$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: SN6YKL6YcdY9Nxz30tgRab6cGkVknd8aY7D73hxlokg= Subject key identifier: 72:06:1F:3B:26:3F:D4:CA:C8:70:D8:0F:30:73:2B:F7:0F:AE:26:2E Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 24AB261D92556B78A0F97992864CD84A3239EC32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04EC Signing time: Sun 19 Apr 2026 09:41:54 +0000 Manifest this update: Sun 19 Apr 2026 09:36:54 +0000 Manifest next update: Wed 22 Apr 2026 11:06:54 +0000 Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) 2: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: 5HRCN93TKoZdbKU/UoXrxesYGd9CGU1QSfmyZAR7k90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ab:26:1d:92:55:6b:78:a0:f9:79:92:86:4c:d8:4a:32:39:ec:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Apr 19 09:36:54 2026 GMT Not After : Apr 22 11:06:54 2026 GMT Subject: CN=72061F3B263FD4CAC870D80F30732BF70FAE262E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:d4:90:dd:94:c1:fa:3e:8a:aa:91:8d:26: 30:98:1b:b0:c4:31:c2:1a:6a:74:0c:d2:f4:2f:78: 08:d9:91:c0:c6:46:0f:c5:09:3c:db:de:8b:f7:c2: f0:39:ef:ca:e2:bb:23:eb:69:c7:c4:40:d4:ac:8b: 6f:be:4b:ca:ce:41:30:9e:93:95:ca:3b:79:98:64: 31:d3:b8:6a:fa:be:64:3e:75:3e:60:b7:76:ce:3a: 6a:34:13:a5:5b:d3:f8:8a:9a:0f:2e:63:2d:f4:d4: e5:5f:bf:63:f4:b8:e1:bb:ea:c9:c4:fc:ee:82:b5: 99:f5:1e:d8:bc:b2:e5:5e:d6:e4:c5:0f:36:9c:14: 77:d6:66:d2:17:6b:0a:80:e9:84:8e:19:3e:61:bb: 64:70:f6:d1:0d:b3:dc:16:62:91:99:56:d0:06:26: 2d:55:56:57:80:89:63:b9:39:46:43:a1:b7:6d:9f: e5:d3:23:8b:43:5c:ea:7d:4c:4c:45:7d:db:6c:9a: eb:cb:b4:ea:57:05:0b:95:8e:85:18:ee:f1:28:c5: c2:31:4a:d0:9f:89:58:bf:11:fc:ad:01:18:0a:8b: d1:42:ef:8c:cb:fd:f6:de:c2:a7:f6:b4:e8:f6:87: b9:8e:98:fc:93:53:1e:c4:4a:6d:bf:d2:91:6c:98: 3e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:1F:3B:26:3F:D4:CA:C8:70:D8:0F:30:73:2B:F7:0F:AE:26:2E X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:86:a9:ba:d2:59:7c:ce:51:6b:09:50:9c:f4:4e:e4:b3: 4a:3a:1c:2a:39:d1:78:dd:49:d0:cf:75:7f:be:7c:8c:5c:03: 0a:d5:5f:32:78:41:4d:ea:13:6e:74:d5:67:77:1c:d6:ce:f3: f6:a2:a8:e1:0a:08:7e:d7:9f:d2:38:05:89:e7:f2:b2:54:1b: 11:63:c5:8f:ee:f4:77:15:d4:a4:a1:e2:f5:be:8b:fa:91:21: a0:5f:5e:cf:eb:b9:43:54:9c:25:3c:87:3f:b4:10:30:a5:55: 1e:ac:ac:4d:83:3c:31:20:74:08:42:6b:45:05:4c:92:08:03: cc:b2:67:68:0d:dd:77:64:52:f4:4e:cd:35:35:7d:85:ad:77: 04:e7:0c:b4:33:c2:c7:ac:75:b7:63:a2:4d:be:ae:9b:27:08: 41:bf:d1:00:8f:2b:8c:eb:69:07:c7:2a:49:2b:79:08:ae:9a: 2a:91:a3:5a:b1:8c:6d:d9:ae:73:33:d7:87:85:81:67:d6:cd: 3d:72:35:69:af:eb:5b:55:ea:c2:31:50:0e:a4:41:0c:9d:89: 45:f1:e6:7c:99:0b:bd:d5:fd:3f:31:9c:2c:b8:f1:f1:46:52: 01:13:d8:de:53:37:b0:90:26:70:fa:2c:80:b1:cc:a6:e0:8c: ca:4a:5c:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKsmHZJVa3ig+XmShkzYSjI57DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNjA0MTkwOTM2NTRaFw0yNjA0MjIxMTA2NTRaMDMxMTAvBgNV BAMTKDcyMDYxRjNCMjYzRkQ0Q0FDODcwRDgwRjMwNzMyQkY3MEZBRTI2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27dSQ3ZTB+j6KqpGNJjCYG7DE McIaanQM0vQveAjZkcDGRg/FCTzb3ov3wvA578riuyPracfEQNSsi2++S8rOQTCe k5XKO3mYZDHTuGr6vmQ+dT5gt3bOOmo0E6Vb0/iKmg8uYy301OVfv2P0uOG76snE /O6CtZn1Hti8suVe1uTFDzacFHfWZtIXawqA6YSOGT5hu2Rw9tENs9wWYpGZVtAG Ji1VVleAiWO5OUZDobdtn+XTI4tDXOp9TExFfdtsmuvLtOpXBQuVjoUY7vEoxcIx StCfiVi/EfytARgKi9FC74zL/fbewqf2tOj2h7mOmPyTUx7ESm2/0pFsmD6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcgYfOyY/1MrIcNgPMHMr9w+uJi4wHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUBhqm60ll8zlFrCVCc9E7ks0o6HCo50Xjd SdDPdX++fIxcAwrVXzJ4QU3qE2501Wd3HNbO8/aiqOEKCH7Xn9I4BYnn8rJUGxFj xY/u9HcV1KSh4vW+i/qRIaBfXs/ruUNUnCU8hz+0EDClVR6srE2DPDEgdAhCa0UF TJIIA8yyZ2gN3XdkUvROzTU1fYWtdwTnDLQzwsesdbdjok2+rpsnCEG/0QCPK4zr aQfHKkkreQiumiqRo1qxjG3ZrnMz14eFgWfWzT1yNWmv61tV6sIxUA6kQQydiUXx 5nyZC73V/T8xnCy48fFGUgET2N5TN7CQJnD6LICxzKbgjMpKXBk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:49 2026 by rpki-client