$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: +DmfnVKUQBVtf0+J0wNIdujGdjtEv5mxCZrD+b8y5ss= Subject key identifier: 54:38:2E:D7:C2:6A:81:15:52:3E:93:30:51:5F:E9:20:4B:35:4E:62 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 308ECF720EDBCE13035167F7E913197F03452531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 056B Signing time: Fri 17 Apr 2026 05:32:43 +0000 Manifest this update: Fri 17 Apr 2026 05:27:43 +0000 Manifest next update: Mon 20 Apr 2026 09:09:43 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: iz3/coytGP3gWVcM+G4vSHZMO1Cp+mg1bkoxCnag5bE=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8e:cf:72:0e:db:ce:13:03:51:67:f7:e9:13:19:7f:03:45:25:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Apr 17 05:27:43 2026 GMT Not After : Apr 20 09:09:43 2026 GMT Subject: CN=54382ED7C26A8115523E9330515FE9204B354E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:c3:f2:94:a9:c1:6d:0a:b7:28:b3:46:5d: e3:72:6d:0c:c9:09:47:0d:ee:10:9d:fb:33:d9:ab: 26:4f:13:11:90:0b:3a:0d:dd:f7:4e:05:0a:18:e7: 4f:5e:ab:38:77:a2:62:4f:1c:44:da:13:f6:72:12: 8c:d3:38:40:ce:fa:1e:d8:8a:b7:8d:68:e7:af:1d: 0e:ed:e4:33:db:fb:d4:56:e3:2c:10:49:a2:8a:02: f8:bd:f0:07:0f:bc:3a:e1:06:dc:f8:73:5d:e9:af: c3:d6:a3:7d:c1:78:8d:64:bc:c0:92:e1:c1:36:b0: e5:3f:22:03:50:14:65:79:ac:4c:6c:9d:ec:2c:fb: 56:70:4c:70:27:67:88:c7:74:c1:04:7d:f9:e6:7b: 24:e5:e0:68:5a:62:67:c6:8c:e4:8e:28:6f:0f:b0: 48:32:8f:43:03:03:23:0e:4d:8d:ae:ac:36:85:54: aa:c1:8b:d5:93:f0:04:eb:4c:77:04:61:8c:b7:e6: 18:b0:5d:f8:17:c7:d2:b5:af:dc:b2:60:c0:a2:03: 46:97:20:6c:69:6b:39:c2:47:1e:26:85:72:b9:a4: 36:fd:bf:88:4c:8a:3a:2f:9a:c7:58:e7:84:62:a0: b4:95:f1:e6:91:09:8e:26:08:03:6b:30:fd:75:33: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:2E:D7:C2:6A:81:15:52:3E:93:30:51:5F:E9:20:4B:35:4E:62 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:81:9d:59:39:8b:ae:10:39:98:c0:c6:72:f5:81:fc:5e:3b: 83:1c:e4:b5:1f:1f:ff:14:c2:89:89:f7:ce:73:9a:4d:86:23: 83:d2:c8:7b:34:6e:56:16:5c:95:5e:b5:0c:46:d2:3e:df:e9: 50:68:b9:43:bf:17:bc:a7:a1:d1:b6:01:15:4e:04:c7:5f:cd: e9:fa:b0:f0:0b:72:07:17:e0:8b:88:73:b6:e3:1a:42:64:f5: 5d:2d:72:09:78:b5:54:81:ef:c8:3f:fa:d2:bb:54:4c:e5:2a: 3c:31:08:da:aa:5d:ff:15:0d:82:56:f4:02:35:59:84:80:08: dd:1d:d8:ce:69:74:d1:a8:18:30:80:9d:fc:69:e2:27:73:89: d9:60:b0:4a:a1:54:97:14:68:95:f1:e5:1b:e7:f0:0b:fd:94: 7c:a6:4d:05:6a:0b:93:81:3d:88:e5:cf:06:f4:e2:4a:d2:e2: 02:25:6d:a2:00:30:e1:14:89:97:78:fc:cb:77:f3:d3:3c:c0: 14:c9:ac:4d:ba:ec:c9:74:6b:3f:39:6a:f7:36:f9:0b:b8:d2: 4f:c8:58:3c:ba:d9:17:c1:3d:f0:6d:a6:b5:93:65:bd:ef:8d: 8a:b5:a1:8a:ea:be:eb:1a:85:4b:37:b6:a1:b3:49:9f:80:17: 80:68:fc:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMI7Pcg7bzhMDUWf36RMZfwNFJTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNjA0MTcwNTI3NDNaFw0yNjA0MjAwOTA5NDNaMDMxMTAvBgNV BAMTKDU0MzgyRUQ3QzI2QTgxMTU1MjNFOTMzMDUxNUZFOTIwNEIzNTRFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrdcPylKnBbQq3KLNGXeNybQzJ CUcN7hCd+zPZqyZPExGQCzoN3fdOBQoY509eqzh3omJPHETaE/ZyEozTOEDO+h7Y ireNaOevHQ7t5DPb+9RW4ywQSaKKAvi98AcPvDrhBtz4c13pr8PWo33BeI1kvMCS 4cE2sOU/IgNQFGV5rExsnews+1ZwTHAnZ4jHdMEEffnmeyTl4GhaYmfGjOSOKG8P sEgyj0MDAyMOTY2urDaFVKrBi9WT8ATrTHcEYYy35hiwXfgXx9K1r9yyYMCiA0aX IGxpaznCRx4mhXK5pDb9v4hMijovmsdY54RioLSV8eaRCY4mCANrMP11MyfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVDgu18JqgRVSPpMwUV/pIEs1TmIwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGBnVk5i64QOZjAxnL1gfxeO4Mc5LUfH/8U womJ985zmk2GI4PSyHs0blYWXJVetQxG0j7f6VBouUO/F7ynodG2ARVOBMdfzen6 sPALcgcX4IuIc7bjGkJk9V0tcgl4tVSB78g/+tK7VEzlKjwxCNqqXf8VDYJW9AI1 WYSACN0d2M5pdNGoGDCAnfxp4idzidlgsEqhVJcUaJXx5Rvn8Av9lHymTQVqC5OB PYjlzwb04krS4gIlbaIAMOEUiZd4/Mt389M8wBTJrE267Ml0az85avc2+Qu40k/I WDy62RfBPfBtprWTZb3vjYq1oYrqvusahUs3tqGzSZ+AF4Bo/NQ= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:40 2026 by rpki-client