$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: Wv+N4ugoX2HRBYoK7rKhSmOWtOm4PVBB2G/iTJbduJc= Subject key identifier: 36:7C:5A:D8:8C:33:A5:50:3D:62:2F:CC:81:32:E0:AF:EC:B6:88:4D Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 27904BCDE72D410E7CFCC96948F56B96602FF0DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 034B Signing time: Thu 16 Apr 2026 12:22:32 +0000 Manifest this update: Thu 16 Apr 2026 12:17:32 +0000 Manifest next update: Sun 19 Apr 2026 20:13:32 +0000 Files and hashes: 1: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) 2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 3: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: 3B+ZMmvZMpLxxmkRegxV5TNCP/+s4aAbJ6H5Nzna5CQ=) 4: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:90:4b:cd:e7:2d:41:0e:7c:fc:c9:69:48:f5:6b:96:60:2f:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Apr 16 12:17:32 2026 GMT Not After : Apr 19 20:13:32 2026 GMT Subject: CN=367C5AD88C33A5503D622FCC8132E0AFECB6884D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:e3:8a:a1:0c:0c:06:2c:24:ae:cf:2f:e2: 9d:7a:81:55:f6:2c:c3:2e:0f:f2:4d:76:68:96:64: 08:f1:fc:b9:b9:21:e1:e1:0b:3e:e1:0a:3a:27:fb: 52:46:11:60:20:37:55:de:95:66:c1:c0:ab:2c:9c: 5b:26:92:63:20:8d:18:be:0d:df:02:40:41:fd:bb: 51:1c:5d:91:a3:fc:57:98:c1:14:72:95:ba:c6:72: da:f9:5d:ba:b3:52:0a:c5:73:77:c9:7c:8b:bb:46: 6b:c8:2e:dd:9c:19:ad:ea:16:44:20:b2:c8:d7:0f: 03:0c:5b:9b:69:8a:59:f7:3c:a1:b1:79:40:21:cb: 8f:06:3e:db:b6:e3:72:0b:4b:91:11:53:bc:9a:26: ed:27:0f:a7:53:67:e3:04:79:e7:f6:a5:23:95:27: fc:fc:f5:58:7b:c1:fe:54:b9:b6:01:01:19:06:14: bd:d9:18:38:dc:f4:71:7d:03:12:b1:9d:3a:00:89: a4:8c:7e:48:12:89:7a:6b:ff:f6:e8:4a:50:c7:84: a2:22:7e:4b:a8:bb:aa:5f:2e:39:f2:41:e1:18:3e: d6:4f:cf:61:7b:b2:ce:c6:9a:40:0a:50:28:9a:c1: 24:32:10:61:f6:a7:57:ec:02:20:0d:76:fd:bc:e6: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:5A:D8:8C:33:A5:50:3D:62:2F:CC:81:32:E0:AF:EC:B6:88:4D X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3f:bd:9d:69:49:4b:4b:f5:4c:ad:63:51:fd:f4:2b:2f:05: 00:d9:0c:7c:80:94:2d:61:f1:85:c7:40:5e:61:69:84:eb:42: c1:52:a1:d4:ce:57:70:ca:11:9e:f3:57:cc:21:cb:f1:fb:d9: a5:73:dd:d6:fe:8c:35:0e:97:67:d8:f1:87:74:dd:c5:d5:a1: 2c:1b:80:17:0a:e4:ba:79:02:e2:ba:36:72:44:11:26:4d:f8: df:f9:ec:ba:96:ef:f8:5a:9e:51:27:3c:dd:f7:92:9b:9f:ff: b7:a7:70:0a:cd:08:0b:50:c2:37:a5:4f:3c:7d:ba:18:14:e8: 33:34:3d:d3:72:7c:1a:29:c9:c6:b1:1d:7d:1b:e6:54:d8:36: ec:c2:c2:e9:15:8c:03:b1:55:3f:fa:55:5d:cb:f5:68:8e:4f: e6:47:e7:d9:c0:ef:08:ee:b1:c8:9c:11:07:30:8b:5d:e1:45: 5e:c9:9b:4e:b3:9e:01:70:99:04:f9:30:0b:9a:34:0c:e7:31: 83:3f:78:11:dd:f2:5f:db:85:3e:1a:24:df:45:8d:b8:e4:04: a6:9c:6f:2a:aa:57:33:0d:05:2b:7c:37:e5:59:26:49:bc:13: 09:99:c6:d9:44:46:21:e0:f8:21:77:87:b0:dc:4f:5b:c3:97: 8f:6b:61:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5BLzectQQ58/MlpSPVrlmAv8NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNjA0MTYxMjE3MzJaFw0yNjA0MTkyMDEzMzJaMDMxMTAvBgNV BAMTKDM2N0M1QUQ4OEMzM0E1NTAzRDYyMkZDQzgxMzJFMEFGRUNCNjg4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUOOKoQwMBiwkrs8v4p16gVX2 LMMuD/JNdmiWZAjx/Lm5IeHhCz7hCjon+1JGEWAgN1XelWbBwKssnFsmkmMgjRi+ Dd8CQEH9u1EcXZGj/FeYwRRylbrGctr5XbqzUgrFc3fJfIu7RmvILt2cGa3qFkQg ssjXDwMMW5tpiln3PKGxeUAhy48GPtu243ILS5ERU7yaJu0nD6dTZ+MEeef2pSOV J/z89Vh7wf5UubYBARkGFL3ZGDjc9HF9AxKxnToAiaSMfkgSiXpr//boSlDHhKIi fkuou6pfLjnyQeEYPtZPz2F7ss7GmkAKUCiawSQyEGH2p1fsAiANdv285uj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnxa2IwzpVA9Yi/MgTLgr+y2iE0wHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk/vZ1pSUtL9UytY1H99CsvBQDZDHyAlC1h 8YXHQF5haYTrQsFSodTOV3DKEZ7zV8why/H72aVz3db+jDUOl2fY8Yd03cXVoSwb gBcK5Lp5AuK6NnJEESZN+N/57LqW7/hanlEnPN33kpuf/7encArNCAtQwjelTzx9 uhgU6DM0PdNyfBopycaxHX0b5lTYNuzCwukVjAOxVT/6VV3L9WiOT+ZH59nA7wju scicEQcwi13hRV7Jm06zngFwmQT5MAuaNAznMYM/eBHd8l/bhT4aJN9FjbjkBKac byqqVzMNBSt8N+VZJkm8EwmZxtlERiHg+CF3h7DcT1vDl49rYWY= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:16 2026 by rpki-client