$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: ZlmuwHoy+rur8uz7n4QKSb5PWTsZSYvtzF3m10x7vY8= Subject key identifier: 78:F9:31:04:CF:88:9D:EC:AE:DF:BC:DA:D9:A5:E4:D4:E9:E8:EA:60 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 6CB4909198106FF15CB0ED5A9EBCC0F5511E2342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 02C3 Signing time: Thu 16 Apr 2026 15:30:53 +0000 Manifest this update: Thu 16 Apr 2026 15:25:53 +0000 Manifest next update: Mon 20 Apr 2026 02:57:53 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) 2: D1E28E396E82778793018513BD084854BE663886.crl (hash: 4x4b3JIKMnXugl4xov+3NPsp/RbAO89+5FAf8HOoliQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b4:90:91:98:10:6f:f1:5c:b0:ed:5a:9e:bc:c0:f5:51:1e:23:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Apr 16 15:25:53 2026 GMT Not After : Apr 20 02:57:53 2026 GMT Subject: CN=78F93104CF889DECAEDFBCDAD9A5E4D4E9E8EA60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:2d:2e:9a:8f:84:3b:f0:50:0e:bd:8d:74: 96:50:2f:39:6c:ad:37:65:bf:14:54:9f:3e:70:7a: 08:22:32:ed:df:ec:b2:8d:fa:ff:9b:19:ee:b3:68: 06:0f:34:32:d4:e0:de:4d:f1:31:de:32:6b:29:d8: 5c:bf:94:0e:bc:67:f5:1b:fc:f9:56:11:11:94:ec: 92:33:a3:66:23:a1:cd:ac:6e:8b:cc:d3:2f:ae:f9: 6a:d5:08:b2:53:85:4d:f9:40:a9:2e:66:10:f0:50: df:16:56:f1:cf:25:11:6c:b7:8f:b5:df:38:b2:45: f6:c6:60:03:b0:ed:db:64:ce:2b:9e:2f:7a:d4:4b: f7:4c:4f:14:38:6e:95:27:9f:bd:0a:bd:86:8f:58: b4:17:c4:28:12:7f:46:dd:b4:16:ee:5b:c9:d0:ec: a6:58:b8:a9:85:9f:82:50:9e:70:62:e5:35:5e:fb: cf:c0:56:94:38:05:5c:ad:47:78:e3:3a:2e:33:a2: ac:02:79:37:3e:34:1f:2c:e7:ff:28:b8:58:79:36: 2c:5e:f2:0b:66:19:63:22:13:b9:d0:20:a1:df:ce: 0a:c3:89:d5:45:13:f5:7c:7b:1c:71:d2:1b:53:24: cb:5e:7e:d4:5d:e8:4b:53:bd:9a:d7:46:da:39:ac: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F9:31:04:CF:88:9D:EC:AE:DF:BC:DA:D9:A5:E4:D4:E9:E8:EA:60 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:53:b7:95:51:85:96:06:87:77:4d:9d:4e:40:c5:bc:3d:80: 18:f1:06:3a:36:e0:62:6c:12:16:8a:6d:22:27:76:7b:4e:f5: f3:bf:d3:b0:8b:37:81:92:59:29:1e:09:2f:68:16:45:65:89: c3:67:91:70:1e:37:28:dd:da:c5:d0:1a:d1:ce:7a:f7:c0:a7: b5:52:27:be:ca:2f:af:07:96:f2:dd:8e:73:05:83:41:8d:7b: 3c:df:28:6e:b6:3f:cc:80:e1:e6:d8:42:84:6c:e3:cf:67:69: 25:17:b3:3f:53:e7:8a:0c:05:5f:ac:05:38:50:c7:c2:0a:00: 1d:fe:af:90:6b:23:43:39:5a:12:6d:4b:bd:c4:6f:26:1e:b1: f4:0d:88:96:e9:74:dd:82:d1:09:3c:83:15:ef:ce:4c:f4:6a: 64:77:90:c5:65:71:16:fa:b8:60:9f:ac:00:13:f6:7b:f0:49: f4:54:b1:3e:66:08:aa:52:e2:1f:5e:3c:07:0b:c5:42:e4:dd: 3f:b5:1b:02:fa:f3:6b:7b:3a:a9:48:2b:f7:49:ae:13:ba:ed: 9a:93:8e:16:e3:51:b7:98:d4:9a:53:c3:ae:41:33:25:45:5c: f7:2c:59:d6:e0:c4:9e:a0:c7:be:6c:39:de:52:27:e4:8f:f1: c4:a7:22:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLSQkZgQb/FcsO1anrzA9VEeI0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNjA0MTYxNTI1NTNaFw0yNjA0MjAwMjU3NTNaMDMxMTAvBgNV BAMTKDc4RjkzMTA0Q0Y4ODlERUNBRURGQkNEQUQ5QTVFNEQ0RTlFOEVBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComS0umo+EO/BQDr2NdJZQLzls rTdlvxRUnz5weggiMu3f7LKN+v+bGe6zaAYPNDLU4N5N8THeMmsp2Fy/lA68Z/Ub /PlWERGU7JIzo2Yjoc2sbovM0y+u+WrVCLJThU35QKkuZhDwUN8WVvHPJRFst4+1 3ziyRfbGYAOw7dtkziueL3rUS/dMTxQ4bpUnn70KvYaPWLQXxCgSf0bdtBbuW8nQ 7KZYuKmFn4JQnnBi5TVe+8/AVpQ4BVytR3jjOi4zoqwCeTc+NB8s5/8ouFh5Nixe 8gtmGWMiE7nQIKHfzgrDidVFE/V8exxx0htTJMteftRd6EtTvZrXRto5rAmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUePkxBM+Ineyu37za2aXk1Ono6mAwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVTt5VRhZYGh3dNnU5Axbw9gBjxBjo24GJs EhaKbSIndntO9fO/07CLN4GSWSkeCS9oFkVlicNnkXAeNyjd2sXQGtHOevfAp7VS J77KL68HlvLdjnMFg0GNezzfKG62P8yA4ebYQoRs489naSUXsz9T54oMBV+sBThQ x8IKAB3+r5BrI0M5WhJtS73EbyYesfQNiJbpdN2C0Qk8gxXvzkz0amR3kMVlcRb6 uGCfrAAT9nvwSfRUsT5mCKpS4h9ePAcLxULk3T+1GwL682t7OqlIK/dJrhO67ZqT jhbjUbeY1JpTw65BMyVFXPcsWdbgxJ6gx75sOd5SJ+SP8cSnIhw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:41:43 2026 by rpki-client