$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: NS3TcYBII3MmVsQjiE30iC+YQ3N9PctTpgOeZZiMZ90= Subject key identifier: AF:98:AF:94:8B:9D:3F:D0:ED:C0:57:54:51:1B:AE:D9:BE:1A:46:2E Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 571CB52EFB19669CCC3025C5786823D3C5F8FB5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01DD Signing time: Sat 18 Apr 2026 16:21:51 +0000 Manifest this update: Sat 18 Apr 2026 16:16:51 +0000 Manifest next update: Wed 22 Apr 2026 00:15:51 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: H89QAHwjeCdt3OZvmJIjzp3dGqvFlDBJT3SSFJzw+Vc=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: bOMw2z/DqljmPFskG2vsYIuUCGDr+Iq+bzXjTNV2cFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 00:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1c:b5:2e:fb:19:66:9c:cc:30:25:c5:78:68:23:d3:c5:f8:fb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Apr 18 16:16:51 2026 GMT Not After : Apr 22 00:15:51 2026 GMT Subject: CN=AF98AF948B9D3FD0EDC05754511BAED9BE1A462E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:cb:12:79:20:c7:20:95:0b:af:60:f3:e9: 45:35:fb:6e:31:d7:0c:cc:bf:60:f1:37:0e:50:6f: e1:1c:fb:15:c4:6d:db:68:72:0f:81:bf:90:a4:01: fb:47:18:cc:b8:e7:36:35:78:93:81:6d:1b:d2:27: 9f:b0:74:34:5c:24:f8:75:de:a0:0c:09:7d:31:4a: 33:0c:5d:f4:fc:a2:53:08:b6:66:04:84:bf:d7:9f: c9:53:5f:f2:15:67:f5:16:2a:18:44:33:3f:a5:8b: 73:13:4d:75:f9:f3:bf:91:e2:12:93:82:62:3e:71: 0c:ca:c1:a7:35:3b:80:8f:e7:7a:ee:71:e3:4f:13: 55:35:69:ec:7b:a8:38:84:2f:6b:72:f3:7c:d4:9b: c3:7b:37:bb:57:4a:1f:01:1f:d4:14:1d:55:be:76: db:a3:7f:2c:fb:aa:28:86:31:e7:3c:a2:4c:e7:21: e9:6b:5f:90:49:94:cc:bf:70:c1:fc:38:d9:d6:bd: 73:a5:35:9d:f9:62:97:3c:2c:b7:df:40:4f:ad:89: 4a:2a:50:96:a7:7b:66:48:dd:67:55:9d:37:ce:c7: ba:a4:76:d6:b6:e0:b2:d5:bc:e9:11:65:1d:e7:c4: a8:fa:e0:b2:20:ea:76:c7:a9:4e:50:25:b1:36:47: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:AF:94:8B:9D:3F:D0:ED:C0:57:54:51:1B:AE:D9:BE:1A:46:2E X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:18:0d:d5:d4:bb:3f:ed:f0:5d:12:ea:b1:d5:12:eb:9a:fb: ad:0a:ad:0c:39:48:a8:a1:11:62:1b:eb:33:9e:85:ee:2f:e0: 97:e8:df:c7:6c:1b:f5:82:2e:63:9a:b5:39:bb:a5:78:aa:9a: 74:63:9f:65:c7:a3:93:34:50:1c:fe:93:06:ee:ad:4e:14:88: 9b:56:bf:20:49:be:0b:c2:1d:09:33:e7:3c:b8:30:7b:66:c5: 5b:80:ca:23:92:4e:11:da:db:ce:2e:ee:33:72:fc:c2:91:46: 4e:49:10:51:bb:1b:4b:89:81:ba:71:93:98:ef:41:13:89:da: a0:04:cd:f6:e8:81:9e:7d:72:5f:bb:f9:d5:a8:ca:96:81:44: 24:1a:ea:ca:cc:05:93:d7:dc:62:05:f3:d8:23:93:36:95:e3: 61:b8:9b:47:80:2f:ec:be:d5:6b:4a:ec:29:0b:00:42:80:e0: 8f:bd:56:17:fc:3f:2c:86:72:f7:c4:be:ea:18:6e:d2:69:f6: 11:68:d4:1a:71:d3:89:fa:88:f7:15:b1:95:95:44:0d:13:8a: c9:50:31:1d:6a:59:a6:9a:eb:7a:62:94:30:72:8c:6a:25:21: 5c:ba:7e:0f:60:bf:8b:ef:31:67:49:ab:65:f9:b6:03:e5:19: b6:ce:d5:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxy1LvsZZpzMMCXFeGgj08X4+18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjA0MTgxNjE2NTFaFw0yNjA0MjIwMDE1NTFaMDMxMTAvBgNV BAMTKEFGOThBRjk0OEI5RDNGRDBFREMwNTc1NDUxMUJBRUQ5QkUxQTQ2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWssSeSDHIJULr2Dz6UU1+24x 1wzMv2DxNw5Qb+Ec+xXEbdtocg+Bv5CkAftHGMy45zY1eJOBbRvSJ5+wdDRcJPh1 3qAMCX0xSjMMXfT8olMItmYEhL/Xn8lTX/IVZ/UWKhhEMz+li3MTTXX587+R4hKT gmI+cQzKwac1O4CP53ruceNPE1U1aex7qDiEL2ty83zUm8N7N7tXSh8BH9QUHVW+ dtujfyz7qiiGMec8okznIelrX5BJlMy/cMH8ONnWvXOlNZ35Ypc8LLffQE+tiUoq UJane2ZI3WdVnTfOx7qkdta24LLVvOkRZR3nxKj64LIg6nbHqU5QJbE2RxgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5ivlIudP9DtwFdUURuu2b4aRi4wHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMYDdXUuz/t8F0S6rHVEuua+60KrQw5SKih EWIb6zOehe4v4Jfo38dsG/WCLmOatTm7pXiqmnRjn2XHo5M0UBz+kwburU4UiJtW vyBJvgvCHQkz5zy4MHtmxVuAyiOSThHa284u7jNy/MKRRk5JEFG7G0uJgbpxk5jv QROJ2qAEzfbogZ59cl+7+dWoypaBRCQa6srMBZPX3GIF89gjkzaV42G4m0eAL+y+ 1WtK7CkLAEKA4I+9Vhf8PyyGcvfEvuoYbtJp9hFo1Bpx04n6iPcVsZWVRA0TislQ MR1qWaaa63pilDByjGolIVy6fg9gv4vvMWdJq2X5tgPlGbbO1Wk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:20 2026 by rpki-client