$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: faRtfIKBsA1re5c6Ztvnr5eIKh48n6b9sjzB3OvGBAM= Subject key identifier: 41:AF:F5:BC:C4:3F:03:BA:D6:0F:8A:27:C7:43:24:59:DA:2E:85:B4 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 7DB401129F6E312986ADBEA7B4B3BFF00ACFCE81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 012A Signing time: Mon 20 Apr 2026 06:20:46 +0000 Manifest this update: Mon 20 Apr 2026 06:15:46 +0000 Manifest next update: Thu 23 Apr 2026 12:56:46 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: Ig9DMEJo3Lbr5020Opt3g1h77vfVVhfS6W6WnXfUTk8=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b4:01:12:9f:6e:31:29:86:ad:be:a7:b4:b3:bf:f0:0a:cf:ce:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Apr 20 06:15:46 2026 GMT Not After : Apr 23 12:56:46 2026 GMT Subject: CN=41AFF5BCC43F03BAD60F8A27C7432459DA2E85B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:f3:7f:f3:72:50:0a:89:a0:ec:3d:3e:2d: 0a:6d:2e:36:b5:d3:05:53:00:5a:55:ff:4a:f0:93: dc:6c:f6:62:78:95:31:8f:b7:65:99:e9:a8:63:1d: 0b:c6:ab:89:70:97:db:e7:e9:de:18:00:50:e5:1d: ca:aa:5a:75:02:3c:f2:ab:8e:be:9e:bf:5b:b8:94: 8c:a3:94:58:f7:a1:de:bc:55:5a:a7:e8:f8:96:38: a7:86:4e:80:17:f0:20:57:b5:68:15:6e:f4:7e:b6: 8a:95:27:ef:e8:55:ab:02:30:2a:9f:fe:9a:ff:2b: 38:e3:7e:a3:a7:df:e7:7b:a5:a3:51:b7:1c:2b:a7: 77:56:62:2c:ae:9f:99:4d:d3:29:59:d8:55:b3:3a: 34:8c:4a:c5:2b:a1:a3:5a:a3:aa:8f:ac:be:29:7d: af:f3:2d:e1:9e:73:51:cd:85:10:3a:2a:ec:13:fe: 74:f6:2e:62:dc:cb:9f:99:54:b6:9a:5a:fd:3b:7e: 89:01:cd:bd:62:6d:a3:f0:f9:59:7e:99:7d:4e:11: 7a:e7:52:1f:10:a2:63:40:c8:db:ea:9e:46:5e:38: c6:0b:88:55:7c:51:51:83:f6:b2:c2:26:54:33:a4: 42:41:c4:ff:a6:79:67:21:aa:6d:0e:32:14:d9:99: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:F5:BC:C4:3F:03:BA:D6:0F:8A:27:C7:43:24:59:DA:2E:85:B4 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c3:54:4f:77:78:c4:83:8d:42:a4:5f:00:e4:af:d3:f5:15: 14:45:2c:80:1f:c1:d6:6d:a2:ce:7a:f5:da:8c:b9:57:10:db: 59:4e:e9:55:b1:de:b6:6e:cb:7f:53:a3:9e:09:36:29:8b:0e: 4c:ca:70:be:06:92:3d:ca:cf:76:b4:af:f1:fb:cf:9b:9d:f0: 11:d5:3e:1b:2f:70:cd:90:1d:33:10:f6:7c:85:3b:6f:7e:26: 89:5e:a9:8d:0c:e8:dc:c0:c0:4e:23:15:69:8b:21:a5:70:5d: c8:8d:f4:34:5e:e9:15:f5:e3:8a:2a:e5:ad:9b:9f:e9:1e:ef: d6:e1:c1:9e:9f:9d:2e:2e:f1:b9:0f:44:3d:57:f9:be:26:f5: 76:64:4b:20:c0:3f:bb:b6:09:49:f4:64:7b:7d:97:ca:18:a8: 5a:80:61:8b:8a:99:61:e8:e6:75:1c:d2:4b:73:51:24:81:55: 6f:63:23:0b:eb:9b:bd:35:5f:08:8c:3b:b2:f8:c2:6d:4a:58: ae:2e:39:9c:2c:52:d4:d4:f3:a7:75:d1:80:7d:92:4d:7e:df: c0:12:c7:ca:56:b8:ed:e6:10:34:81:b6:05:27:5e:17:af:4a: bf:bb:89:85:a2:3c:d7:42:d6:e6:9d:a9:da:72:03:45:08:be: 9d:36:ec:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbQBEp9uMSmGrb6ntLO/8ArPzoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNjA0MjAwNjE1NDZaFw0yNjA0MjMxMjU2NDZaMDMxMTAvBgNV BAMTKDQxQUZGNUJDQzQzRjAzQkFENjBGOEEyN0M3NDMyNDU5REEyRTg1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtg/N/83JQComg7D0+LQptLja1 0wVTAFpV/0rwk9xs9mJ4lTGPt2WZ6ahjHQvGq4lwl9vn6d4YAFDlHcqqWnUCPPKr jr6ev1u4lIyjlFj3od68VVqn6PiWOKeGToAX8CBXtWgVbvR+toqVJ+/oVasCMCqf /pr/KzjjfqOn3+d7paNRtxwrp3dWYiyun5lN0ylZ2FWzOjSMSsUroaNao6qPrL4p fa/zLeGec1HNhRA6KuwT/nT2LmLcy5+ZVLaaWv07fokBzb1ibaPw+Vl+mX1OEXrn Uh8QomNAyNvqnkZeOMYLiFV8UVGD9rLCJlQzpEJBxP+meWchqm0OMhTZmYihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQa/1vMQ/A7rWD4onx0MkWdouhbQwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3DVE93eMSDjUKkXwDkr9P1FRRFLIAfwdZt os569dqMuVcQ21lO6VWx3rZuy39To54JNimLDkzKcL4Gkj3Kz3a0r/H7z5ud8BHV PhsvcM2QHTMQ9nyFO29+JoleqY0M6NzAwE4jFWmLIaVwXciN9DRe6RX144oq5a2b n+ke79bhwZ6fnS4u8bkPRD1X+b4m9XZkSyDAP7u2CUn0ZHt9l8oYqFqAYYuKmWHo 5nUc0ktzUSSBVW9jIwvrm701XwiMO7L4wm1KWK4uOZwsUtTU86d10YB9kk1+38AS x8pWuO3mEDSBtgUnXhevSr+7iYWiPNdC1uadqdpyA0UIvp027Gg= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client