$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: EdjHsbHnV/NrAByDq4ZOzqor2cMCQfb4h2WQ0gcCurM= Subject key identifier: 60:F9:B1:34:CC:CF:98:E9:E3:03:F3:6B:DD:8F:DF:FB:0D:EF:93:88 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 67C6F10181FE8649955F793A8A241E66833B8EDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 02A7 Signing time: Thu 16 Apr 2026 20:32:14 +0000 Manifest this update: Thu 16 Apr 2026 20:27:14 +0000 Manifest next update: Mon 20 Apr 2026 08:27:14 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: xBZeti0SeMiekjaS83WNaYRLSKgohyteP1H1OgNpi/g=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: 2lTJuwgktOu4lo9SNeOCA4rDFu8XBUgqcawUv+9j6hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c6:f1:01:81:fe:86:49:95:5f:79:3a:8a:24:1e:66:83:3b:8e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Apr 16 20:27:14 2026 GMT Not After : Apr 20 08:27:14 2026 GMT Subject: CN=60F9B134CCCF98E9E303F36BDD8FDFFB0DEF9388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:ce:a2:8d:a0:b3:b6:7f:3e:5f:79:88:36: dc:f3:22:4d:8f:86:0a:19:84:02:f3:ac:33:4b:4c: 42:25:76:e0:52:49:3f:bd:f9:76:b9:d9:5c:5f:30: a8:e9:91:80:90:47:f2:45:9e:f3:39:f1:df:4f:1a: 7b:ce:54:5e:72:0e:0b:65:d1:1a:8b:0c:a4:79:a4: 7c:aa:4d:8f:ef:a1:eb:b6:ff:cf:6f:4c:6a:03:8b: d1:2b:74:88:f5:4b:1a:87:c9:5d:60:9b:55:d6:19: 67:86:fa:d1:39:7d:5b:e5:39:d0:a4:0c:b2:ee:d8: 68:ca:da:ee:69:f4:49:f8:e1:e1:e0:a2:65:aa:a8: e0:77:f0:c0:08:50:3c:08:8c:02:9f:15:f8:99:6c: b7:8a:8a:61:bf:af:f9:4d:3a:25:68:4f:d9:27:0e: fe:bf:14:e7:52:37:4a:8c:63:40:d8:b5:cf:9d:cb: 7b:3d:c0:d2:28:21:2f:49:3c:be:fb:89:62:4b:5b: 47:a6:55:bc:10:ed:a0:f5:ce:e7:5b:59:34:d8:9c: b5:81:09:0b:b1:2e:3b:13:52:a5:47:c9:66:67:e9: b3:46:93:0c:99:64:da:ab:31:e9:7d:22:46:18:59: 35:05:02:48:61:89:a8:0b:e4:ff:aa:21:e7:80:e6: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F9:B1:34:CC:CF:98:E9:E3:03:F3:6B:DD:8F:DF:FB:0D:EF:93:88 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:f7:d1:fa:e3:7f:ff:b0:72:cd:b2:75:6c:21:51:8e:8d: ed:3d:79:c2:e4:64:7f:d4:b3:20:9c:dd:64:93:bd:5a:f8:f0: 7b:be:4d:9b:cd:27:31:1e:03:45:2f:eb:1c:95:3b:b0:ac:b9: b1:6c:ac:2b:0b:85:ec:48:08:9d:38:86:91:a7:08:5d:45:c3: 14:a6:1e:4e:eb:53:77:f6:cd:f4:37:41:8b:d8:e6:e5:8b:39: b3:83:d1:8e:29:4f:ea:f1:43:e2:00:9e:72:b9:a3:b0:f3:33: 3f:ad:6d:f3:18:de:4f:c5:46:49:4d:a9:f1:ed:ac:2b:a1:48: 48:72:89:51:4d:e6:e6:5d:8a:1a:b2:c8:54:d6:92:1d:43:06: 9f:99:a7:d4:3d:87:3e:60:71:28:c4:f1:e1:fe:ac:b5:2c:08: 7c:b6:15:37:ba:f9:19:25:07:7a:25:6c:30:6d:e4:0c:72:04: 05:a8:a2:49:f7:57:db:ba:dd:7d:50:b1:94:54:44:07:ff:27: d7:19:65:22:eb:7a:4e:74:3a:58:97:ac:fb:81:14:2a:a6:6d: fe:5c:fd:e1:7b:a0:97:23:04:2c:4b:c7:1a:6f:ca:36:cc:72: be:80:98:6a:a0:b9:b1:60:ca:21:c1:87:9a:7d:d8:79:52:ff: 14:b3:66:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8bxAYH+hkmVX3k6iiQeZoM7jtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNjA0MTYyMDI3MTRaFw0yNjA0MjAwODI3MTRaMDMxMTAvBgNV BAMTKDYwRjlCMTM0Q0NDRjk4RTlFMzAzRjM2QkREOEZERkZCMERFRjkzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK86ijaCztn8+X3mINtzzIk2P hgoZhALzrDNLTEIlduBSST+9+Xa52VxfMKjpkYCQR/JFnvM58d9PGnvOVF5yDgtl 0RqLDKR5pHyqTY/voeu2/89vTGoDi9ErdIj1SxqHyV1gm1XWGWeG+tE5fVvlOdCk DLLu2GjK2u5p9En44eHgomWqqOB38MAIUDwIjAKfFfiZbLeKimG/r/lNOiVoT9kn Dv6/FOdSN0qMY0DYtc+dy3s9wNIoIS9JPL77iWJLW0emVbwQ7aD1zudbWTTYnLWB CQuxLjsTUqVHyWZn6bNGkwyZZNqrMel9IkYYWTUFAkhhiagL5P+qIeeA5h+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPmxNMzPmOnjA/Nr3Y/f+w3vk4gwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAY99H643//sHLNsnVsIVGOje09ecLkZH/U syCc3WSTvVr48Hu+TZvNJzEeA0Uv6xyVO7CsubFsrCsLhexICJ04hpGnCF1FwxSm Hk7rU3f2zfQ3QYvY5uWLObOD0Y4pT+rxQ+IAnnK5o7DzMz+tbfMY3k/FRklNqfHt rCuhSEhyiVFN5uZdihqyyFTWkh1DBp+Zp9Q9hz5gcSjE8eH+rLUsCHy2FTe6+Rkl B3olbDBt5AxyBAWookn3V9u63X1QsZRURAf/J9cZZSLrek50OliXrPuBFCqmbf5c /eF7oJcjBCxLxxpvyjbMcr6AmGqgubFgyiHBh5p92HlS/xSzZpU= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:06 2026 by rpki-client