$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: qWp2tJ8hPtFukncaT84JVw1GJH36Uz46Wwsih81kFC0= Subject key identifier: 18:DD:C7:76:B0:95:84:1E:7D:20:8F:E7:5C:23:58:79:51:A8:E5:E3 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 7BDF2A3F50537737B561B3705417F1DE482D6817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 021D Signing time: Wed 22 Apr 2026 00:01:32 +0000 Manifest this update: Tue 21 Apr 2026 23:56:32 +0000 Manifest next update: Sat 25 Apr 2026 06:51:32 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 9XvG7lgnGTa2TMybG5m34Ghm7U76tWIWHi96o5X/RSg=) 3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: Shfd7OTbb80+mLBaYaQhp0eSVdGbLBQUMkByUxxvAqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 06:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:df:2a:3f:50:53:77:37:b5:61:b3:70:54:17:f1:de:48:2d:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Apr 21 23:56:32 2026 GMT Not After : Apr 25 06:51:32 2026 GMT Subject: CN=18DDC776B095841E7D208FE75C23587951A8E5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:79:81:e2:19:35:2e:f1:60:95:5c:8d:1f: 5c:6a:8d:5b:ca:84:35:0c:6b:df:2b:a2:9b:d1:ef: 8a:00:12:67:a2:56:06:be:8f:32:48:a1:09:96:cd: b0:b0:57:a5:5a:c2:31:be:22:3a:03:f9:20:f8:2e: 33:89:00:cf:6f:c2:48:1c:9d:35:02:f9:c5:55:65: 01:ca:8e:0e:47:d8:de:94:2d:34:8f:4c:4d:eb:be: 55:3f:16:c7:2d:a5:0b:c7:ce:97:b5:88:5c:51:65: 05:4e:6b:48:fd:c3:9c:82:c8:4f:93:6a:2f:ac:f2: 06:ea:39:50:30:db:cf:28:b3:fa:fa:be:4f:61:8c: c8:09:ad:1c:fa:c1:ee:2c:2d:41:a1:6f:4b:ba:e1: a2:09:41:db:6a:cf:d5:1d:b8:35:d2:1c:7f:2f:06: f4:ed:b6:4d:e6:3a:ec:b4:15:d5:c6:15:85:1c:a3: 39:c8:7e:26:5f:92:08:78:93:1f:4a:59:8b:d2:65: 5b:2d:fa:cd:45:13:16:65:96:cb:5f:c3:1b:be:26: 26:17:66:02:6d:71:4c:b3:30:d9:ed:6d:e8:d8:70: 9e:cb:08:4c:1f:aa:84:01:fe:74:86:e6:fe:d6:a0: a8:ea:62:b9:ce:18:57:04:b0:ab:d1:1a:80:31:d1: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:C7:76:B0:95:84:1E:7D:20:8F:E7:5C:23:58:79:51:A8:E5:E3 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:c2:45:45:b2:6b:63:e8:e7:aa:55:f1:56:b9:6d:b8:25: 28:68:8f:39:30:47:4e:91:bd:df:44:06:21:05:a6:5f:bf:ab: 81:cc:e5:28:b4:a4:54:c6:a7:c3:3d:c0:a2:e5:e0:99:0e:97: 75:da:c9:23:e0:37:15:e1:e9:d1:73:55:ee:91:5b:db:14:f4: 00:50:70:0a:1c:a6:42:72:d2:cf:16:b1:4b:27:b2:ac:39:eb: f6:0f:ba:01:70:63:ae:47:3d:83:07:6a:b3:fd:d6:70:4d:e4: 25:ab:79:f8:9e:ac:50:7d:d4:a0:ff:c2:16:8f:d7:d4:25:ed: b3:7b:ba:3a:98:e0:ab:78:a1:7b:8f:cf:db:d0:55:0a:25:32: 70:fd:ac:fd:17:09:35:47:f3:f6:22:fa:69:ea:42:f2:60:15: 33:e4:92:88:e3:e5:ba:27:f3:cd:e5:dd:b0:20:56:04:f8:65: 0b:26:71:cf:a1:78:5c:0c:bf:37:e9:32:99:82:bf:a9:2d:b2: 49:80:ec:eb:d2:71:b7:1f:47:bd:42:9d:dd:26:14:e4:cd:5b: ff:10:a1:a9:10:7e:58:ab:de:a8:cb:37:2a:2f:73:49:8b:e6: 60:f2:90:cc:54:ee:7a:50:a5:ef:cf:f7:d6:20:db:1c:f6:cb: 40:76:01:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe98qP1BTdze1YbNwVBfx3kgtaBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNjA0MjEyMzU2MzJaFw0yNjA0MjUwNjUxMzJaMDMxMTAvBgNV BAMTKDE4RERDNzc2QjA5NTg0MUU3RDIwOEZFNzVDMjM1ODc5NTFBOEU1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC733mB4hk1LvFglVyNH1xqjVvK hDUMa98ropvR74oAEmeiVga+jzJIoQmWzbCwV6VawjG+IjoD+SD4LjOJAM9vwkgc nTUC+cVVZQHKjg5H2N6ULTSPTE3rvlU/FsctpQvHzpe1iFxRZQVOa0j9w5yCyE+T ai+s8gbqOVAw288os/r6vk9hjMgJrRz6we4sLUGhb0u64aIJQdtqz9UduDXSHH8v BvTttk3mOuy0FdXGFYUcoznIfiZfkgh4kx9KWYvSZVst+s1FExZllstfwxu+JiYX ZgJtcUyzMNntbejYcJ7LCEwfqoQB/nSG5v7WoKjqYrnOGFcEsKvRGoAx0WR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGN3HdrCVhB59II/nXCNYeVGo5eMwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABANwkVFsmtj6OeqVfFWuW24JShojzkwR06R vd9EBiEFpl+/q4HM5Si0pFTGp8M9wKLl4JkOl3XaySPgNxXh6dFzVe6RW9sU9ABQ cAocpkJy0s8WsUsnsqw56/YPugFwY65HPYMHarP91nBN5CWrefierFB91KD/whaP 19Ql7bN7ujqY4Kt4oXuPz9vQVQolMnD9rP0XCTVH8/Yi+mnqQvJgFTPkkojj5bon 883l3bAgVgT4ZQsmcc+heFwMvzfpMpmCv6ktskmA7OvScbcfR71Cnd0mFOTNW/8Q oakQflir3qjLNyovc0mL5mDykMxU7npQpe/P99Yg2xz2y0B2AdY= -----END CERTIFICATE-----Generated at Wed Apr 22 10:26:36 2026 by rpki-client