$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: Py3hylKwmuXulBU7d5h83BfOdStJoeX345DVFCfp4NQ= Subject key identifier: 13:5B:26:DD:C7:7E:77:52:38:54:B5:96:AB:E7:9B:94:38:C2:C7:0E Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 0E10839D78407F02A170C165AB8E2BBBAE0F947B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 03DB Signing time: Fri 17 Apr 2026 23:52:29 +0000 Manifest this update: Fri 17 Apr 2026 23:47:29 +0000 Manifest next update: Tue 21 Apr 2026 09:22:29 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: rmXEqbAIBdqZ1QZkCeZrtaGpb9Ot072xdIfEgSdR3Yo=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: 2h/zl1juvkofo/QcmJFRBWvgW1NXonnpaWNe6DK05wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:10:83:9d:78:40:7f:02:a1:70:c1:65:ab:8e:2b:bb:ae:0f:94:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Apr 17 23:47:29 2026 GMT Not After : Apr 21 09:22:29 2026 GMT Subject: CN=135B26DDC77E77523854B596ABE79B9438C2C70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:aa:d2:39:59:c2:2b:8d:aa:4a:49:a5:41:a6: 25:16:f8:47:c9:e2:ed:dc:72:ae:4a:48:28:bc:23: df:5d:df:55:f2:83:4c:8c:e7:b3:96:ee:33:c2:ac: 25:33:b1:c3:99:74:8c:fa:59:b5:7a:4e:13:f3:bb: b2:ad:3f:0b:97:88:7e:0a:1c:f3:64:56:90:66:3e: 34:3f:d9:04:25:9b:be:8c:13:45:26:15:9d:2c:e2: 9d:6c:16:ce:ac:67:80:f3:fa:78:8d:06:62:4c:f3: ec:98:f3:04:7d:17:0c:f4:62:0f:33:32:85:73:04: ec:e1:c0:3a:fe:ec:c7:54:f0:51:0e:e6:66:45:1f: 54:61:dc:73:2e:81:18:85:f5:01:7d:a2:ba:55:9a: b2:bf:bd:27:8c:27:f7:f4:7f:93:88:5a:ef:75:a4: 51:de:1a:c9:0a:1d:97:5f:f5:32:ec:26:08:fa:c8: 42:92:d5:6a:1c:6f:05:61:9a:29:5e:4d:65:c4:94: 6c:d4:b0:42:e0:b4:7a:41:4f:50:bc:d2:fe:56:6c: 45:dc:7e:0d:43:89:31:2f:58:8f:15:3c:8c:f8:78: 6e:b6:45:45:54:95:78:fd:39:e3:b5:fb:3f:b8:41: 9b:02:09:1b:c8:09:46:1d:db:87:fe:d1:e7:47:86: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:26:DD:C7:7E:77:52:38:54:B5:96:AB:E7:9B:94:38:C2:C7:0E X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:36:dc:b5:55:98:31:07:70:bb:77:6b:fe:96:2a:72:9d: 3c:e3:3f:af:12:d7:a2:11:e8:58:8c:73:2e:dc:a1:4a:1f:0f: 62:b3:39:d1:1a:4f:a4:bc:e3:f5:af:6f:64:53:45:cf:f1:78: 14:d3:1c:44:3a:e9:10:f7:09:c9:71:2b:50:63:c5:1d:42:8f: b9:cd:83:6a:b2:14:a0:19:ed:73:e0:7e:10:ae:d4:ac:58:e2: b7:8a:44:61:6c:d1:84:52:4c:3f:e2:52:45:b0:f7:a6:f6:88: 7c:86:6a:74:f8:ec:17:1f:c6:f4:64:6c:95:cc:48:dd:ff:59: c8:cc:ea:7c:49:48:3d:b1:f0:79:31:c4:f6:54:83:c5:2a:6f: 53:c4:f4:53:90:71:71:66:f9:06:bd:ef:e1:0e:8c:0b:97:69: 42:1d:d1:a3:4b:c3:88:5e:3e:c0:10:1c:8a:e0:9d:24:73:17: a5:86:2f:66:4d:46:e3:66:65:2e:6e:84:c4:d9:ea:b2:05:d3: e9:4e:28:54:20:77:8a:98:f7:6d:c6:0a:21:70:86:bc:18:b6: 17:73:a3:b7:1f:6d:62:57:23:41:fa:61:2e:61:fd:fb:79:6a: 7b:f6:ae:08:1b:99:1e:3c:86:93:b9:5b:e8:67:87:b5:9a:7b: 44:29:2f:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhCDnXhAfwKhcMFlq44ru64PlHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNjA0MTcyMzQ3MjlaFw0yNjA0MjEwOTIyMjlaMDMxMTAvBgNV BAMTKDEzNUIyNkREQzc3RTc3NTIzODU0QjU5NkFCRTc5Qjk0MzhDMkM3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqtI5WcIrjapKSaVBpiUW+EfJ 4u3ccq5KSCi8I99d31Xyg0yM57OW7jPCrCUzscOZdIz6WbV6ThPzu7KtPwuXiH4K HPNkVpBmPjQ/2QQlm76ME0UmFZ0s4p1sFs6sZ4Dz+niNBmJM8+yY8wR9Fwz0Yg8z MoVzBOzhwDr+7MdU8FEO5mZFH1Rh3HMugRiF9QF9orpVmrK/vSeMJ/f0f5OIWu91 pFHeGskKHZdf9TLsJgj6yEKS1WocbwVhmileTWXElGzUsELgtHpBT1C80v5WbEXc fg1DiTEvWI8VPIz4eG62RUVUlXj9OeO1+z+4QZsCCRvICUYd24f+0edHhjuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1sm3cd+d1I4VLWWq+eblDjCxw4wHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUJNty1VZgxB3C7d2v+lipynTzjP68S16IR 6FiMcy7coUofD2KzOdEaT6S84/Wvb2RTRc/xeBTTHEQ66RD3CclxK1BjxR1Cj7nN g2qyFKAZ7XPgfhCu1KxY4reKRGFs0YRSTD/iUkWw96b2iHyGanT47BcfxvRkbJXM SN3/WcjM6nxJSD2x8HkxxPZUg8Uqb1PE9FOQcXFm+Qa97+EOjAuXaUId0aNLw4he PsAQHIrgnSRzF6WGL2ZNRuNmZS5uhMTZ6rIF0+lOKFQgd4qY923GCiFwhrwYthdz o7cfbWJXI0H6YS5h/ft5anv2rggbmR48hpO5W+hnh7Wae0QpL40= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:26 2026 by rpki-client