$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: opUChtZLswu3A3v3vMmKif65d5JEpNd2YxHW398E5/k= Subject key identifier: 87:4F:E6:8A:B9:FF:97:34:F4:6F:93:AE:ED:7D:DE:70:B8:BD:90:39 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 749B288670370FCAAFB4751B9F4655F753E2ECD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 0121 Signing time: Fri 17 Apr 2026 04:30:50 +0000 Manifest this update: Fri 17 Apr 2026 04:25:50 +0000 Manifest next update: Mon 20 Apr 2026 13:31:50 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: SRNWTBbUDz+vz8DCgojpvhvFAkLrh2evZmwdBXs+mTA=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9b:28:86:70:37:0f:ca:af:b4:75:1b:9f:46:55:f7:53:e2:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Apr 17 04:25:50 2026 GMT Not After : Apr 20 13:31:50 2026 GMT Subject: CN=874FE68AB9FF9734F46F93AEED7DDE70B8BD9039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:a8:fd:0c:d4:9f:6b:85:48:78:3d:99:7a: cf:77:e7:f7:79:48:ae:0a:55:73:3a:1c:04:30:f3: a2:a9:67:66:eb:4a:c1:24:42:1f:bf:d3:54:4f:f0: 42:31:79:1e:98:48:a1:9f:fd:54:3c:bc:db:03:54: 92:a4:df:6c:cf:fa:1a:36:98:c8:4d:c0:ee:9b:95: 94:13:2b:84:87:a4:6f:03:bb:92:ab:30:d3:41:6a: 98:1c:a2:ea:31:42:8b:af:95:13:1a:bc:43:03:a9: aa:6a:a3:fb:80:44:a1:c5:42:60:d8:a7:68:a7:2e: c3:91:ea:da:1d:c8:22:b4:2a:d1:b7:aa:1c:08:ff: 40:cf:9a:dc:84:cb:61:4e:1f:08:5e:65:3b:a9:0e: 77:ff:fe:72:39:39:dc:63:87:42:17:bc:a0:d6:b6: 90:47:75:04:3c:cc:b0:63:9f:63:ba:ad:a8:88:d3: c1:7f:31:f3:25:03:5c:e1:b9:73:5e:d9:88:df:16: 69:a6:c0:88:a3:09:07:7e:eb:e2:80:78:7e:db:bc: cd:1f:8d:85:01:41:6e:ba:4d:48:a4:ad:6a:ed:0b: a0:90:d1:62:02:ae:bc:d5:f4:2f:ee:8d:b8:4c:b7: b9:f9:7c:73:ff:d0:27:ee:a0:5f:fb:db:da:a1:f8: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:E6:8A:B9:FF:97:34:F4:6F:93:AE:ED:7D:DE:70:B8:BD:90:39 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:85:2f:49:dc:9f:45:bf:e3:8a:1c:31:32:b4:a9:d2:3a:ff: 2c:cd:3d:01:96:df:eb:36:56:9e:05:20:79:47:c4:91:d2:8a: 4d:cd:9e:2b:42:b2:02:98:6b:37:83:b3:f9:aa:b4:6f:52:9d: 4d:4f:b6:a7:0e:aa:13:75:5c:9e:c7:ff:5d:df:ca:24:fe:70: 16:99:c2:bc:1c:5d:b4:5b:42:be:c2:f9:35:47:9a:80:09:2d: ab:23:8a:fc:fd:73:b7:9b:9a:05:08:45:c0:7e:8c:ca:0b:d7: 25:04:44:ec:9b:8b:e1:fa:e6:bf:85:bb:2b:3e:98:d8:75:71: 68:62:6c:13:c1:42:b9:a5:16:d8:b5:37:5b:40:81:f0:76:13: e5:7b:6e:d3:05:69:11:4f:b7:87:26:5d:47:43:77:11:2f:8f: f0:e8:34:88:1e:08:2a:66:81:e5:0b:ac:8d:dd:ca:73:ea:0c: f2:0d:68:b3:1a:c8:b2:e8:91:d7:b2:95:08:2a:ff:35:46:5c: b0:6d:40:c8:cf:89:6d:67:dd:08:de:48:6b:e2:58:b6:ff:1e: 81:5d:44:15:c7:2a:5d:42:62:c2:9d:33:bc:f8:51:78:2e:77: 89:0e:03:e7:27:ed:7d:5a:bb:d3:c3:e6:b8:d0:55:4e:af:8a: de:64:e1:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJsohnA3D8qvtHUbn0ZV91Pi7NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNjA0MTcwNDI1NTBaFw0yNjA0MjAxMzMxNTBaMDMxMTAvBgNV BAMTKDg3NEZFNjhBQjlGRjk3MzRGNDZGOTNBRUVEN0RERTcwQjhCRDkwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCKj9DNSfa4VIeD2Zes935/d5 SK4KVXM6HAQw86KpZ2brSsEkQh+/01RP8EIxeR6YSKGf/VQ8vNsDVJKk32zP+ho2 mMhNwO6blZQTK4SHpG8Du5KrMNNBapgcouoxQouvlRMavEMDqapqo/uARKHFQmDY p2inLsOR6todyCK0KtG3qhwI/0DPmtyEy2FOHwheZTupDnf//nI5Odxjh0IXvKDW tpBHdQQ8zLBjn2O6raiI08F/MfMlA1zhuXNe2YjfFmmmwIijCQd+6+KAeH7bvM0f jYUBQW66TUikrWrtC6CQ0WICrrzV9C/ujbhMt7n5fHP/0CfuoF/729qh+OeXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh0/mirn/lzT0b5Ou7X3ecLi9kDkwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGFL0ncn0W/44ocMTK0qdI6/yzNPQGW3+s2 Vp4FIHlHxJHSik3NnitCsgKYazeDs/mqtG9SnU1PtqcOqhN1XJ7H/13fyiT+cBaZ wrwcXbRbQr7C+TVHmoAJLasjivz9c7ebmgUIRcB+jMoL1yUEROybi+H65r+Fuys+ mNh1cWhibBPBQrmlFti1N1tAgfB2E+V7btMFaRFPt4cmXUdDdxEvj/DoNIgeCCpm geULrI3dynPqDPINaLMayLLokdeylQgq/zVGXLBtQMjPiW1n3QjeSGviWLb/HoFd RBXHKl1CYsKdM7z4UXgud4kOA+cn7X1au9PD5rjQVU6vit5k4ZE= -----END CERTIFICATE-----Generated at Sat Apr 18 04:01:19 2026 by rpki-client