$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: 4ABk92L4BaQ0vm4kzwGcR6nHTMTtt1LeepTeG07DOf8= Subject key identifier: E1:9D:7B:5C:F8:DF:F5:F2:53:C9:4C:42:3D:2D:62:45:91:FA:BD:A0 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 767331BB1BDFD526F071A72C556A0F2E2FA577EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 0232 Signing time: Fri 17 Apr 2026 15:02:02 +0000 Manifest this update: Fri 17 Apr 2026 14:57:02 +0000 Manifest next update: Tue 21 Apr 2026 00:11:02 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: e0fCZJgq8unOSW8DBaQsUH3/9va5B5lFPQ6LGZMgftU=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) 3: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:73:31:bb:1b:df:d5:26:f0:71:a7:2c:55:6a:0f:2e:2f:a5:77:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Apr 17 14:57:02 2026 GMT Not After : Apr 21 00:11:02 2026 GMT Subject: CN=E19D7B5CF8DFF5F253C94C423D2D624591FABDA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:ab:bd:4f:2f:f2:8f:82:cb:c2:ed:be:50: 48:3a:0e:74:f8:c4:6c:ce:d4:6a:8c:75:c7:92:3e: bf:27:6e:f0:37:a7:fb:8b:3a:db:85:f4:13:7e:18: 92:bb:23:24:92:b4:e2:64:e7:23:be:e8:36:90:8f: 9f:67:a6:19:a6:ec:e2:92:74:d8:29:ee:3c:34:94: 11:ca:fc:d0:97:40:7c:37:98:8d:aa:b4:e2:59:be: a2:d0:ab:32:f5:ec:26:5e:d9:65:ea:d8:00:b3:87: d6:03:08:f6:05:bf:c8:c3:5a:32:13:4f:ea:d8:a6: 26:4a:c9:94:b0:2f:c3:b0:40:6d:ed:5e:85:05:3c: 3a:e1:8a:d4:df:64:e7:55:ce:8e:a3:60:cb:9b:e3: 15:20:07:53:b6:df:fc:f3:e4:15:a8:f9:86:03:51: e2:68:ab:ee:65:4c:e2:ea:41:ff:3e:d5:ed:14:9b: 49:2a:8e:cf:84:0f:c3:cb:02:e9:79:83:17:a7:56: 14:e7:2e:86:6c:7b:28:4f:d4:2e:f5:27:0a:d9:f7: fb:59:1d:de:70:dc:f1:fd:35:9c:5a:7e:e6:e5:1e: b8:0d:43:6f:83:d5:37:40:ac:e0:ba:c5:52:05:31: aa:87:60:07:db:0e:62:02:f6:b6:ab:09:7e:28:34: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:7B:5C:F8:DF:F5:F2:53:C9:4C:42:3D:2D:62:45:91:FA:BD:A0 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ed:87:e8:7c:6a:3d:e7:34:09:91:53:70:55:eb:20:67:4c: 44:85:cd:61:1d:0c:ab:81:1f:ab:7a:f9:1e:a1:ee:43:65:32: 67:f5:50:d3:1d:88:18:c6:74:e5:6c:64:88:ce:26:d2:a5:e2: 87:5b:49:2f:07:c4:97:00:7b:b4:c9:70:4f:78:8b:49:18:d0: b0:8d:d3:3c:35:82:c9:db:0d:6f:a6:dd:53:2f:2b:81:96:be: 88:f5:49:45:61:da:49:47:fd:e4:11:44:e4:f5:19:fd:9c:f7: 2f:c7:44:b0:e7:8f:af:25:5a:e1:fa:72:e9:4b:ae:23:95:ea: d6:8d:ed:76:d1:d0:d6:9e:84:39:94:f8:26:60:8f:34:6a:4a: 46:55:e0:76:02:f0:ba:35:a9:21:8f:ba:f3:1f:d7:9e:8d:de: 99:1b:a2:d6:5e:56:fd:fb:5e:4f:13:1e:c5:7c:8e:66:41:21: 5f:d1:a0:84:f7:a4:d0:32:fc:8c:49:7e:d4:0f:64:8c:42:62: 7f:f4:15:79:57:29:fd:34:f6:e3:d4:52:1f:54:f9:c3:24:e8: 85:e6:07:e0:96:47:c4:31:fb:78:98:6f:0d:e4:c6:1a:d1:5f: 8f:45:21:2e:7e:29:94:e6:70:2e:17:41:71:4f:bf:e5:29:17: a5:00:fe:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnMxuxvf1SbwcacsVWoPLi+ld+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNjA0MTcxNDU3MDJaFw0yNjA0MjEwMDExMDJaMDMxMTAvBgNV BAMTKEUxOUQ3QjVDRjhERkY1RjI1M0M5NEM0MjNEMkQ2MjQ1OTFGQUJEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFl6u9Ty/yj4LLwu2+UEg6DnT4 xGzO1GqMdceSPr8nbvA3p/uLOtuF9BN+GJK7IySStOJk5yO+6DaQj59nphmm7OKS dNgp7jw0lBHK/NCXQHw3mI2qtOJZvqLQqzL17CZe2WXq2ACzh9YDCPYFv8jDWjIT T+rYpiZKyZSwL8OwQG3tXoUFPDrhitTfZOdVzo6jYMub4xUgB1O23/zz5BWo+YYD UeJoq+5lTOLqQf8+1e0Um0kqjs+ED8PLAul5gxenVhTnLoZseyhP1C71JwrZ9/tZ Hd5w3PH9NZxafublHrgNQ2+D1TdArOC6xVIFMaqHYAfbDmIC9rarCX4oNK5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Z17XPjf9fJTyUxCPS1iRZH6vaAwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrth+h8aj3nNAmRU3BV6yBnTESFzWEdDKuB H6t6+R6h7kNlMmf1UNMdiBjGdOVsZIjOJtKl4odbSS8HxJcAe7TJcE94i0kY0LCN 0zw1gsnbDW+m3VMvK4GWvoj1SUVh2klH/eQRROT1Gf2c9y/HRLDnj68lWuH6culL riOV6taN7XbR0NaehDmU+CZgjzRqSkZV4HYC8Lo1qSGPuvMf156N3pkbotZeVv37 Xk8THsV8jmZBIV/RoIT3pNAy/IxJftQPZIxCYn/0FXlXKf009uPUUh9U+cMk6IXm B+CWR8Qx+3iYbw3kxhrRX49FIS5+KZTmcC4XQXFPv+UpF6UA/sw= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:31 2026 by rpki-client