$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: 7mB74Om9SC0a4zhn3b/BkSvqlNSWjDEDu7CScLDgBL0= Subject key identifier: 66:37:EC:DD:E0:11:C5:BF:BE:17:5E:6A:A3:BF:7B:70:4C:0C:B1:38 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 528719EA7084D45B6F318FBAA53A70ACE8178EC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 02AB Signing time: Fri 17 Apr 2026 11:02:24 +0000 Manifest this update: Fri 17 Apr 2026 10:57:24 +0000 Manifest next update: Mon 20 Apr 2026 16:08:24 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 0NRjgm2/Nzst4XorX3b1M7wvvd1XkDzgd1G9gBIa+38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:19:ea:70:84:d4:5b:6f:31:8f:ba:a5:3a:70:ac:e8:17:8e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Apr 17 10:57:24 2026 GMT Not After : Apr 20 16:08:24 2026 GMT Subject: CN=6637ECDDE011C5BFBE175E6AA3BF7B704C0CB138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:ff:79:2d:c5:10:74:c7:b9:5e:eb:e2:e7: 89:f8:71:65:bf:2b:fe:49:f1:5d:df:04:0f:d5:49: ae:58:fd:de:60:f1:e2:13:04:d4:3a:5d:d5:6d:e8: d1:be:22:da:f9:82:c7:e9:45:d3:04:35:d3:f5:18: 6b:fd:19:29:ce:ba:91:2e:34:83:b1:b4:f5:fb:ee: 61:bc:ce:78:45:90:ec:95:82:ed:28:07:75:f6:b5: 9f:fb:7c:dd:91:02:5f:42:e8:cf:e1:25:e3:fe:d1: 30:8a:c4:ca:a3:77:f8:ed:c6:8b:c9:8f:10:57:93: ca:4c:ec:c9:45:e0:f5:44:fd:ae:06:98:9c:78:75: db:25:78:ef:7a:13:3d:9d:26:dd:bf:a3:b7:4f:36: 7c:a2:b8:63:b5:b9:6f:cc:a7:d4:a0:3a:95:3c:e1: 59:14:54:cf:e6:09:1b:c3:e8:f1:d1:34:c2:ba:7a: c7:7a:f8:c9:90:cd:20:28:10:e2:ac:96:97:06:5a: 63:96:0e:28:63:9d:6d:56:8f:74:39:94:df:ea:01: fd:69:e5:31:e8:c0:ed:dd:16:16:47:50:b7:bd:27: 8c:63:58:46:9d:9b:08:54:18:b1:45:15:69:e5:a3: 28:b0:c6:f4:9b:e3:8b:6e:d9:91:73:37:08:63:21: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:EC:DD:E0:11:C5:BF:BE:17:5E:6A:A3:BF:7B:70:4C:0C:B1:38 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:28:6d:e4:98:09:70:27:b5:f7:e9:0d:25:e8:78:e6:29:20: 08:62:b0:50:48:01:82:ff:92:23:a3:80:f3:96:5a:b0:65:99: 65:35:23:39:89:1c:bf:13:76:ff:c9:32:5d:a9:36:ea:4b:df: e7:09:22:65:7b:fc:3c:1b:87:68:51:17:6d:b1:13:eb:82:00: 9b:04:86:70:80:5c:67:84:e2:e9:16:6c:42:c6:e7:7e:2a:88: e6:68:f1:0a:dd:f4:07:29:6d:f1:09:1c:f4:ca:2d:33:15:7e: e7:ba:02:ea:d3:a1:7e:56:f1:b3:47:4d:e9:b9:d9:74:68:89: 38:b9:60:fd:d1:28:a2:98:94:81:0d:d8:71:46:46:01:d7:9f: 02:2c:00:41:5c:44:b3:2d:f2:8d:00:f3:6b:61:6f:37:dd:c0: 3e:7d:f7:05:89:0b:74:23:f9:6a:09:db:e8:1d:3b:03:75:c1: 4b:1c:d9:79:c9:eb:71:79:78:09:e3:0a:07:8d:91:fb:c0:90: 56:77:14:95:9c:61:07:d8:ea:53:67:95:ec:5d:98:11:4b:ff: c6:48:ed:a4:a0:a7:71:dc:d1:07:ca:02:14:73:53:82:a6:be: fa:6e:f3:cd:0e:a2:6f:1e:d5:6e:b5:d6:0a:9b:aa:0c:59:61: f9:63:ee:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUocZ6nCE1FtvMY+6pTpwrOgXjscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNjA0MTcxMDU3MjRaFw0yNjA0MjAxNjA4MjRaMDMxMTAvBgNV BAMTKDY2MzdFQ0RERTAxMUM1QkZCRTE3NUU2QUEzQkY3QjcwNEMwQ0IxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Vf95LcUQdMe5Xuvi54n4cWW/ K/5J8V3fBA/VSa5Y/d5g8eITBNQ6XdVt6NG+Itr5gsfpRdMENdP1GGv9GSnOupEu NIOxtPX77mG8znhFkOyVgu0oB3X2tZ/7fN2RAl9C6M/hJeP+0TCKxMqjd/jtxovJ jxBXk8pM7MlF4PVE/a4GmJx4ddsleO96Ez2dJt2/o7dPNnyiuGO1uW/Mp9SgOpU8 4VkUVM/mCRvD6PHRNMK6esd6+MmQzSAoEOKslpcGWmOWDihjnW1Wj3Q5lN/qAf1p 5THowO3dFhZHULe9J4xjWEadmwhUGLFFFWnloyiwxvSb44tu2ZFzNwhjIbgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjfs3eARxb++F15qo797cEwMsTgwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0obeSYCXAntffpDSXoeOYpIAhisFBIAYL/ kiOjgPOWWrBlmWU1IzmJHL8Tdv/JMl2pNupL3+cJImV7/Dwbh2hRF22xE+uCAJsE hnCAXGeE4ukWbELG534qiOZo8Qrd9AcpbfEJHPTKLTMVfue6AurToX5W8bNHTem5 2XRoiTi5YP3RKKKYlIEN2HFGRgHXnwIsAEFcRLMt8o0A82thbzfdwD599wWJC3Qj +WoJ2+gdOwN1wUsc2XnJ63F5eAnjCgeNkfvAkFZ3FJWcYQfY6lNnlexdmBFL/8ZI 7aSgp3Hc0QfKAhRzU4Kmvvpu880Oom8e1W611gqbqgxZYflj7jw= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:32 2026 by rpki-client