$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: DNvLybhHs/+vYnz5tAiVK4iz4vSunCPkGynlAMndaYQ= Subject key identifier: 31:6C:AC:2C:F3:0B:8C:E4:FA:F7:F1:AB:86:F2:E5:22:0C:9F:AE:A5 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 33D388204802B7607F5E2FE913D1AB24BCD22D79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0172 Signing time: Thu 16 Apr 2026 16:40:00 +0000 Manifest this update: Thu 16 Apr 2026 16:35:00 +0000 Manifest next update: Sun 19 Apr 2026 17:02:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: LNezUMRZ3ZRNIWAKZD2nMJR2wFVkySi+dNIKU0luZw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d3:88:20:48:02:b7:60:7f:5e:2f:e9:13:d1:ab:24:bc:d2:2d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Apr 16 16:35:00 2026 GMT Not After : Apr 19 17:02:00 2026 GMT Subject: CN=316CAC2CF30B8CE4FAF7F1AB86F2E5220C9FAEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:15:d2:d0:8a:ec:03:f2:91:85:d8:84:77: 8c:f3:c4:c3:6c:8b:2d:0c:cc:37:a4:ff:04:cf:01: 93:4f:af:fe:61:0f:87:3b:e9:9f:e1:06:41:23:f4: 8f:0a:f5:a2:1b:80:5f:8c:38:60:7b:da:e0:90:f1: 16:f1:95:3b:dc:7a:f1:d8:e2:24:6d:88:51:d0:66: c3:3d:b6:9e:58:a5:6a:0d:65:84:16:29:d4:7d:c6: 3f:a9:2c:5e:22:b1:a6:a9:b1:83:02:ba:58:a1:60: 4c:1b:3a:e1:5a:a9:80:39:50:f3:f5:de:ad:c5:e0: 45:df:7a:a4:f4:9a:79:cf:fa:f2:85:b3:a6:36:c4: c0:0b:a0:8e:de:2f:7c:b0:a6:6d:51:72:12:79:6e: d4:d9:99:de:a3:87:d6:10:43:de:4e:df:de:21:50: 04:b7:d4:7c:b8:7c:26:8d:e1:fe:f9:73:14:62:fe: 27:07:82:26:88:52:87:c3:ec:70:8e:75:e1:d4:80: 72:2a:ed:4e:4e:59:a3:47:e4:10:1f:86:06:19:88: b2:f8:c5:0c:18:7b:78:4f:af:9e:6b:fe:89:f8:55: 86:d5:1e:23:54:9d:a5:8f:00:9d:37:f0:3f:a8:a0: ad:5d:5f:c1:5f:42:a0:f4:83:cb:87:3f:7b:eb:3a: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:AC:2C:F3:0B:8C:E4:FA:F7:F1:AB:86:F2:E5:22:0C:9F:AE:A5 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:74:fd:26:c3:68:c6:6e:ab:f1:1d:4d:b1:2c:b4:4e:e1:ca: 03:f4:44:04:35:19:62:d4:34:d9:95:2e:50:ed:ce:28:7e:19: 9e:15:c8:ba:ac:d6:55:aa:35:5b:d5:73:e4:53:56:7b:80:c9: 7a:ff:94:57:5e:98:c1:92:60:d0:ce:4c:5a:c6:0c:61:bc:f7: f1:f0:85:f6:b1:7b:c8:8b:dd:a4:ce:e5:de:c3:1a:d1:5b:39: d4:4d:3b:30:a2:33:72:37:d9:7f:c3:3e:92:5e:8a:5c:e5:5d: a5:28:80:4c:8e:02:fc:0c:be:68:9f:dd:39:98:cb:1e:61:2b: cb:83:74:3f:dd:c4:64:9b:0b:80:58:0a:10:14:26:00:71:00: 4c:07:3a:42:b5:d1:de:03:3f:1a:48:f8:aa:6b:69:7b:85:72: b2:45:cf:ab:c3:55:18:eb:bd:9f:5c:9e:bb:13:75:6d:c5:b3: ee:ed:a7:4f:28:15:d2:0b:41:5a:b8:15:ad:ac:5f:a0:50:f0: 04:c6:7e:05:d7:e9:9e:bd:4a:ad:de:82:79:ac:69:9e:9d:86: 33:8f:fa:34:f1:73:da:06:a7:09:da:26:98:d8:8b:12:c3:03: 95:e3:60:d8:32:72:bc:7b:0d:c3:88:20:e3:bb:00:6e:54:55: 5c:bd:d8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9OIIEgCt2B/Xi/pE9GrJLzSLXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjA0MTYxNjM1MDBaFw0yNjA0MTkxNzAyMDBaMDMxMTAvBgNV BAMTKDMxNkNBQzJDRjMwQjhDRTRGQUY3RjFBQjg2RjJFNTIyMEM5RkFFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXchXS0IrsA/KRhdiEd4zzxMNs iy0MzDek/wTPAZNPr/5hD4c76Z/hBkEj9I8K9aIbgF+MOGB72uCQ8RbxlTvcevHY 4iRtiFHQZsM9tp5YpWoNZYQWKdR9xj+pLF4isaapsYMCulihYEwbOuFaqYA5UPP1 3q3F4EXfeqT0mnnP+vKFs6Y2xMALoI7eL3ywpm1RchJ5btTZmd6jh9YQQ95O394h UAS31Hy4fCaN4f75cxRi/icHgiaIUofD7HCOdeHUgHIq7U5OWaNH5BAfhgYZiLL4 xQwYe3hPr55r/on4VYbVHiNUnaWPAJ038D+ooK1dX8FfQqD0g8uHP3vrOhEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWysLPMLjOT69/GrhvLlIgyfrqUwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB10/SbDaMZuq/EdTbEstE7hygP0RAQ1GWLU NNmVLlDtzih+GZ4VyLqs1lWqNVvVc+RTVnuAyXr/lFdemMGSYNDOTFrGDGG89/Hw hfaxe8iL3aTO5d7DGtFbOdRNOzCiM3I32X/DPpJeilzlXaUogEyOAvwMvmif3TmY yx5hK8uDdD/dxGSbC4BYChAUJgBxAEwHOkK10d4DPxpI+KpraXuFcrJFz6vDVRjr vZ9cnrsTdW3Fs+7tp08oFdILQVq4Fa2sX6BQ8ATGfgXX6Z69Sq3egnmsaZ6dhjOP +jTxc9oGpwnaJpjYixLDA5XjYNgycrx7DcOIIOO7AG5UVVy92Gg= -----END CERTIFICATE-----Generated at Sat Apr 18 02:47:16 2026 by rpki-client