$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: ObAqZRDQlcSArzg2G/Ev5d/nk9WjzLTNT/A2GljOO2o= Subject key identifier: 04:EF:F8:BB:C4:22:41:87:4F:23:4D:22:3D:95:05:0A:5B:9A:AB:5A Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 55063F2680C581806E095B37D6A1633D96D02D6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 07:10:03 +0000 Manifest this update: Thu 16 Apr 2026 07:05:03 +0000 Manifest next update: Sun 19 Apr 2026 08:44:03 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: gLmb+ZxgUeSd3b+w7cB3eu9SE0dN8VDh/0MM+gqGtCg=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:06:3f:26:80:c5:81:80:6e:09:5b:37:d6:a1:63:3d:96:d0:2d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Apr 16 07:05:03 2026 GMT Not After : Apr 19 08:44:03 2026 GMT Subject: CN=04EFF8BBC42241874F234D223D95050A5B9AAB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:ed:77:e0:33:a9:c5:c0:75:2e:e3:54:f1: 1a:24:de:c7:43:98:2e:41:e7:28:f9:d5:4f:54:47: ae:b4:14:13:41:c3:0c:12:90:67:25:46:91:4f:aa: 3f:bb:1e:2b:0a:a6:e9:bc:c6:2b:5f:57:8d:85:8f: 1f:c0:4c:62:b5:be:75:10:f5:05:8e:c8:f0:dd:79: 91:72:43:d0:48:8c:e5:92:2b:16:69:7f:2d:6a:42: 46:1f:9c:88:41:b2:f0:30:fa:32:09:18:e8:ff:fc: 29:7f:04:00:57:89:15:83:2d:42:8b:cd:36:62:33: 6d:ee:f4:23:2f:71:db:ff:20:05:eb:6d:f7:1a:0f: a4:4a:25:8f:d6:02:da:4d:10:53:a7:a0:f1:c3:8f: fe:87:a5:da:a0:f8:4e:5a:e2:45:5f:9f:14:26:56: a0:fe:3c:f0:85:5e:e5:3e:d9:fd:0d:3a:f4:24:3c: 1a:c4:1f:99:d3:09:80:37:c1:d6:d1:03:5c:12:7b: e4:46:de:8c:06:0f:65:b2:10:5c:5c:83:a9:59:70: d4:80:39:72:1c:24:2a:ca:a5:cd:03:de:37:d2:1a: 11:67:ea:d0:71:8d:c9:a0:47:8b:17:f4:71:e8:9e: 73:02:71:62:64:90:a3:32:4d:c7:3e:a1:f2:47:ef: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EF:F8:BB:C4:22:41:87:4F:23:4D:22:3D:95:05:0A:5B:9A:AB:5A X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8b:1b:a7:80:1f:d3:5e:2e:89:56:03:7a:5b:56:be:f0:85: 31:83:b6:15:6f:cf:40:f3:35:e8:5c:f4:69:79:e4:d1:4d:cc: b2:a4:76:30:cf:40:98:d9:94:a9:e5:7f:d7:93:02:5d:53:09: 7a:a4:3e:d3:6e:5f:14:10:0c:8e:93:a9:21:8c:78:ae:83:7c: 70:39:64:fd:a5:3e:d3:ce:c7:5f:08:45:83:20:8a:28:64:ab: 0c:73:0d:ea:55:d7:9e:19:bc:88:0e:18:d4:c5:29:07:44:aa: 1b:f1:bd:b4:ab:25:05:80:a0:c1:43:87:1f:b4:39:e6:3f:79: 1d:1e:56:ed:36:9d:d0:df:ac:1e:57:65:3f:d8:47:f2:9d:9a: ee:e6:50:a2:f1:ae:e3:e7:4e:d4:01:8c:d0:6b:c6:c6:9f:a2: ea:26:bf:54:0a:e4:35:41:c4:98:fa:72:24:f9:45:8b:8b:0a: 1e:bb:75:8f:b3:c4:07:f1:dd:96:ab:45:2b:c3:8c:9b:17:c6: a0:69:17:95:bf:e2:80:a0:e6:c3:20:3f:e4:6a:e4:f8:4a:75: dc:93:14:24:94:e2:64:15:e1:39:68:e8:fa:cb:df:59:01:c2: e7:4b:39:41:86:a1:bf:d8:05:a8:55:2e:d9:26:01:3a:3a:d8: c7:59:b5:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQY/JoDFgYBuCVs31qFjPZbQLWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNjA0MTYwNzA1MDNaFw0yNjA0MTkwODQ0MDNaMDMxMTAvBgNV BAMTKDA0RUZGOEJCQzQyMjQxODc0RjIzNEQyMjNEOTUwNTBBNUI5QUFCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iO134DOpxcB1LuNU8Rok3sdD mC5B5yj51U9UR660FBNBwwwSkGclRpFPqj+7HisKpum8xitfV42Fjx/ATGK1vnUQ 9QWOyPDdeZFyQ9BIjOWSKxZpfy1qQkYfnIhBsvAw+jIJGOj//Cl/BABXiRWDLUKL zTZiM23u9CMvcdv/IAXrbfcaD6RKJY/WAtpNEFOnoPHDj/6Hpdqg+E5a4kVfnxQm VqD+PPCFXuU+2f0NOvQkPBrEH5nTCYA3wdbRA1wSe+RG3owGD2WyEFxcg6lZcNSA OXIcJCrKpc0D3jfSGhFn6tBxjcmgR4sX9HHonnMCcWJkkKMyTcc+ofJH7w2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBO/4u8QiQYdPI00iPZUFCluaq1owHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqLG6eAH9NeLolWA3pbVr7whTGDthVvz0Dz Nehc9Gl55NFNzLKkdjDPQJjZlKnlf9eTAl1TCXqkPtNuXxQQDI6TqSGMeK6DfHA5 ZP2lPtPOx18IRYMgiihkqwxzDepV154ZvIgOGNTFKQdEqhvxvbSrJQWAoMFDhx+0 OeY/eR0eVu02ndDfrB5XZT/YR/Kdmu7mUKLxruPnTtQBjNBrxsafouomv1QK5DVB xJj6ciT5RYuLCh67dY+zxAfx3ZarRSvDjJsXxqBpF5W/4oCg5sMgP+Rq5PhKddyT FCSU4mQV4Tlo6PrL31kBwudLOUGGob/YBahVLtkmATo62MdZtSI= -----END CERTIFICATE-----Generated at Sat Apr 18 05:50:00 2026 by rpki-client