$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: K4prbOET2QQOeJIxKuSS8h4LSXUUZQdtg2l+/Wqzsyc= Subject key identifier: BC:6C:50:74:92:96:FE:68:29:71:4F:A3:30:71:02:90:F8:6D:FB:F3 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 2D880C5A5C66CA155FAA452DB80854C698E08D8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 0575 Signing time: Thu 16 Apr 2026 15:30:53 +0000 Manifest this update: Thu 16 Apr 2026 15:25:53 +0000 Manifest next update: Sun 19 Apr 2026 23:03:53 +0000 Files and hashes: 1: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: DlfFUBkYuWhAFXCoEBd3atLeZDhklDebHW8Hng3J1jw=) 2: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 3: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 4: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: o45xNgmjdV7JqlkFiaWnM1npwVHX93KdX+4bHjpCk7Y=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:88:0c:5a:5c:66:ca:15:5f:aa:45:2d:b8:08:54:c6:98:e0:8d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Apr 16 15:25:53 2026 GMT Not After : Apr 19 23:03:53 2026 GMT Subject: CN=BC6C50749296FE6829714FA330710290F86DFBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:2b:f7:08:64:4b:71:b3:4f:82:ad:7a:d2: e7:ce:3a:ff:76:d6:d0:15:5f:4e:8d:ce:4d:28:32: 70:6b:00:60:e9:55:0f:a9:1a:8f:91:e0:80:52:0c: cb:bf:30:b7:5e:27:a8:e0:69:47:bb:6a:ae:0e:88: a8:67:c3:3e:6b:f2:82:a4:47:5d:d5:74:c7:d2:ab: 90:a1:9e:97:ea:97:b6:a7:85:22:82:23:64:39:17: c4:06:6f:48:f4:d5:ab:e6:a2:34:03:b1:b4:1d:df: fd:24:c6:40:96:3d:46:f0:bc:c3:52:5f:f0:5d:d5: 36:31:ed:27:af:74:a3:89:9d:e9:fb:98:05:2e:93: f3:5d:77:e0:a2:3d:7c:0e:7c:4f:d5:27:aa:95:cc: d5:63:13:73:1e:1d:47:e3:b0:8c:4b:9d:8e:ce:88: c6:36:2a:06:e8:9a:b5:f6:59:9c:f3:68:ee:ab:dc: f0:dc:d3:b2:00:49:38:3e:b3:97:1d:fb:9f:27:1e: 80:88:11:fa:5b:b0:9e:51:09:d1:cc:b7:9a:1d:66: 3b:b7:b9:2d:94:89:9d:65:4e:e0:99:d6:6d:98:d7: d3:73:af:68:ee:81:e2:84:e7:1c:df:e9:a5:53:e2: d0:d8:b1:c5:0c:e3:64:bc:97:e1:4e:e7:d8:ad:d8: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:50:74:92:96:FE:68:29:71:4F:A3:30:71:02:90:F8:6D:FB:F3 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:15:ec:c1:b2:84:15:51:8b:14:ea:36:cf:a8:4e:61:01:38: da:4f:a1:f7:26:ea:0f:9e:8f:96:2e:a0:fb:c4:f4:95:a9:67: fc:74:f0:13:91:af:97:d5:8a:d1:a6:2f:41:b8:77:59:4f:3e: e6:66:ba:d4:92:df:15:26:e9:4f:c9:89:02:76:14:44:43:f9: fe:65:f5:80:84:b1:4d:62:67:b8:bd:f4:f7:e6:73:aa:00:76: 89:5f:da:51:ee:2c:53:5b:c3:c4:40:33:b5:9d:f6:a8:43:fe: b3:e2:83:1a:d7:3b:11:f8:f5:39:05:03:cc:08:8b:4b:50:2d: 0f:4a:f8:88:5d:6e:8d:5e:a9:44:17:51:97:9c:f7:7a:2e:59: 2b:b6:57:3d:42:92:4d:79:d0:bd:e0:33:19:0c:7a:a2:38:58: c1:77:00:59:f8:b3:d8:e4:3a:ad:75:9b:55:12:49:67:58:27: 7e:49:3b:14:57:3e:66:d9:46:8a:b9:a0:6f:92:c9:0a:b1:c3: d1:91:42:68:32:42:95:d8:26:12:42:a8:15:b1:49:b0:9b:cb: a9:4a:38:a6:aa:80:03:2f:dc:8f:3e:3d:5b:2f:2b:49:4f:75: ff:8c:7e:ac:a6:b5:cd:87:db:64:93:2e:cf:4e:a9:66:ea:94: 7c:c4:36:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYgMWlxmyhVfqkUtuAhUxpjgjYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNjA0MTYxNTI1NTNaFw0yNjA0MTkyMzAzNTNaMDMxMTAvBgNV BAMTKEJDNkM1MDc0OTI5NkZFNjgyOTcxNEZBMzMwNzEwMjkwRjg2REZCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnziv3CGRLcbNPgq160ufOOv92 1tAVX06Nzk0oMnBrAGDpVQ+pGo+R4IBSDMu/MLdeJ6jgaUe7aq4OiKhnwz5r8oKk R13VdMfSq5Chnpfql7anhSKCI2Q5F8QGb0j01avmojQDsbQd3/0kxkCWPUbwvMNS X/Bd1TYx7SevdKOJnen7mAUuk/Ndd+CiPXwOfE/VJ6qVzNVjE3MeHUfjsIxLnY7O iMY2KgbomrX2WZzzaO6r3PDc07IASTg+s5cd+58nHoCIEfpbsJ5RCdHMt5odZju3 uS2UiZ1lTuCZ1m2Y19Nzr2jugeKE5xzf6aVT4tDYscUM42S8l+FO59it2OjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvGxQdJKW/mgpcU+jMHECkPht+/MwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIV7MGyhBVRixTqNs+oTmEBONpPofcm6g+e j5YuoPvE9JWpZ/x08BORr5fVitGmL0G4d1lPPuZmutSS3xUm6U/JiQJ2FERD+f5l 9YCEsU1iZ7i99Pfmc6oAdolf2lHuLFNbw8RAM7Wd9qhD/rPigxrXOxH49TkFA8wI i0tQLQ9K+Ihdbo1eqUQXUZec93ouWSu2Vz1Ckk150L3gMxkMeqI4WMF3AFn4s9jk Oq11m1USSWdYJ35JOxRXPmbZRoq5oG+SyQqxw9GRQmgyQpXYJhJCqBWxSbCby6lK OKaqgAMv3I8+PVsvK0lPdf+Mfqymtc2H22STLs9OqWbqlHzENvM= -----END CERTIFICATE-----Generated at Sat Apr 18 00:23:15 2026 by rpki-client