$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: gZdOzOSlXF0J5dJCXRF2DWGnSOYCJk1bDUCrJ0eHLlQ= Subject key identifier: 5B:D3:DF:26:68:83:B7:78:DE:BB:D4:AD:B3:B7:7C:A9:3E:8F:DC:4D Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 74A93DF63C02EB4B922474FA9D5C37F15F7B0E20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 01C9 Signing time: Wed 15 Apr 2026 11:42:42 +0000 Manifest this update: Wed 15 Apr 2026 11:37:42 +0000 Manifest next update: Sat 18 Apr 2026 16:51:42 +0000 Files and hashes: 1: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: mEYaAaFx/DjhEKlkpDPeOM4TkC3ENPq2BzujZ3CjRcE=) 2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: +mqOrw2RJ0lGfh+/n3xiwY8i2kBpu6vWd7CSp9L06BY=) 3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: mgQ6n6qbaCMbKjW2V2VZyMZ/C74fXguNwoCbuSGF3MQ=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: keLbCd7ZsbkB2/h/TV22jtBoEws1VOw0OydIvEwteiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a9:3d:f6:3c:02:eb:4b:92:24:74:fa:9d:5c:37:f1:5f:7b:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Apr 15 11:37:42 2026 GMT Not After : Apr 18 16:51:42 2026 GMT Subject: CN=5BD3DF266883B778DEBBD4ADB3B77CA93E8FDC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:4d:f0:a7:8e:8e:de:85:1c:a4:22:42:41: 39:0a:cb:64:5c:8f:a6:db:46:3a:00:f4:ca:19:16: 68:98:9f:a1:b7:03:e5:6d:69:a6:2b:cd:ff:dc:21: 23:8a:2a:11:fa:eb:86:f4:09:13:ae:22:7f:9a:ef: 31:90:ab:29:ab:7f:be:55:0b:ca:db:5d:7b:59:ca: 42:d9:ed:d8:21:16:3f:1a:d1:c9:a7:f2:0f:04:d5: 2f:6e:ef:46:9b:c5:25:17:c7:db:cd:4e:e4:1b:cb: 0e:a4:25:73:7c:5e:57:3f:b8:e9:5c:36:58:22:b3: c7:8c:32:30:a8:d0:fd:2a:0f:0f:8a:b2:37:7d:5b: 88:09:09:7e:59:cd:ae:fa:93:5e:7e:ea:a1:d9:64: a5:b0:ee:4e:70:b9:c7:d0:89:81:86:83:f0:a9:e6: 3d:54:19:bf:9c:db:75:00:f5:2c:d8:19:54:91:e1: d3:23:95:93:aa:ec:62:87:b6:76:68:aa:ac:9a:3e: fb:6f:37:ad:f4:5d:77:77:ae:a0:50:b0:79:94:fb: fc:07:38:3c:f1:4c:d0:d8:ff:b2:f6:ca:28:dd:5f: bc:ae:66:05:0a:07:96:90:51:0a:c3:25:e1:7a:31: 6c:ce:2a:d9:cc:11:3c:f5:66:01:fc:0e:72:bc:65: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:DF:26:68:83:B7:78:DE:BB:D4:AD:B3:B7:7C:A9:3E:8F:DC:4D X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:5f:31:27:58:29:71:06:4e:b1:ae:9c:9c:0c:9e:97:d9: 53:06:0d:96:e4:73:9c:5e:18:11:26:81:3a:fb:41:f3:34:64: 22:5e:14:7a:ec:8f:55:0a:86:26:2a:5e:81:9c:8d:f6:49:3b: b4:3a:f8:8c:4b:a1:bd:eb:77:91:42:96:a9:c5:d8:39:74:12: 9f:e4:d6:69:17:c0:05:da:ac:f5:78:78:4d:e7:80:34:0f:c4: 89:a2:95:87:33:aa:d2:00:57:ab:67:77:58:5a:ca:b9:7e:e2: 8a:9d:05:36:98:b2:64:6e:9a:09:1b:a3:06:10:63:25:09:bb: e9:eb:96:74:fc:f9:cc:7c:70:43:3d:c3:b7:71:24:80:2d:31: b8:13:c3:f7:94:b6:12:49:4e:57:a8:82:2f:9c:19:5d:54:7e: cb:8b:69:4a:f8:34:c5:63:d6:0f:70:31:c6:51:91:13:1d:1d: 7a:c4:31:99:d7:ff:98:06:fd:f4:9c:90:2f:33:52:39:8f:a5: 84:90:7e:e5:54:90:43:bf:da:30:d1:80:74:03:26:cf:44:85: 29:a0:35:cc:37:88:bd:21:40:4d:86:24:f8:d8:1d:54:ea:16: 04:a1:b9:cd:df:96:5b:be:ee:a8:5a:36:10:55:20:d3:8e:e2: eb:0c:a4:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKk99jwC60uSJHT6nVw38V97DiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNjA0MTUxMTM3NDJaFw0yNjA0MTgxNjUxNDJaMDMxMTAvBgNV BAMTKDVCRDNERjI2Njg4M0I3NzhERUJCRDRBREIzQjc3Q0E5M0U4RkRDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRE3wp46O3oUcpCJCQTkKy2Rc j6bbRjoA9MoZFmiYn6G3A+VtaaYrzf/cISOKKhH664b0CROuIn+a7zGQqymrf75V C8rbXXtZykLZ7dghFj8a0cmn8g8E1S9u70abxSUXx9vNTuQbyw6kJXN8Xlc/uOlc Nlgis8eMMjCo0P0qDw+Ksjd9W4gJCX5Zza76k15+6qHZZKWw7k5wucfQiYGGg/Cp 5j1UGb+c23UA9SzYGVSR4dMjlZOq7GKHtnZoqqyaPvtvN630XXd3rqBQsHmU+/wH ODzxTNDY/7L2yijdX7yuZgUKB5aQUQrDJeF6MWzOKtnMETz1ZgH8DnK8ZQ9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9PfJmiDt3jeu9Sts7d8qT6P3E0wHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUWXzEnWClxBk6xrpycDJ6X2VMGDZbkc5xe GBEmgTr7QfM0ZCJeFHrsj1UKhiYqXoGcjfZJO7Q6+IxLob3rd5FClqnF2Dl0Ep/k 1mkXwAXarPV4eE3ngDQPxImilYczqtIAV6tnd1hayrl+4oqdBTaYsmRumgkbowYQ YyUJu+nrlnT8+cx8cEM9w7dxJIAtMbgTw/eUthJJTleogi+cGV1UfsuLaUr4NMVj 1g9wMcZRkRMdHXrEMZnX/5gG/fSckC8zUjmPpYSQfuVUkEO/2jDRgHQDJs9EhSmg Ncw3iL0hQE2GJPjYHVTqFgShuc3fllu+7qhaNhBVINOO4usMpN8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:55:17 2026 by rpki-client