$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: 7XdN5tToGoXyohQQfV02w49CE+sayIs0OHnLwfCdde8= Subject key identifier: 13:8A:D8:C6:11:16:32:ED:EC:D4:29:56:46:98:92:E9:D0:BC:52:88 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 4BE93CFF0A1DC9F439BF208827E73A0B3DFD8EC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 027D Signing time: Sat 18 Apr 2026 04:41:16 +0000 Manifest this update: Sat 18 Apr 2026 04:36:16 +0000 Manifest next update: Tue 21 Apr 2026 04:41:16 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: ppgYXJ2hpINz4N+3ArcAxGd2TEn/SdH6RnbTxnDTaC4=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: CxgHh2nx9jBqaj0dFrPpRiINoseZIE2Y0Tam4i3m6pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e9:3c:ff:0a:1d:c9:f4:39:bf:20:88:27:e7:3a:0b:3d:fd:8e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Apr 18 04:36:16 2026 GMT Not After : Apr 21 04:41:16 2026 GMT Subject: CN=138AD8C6111632EDECD42956469892E9D0BC5288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:40:4f:f8:ea:b4:55:6d:7d:ff:3d:52:ab: 75:79:ea:53:6a:ce:60:14:37:b8:18:ce:7c:36:18: 23:a3:3c:2a:64:83:f6:48:6d:b5:6a:a3:ff:80:ba: 4c:fe:1f:14:3c:67:aa:f3:74:33:0f:21:3b:42:64: 8a:8f:7a:e9:b9:0b:93:4d:e3:a5:d0:33:d6:5d:1a: c3:4d:6b:af:f3:36:7b:1e:01:05:8d:1e:d3:27:1c: c6:24:59:4c:2d:68:f2:59:91:c0:42:dd:3f:34:e1: c0:be:0c:fe:1b:27:82:ce:f9:f7:79:16:6b:88:06: 40:24:a3:41:1e:79:c9:08:67:f3:67:22:6f:7e:7d: 35:60:ca:5a:4e:07:51:01:e1:67:00:9c:b9:a2:30: c9:41:be:a5:9c:b8:98:6b:3e:46:52:af:ba:3e:fa: 75:a2:6c:90:09:0b:33:82:55:d2:99:fd:e2:b1:36: 3b:cc:42:db:c6:63:db:e4:52:c0:2a:1d:b0:4b:14: 8b:ba:ae:d8:7d:fb:0f:47:72:6d:27:47:e4:8b:22: b7:74:ab:2d:d8:dc:32:55:2b:33:03:52:5d:49:3f: 8f:0b:55:5f:45:95:c2:34:0a:a0:54:7b:6a:e5:fb: 74:36:b4:18:0a:8e:75:11:65:54:86:49:11:04:ca: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:D8:C6:11:16:32:ED:EC:D4:29:56:46:98:92:E9:D0:BC:52:88 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:86:04:aa:9e:3e:5c:01:32:0e:fd:27:4f:8c:43:95:1d:9e: 27:6b:ad:ea:59:0d:33:48:20:36:58:b9:01:22:32:87:a3:53: ca:58:e7:e1:36:5a:21:be:6d:a6:63:d8:e0:9d:3d:9b:b2:f4: 8b:61:da:b1:d9:bb:77:44:fa:a8:f6:fe:ef:af:c3:1c:17:a1: b5:46:58:11:c5:a5:77:90:26:b3:72:ae:41:4c:f3:0e:34:fa: da:c3:5a:cd:ae:ca:0f:0a:bf:62:bd:a0:6e:13:48:85:19:cf: 15:99:6f:22:58:ec:ff:83:0b:1c:55:d5:29:53:b0:a6:e3:29: 86:ee:91:5d:4a:b4:f0:7f:56:49:62:0e:9a:9f:41:7a:08:c8: c4:21:7d:30:70:32:3a:a3:3c:7a:7c:43:96:3c:76:b3:dc:d8: e5:d5:d7:6a:27:21:5f:75:56:9b:ab:29:6b:25:37:8e:6f:87: 3f:c5:b1:b5:63:3e:7e:80:79:8e:3c:6e:7e:d8:f9:88:61:60: eb:e7:00:82:ca:68:7c:cd:58:8f:57:81:38:d4:0e:ec:c2:6b: 9e:47:3b:dd:fa:d6:b9:5a:ce:a4:32:8f:d1:11:c9:9a:2d:56: 1d:e7:ab:9b:4d:52:50:71:7a:f0:af:bf:28:cb:15:49:43:de: 17:20:d2:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+k8/wodyfQ5vyCIJ+c6Cz39jsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNjA0MTgwNDM2MTZaFw0yNjA0MjEwNDQxMTZaMDMxMTAvBgNV BAMTKDEzOEFEOEM2MTExNjMyRURFQ0Q0Mjk1NjQ2OTg5MkU5RDBCQzUyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOEBP+Oq0VW19/z1Sq3V56lNq zmAUN7gYznw2GCOjPCpkg/ZIbbVqo/+Aukz+HxQ8Z6rzdDMPITtCZIqPeum5C5NN 46XQM9ZdGsNNa6/zNnseAQWNHtMnHMYkWUwtaPJZkcBC3T804cC+DP4bJ4LO+fd5 FmuIBkAko0EeeckIZ/NnIm9+fTVgylpOB1EB4WcAnLmiMMlBvqWcuJhrPkZSr7o+ +nWibJAJCzOCVdKZ/eKxNjvMQtvGY9vkUsAqHbBLFIu6rth9+w9Hcm0nR+SLIrd0 qy3Y3DJVKzMDUl1JP48LVV9FlcI0CqBUe2rl+3Q2tBgKjnURZVSGSREEyvCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE4rYxhEWMu3s1ClWRpiS6dC8UogwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWGBKqePlwBMg79J0+MQ5UdnidrrepZDTNI IDZYuQEiMoejU8pY5+E2WiG+baZj2OCdPZuy9Ith2rHZu3dE+qj2/u+vwxwXobVG WBHFpXeQJrNyrkFM8w40+trDWs2uyg8Kv2K9oG4TSIUZzxWZbyJY7P+DCxxV1SlT sKbjKYbukV1KtPB/VkliDpqfQXoIyMQhfTBwMjqjPHp8Q5Y8drPc2OXV12onIV91 VpurKWslN45vhz/FsbVjPn6AeY48bn7Y+YhhYOvnAILKaHzNWI9XgTjUDuzCa55H O9361rlazqQyj9ERyZotVh3nq5tNUlBxevCvvyjLFUlD3hcg0n4= -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:44 2026 by rpki-client