$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: UuoDPRcdC5GjCv62zcmHyVF6sv5Fht0HI3/aVKOdwV8= Subject key identifier: 4D:AA:D7:A4:B3:89:55:46:2A:6E:81:E3:40:5C:C6:AE:D3:AD:A6:07 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 4E543FBEB69D9FA93BD395CA2B6F3528A9A1BEBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: F5 Signing time: Thu 16 Apr 2026 02:52:32 +0000 Manifest this update: Thu 16 Apr 2026 02:47:32 +0000 Manifest next update: Sun 19 Apr 2026 14:25:32 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: kpiLcFqDSmNyxXxqs5xAgjoZMbCmlzbPdBj/EC4vT10=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:54:3f:be:b6:9d:9f:a9:3b:d3:95:ca:2b:6f:35:28:a9:a1:be:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Apr 16 02:47:32 2026 GMT Not After : Apr 19 14:25:32 2026 GMT Subject: CN=4DAAD7A4B38955462A6E81E3405CC6AED3ADA607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:64:b4:09:85:f6:19:c3:2c:bf:9b:a7:b7: f2:b1:f6:5f:7b:83:2a:c0:91:cf:a1:d1:a2:c2:16: 44:db:4b:38:53:46:ce:6a:ff:f9:37:8a:db:7d:50: ab:37:08:96:46:74:45:65:c2:0a:e4:df:97:27:8e: 00:75:37:df:d0:15:43:25:4e:5a:d5:5f:05:4a:bf: f1:4c:3c:93:3d:9f:48:96:db:b3:39:69:f1:ec:18: 60:fc:77:4a:5f:4c:3b:69:83:bb:02:0a:d9:80:a3: e6:e2:57:99:7e:d4:41:48:d5:8e:81:2e:fa:69:da: 4a:c8:cf:9f:3e:20:a6:80:13:84:71:45:66:8d:b1: 0c:b9:b8:dd:71:56:19:f3:7a:b3:7f:74:00:ca:27: 57:98:23:3f:db:08:24:c2:66:c6:78:7a:72:fa:6b: d6:14:bf:23:64:87:64:f3:49:96:67:44:86:40:4e: a5:7a:22:cb:7d:2a:42:cc:5b:60:ec:14:2f:20:49: a1:db:3a:e7:93:ca:4f:33:17:2f:b2:20:5c:6b:17: ce:66:63:9f:e7:e4:93:35:82:02:cf:28:70:80:f9: f5:4a:89:c5:f0:7b:51:bb:f0:4a:0e:69:34:af:a6: d0:2b:52:f4:8b:bb:4c:84:d0:d0:af:bf:d8:49:09: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AA:D7:A4:B3:89:55:46:2A:6E:81:E3:40:5C:C6:AE:D3:AD:A6:07 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:92:f0:54:f6:02:d8:d8:cf:78:fb:c6:48:4d:2a:bb:d7:41: 60:ce:68:b8:4b:72:de:1f:8b:01:19:a4:ff:c0:5c:0c:cd:55: cb:0b:53:9b:ef:1f:c4:e5:4d:45:e6:d9:81:f6:63:08:a2:7c: 2d:59:89:82:53:27:68:90:45:c9:98:9c:8d:0e:26:97:c6:09: 65:ee:2b:32:c1:24:8a:53:6d:3d:8d:40:12:4d:45:46:e9:39: a3:61:ba:12:5d:7c:fa:fb:37:32:1c:8c:b9:24:95:1a:89:9e: 66:ff:b3:60:6f:04:be:75:1d:e6:d0:fe:72:ff:14:80:73:77: 63:a8:e5:56:83:1c:17:26:10:7d:54:3d:eb:b3:6c:f9:14:57: d3:59:b0:f6:19:62:75:3e:3c:eb:01:38:48:dd:0e:a5:35:6c: 43:58:8a:20:e3:51:8d:3d:74:1d:b8:4c:76:ce:1e:dd:d4:cf: 67:f7:1f:fc:52:af:97:03:ca:b6:7d:c4:55:7c:f4:ab:42:37: 88:3d:31:5a:7b:d6:4f:36:06:69:20:fa:a3:da:3f:67:ef:70: fc:9c:35:36:19:3d:bd:fc:f5:e7:9a:cc:d5:a4:db:9b:85:53: e0:c2:ee:17:48:fc:2e:76:c7:04:34:52:cc:52:cf:55:8c:8b: 6f:e1:af:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlQ/vradn6k705XKK281KKmhvr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNjA0MTYwMjQ3MzJaFw0yNjA0MTkxNDI1MzJaMDMxMTAvBgNV BAMTKDREQUFEN0E0QjM4OTU1NDYyQTZFODFFMzQwNUNDNkFFRDNBREE2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdWGS0CYX2GcMsv5unt/Kx9l97 gyrAkc+h0aLCFkTbSzhTRs5q//k3itt9UKs3CJZGdEVlwgrk35cnjgB1N9/QFUMl TlrVXwVKv/FMPJM9n0iW27M5afHsGGD8d0pfTDtpg7sCCtmAo+biV5l+1EFI1Y6B Lvpp2krIz58+IKaAE4RxRWaNsQy5uN1xVhnzerN/dADKJ1eYIz/bCCTCZsZ4enL6 a9YUvyNkh2TzSZZnRIZATqV6Ist9KkLMW2DsFC8gSaHbOueTyk8zFy+yIFxrF85m Y5/n5JM1ggLPKHCA+fVKicXwe1G78EoOaTSvptArUvSLu0yE0NCvv9hJCa1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTarXpLOJVUYqboHjQFzGrtOtpgcwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGS8FT2AtjYz3j7xkhNKrvXQWDOaLhLct4f iwEZpP/AXAzNVcsLU5vvH8TlTUXm2YH2YwiifC1ZiYJTJ2iQRcmYnI0OJpfGCWXu KzLBJIpTbT2NQBJNRUbpOaNhuhJdfPr7NzIcjLkklRqJnmb/s2BvBL51HebQ/nL/ FIBzd2Oo5VaDHBcmEH1UPeuzbPkUV9NZsPYZYnU+POsBOEjdDqU1bENYiiDjUY09 dB24THbOHt3Uz2f3H/xSr5cDyrZ9xFV89KtCN4g9MVp71k82Bmkg+qPaP2fvcPyc NTYZPb389eeazNWk25uFU+DC7hdI/C52xwQ0UsxSz1WMi2/hr5s= -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:55 2026 by rpki-client