$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: NlEfvupBx+KKKf6oKm/c+ZLQS2tvDp7C7SuQu67+A60= Subject key identifier: A4:20:12:41:5D:24:58:2A:AE:45:8D:2F:C2:7B:26:D5:F3:00:ED:E9 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 7C58AFDE5256AEA115CECC202CAF7D955308F1CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 0128 Signing time: Wed 15 Apr 2026 20:30:49 +0000 Manifest this update: Wed 15 Apr 2026 20:25:49 +0000 Manifest next update: Sun 19 Apr 2026 02:03:49 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: dTjLxx2Ws0o6uuXgU5f+dvyoc8nzAGOmTaLcFOlILaM=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:58:af:de:52:56:ae:a1:15:ce:cc:20:2c:af:7d:95:53:08:f1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Apr 15 20:25:49 2026 GMT Not After : Apr 19 02:03:49 2026 GMT Subject: CN=A42012415D24582AAE458D2FC27B26D5F300EDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:39:fb:d3:c4:7f:2d:90:29:e4:06:7d:e1: 87:95:45:f5:fa:3e:c8:b9:8f:26:c2:84:a9:bd:7a: 42:06:9e:4e:58:cf:b5:bb:92:7c:2d:49:1f:fb:99: d2:b7:6b:cf:c1:de:fe:aa:21:a6:d3:0f:d9:37:3d: f8:e3:f1:27:43:61:a8:96:03:65:01:58:6d:6e:a0: ca:91:30:db:d5:c9:aa:8e:fc:8d:d5:6d:fc:cb:98: 7d:25:33:76:dd:ab:b0:33:8c:b8:3a:b9:77:bb:c2: 37:a6:9a:19:09:03:b3:3b:f7:63:78:c4:17:f5:59: b7:d7:7b:a4:e5:93:d7:ec:61:01:2b:b0:d7:dd:35: 23:c7:3d:7b:36:f4:1f:95:7b:21:24:d5:26:fa:b8: be:36:d5:c0:09:25:ea:c4:c0:08:72:06:8f:4f:47: df:00:47:e9:8a:63:88:c4:31:67:78:6f:9f:74:df: a4:f3:16:73:9c:48:2e:e7:4a:e5:50:e3:97:2d:41: 0f:5c:de:2c:69:0b:0e:7b:bc:cb:b4:67:01:58:01: 66:e3:05:a6:ef:a2:47:e0:51:a1:a6:fc:81:aa:13: 9f:50:2f:29:08:d9:14:a2:52:e6:e0:1e:88:09:59: d3:e9:1c:57:d4:68:39:d3:35:26:55:a5:d2:3f:1f: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:12:41:5D:24:58:2A:AE:45:8D:2F:C2:7B:26:D5:F3:00:ED:E9 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f9:64:d4:89:e9:c4:0e:17:e5:7d:c8:9c:d4:a2:06:12:5c: c5:33:e1:30:4f:d0:e6:6d:f1:1b:90:70:9e:4e:a4:b9:8a:5d: 74:8c:52:f2:78:19:bd:76:30:da:88:45:4a:bc:69:80:5a:bb: 07:67:15:93:b3:ee:17:f9:db:0c:84:07:ef:89:0c:e0:db:62: c3:34:f9:71:8f:ec:9c:6a:52:88:7e:a8:bc:d4:da:c8:a6:e0: d1:a7:0c:5a:60:b8:7a:8c:7d:5c:6f:5d:1d:ac:c6:61:46:2d: db:ac:26:a2:3b:fb:4f:ff:0c:54:31:c5:73:84:17:b4:54:ea: 24:4c:37:f1:f9:65:91:78:94:37:06:64:96:a5:a3:a7:76:87: e2:ee:83:0d:28:cb:8e:61:b4:2b:58:e7:58:82:af:71:3a:76: 6d:86:bc:aa:0c:9c:1d:16:cd:6e:55:09:8d:67:85:c8:0f:5a: 82:eb:6c:06:0a:f0:b8:65:a1:80:0f:f0:fa:66:ca:65:df:1d: 28:43:85:bc:2c:ef:bc:45:b8:41:cd:3b:9e:e4:60:e8:e2:9c: 7e:00:bb:e5:61:5a:ec:0b:77:b0:f0:38:98:eb:dc:1d:e3:59: fa:7b:99:f8:c7:72:3e:2d:17:28:9c:3d:92:e3:36:53:62:18: 93:ac:83:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFiv3lJWrqEVzswgLK99lVMI8cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNjA0MTUyMDI1NDlaFw0yNjA0MTkwMjAzNDlaMDMxMTAvBgNV BAMTKEE0MjAxMjQxNUQyNDU4MkFBRTQ1OEQyRkMyN0IyNkQ1RjMwMEVERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjTn708R/LZAp5AZ94YeVRfX6 Psi5jybChKm9ekIGnk5Yz7W7knwtSR/7mdK3a8/B3v6qIabTD9k3Pfjj8SdDYaiW A2UBWG1uoMqRMNvVyaqO/I3VbfzLmH0lM3bdq7AzjLg6uXe7wjemmhkJA7M792N4 xBf1WbfXe6Tlk9fsYQErsNfdNSPHPXs29B+VeyEk1Sb6uL421cAJJerEwAhyBo9P R98AR+mKY4jEMWd4b59036TzFnOcSC7nSuVQ45ctQQ9c3ixpCw57vMu0ZwFYAWbj BabvokfgUaGm/IGqE59QLykI2RSiUubgHogJWdPpHFfUaDnTNSZVpdI/H8/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCASQV0kWCquRY0vwnsm1fMA7ekwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb5ZNSJ6cQOF+V9yJzUogYSXMUz4TBP0OZt 8RuQcJ5OpLmKXXSMUvJ4Gb12MNqIRUq8aYBauwdnFZOz7hf52wyEB++JDODbYsM0 +XGP7JxqUoh+qLzU2sim4NGnDFpguHqMfVxvXR2sxmFGLdusJqI7+0//DFQxxXOE F7RU6iRMN/H5ZZF4lDcGZJalo6d2h+Lugw0oy45htCtY51iCr3E6dm2GvKoMnB0W zW5VCY1nhcgPWoLrbAYK8LhloYAP8PpmymXfHShDhbws77xFuEHNO57kYOjinH4A u+VhWuwLd7DwOJjr3B3jWfp7mfjHcj4tFyicPZLjNlNiGJOsg00= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:46 2026 by rpki-client