$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: dWbTRaG8A2FanjJGA94dnIH/zclrdjtzBtiT9XC8Z3E= Subject key identifier: 50:C5:80:64:EC:2F:95:A8:81:A5:9A:52:E0:AC:1F:4F:BA:4F:FA:4D Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 71CC93BE6511C6196B5D52BC9CE102935452CD2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 0159 Signing time: Thu 16 Apr 2026 10:30:03 +0000 Manifest this update: Thu 16 Apr 2026 10:25:03 +0000 Manifest next update: Sun 19 Apr 2026 14:40:03 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: nRBlIqwYXob/oYKswh6G4394N7ssEKCORew/z/9Ka8w=) 2: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: 7BgH8A9KYLHq+6rLklRVRNyoQdvq5HQ2CMgRXP/9Y+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:93:be:65:11:c6:19:6b:5d:52:bc:9c:e1:02:93:54:52:cd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Apr 16 10:25:03 2026 GMT Not After : Apr 19 14:40:03 2026 GMT Subject: CN=50C58064EC2F95A881A59A52E0AC1F4FBA4FFA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:62:40:e6:7c:4c:d3:1c:46:52:f2:74:e1: 3d:15:85:4f:46:66:d8:a0:5e:25:ee:f0:a7:91:15: e4:92:80:24:65:24:49:bc:75:d9:1f:db:71:4f:0d: 21:72:3a:2d:4e:e0:62:bb:27:c2:c2:59:10:3d:fe: ab:96:f7:82:22:8b:e7:16:91:7f:bb:57:d9:fa:67: 19:86:d9:d3:d0:7b:bf:00:23:6e:d9:e5:16:8e:28: 69:19:7d:12:7b:d4:f3:a2:f4:ce:4a:4a:b5:72:f9: d3:26:d3:55:53:74:82:cc:04:af:8b:80:05:6d:52: 6d:15:97:d5:50:43:49:b7:cf:35:20:08:7e:4b:4d: c9:01:22:76:1c:6d:db:a9:0e:31:5f:db:17:86:fd: 6b:c2:c5:d3:85:29:66:50:74:fb:c1:da:a2:c7:78: 8c:86:9d:83:7c:c4:b5:ca:a2:67:b0:55:08:f4:16: dd:ef:14:30:5b:9c:ab:b9:1d:76:0f:c7:f0:e2:a5: ff:4c:07:24:a7:15:1d:69:e4:7f:db:02:88:f6:00: e5:9d:a9:c7:33:47:65:ac:b7:ed:ed:52:72:64:2f: 8f:54:e4:51:b4:8d:f9:b9:9a:e2:45:e3:d7:97:c8: df:a2:95:07:a1:62:f7:88:d5:21:ba:db:fd:c4:27: 1c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C5:80:64:EC:2F:95:A8:81:A5:9A:52:E0:AC:1F:4F:BA:4F:FA:4D X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7e:15:57:5d:8e:95:53:b6:5e:00:ad:d3:fc:f8:0c:9f:12: c6:5b:8d:11:b9:ee:ad:62:45:9d:fa:1f:4f:a2:ec:3c:06:6b: 02:ac:6e:97:e3:ae:68:cf:11:1b:5e:33:33:60:f2:70:28:59: 94:d6:5a:22:98:5c:5c:b3:76:cb:70:16:42:23:3a:72:21:82: 8f:19:cc:bb:3a:27:7e:6d:84:9d:d4:bd:4a:87:a7:01:97:b4: df:74:0e:4b:06:3e:85:fc:07:49:e0:79:64:c3:11:f0:5f:67: 03:d8:27:77:10:80:a6:73:ad:3f:04:5c:32:c9:15:2d:59:b7: 82:77:bd:f9:4e:1a:f4:da:b9:3b:0f:cd:c6:22:85:fb:3f:0b: a1:09:90:9f:22:8b:34:7c:4e:7a:57:30:eb:a7:b2:7d:9b:e5: 00:85:b8:79:0b:d2:7f:2b:a1:f1:78:b3:77:97:d5:15:e2:94: 32:79:ac:2a:2c:f5:c2:5e:48:d9:01:aa:26:45:35:90:12:46: b8:a1:e8:47:a0:92:23:9d:0c:56:ff:ef:b6:6c:77:2a:c3:99: af:88:d1:6a:76:84:69:f8:3f:3c:0a:65:6f:23:2a:d8:1e:2a: 53:9b:4f:a9:df:b5:3a:e1:94:bc:4c:c6:f8:85:24:9e:24:81: 3b:54:17:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccyTvmURxhlrXVK8nOECk1RSzS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNjA0MTYxMDI1MDNaFw0yNjA0MTkxNDQwMDNaMDMxMTAvBgNV BAMTKDUwQzU4MDY0RUMyRjk1QTg4MUE1OUE1MkUwQUMxRjRGQkE0RkZBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRmJA5nxM0xxGUvJ04T0VhU9G ZtigXiXu8KeRFeSSgCRlJEm8ddkf23FPDSFyOi1O4GK7J8LCWRA9/quW94Iii+cW kX+7V9n6ZxmG2dPQe78AI27Z5RaOKGkZfRJ71POi9M5KSrVy+dMm01VTdILMBK+L gAVtUm0Vl9VQQ0m3zzUgCH5LTckBInYcbdupDjFf2xeG/WvCxdOFKWZQdPvB2qLH eIyGnYN8xLXKomewVQj0Ft3vFDBbnKu5HXYPx/Dipf9MBySnFR1p5H/bAoj2AOWd qcczR2Wst+3tUnJkL49U5FG0jfm5muJF49eXyN+ilQehYveI1SG62/3EJxyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMWAZOwvlaiBpZpS4KwfT7pP+k0wHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMh+FVddjpVTtl4ArdP8+AyfEsZbjRG57q1i RZ36H0+i7DwGawKsbpfjrmjPERteMzNg8nAoWZTWWiKYXFyzdstwFkIjOnIhgo8Z zLs6J35thJ3UvUqHpwGXtN90DksGPoX8B0ngeWTDEfBfZwPYJ3cQgKZzrT8EXDLJ FS1Zt4J3vflOGvTauTsPzcYihfs/C6EJkJ8iizR8TnpXMOunsn2b5QCFuHkL0n8r ofF4s3eX1RXilDJ5rCos9cJeSNkBqiZFNZASRrih6EegkiOdDFb/77ZsdyrDma+I 0Wp2hGn4PzwKZW8jKtgeKlObT6nftTrhlLxMxviFJJ4kgTtUF2s= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:50 2026 by rpki-client