$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: Y/eq5/BY3XGhFUX0VIlHzpgsxYcxyY3XOMJ394wIj+Q= Subject key identifier: DA:75:16:FB:4A:72:25:3E:53:27:88:10:9B:B9:81:1C:2A:77:56:0B Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 099AFA998696C157B27C02D750DDFEE867F069E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0574 Signing time: Fri 17 Apr 2026 20:23:15 +0000 Manifest this update: Fri 17 Apr 2026 20:18:15 +0000 Manifest next update: Mon 20 Apr 2026 23:39:15 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: lQ2lZ1z1TABJz0l3JKWSBrnaturkkHtdl/9RzAHJRwk=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9a:fa:99:86:96:c1:57:b2:7c:02:d7:50:dd:fe:e8:67:f0:69:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Apr 17 20:18:15 2026 GMT Not After : Apr 20 23:39:15 2026 GMT Subject: CN=DA7516FB4A72253E532788109BB9811C2A77560B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:eb:ac:0b:86:55:29:83:fe:1a:d1:94:be: f0:4f:39:43:d9:60:a3:28:bf:91:d6:df:c6:ad:ee: 14:23:18:bc:d9:9c:1b:14:40:19:93:64:c0:d3:87: 55:b1:b1:8e:19:20:e7:61:58:39:c9:c3:eb:74:d7: 10:10:c7:6f:df:2c:eb:5c:4c:90:9f:dc:cd:8c:57: 51:91:82:22:d4:71:6c:a7:af:1d:24:d2:85:00:31: 31:82:a9:9c:62:01:4a:13:de:bf:71:65:71:74:a8: 6a:30:42:8e:34:68:8a:6a:aa:4c:05:98:b8:27:4e: 1c:8e:92:7f:cc:e0:43:14:b9:22:66:c2:2d:b6:09: 82:a5:2f:0d:fc:3c:08:3e:40:07:8a:9f:84:64:71: a6:4c:ee:ff:f2:b9:88:f2:42:f8:52:b0:2b:11:1f: e3:b4:4e:db:da:42:d0:10:e4:7a:b3:ce:fa:0b:17: 31:aa:26:f1:77:fb:30:2d:52:9a:0c:3b:45:7e:81: be:c7:e3:4d:56:ef:a9:3f:25:c9:c9:29:f6:fc:78: 04:63:ce:fc:18:53:20:c6:b0:aa:41:a4:46:03:86: 08:a0:d3:a0:84:95:67:4d:a6:71:59:21:28:a1:ae: 3c:95:a6:96:c4:02:4f:f2:55:cb:8c:d4:9f:f8:28: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:16:FB:4A:72:25:3E:53:27:88:10:9B:B9:81:1C:2A:77:56:0B X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ac:ff:91:ac:4a:3e:04:12:fd:ee:9d:c7:b1:22:00:95:bd: a2:e5:b8:5c:4b:c0:67:3a:d4:e5:e8:58:8c:33:c2:61:c7:97: 4f:39:e8:13:b4:87:ff:ce:83:20:4b:12:82:21:b4:0a:d1:5e: 70:36:2d:e2:e6:62:56:12:2a:a6:fc:93:c4:e5:91:70:f4:dc: 6b:9f:82:61:11:a1:32:d0:70:f3:d1:31:d2:fe:c5:6d:da:ff: 35:11:92:b1:2e:ce:59:8b:de:e2:5f:f7:ca:9b:c5:18:0f:c0: 4f:a9:1c:79:da:3d:47:16:98:4b:c8:0c:92:5f:aa:c2:aa:8e: 05:42:66:5e:68:73:36:4b:9d:3b:92:5b:c2:b0:64:83:4e:d8: 58:fb:d2:f1:97:cf:ae:1b:ff:d3:93:47:e0:de:1b:99:bb:92: 27:d2:9d:9b:fb:90:b0:1f:ec:84:e2:62:66:33:18:a5:e1:28: 4d:5c:c0:fc:b0:50:9a:26:48:62:2c:35:73:d8:8f:eb:d9:ec: b0:50:8b:7b:30:d2:da:4d:cd:bc:de:3f:1e:47:9e:a4:1d:4e: 8e:71:8c:85:f1:c9:12:17:17:54:00:74:24:9b:95:30:c2:fd: f1:b0:ff:7d:00:31:13:37:34:10:34:bc:1b:ef:28:21:fe:27: ef:6a:95:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZr6mYaWwVeyfALXUN3+6GfwaekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNjA0MTcyMDE4MTVaFw0yNjA0MjAyMzM5MTVaMDMxMTAvBgNV BAMTKERBNzUxNkZCNEE3MjI1M0U1MzI3ODgxMDlCQjk4MTFDMkE3NzU2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLc+usC4ZVKYP+GtGUvvBPOUPZ YKMov5HW38at7hQjGLzZnBsUQBmTZMDTh1WxsY4ZIOdhWDnJw+t01xAQx2/fLOtc TJCf3M2MV1GRgiLUcWynrx0k0oUAMTGCqZxiAUoT3r9xZXF0qGowQo40aIpqqkwF mLgnThyOkn/M4EMUuSJmwi22CYKlLw38PAg+QAeKn4RkcaZM7v/yuYjyQvhSsCsR H+O0TtvaQtAQ5HqzzvoLFzGqJvF3+zAtUpoMO0V+gb7H401W76k/JcnJKfb8eARj zvwYUyDGsKpBpEYDhgig06CElWdNpnFZISihrjyVppbEAk/yVcuM1J/4KKsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2nUW+0pyJT5TJ4gQm7mBHCp3VgswHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWs/5GsSj4EEv3uncexIgCVvaLluFxLwGc6 1OXoWIwzwmHHl0856BO0h//OgyBLEoIhtArRXnA2LeLmYlYSKqb8k8TlkXD03Guf gmERoTLQcPPRMdL+xW3a/zURkrEuzlmL3uJf98qbxRgPwE+pHHnaPUcWmEvIDJJf qsKqjgVCZl5oczZLnTuSW8KwZINO2Fj70vGXz64b/9OTR+DeG5m7kifSnZv7kLAf 7ITiYmYzGKXhKE1cwPywUJomSGIsNXPYj+vZ7LBQi3sw0tpNzbzePx5HnqQdTo5x jIXxyRIXF1QAdCSblTDC/fGw/30AMRM3NBA0vBvvKCH+J+9qlS8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:35 2026 by rpki-client