$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: aGyavQ2Mq4lNbfhAzCkg7xjYE+x2uZYjjOda8JB3CVM= Subject key identifier: 5C:75:65:D7:66:11:88:D3:F2:0D:05:3B:85:09:6A:25:C4:47:65:77 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 350F2E30DE6F8E3F5578C82F809DE91409AFF211 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 013C Signing time: Thu 16 Apr 2026 08:52:37 +0000 Manifest this update: Thu 16 Apr 2026 08:47:37 +0000 Manifest next update: Sun 19 Apr 2026 12:31:37 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: L6yR+ECBgIv94Sn3neUQOB8VgOGvJLN/lHdTcxQWSZw=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: VrbRBoxOLArpkrqv0CgqRXIbC24YLbBmO0Yj8Vtecy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0f:2e:30:de:6f:8e:3f:55:78:c8:2f:80:9d:e9:14:09:af:f2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Apr 16 08:47:37 2026 GMT Not After : Apr 19 12:31:37 2026 GMT Subject: CN=5C7565D7661188D3F20D053B85096A25C4476577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a3:b5:79:0c:e9:63:82:1b:8d:09:ec:2c:73: 54:7c:0f:4f:d3:cc:63:62:4c:81:6f:94:0e:e2:9c: f9:09:0e:1e:b5:af:94:fb:b6:e1:5d:70:ab:77:29: 22:3b:fd:3b:f4:2e:b5:ac:18:91:09:f0:c3:7f:98: 95:8e:a5:5e:0e:40:e0:63:c0:ba:0f:91:bd:a9:44: 8d:66:bf:80:bc:63:6f:86:ea:79:d9:06:46:17:db: 4e:1d:62:d2:0d:82:20:26:ac:6e:5d:55:63:02:97: 30:ae:3e:31:de:8f:b0:62:bc:51:9d:64:1c:d5:c3: 48:8e:a5:b8:d1:0e:fa:07:fc:17:9b:74:38:fa:a3: d2:c9:ec:4e:a7:0f:e3:24:16:5d:72:15:54:65:1f: 4d:06:3f:5a:14:7c:0f:b9:b2:fe:d3:38:c1:45:8e: 6a:c7:73:ba:35:c3:af:82:93:37:e2:88:10:1e:36: 2b:eb:4c:bd:97:c2:8a:06:64:a0:49:99:d9:94:49: 96:82:73:4b:c0:a8:fa:93:79:99:ed:d4:12:d0:35: 1e:1a:7a:50:a9:26:e3:89:d5:ec:bd:da:fd:a5:d2: b3:e5:be:a2:32:72:7c:0e:84:d7:45:91:9f:25:37: 38:31:b8:9e:2b:e7:29:1d:25:a7:3d:29:2f:15:a0: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:75:65:D7:66:11:88:D3:F2:0D:05:3B:85:09:6A:25:C4:47:65:77 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:28:51:05:61:30:5b:f2:ba:f2:40:60:ca:e3:35:0c:c7:1c: b0:90:a5:37:09:10:40:7d:72:1c:fb:dc:ca:64:f5:ed:97:93: 13:50:6a:6e:f9:98:db:e7:5a:54:f5:47:9e:31:4d:cc:51:23: 3b:f3:6d:c8:4c:5c:4f:aa:b9:12:22:dd:05:5e:f2:c2:9a:b2: 19:08:eb:90:18:9c:ee:40:17:f7:10:e9:c2:fc:61:85:e4:fb: 8b:5d:a3:bc:a6:21:1f:d2:ef:36:e4:ab:bf:fb:12:68:ad:57: 24:b7:a8:5a:e8:f5:35:31:86:f8:de:52:a2:d3:f0:6a:d1:26: 8b:8c:13:9f:d0:bc:4a:ed:31:86:e7:9c:e6:5b:16:b4:cd:80: e3:ed:9b:5c:97:a4:c5:da:4f:6a:57:74:b7:0a:a5:5a:d1:6e: c6:db:35:cd:66:e5:05:fe:50:03:64:01:d2:fd:fb:f0:80:2f: 7e:a9:b3:6c:ad:32:8e:19:67:20:fc:7d:1b:60:21:05:a8:d0: 10:00:52:42:2c:83:c8:c6:3e:5c:1c:cb:ce:8e:a3:ce:77:1d: 4b:7d:6a:5d:da:74:7e:8b:99:e1:34:30:69:64:35:b5:68:9f: 76:39:91:62:e7:9f:36:0c:01:27:6f:9e:cc:cc:82:1b:55:a2: 89:c2:63:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQ8uMN5vjj9VeMgvgJ3pFAmv8hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNjA0MTYwODQ3MzdaFw0yNjA0MTkxMjMxMzdaMDMxMTAvBgNV BAMTKDVDNzU2NUQ3NjYxMTg4RDNGMjBEMDUzQjg1MDk2QTI1QzQ0NzY1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuo7V5DOljghuNCewsc1R8D0/T zGNiTIFvlA7inPkJDh61r5T7tuFdcKt3KSI7/Tv0LrWsGJEJ8MN/mJWOpV4OQOBj wLoPkb2pRI1mv4C8Y2+G6nnZBkYX204dYtINgiAmrG5dVWMClzCuPjHej7BivFGd ZBzVw0iOpbjRDvoH/BebdDj6o9LJ7E6nD+MkFl1yFVRlH00GP1oUfA+5sv7TOMFF jmrHc7o1w6+CkzfiiBAeNivrTL2XwooGZKBJmdmUSZaCc0vAqPqTeZnt1BLQNR4a elCpJuOJ1ey92v2l0rPlvqIycnwOhNdFkZ8lNzgxuJ4r5ykdJac9KS8VoG8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXHVl12YRiNPyDQU7hQlqJcRHZXcwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIoUQVhMFvyuvJAYMrjNQzHHLCQpTcJEEB9 chz73Mpk9e2XkxNQam75mNvnWlT1R54xTcxRIzvzbchMXE+quRIi3QVe8sKashkI 65AYnO5AF/cQ6cL8YYXk+4tdo7ymIR/S7zbkq7/7EmitVyS3qFro9TUxhvjeUqLT 8GrRJouME5/QvErtMYbnnOZbFrTNgOPtm1yXpMXaT2pXdLcKpVrRbsbbNc1m5QX+ UANkAdL9+/CAL36ps2ytMo4ZZyD8fRtgIQWo0BAAUkIsg8jGPlwcy86Oo853HUt9 al3adH6LmeE0MGlkNbVon3Y5kWLnnzYMASdvnszMghtVoonCYyM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:26 2026 by rpki-client