$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: AoVK2pI8TmP1C1fStIVZ67vO23E/PbvPdQZN2hNm/Zk= Subject key identifier: 92:9C:1E:24:ED:D5:57:FE:61:DB:06:CE:58:F4:D2:4B:63:DB:C9:18 Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 3509A168E33095B1F85E56DD4A373E6F9875E251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 0318 Signing time: Sun 19 Apr 2026 08:41:45 +0000 Manifest this update: Sun 19 Apr 2026 08:36:45 +0000 Manifest next update: Wed 22 Apr 2026 14:55:45 +0000 Files and hashes: 1: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 0lcfKrVdmd9kh0sslDDW+5Kmpau5fuDZNnMcPzu+YgU=) 2: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: 2ZLK8y3AjE5K4wgBiB2LJqDOSwl+FEksbmc3VNpq7dE=) 3: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: UWEmni5SiUDfWBGShl48lbgoCd8oAI+lOk/JRAr7L3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:09:a1:68:e3:30:95:b1:f8:5e:56:dd:4a:37:3e:6f:98:75:e2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Apr 19 08:36:45 2026 GMT Not After : Apr 22 14:55:45 2026 GMT Subject: CN=929C1E24EDD557FE61DB06CE58F4D24B63DBC918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:f9:5a:49:c8:ef:b4:a8:62:e2:c1:ba:3b: c3:58:8e:49:3f:ad:ca:25:4e:88:4a:2a:22:0d:a4: fe:c7:6e:e3:d1:4b:39:93:7d:01:9a:40:ac:5c:79: 77:6e:31:c9:f6:8e:74:30:ed:f9:d8:c7:0e:e4:0e: 58:fc:9f:95:ff:53:1d:89:4a:72:d9:c6:cb:7e:41: 93:92:e7:69:f5:19:9f:1c:d3:5e:41:35:3d:2c:6d: d6:f3:24:e7:1b:e5:87:14:59:8f:5f:2a:d0:fb:89: 18:22:e9:21:5d:79:7b:d0:65:36:6a:de:c7:fd:04: d1:78:ca:9d:a7:37:db:a8:37:f2:99:65:0b:79:bb: 6c:92:3f:50:e8:bc:97:f3:dc:8c:07:9e:04:24:48: 55:4e:03:e7:c0:9b:c0:c6:44:15:7d:7d:1d:42:e3: 63:c1:2c:75:a1:bc:7c:d7:73:96:7c:e8:a2:6c:78: ed:a3:de:25:34:cd:f8:cd:ab:83:68:c0:d6:43:2d: e7:16:6a:7f:9b:58:cc:37:43:30:63:e9:09:e7:b7: 75:0e:42:d3:e6:57:e1:82:b9:8c:5a:a9:f7:92:1f: f6:5a:8e:db:06:59:22:27:1a:6b:9d:4f:01:da:90: b3:85:45:be:57:fc:17:6f:7d:4a:b5:05:7b:ae:04: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9C:1E:24:ED:D5:57:FE:61:DB:06:CE:58:F4:D2:4B:63:DB:C9:18 X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6d:3a:53:7d:73:f3:79:d0:b3:af:b1:86:38:31:b4:da:f2: 93:26:49:f5:df:42:0d:e6:fe:45:3a:fa:fe:80:87:1d:53:77: 35:98:6c:6f:3e:df:bf:a2:65:a7:08:72:b6:dc:18:73:91:f1: 82:0f:a3:25:15:86:f0:43:03:fd:7c:f0:89:13:34:d8:3c:8f: 21:2d:7b:43:c6:92:e6:57:c4:39:45:f4:c3:fc:c7:a8:d4:04: 98:34:80:6e:03:ca:88:d3:36:8d:59:19:21:34:05:b7:8d:ca: 55:b5:01:ec:fc:09:63:d2:6d:81:3f:ec:c5:82:32:55:99:23: 56:61:2b:52:4e:bb:01:26:bf:33:3c:79:ca:61:df:c7:21:e7: 59:62:1c:3a:36:2b:70:fb:a6:57:ca:10:1a:21:c9:6b:8b:1a: 2d:e3:8b:44:86:19:33:4a:19:f0:29:60:70:e1:56:79:cf:3e: c3:1e:17:5d:55:a0:97:63:6d:a1:50:8a:66:9e:71:8c:13:30: 4c:3f:28:cc:08:6b:eb:91:47:d0:c1:03:38:4c:5a:c0:42:79: 37:1c:93:4f:66:36:35:9c:91:31:59:70:58:68:83:b1:08:8b: 3c:4b:97:95:a2:3e:f1:27:f2:ca:b8:09:74:e6:4c:df:78:ec: ad:0b:32:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQmhaOMwlbH4XlbdSjc+b5h14lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNjA0MTkwODM2NDVaFw0yNjA0MjIxNDU1NDVaMDMxMTAvBgNV BAMTKDkyOUMxRTI0RURENTU3RkU2MURCMDZDRTU4RjREMjRCNjNEQkM5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaflaScjvtKhi4sG6O8NYjkk/ rcolTohKKiINpP7HbuPRSzmTfQGaQKxceXduMcn2jnQw7fnYxw7kDlj8n5X/Ux2J SnLZxst+QZOS52n1GZ8c015BNT0sbdbzJOcb5YcUWY9fKtD7iRgi6SFdeXvQZTZq 3sf9BNF4yp2nN9uoN/KZZQt5u2ySP1DovJfz3IwHngQkSFVOA+fAm8DGRBV9fR1C 42PBLHWhvHzXc5Z86KJseO2j3iU0zfjNq4NowNZDLecWan+bWMw3QzBj6Qnnt3UO QtPmV+GCuYxaqfeSH/ZajtsGWSInGmudTwHakLOFRb5X/BdvfUq1BXuuBHqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkpweJO3VV/5h2wbOWPTSS2PbyRgwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFttOlN9c/N50LOvsYY4MbTa8pMmSfXfQg3m /kU6+v6Ahx1TdzWYbG8+37+iZacIcrbcGHOR8YIPoyUVhvBDA/188IkTNNg8jyEt e0PGkuZXxDlF9MP8x6jUBJg0gG4DyojTNo1ZGSE0BbeNylW1Aez8CWPSbYE/7MWC MlWZI1ZhK1JOuwEmvzM8ecph38ch51liHDo2K3D7plfKEBohyWuLGi3ji0SGGTNK GfApYHDhVnnPPsMeF11VoJdjbaFQimaecYwTMEw/KMwIa+uRR9DBAzhMWsBCeTcc k09mNjWckTFZcFhog7EIizxLl5WiPvEn8sq4CXTmTN947K0LMlU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:16 2026 by rpki-client