$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: CNy6fKIwY1chDaW4Zzdaxs8guu9o2dmvSdY4xMoIu30= Subject key identifier: 91:75:C1:48:8C:A5:93:76:BD:2D:9B:80:FF:EA:80:CF:50:23:85:C9 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 19C6D5BDC7AE9385B18DE5DB9E9C5240C5B43E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 0123 Signing time: Tue 21 Apr 2026 22:30:48 +0000 Manifest this update: Tue 21 Apr 2026 22:25:48 +0000 Manifest next update: Fri 24 Apr 2026 22:49:48 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: nq60GVyVV3H4gp8DPqKoR7I+eS6MrXw7iSsWLa847Bw=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c6:d5:bd:c7:ae:93:85:b1:8d:e5:db:9e:9c:52:40:c5:b4:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Apr 21 22:25:48 2026 GMT Not After : Apr 24 22:49:48 2026 GMT Subject: CN=9175C1488CA59376BD2D9B80FFEA80CF502385C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:ea:bc:f7:60:3c:9f:a1:61:00:be:76:1c: fe:4b:94:64:11:0a:84:1e:05:11:1a:65:3c:ae:1c: ac:86:d8:17:e5:e4:80:de:e0:71:44:6c:dd:26:8c: 8b:a6:df:2a:95:5f:67:ae:97:3d:93:8d:ec:f9:d4: d6:d9:51:6c:04:4f:2c:ac:93:9b:ad:6b:b3:3a:1d: 48:6a:e2:01:16:4f:2f:c7:6e:95:95:63:4c:df:15: f4:c8:8f:61:9d:1e:98:42:cf:b5:bf:36:98:d8:35: 57:43:31:83:4c:a8:9f:c5:09:cb:9b:88:51:82:14: fb:57:dc:20:ea:94:3a:37:af:fd:4b:9c:1b:ba:05: 7a:01:8a:bd:21:1d:9f:03:1f:46:7f:b0:39:96:62: 52:6a:0c:5e:dc:55:5c:3e:8f:ab:52:67:36:18:5b: a7:cb:26:24:8a:4f:2f:23:fd:ce:55:12:43:a3:60: 0a:3a:95:80:4a:d0:bf:49:28:b9:93:1c:4e:08:e9: 4c:12:73:0d:ef:03:1e:ab:6f:fb:6d:d8:26:ca:92: c2:0e:37:29:61:b4:1b:be:20:d0:37:b9:52:27:b4: 68:1e:62:74:fe:9e:5b:1a:df:24:a6:ce:3d:a6:d9: af:a5:38:92:e9:cd:cb:a0:b6:b4:6b:82:a3:9e:e8: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:C1:48:8C:A5:93:76:BD:2D:9B:80:FF:EA:80:CF:50:23:85:C9 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:7b:3d:91:37:76:18:15:5a:bb:5d:0f:1c:f1:09:19:37: 60:a8:01:d1:7c:30:68:8a:0f:2b:df:72:48:7b:5b:5f:9b:3f: b3:27:73:ad:0b:b2:1f:8c:2c:27:2f:d4:48:9e:13:f3:e4:00: 11:5c:e9:3e:c1:cb:7a:3f:ce:87:fb:95:bb:57:34:48:be:1e: a3:db:8e:cc:03:81:df:94:b9:c7:0a:7e:be:b8:ab:af:19:6b: 06:2d:5e:70:db:e5:30:9c:cb:f8:d4:9a:e0:69:ac:b6:53:0d: 99:38:97:f8:89:3d:21:5c:fb:e4:7f:fb:4d:67:0a:5c:13:97: 2b:ee:8c:50:ff:e9:19:17:ce:15:87:b9:0c:6b:3a:74:d0:b9: bd:e8:5b:04:d9:11:b3:7a:5e:2a:42:65:a4:26:17:f8:da:c8: 4c:fc:25:2f:88:30:66:fe:01:9f:a9:0b:93:64:8b:bf:b4:14: 40:f3:c2:92:3c:bc:fd:fd:6d:fd:87:9a:d2:81:46:24:99:20: 05:04:09:07:e2:72:05:10:24:52:78:1f:4a:e8:da:6f:1a:0a: ef:41:5d:df:82:f3:7b:0c:f8:88:2c:1c:ce:21:fa:32:3a:7e: 48:93:c0:1b:68:5d:b4:d6:77:5e:16:62:7d:01:a2:d1:47:86: 95:34:f7:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcbVvceuk4WxjeXbnpxSQMW0PicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNjA0MjEyMjI1NDhaFw0yNjA0MjQyMjQ5NDhaMDMxMTAvBgNV BAMTKDkxNzVDMTQ4OENBNTkzNzZCRDJEOUI4MEZGRUE4MENGNTAyMzg1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVOq892A8n6FhAL52HP5LlGQR CoQeBREaZTyuHKyG2Bfl5IDe4HFEbN0mjIum3yqVX2eulz2Tjez51NbZUWwETyys k5uta7M6HUhq4gEWTy/HbpWVY0zfFfTIj2GdHphCz7W/NpjYNVdDMYNMqJ/FCcub iFGCFPtX3CDqlDo3r/1LnBu6BXoBir0hHZ8DH0Z/sDmWYlJqDF7cVVw+j6tSZzYY W6fLJiSKTy8j/c5VEkOjYAo6lYBK0L9JKLmTHE4I6UwScw3vAx6rb/tt2CbKksIO NylhtBu+INA3uVIntGgeYnT+nlsa3ySmzj2m2a+lOJLpzcugtrRrgqOe6ER9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXXBSIylk3a9LZuA/+qAz1AjhckwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7yez2RN3YYFVq7XQ8c8QkZN2CoAdF8MGiK Dyvfckh7W1+bP7Mnc60Lsh+MLCcv1EieE/PkABFc6T7By3o/zof7lbtXNEi+HqPb jswDgd+UuccKfr64q68ZawYtXnDb5TCcy/jUmuBprLZTDZk4l/iJPSFc++R/+01n ClwTlyvujFD/6RkXzhWHuQxrOnTQub3oWwTZEbN6XipCZaQmF/jayEz8JS+IMGb+ AZ+pC5Nki7+0FEDzwpI8vP39bf2HmtKBRiSZIAUECQficgUQJFJ4H0ro2m8aCu9B Xd+C83sM+IgsHM4h+jI6fkiTwBtoXbTWd14WYn0BotFHhpU09+o= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:44 2026 by rpki-client