:da:86:38:5a:08:a7:cb:9f:5a:b5:b5:24: 7d:f2:ed:76:27:e9:77:b4:4f:c4:77:05:cd:1b:61:41:fd:e0: 31:aa:d4:60:0e:66:85:10:c7:6b:f7:4a:0e:78:cb:1b:61:a8: 8e:3e:57:bc:df:c9:c0:84:ee:15:09:56:ce:2f:cf:ef:15:0d: a1:60:63:5b:02:7a:e3:3f:3c:66:54:e3:fe:22:0c:00:31:4e: 69:8f:9d:44:4a:04:ca:65:d4:b7:7d:b6:0c:4e:1c:ff:ca:d2: cc:8a:c2:5c:2a:1d:fa:34:0d:45:39:4d:8f:de:6c:56:ec:aa: c8:a3:e6:56:95:80:0e:a9:8d:d9:3b:f7:91:42:28:3e:10:11: 2b:23:dc:62:79:74:49:c4:25:20:90:43:e3:9b:16:54:7e:d9: 05:7d:0c:0b:ae:13:a4:49:b2:54:2b:f9:6d:2b:c1:83:55:ef: 94:75:23:0d:74:06:56:51:6e:d5:7d:f3:ff:f9:91:ad:7b:f8: 6d:b3:c8:a7:6f:b5:02:34:de:f3:ec:48:ba:ff:af:e6:45:a9: b9:2d:92:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULacrLHs6ZOTWxg0UAEVDDhMN19swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNjA0MTUyMzI3MjZaFw0yNjA0MTkxMDI5MjZaMDMxMTAvBgNV BAMTKEQ0MkEwNkZDOUNDOUEzNjE5ODU3RTJDMzAwRkYzRDM2RUUzQkFEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyIkXzA0PAgUR0/MZ4NzGoA9tA vK+K3g1B3tywM/q2hxWmZw/UrB/eB+8S/Lb1N0KmqgeGFYGTM7bthmpgdEzPdxXy gJuJdsnyXEQWX+2XC36VKWGXHIdOLDL6/SmjR/TGZWQBT0s0mXySAnJHkFkkH4RZ yCjrJ2wDhJjvNr96xlnoYQ7Ib0QHs1dy+wLqVoHEO2j3eNFJy/w5xXXA7Qzl5vg5 QwG6mGjwY2Z2jtF6GUzx9xw+bpkvJ1ISVTYuMl80YRZUanzDz3lVZjz9QfvY50WF ZlgRnB9OHN4plaTcJvKAYzxhQdi7B8UNzGAyCi2r83d9wfdBb7U1dhpI9FsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1CoG/JzJo2GYV+LDAP89Nu47raUwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0EZxTsDTtwzuaJIfNegVxF89W4lURt+DMJ +6cwUHBF2VbuoTfVZQ0z2dqGOFoIp8ufWrW1JH3y7XYn6Xe0T8R3Bc0bYUH94DGq 1GAOZoUQx2v3Sg54yxthqI4+V7zfycCE7hUJVs4vz+8VDaFgY1sCeuM/PGZU4/4i DAAxTmmPnURKBMpl1Ld9tgxOHP/K0syKwlwqHfo0DUU5TY/ebFbsqsij5laVgA6p jdk795FCKD4QESsj3GJ5dEnEJSCQQ+ObFlR+2QV9DAuuE6RJslQr+W0rwYNV75R1 Iw10BlZRbtV98//5ka17+G2zyKdvtQI03vPsSLr/r+ZFqbktkmQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:07:28 2026 by rpki-client