$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: j+oDAKqHjzbl8XltvrOadu5pXe/8khvgQ+mR3tmStQI= Subject key identifier: 16:F3:3B:44:6E:E3:9D:26:C7:F8:79:92:D6:E1:5D:8F:60:0A:6D:0C Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 406BC9A08214D2C2C637166A45F7AE3A40A13F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 0229 Signing time: Sat 18 Apr 2026 06:11:51 +0000 Manifest this update: Sat 18 Apr 2026 06:06:51 +0000 Manifest next update: Tue 21 Apr 2026 13:41:51 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 2: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: JfzKbwFxj/SGy1czUx0MvEknN4T4UTte9VwG+RCjQNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6b:c9:a0:82:14:d2:c2:c6:37:16:6a:45:f7:ae:3a:40:a1:3f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Apr 18 06:06:51 2026 GMT Not After : Apr 21 13:41:51 2026 GMT Subject: CN=16F33B446EE39D26C7F87992D6E15D8F600A6D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:f2:00:52:99:99:75:8c:fc:af:6d:ea:31: fa:01:90:4a:0d:bf:93:92:64:66:57:ef:50:a3:90: 38:b8:5e:b8:ff:c1:1f:63:5b:d9:f7:d1:b1:60:a9: c4:53:6f:c9:f6:20:9b:98:59:df:c9:25:d2:11:13: 1a:1d:65:d9:c9:ba:4d:c6:5f:4b:43:58:65:ee:12: 54:59:34:80:b1:a3:4a:12:30:4b:50:19:a3:2f:d1: 6e:79:fc:92:47:cc:78:e5:75:64:2e:96:4b:3f:57: 8c:65:77:f9:79:17:c3:19:a7:d1:1f:82:2d:83:43: 71:ee:ba:8c:2d:43:83:16:0c:90:a6:2b:d0:27:e7: e7:b9:1e:51:63:e3:8b:d8:91:34:0c:ae:17:8c:9e: 98:02:b6:bf:5f:06:59:a4:77:d0:4b:dd:ca:ca:ef: 38:b0:de:65:5c:48:98:ef:cc:df:ca:cd:73:dd:5f: 34:c3:3b:0e:47:3a:6f:21:a8:6e:0c:ee:58:6c:ea: a9:ab:2e:25:3e:31:95:fa:c3:5c:f0:16:ae:20:b9: 8e:8b:0e:cb:67:96:d3:1a:41:5e:5b:8d:b5:78:b9: d2:13:e9:07:7d:e0:a8:b6:9e:70:00:99:9b:80:5c: 41:71:68:ef:ee:8d:44:8b:73:e7:12:79:06:fe:12: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:3B:44:6E:E3:9D:26:C7:F8:79:92:D6:E1:5D:8F:60:0A:6D:0C X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:a6:d9:b1:00:f3:b7:bb:45:85:ce:3f:9b:17:49:2a:a1: fd:10:b1:b0:68:c0:a2:37:41:78:90:e6:bc:e9:28:11:ea:d9: ad:07:e9:2e:2e:f0:76:64:e9:08:75:a6:61:cc:16:fc:5a:ea: b9:e6:e6:2a:97:44:3e:61:03:9d:56:d1:5c:28:29:c2:bc:fa: e7:32:29:57:37:4d:cd:8f:ee:e8:9e:e3:e6:a6:6d:31:20:ae: df:83:bc:10:39:73:2a:a6:c2:6c:fe:2e:38:4e:52:bd:9a:24: a6:b9:81:a3:a1:0d:31:0a:c5:85:be:ed:6e:18:b5:eb:0d:67: f5:fd:fd:35:fe:17:e2:bf:71:14:b0:71:33:26:11:64:51:08: d4:3c:97:45:c6:01:db:2d:1f:44:eb:ba:ea:fc:13:18:d3:df: f4:d9:52:14:86:99:d1:b9:4d:45:af:0f:c9:bc:95:d7:f0:fb: 74:8e:98:13:b5:1a:42:02:85:13:9f:c9:04:89:f7:1b:bd:a7: 83:75:7e:7a:55:97:21:38:79:32:85:fd:0d:b8:f5:b3:94:27: a9:e5:39:da:f9:5f:9c:f7:8e:c8:c2:9c:af:49:98:eb:20:65: 42:47:c4:d1:71:86:5c:ab:86:a0:c3:b4:95:c6:cc:95:5a:c0: 60:6a:c1:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGvJoIIU0sLGNxZqRfeuOkChPxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNjA0MTgwNjA2NTFaFw0yNjA0MjExMzQxNTFaMDMxMTAvBgNV BAMTKDE2RjMzQjQ0NkVFMzlEMjZDN0Y4Nzk5MkQ2RTE1RDhGNjAwQTZEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuN/IAUpmZdYz8r23qMfoBkEoN v5OSZGZX71CjkDi4Xrj/wR9jW9n30bFgqcRTb8n2IJuYWd/JJdIRExodZdnJuk3G X0tDWGXuElRZNICxo0oSMEtQGaMv0W55/JJHzHjldWQulks/V4xld/l5F8MZp9Ef gi2DQ3HuuowtQ4MWDJCmK9An5+e5HlFj44vYkTQMrheMnpgCtr9fBlmkd9BL3crK 7ziw3mVcSJjvzN/KzXPdXzTDOw5HOm8hqG4M7lhs6qmrLiU+MZX6w1zwFq4guY6L DstnltMaQV5bjbV4udIT6Qd94Ki2nnAAmZuAXEFxaO/ujUSLc+cSeQb+Ej+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvM7RG7jnSbH+HmS1uFdj2AKbQwwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/WptmxAPO3u0WFzj+bF0kqof0QsbBowKI3 QXiQ5rzpKBHq2a0H6S4u8HZk6Qh1pmHMFvxa6rnm5iqXRD5hA51W0VwoKcK8+ucy KVc3Tc2P7uie4+ambTEgrt+DvBA5cyqmwmz+LjhOUr2aJKa5gaOhDTEKxYW+7W4Y tesNZ/X9/TX+F+K/cRSwcTMmEWRRCNQ8l0XGAdstH0Truur8ExjT3/TZUhSGmdG5 TUWvD8m8ldfw+3SOmBO1GkIChROfyQSJ9xu9p4N1fnpVlyE4eTKF/Q249bOUJ6nl Odr5X5z3jsjCnK9JmOsgZUJHxNFxhlyrhqDDtJXGzJVawGBqwQY= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:35 2026 by rpki-client