$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: 42P4UBY0iN5Fr/rOq+ZhOi2ybhUcp3KkwqyUyZwrT2w= Subject key identifier: 34:5E:C1:A7:B8:29:9F:92:5F:40:D0:5E:72:4A:81:03:3F:09:D7:42 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 42AB1F06DBC3B0EF05E1C2997834C66D163F8F41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0174 Signing time: Mon 20 Apr 2026 19:20:00 +0000 Manifest this update: Mon 20 Apr 2026 19:15:00 +0000 Manifest next update: Fri 24 Apr 2026 01:37:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: LA6edZ1BqaoF/U60BRavqW371pg6bOIYNTSPLL8J1p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ab:1f:06:db:c3:b0:ef:05:e1:c2:99:78:34:c6:6d:16:3f:8f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Apr 20 19:15:00 2026 GMT Not After : Apr 24 01:37:00 2026 GMT Subject: CN=345EC1A7B8299F925F40D05E724A81033F09D742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:7c:dd:82:73:3a:95:62:b4:f3:7c:9d:ae: 8f:e1:cf:bc:8b:4b:eb:e1:9e:d2:a3:0e:a5:c8:b0: 69:73:76:4e:0d:df:c8:7b:0e:e1:3f:ba:90:69:d0: 50:ca:4e:99:e7:0d:5c:2e:9f:dc:c2:27:97:b8:cc: 42:a2:e1:c2:c1:04:68:9e:6c:e9:d9:31:e1:b7:c7: 0d:31:40:ad:22:c7:51:74:04:83:d9:3f:52:d4:93: 7e:42:8e:07:b0:73:37:62:dc:e3:03:a4:04:21:ca: c1:3b:a9:f8:47:1e:a8:75:09:66:b5:2b:e8:74:37: 91:ac:fb:24:d8:e4:a4:2d:b7:ba:49:38:96:5f:e2: e9:c2:c2:41:4d:87:83:15:a2:c9:7e:8a:b1:17:a7: 5d:3a:e1:bd:ec:c0:59:88:92:c7:55:5b:d5:56:61: b7:f5:ba:35:bd:af:32:90:55:1f:38:ab:70:a8:0c: 53:5b:f9:93:68:3f:ba:a5:19:22:c3:4a:df:b3:e3: f1:4d:9b:a8:ae:db:91:94:a5:06:be:13:0f:a2:bf: 7a:79:53:2b:6d:6c:89:51:bc:2f:3c:5c:8a:4d:11: aa:76:e9:a0:fa:e6:b7:b2:b6:1a:72:6b:e5:89:8a: 09:aa:11:66:8a:5d:83:e0:75:9f:4c:06:e9:e0:77: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5E:C1:A7:B8:29:9F:92:5F:40:D0:5E:72:4A:81:03:3F:09:D7:42 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:71:4b:82:78:c3:e1:de:45:63:8c:91:30:d9:10:d0:6c:11: 08:73:92:83:8a:6e:f5:42:c9:0a:29:56:d7:69:7d:13:35:ee: 6b:be:26:a5:16:6a:8d:90:ce:0d:47:fb:d0:2f:71:c2:0c:eb: 65:9b:d6:ed:96:f0:a9:e8:43:dc:67:fe:15:35:25:5e:22:81: f4:99:a9:5d:e0:35:4a:b1:be:f1:77:1c:1b:0f:37:f4:70:01: b5:64:f4:83:42:e7:7d:d2:ea:ba:96:db:0b:6e:8b:bf:db:2c: fd:c1:01:6d:5c:1e:d7:e7:c3:60:96:b1:a9:49:2a:2e:84:51: e7:3f:c3:b4:12:bf:fe:5d:6a:a3:56:a0:c8:b2:12:45:78:5f: 9f:fc:7c:e0:96:0c:e3:00:c7:19:cf:88:72:54:19:14:e1:4a: 23:95:cf:72:9c:7e:92:db:9f:85:33:fc:53:3d:71:80:ce:c3: 6e:31:10:c0:e3:48:8c:71:38:39:e2:81:06:1f:36:95:1c:f8: 68:86:d7:6f:a6:39:52:87:90:59:25:1e:aa:41:12:66:93:7e: 09:57:71:51:82:e0:3c:f7:eb:4e:5e:d3:64:c3:cb:48:16:22: 6b:4f:a9:91:50:eb:c9:62:87:66:5d:47:2f:e2:73:f1:73:66: d3:52:00:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqsfBtvDsO8F4cKZeDTGbRY/j0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjA0MjAxOTE1MDBaFw0yNjA0MjQwMTM3MDBaMDMxMTAvBgNV BAMTKDM0NUVDMUE3QjgyOTlGOTI1RjQwRDA1RTcyNEE4MTAzM0YwOUQ3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qHzdgnM6lWK083ydro/hz7yL S+vhntKjDqXIsGlzdk4N38h7DuE/upBp0FDKTpnnDVwun9zCJ5e4zEKi4cLBBGie bOnZMeG3xw0xQK0ix1F0BIPZP1LUk35Cjgewczdi3OMDpAQhysE7qfhHHqh1CWa1 K+h0N5Gs+yTY5KQtt7pJOJZf4unCwkFNh4MVosl+irEXp1064b3swFmIksdVW9VW Ybf1ujW9rzKQVR84q3CoDFNb+ZNoP7qlGSLDSt+z4/FNm6iu25GUpQa+Ew+iv3p5 UyttbIlRvC88XIpNEap26aD65reythpya+WJigmqEWaKXYPgdZ9MBungd5K/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNF7Bp7gpn5JfQNBeckqBAz8J10IwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJxS4J4w+HeRWOMkTDZENBsEQhzkoOKbvVC yQopVtdpfRM17mu+JqUWao2Qzg1H+9AvccIM62Wb1u2W8KnoQ9xn/hU1JV4igfSZ qV3gNUqxvvF3HBsPN/RwAbVk9INC533S6rqW2wtui7/bLP3BAW1cHtfnw2CWsalJ Ki6EUec/w7QSv/5daqNWoMiyEkV4X5/8fOCWDOMAxxnPiHJUGRThSiOVz3KcfpLb n4Uz/FM9cYDOw24xEMDjSIxxODnigQYfNpUc+GiG12+mOVKHkFklHqpBEmaTfglX cVGC4Dz3605e02TDy0gWImtPqZFQ68lih2ZdRy/ic/FzZtNSAFY= -----END CERTIFICATE-----Generated at Wed Apr 22 10:01:10 2026 by rpki-client