$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: 1NF1e0RSXPGJPjZV+ncsEL8Rmco+vu2u2TC4+IZBwlM= Subject key identifier: E6:DE:84:7A:37:B9:21:1C:F7:6E:01:BD:67:A8:33:A8:01:5A:65:54 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 7EFA8AF31BDA98FD049CC8FC6BD3B3A1F28AB54D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0137 Signing time: Tue 21 Apr 2026 16:42:15 +0000 Manifest this update: Tue 21 Apr 2026 16:37:15 +0000 Manifest next update: Sat 25 Apr 2026 00:58:15 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: NR4U6I6krDgFTPAu9Wfw0/e3XQEEqig00xs9Ia/LvtU=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fa:8a:f3:1b:da:98:fd:04:9c:c8:fc:6b:d3:b3:a1:f2:8a:b5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Apr 21 16:37:15 2026 GMT Not After : Apr 25 00:58:15 2026 GMT Subject: CN=E6DE847A37B9211CF76E01BD67A833A8015A6554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:45:9b:e9:f2:35:c5:c9:31:1e:95:94:f6: b6:01:7a:89:10:41:da:d2:ec:45:4d:ef:66:3c:7d: 8f:79:f6:33:45:86:35:fc:5b:ef:11:6f:ca:2e:c6: 12:b4:8d:0c:9d:d5:d0:8a:bd:ab:a7:79:9a:7a:f6: 80:cc:fa:d4:84:2f:94:b5:86:e3:86:eb:de:e6:91: 9a:ff:e6:3f:a5:26:1f:3e:fb:20:28:d5:ac:21:e9: 7b:05:84:2a:11:82:57:0c:b8:e7:61:3f:53:50:31: dd:b0:5d:a9:9a:14:c1:cd:1c:95:3b:66:33:87:cf: 1e:6f:91:8b:2d:ab:e5:a2:27:15:61:9d:7b:f4:19: 25:0a:cd:4a:68:61:0e:a5:c7:b8:67:80:36:d2:0d: bb:cc:d1:a8:aa:60:d0:25:a7:f5:b1:56:d5:bb:29: 41:45:65:7c:4a:58:55:06:59:dc:48:f0:e6:73:8a: f8:1e:e1:1e:5e:de:0e:0f:62:68:c9:f4:ec:6b:01: b1:76:e4:1a:6e:bd:e5:67:f3:e7:49:9f:c3:e2:8e: 82:50:0f:a1:f1:2f:7b:2d:58:e0:24:67:16:01:c7: 32:54:a5:57:da:d7:4f:a0:31:d1:1a:84:f8:49:06: 45:cd:09:fa:5b:f0:e2:1b:a5:c0:45:53:be:fb:b3: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DE:84:7A:37:B9:21:1C:F7:6E:01:BD:67:A8:33:A8:01:5A:65:54 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ab:b0:2b:0d:1b:1a:4f:82:a8:ef:0a:d0:a2:b0:9a:81:f8: 1b:27:a8:42:79:dc:36:1c:01:f3:8b:31:95:93:3e:67:58:16: 0a:9b:34:23:ec:cb:ba:1d:e0:5c:cf:bd:18:64:47:f5:25:d7: 61:36:3f:86:76:55:51:d6:b1:79:ca:de:0f:88:56:9d:ad:3e: 14:aa:e5:0c:db:ea:60:01:08:9d:0b:57:85:a1:fc:4c:3d:56: 97:82:17:8a:79:78:48:2c:a4:44:69:9e:c8:46:57:3c:8a:ab: 5f:09:32:cd:91:c9:3c:13:15:16:ff:1e:43:13:e6:ab:14:3f: 5e:48:4a:ea:bd:96:9a:0c:4b:61:64:8d:55:9a:06:27:bd:f9: 69:df:23:72:50:74:cd:31:43:fc:a5:3b:34:1d:71:2d:14:10: 24:06:fd:bb:66:11:3b:23:38:18:0f:5a:2d:2d:41:8b:99:7b: a0:cf:49:e8:7a:07:b2:41:fe:33:bc:d5:b0:a0:18:43:c7:df: 21:67:7a:ba:12:bc:16:c4:73:47:a6:9a:c8:0b:14:e5:9c:2b: 4f:02:5e:06:e4:aa:4f:9b:aa:cc:e7:81:dc:1e:8a:a5:7f:c5: 11:7f:a8:0a:be:e3:26:fe:7f:67:98:24:49:44:bb:90:95:ab: f8:47:f9:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvqK8xvamP0EnMj8a9OzofKKtU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjA0MjExNjM3MTVaFw0yNjA0MjUwMDU4MTVaMDMxMTAvBgNV BAMTKEU2REU4NDdBMzdCOTIxMUNGNzZFMDFCRDY3QTgzM0E4MDE1QTY1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2UWb6fI1xckxHpWU9rYBeokQ QdrS7EVN72Y8fY959jNFhjX8W+8Rb8ouxhK0jQyd1dCKvauneZp69oDM+tSEL5S1 huOG697mkZr/5j+lJh8++yAo1awh6XsFhCoRglcMuOdhP1NQMd2wXamaFMHNHJU7 ZjOHzx5vkYstq+WiJxVhnXv0GSUKzUpoYQ6lx7hngDbSDbvM0aiqYNAlp/WxVtW7 KUFFZXxKWFUGWdxI8OZzivge4R5e3g4PYmjJ9OxrAbF25BpuveVn8+dJn8PijoJQ D6HxL3stWOAkZxYBxzJUpVfa10+gMdEahPhJBkXNCfpb8OIbpcBFU777s5k9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5t6Eeje5IRz3bgG9Z6gzqAFaZVQwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCrsCsNGxpPgqjvCtCisJqB+BsnqEJ53DYc AfOLMZWTPmdYFgqbNCPsy7od4FzPvRhkR/Ul12E2P4Z2VVHWsXnK3g+IVp2tPhSq 5Qzb6mABCJ0LV4Wh/Ew9VpeCF4p5eEgspERpnshGVzyKq18JMs2RyTwTFRb/HkMT 5qsUP15ISuq9lpoMS2FkjVWaBie9+WnfI3JQdM0xQ/ylOzQdcS0UECQG/btmETsj OBgPWi0tQYuZe6DPSeh6B7JB/jO81bCgGEPH3yFneroSvBbEc0emmsgLFOWcK08C Xgbkqk+bqszngdweiqV/xRF/qAq+4yb+f2eYJElEu5CVq/hH+R4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client