$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: +G6o4SvNEPPV/rwjlO2B3TCD3o9Ry8PzZBRgtJtU8bQ= Subject key identifier: 91:55:55:C3:93:84:6F:ED:7E:63:90:6F:39:78:3B:8A:A6:D9:CC:41 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 37B76C09C29462D4E63F88E737385FD75795D1BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03E8 Signing time: Thu 16 Apr 2026 12:11:47 +0000 Manifest this update: Thu 16 Apr 2026 12:06:47 +0000 Manifest next update: Sun 19 Apr 2026 12:31:47 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: 1CSzw7RQXF9QP58cdrB2oshHTnXg1DCLyDag5U/8D8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:6c:09:c2:94:62:d4:e6:3f:88:e7:37:38:5f:d7:57:95:d1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Apr 16 12:06:47 2026 GMT Not After : Apr 19 12:31:47 2026 GMT Subject: CN=915555C393846FED7E63906F39783B8AA6D9CC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:8b:fd:b2:c7:2b:9a:51:46:35:25:26:07: 1a:f1:da:1b:62:a3:43:0b:75:a2:76:36:dd:5c:26: c4:79:6c:3d:65:78:18:4e:4e:5c:35:f8:25:45:1b: ed:db:fc:af:b0:6c:9f:73:e4:3a:9a:1b:bc:33:e1: d7:0b:66:d0:0b:ef:2a:11:5e:d3:e4:93:02:22:ea: c3:5f:03:2c:4b:8f:98:dc:54:a8:df:79:08:cc:68: 9a:b8:08:31:ef:2f:12:71:89:16:b4:d0:f5:01:12: ed:ca:bc:d1:f1:6c:2c:70:59:af:9a:b7:66:82:93: 18:b4:98:f7:f7:13:1b:08:44:25:6a:20:de:ad:52: af:11:f7:93:b4:fb:d9:3c:ed:aa:34:a7:15:98:10: 2e:a3:be:8c:df:40:0c:cd:3b:9f:5d:60:4a:98:f7: 67:a3:0b:31:4c:4d:ad:b2:28:4b:f5:c5:20:71:93: 2c:ac:de:10:ce:a6:4f:9e:d5:08:9d:39:a1:2e:a8: 56:b0:f2:f9:9a:92:00:88:95:96:e4:04:48:e2:8c: 69:12:eb:ea:12:1f:89:53:a0:bc:eb:7a:44:52:1e: 88:18:9f:4c:c9:24:3d:3b:63:70:e6:60:9b:e4:a0: c0:16:d9:c4:da:89:b9:99:ed:c1:62:1d:e1:ff:56: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:55:C3:93:84:6F:ED:7E:63:90:6F:39:78:3B:8A:A6:D9:CC:41 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8a:28:f0:48:4e:c3:3c:dd:e1:51:8f:2a:b1:43:40:7e:f9: 23:48:ea:37:b8:4c:92:fb:3e:17:4c:20:a8:ae:52:17:ba:80: 73:42:f1:06:d3:42:f5:57:6f:93:d8:5e:94:d5:04:ae:0d:b8: 19:6d:03:b9:63:20:62:00:5c:c5:a5:8f:4b:7c:bc:fb:32:79: a4:d4:7b:dd:fc:d7:d1:1c:d7:22:d0:43:06:af:1f:05:92:74: 1a:cf:7a:43:1e:99:8b:da:36:53:8b:97:0a:9e:de:01:a8:10: 8d:bd:70:03:f3:11:44:40:37:c3:ac:16:19:58:ac:dd:38:ba: 3f:ef:02:3c:7d:35:2c:6c:10:a3:40:dc:0b:8e:a4:b9:b2:54: 30:55:5e:20:e2:02:a9:75:46:9e:a4:c0:6a:ed:70:74:4a:fb: 39:38:fe:ad:ca:f2:7f:f3:bd:6c:56:de:26:46:34:96:d3:89: ac:52:22:ad:33:89:98:45:42:90:f2:4b:78:f9:1b:94:e2:ce: a5:95:ee:fc:e1:60:96:70:35:64:67:20:63:b1:cb:7c:1d:7e: bc:4d:34:6c:af:3e:03:32:4f:95:24:eb:55:7a:50:62:be:b5: bd:4d:bf:4d:15:49:77:a7:79:46:d5:02:5c:e7:55:09:a9:ec: e1:fa:57:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7dsCcKUYtTmP4jnNzhf11eV0b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjA0MTYxMjA2NDdaFw0yNjA0MTkxMjMxNDdaMDMxMTAvBgNV BAMTKDkxNTU1NUMzOTM4NDZGRUQ3RTYzOTA2RjM5NzgzQjhBQTZEOUNDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXIv9sscrmlFGNSUmBxrx2hti o0MLdaJ2Nt1cJsR5bD1leBhOTlw1+CVFG+3b/K+wbJ9z5DqaG7wz4dcLZtAL7yoR XtPkkwIi6sNfAyxLj5jcVKjfeQjMaJq4CDHvLxJxiRa00PUBEu3KvNHxbCxwWa+a t2aCkxi0mPf3ExsIRCVqIN6tUq8R95O0+9k87ao0pxWYEC6jvozfQAzNO59dYEqY 92ejCzFMTa2yKEv1xSBxkyys3hDOpk+e1QidOaEuqFaw8vmakgCIlZbkBEjijGkS 6+oSH4lToLzrekRSHogYn0zJJD07Y3DmYJvkoMAW2cTaibmZ7cFiHeH/ViLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVVVw5OEb+1+Y5BvOXg7iqbZzEEwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOKKPBITsM83eFRjyqxQ0B++SNI6je4TJL7 PhdMIKiuUhe6gHNC8QbTQvVXb5PYXpTVBK4NuBltA7ljIGIAXMWlj0t8vPsyeaTU e93819Ec1yLQQwavHwWSdBrPekMemYvaNlOLlwqe3gGoEI29cAPzEURAN8OsFhlY rN04uj/vAjx9NSxsEKNA3AuOpLmyVDBVXiDiAql1Rp6kwGrtcHRK+zk4/q3K8n/z vWxW3iZGNJbTiaxSIq0ziZhFQpDyS3j5G5TizqWV7vzhYJZwNWRnIGOxy3wdfrxN NGyvPgMyT5Uk61V6UGK+tb1Nv00VSXeneUbVAlznVQmp7OH6Vx8= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:41 2026 by rpki-client