$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: Uw0t+J1twZ0vaZRxn2m0+aSILC8VElBFZqJA4ylNCco= Subject key identifier: 53:CF:C0:B6:4F:7A:6F:EC:8F:59:62:8A:2E:E9:60:FC:D8:60:DF:26 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 7C3CD129E7C1448365F0B90CFAE3CB6E7BE1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 04AA Signing time: Thu 16 Apr 2026 08:40:44 +0000 Manifest this update: Thu 16 Apr 2026 08:35:44 +0000 Manifest next update: Sun 19 Apr 2026 19:27:44 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=) 2: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=) 3: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: 4mntx0tP2LcmiuX6d+2EDg4QIT5nSLKonwb4zQxO2TU=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:d1:29:e7:c1:44:83:65:f0:b9:0c:fa:e3:cb:6e:7b:e1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Apr 16 08:35:44 2026 GMT Not After : Apr 19 19:27:44 2026 GMT Subject: CN=53CFC0B64F7A6FEC8F59628A2EE960FCD860DF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:40:13:07:44:12:57:e8:20:a4:d2:33:b2: 4f:22:69:48:b9:ae:62:d8:76:7e:45:5d:f1:4c:0b: 63:03:d0:25:76:04:98:86:ea:45:19:81:ac:79:05: a3:55:14:17:8c:1a:80:aa:34:06:4f:cd:56:43:39: 5e:1f:bd:12:79:92:a0:e1:7d:47:d4:e1:fd:a0:77: 5a:cb:23:a6:b4:30:48:43:e9:2a:16:e5:da:fa:6e: 64:78:52:8b:09:7f:24:cd:11:a0:1d:22:52:16:66: 85:ad:60:bc:8e:6f:5b:5f:49:a1:c1:74:f5:88:3c: 6d:f8:51:23:b7:45:fa:06:55:7c:4e:96:e5:a2:67: 57:e2:99:91:b5:09:1f:92:e4:e5:0c:d2:4a:35:8b: af:49:0f:8e:9e:eb:48:c1:76:6c:3d:2f:ae:85:72: e8:ee:d2:10:eb:97:f2:4b:c1:a4:f7:ce:fc:27:40: 85:52:af:ee:f9:a4:ea:3f:ba:ba:f0:0f:3d:25:46: a8:ae:a9:b0:c8:e0:e2:18:8f:10:5d:84:5a:d7:93: 59:18:a4:95:0f:36:75:2a:5f:d8:5c:a1:10:9a:ea: d5:b3:7d:61:02:45:bf:5e:b8:69:d8:5b:75:e2:db: f3:78:53:bc:c9:35:e2:9d:7f:6d:f2:49:c1:e0:d5: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:C0:B6:4F:7A:6F:EC:8F:59:62:8A:2E:E9:60:FC:D8:60:DF:26 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:dd:fd:a3:50:51:e6:f4:00:a9:f7:07:82:ef:d6:44:9e: 1e:af:19:06:86:9f:1b:42:13:43:c9:73:6c:36:d1:16:18:dc: 7d:b2:37:59:ad:93:64:37:7d:fd:cf:cd:33:d0:69:0c:0b:a7: 53:de:56:ef:cd:47:a0:93:bc:26:7b:2c:dc:b0:c8:86:5b:b7: 89:43:e3:b8:f9:76:61:a5:f7:d8:4c:7d:2f:fc:e9:ec:dc:92: 8b:6e:d7:d5:d1:fd:8e:62:9b:a8:ae:95:ae:f1:63:c6:23:0b: 8b:db:59:20:17:16:ea:a3:a6:53:b8:26:61:d1:27:e0:10:77: c2:e8:c9:9a:fe:ed:d8:bb:c4:fb:a2:4d:48:f3:34:e4:13:61: 5f:a3:7c:b2:e2:74:56:a0:a7:c0:37:b3:fb:36:f7:0c:99:dc: 4b:f5:07:1b:6b:13:93:bc:6e:ea:62:7e:17:72:48:b0:88:1e: 3f:5d:a0:9b:26:87:66:62:b4:d4:cb:3d:32:3c:5c:b5:78:94: 32:0e:d0:e2:67:4c:e6:aa:4c:0c:87:13:99:db:fb:ef:bb:e3: 09:e3:97:c2:69:ca:8f:99:9f:83:e6:5d:60:58:22:27:67:06: 04:6b:67:83:78:81:b0:9e:8a:6d:b5:f6:a1:82:ff:23:94:97: 6c:37:69:51 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfDzRKefBRINl8LkM+uPLbnvhrjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3MTVEQzZERUE4MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVD NzdFMkMxMB4XDTI2MDQxNjA4MzU0NFoXDTI2MDQxOTE5Mjc0NFowMzExMC8GA1UE AxMoNTNDRkMwQjY0RjdBNkZFQzhGNTk2MjhBMkVFOTYwRkNEODYwREYyNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOOfQBMHRBJX6CCk0jOyTyJpSLmu Yth2fkVd8UwLYwPQJXYEmIbqRRmBrHkFo1UUF4wagKo0Bk/NVkM5Xh+9EnmSoOF9 R9Th/aB3WssjprQwSEPpKhbl2vpuZHhSiwl/JM0RoB0iUhZmha1gvI5vW19JocF0 9Yg8bfhRI7dF+gZVfE6W5aJnV+KZkbUJH5Lk5QzSSjWLr0kPjp7rSMF2bD0vroVy 6O7SEOuX8kvBpPfO/CdAhVKv7vmk6j+6uvAPPSVGqK6psMjg4hiPEF2EWteTWRik lQ82dSpf2FyhEJrq1bN9YQJFv164adhbdeLb83hTvMk14p1/bfJJweDVphECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRTz8C2T3pv7I9ZYoou6WD82GDfJjAfBgNVHSME GDAWgBRxXcbeqA/l2J/caCwZx7MPXHfiwTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1 OTFiNTliLTFjYTUtNDQ2NC05OTgyLWJmNmY2ZDhhMWM5NC8wLzcxNURDNkRFQTgw RkU1RDg5RkRDNjgyQzE5QzdCMzBGNUM3N0UyQzEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi83MTVEQzZERUE4MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdF MkMxLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4 Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4MEZFNUQ4OUZEQzY4MkMxOUM3QjMw RjVDNzdFMkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAQEDd/aNQUeb0AKn3B4Lv1kSeHq8ZBoafG0IT Q8lzbDbRFhjcfbI3Wa2TZDd9/c/NM9BpDAunU95W781HoJO8Jnss3LDIhlu3iUPj uPl2YaX32Ex9L/zp7NySi27X1dH9jmKbqK6VrvFjxiMLi9tZIBcW6qOmU7gmYdEn 4BB3wujJmv7t2LvE+6JNSPM05BNhX6N8suJ0VqCnwDez+zb3DJncS/UHG2sTk7xu 6mJ+F3JIsIgeP12gmyaHZmK01Ms9MjxctXiUMg7Q4mdM5qpMDIcTmdv777vjCeOX wmnKj5mfg+ZdYFgiJ2cGBGtng3iBsJ6KbbX2oYL/I5SXbDdpUQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:18 2026 by rpki-client