$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: Nsm6Uu15i6B7sVAVYLATpYHLzAJQ6ijH4m7BFGoo5uI= Subject key identifier: 43:73:51:8A:EF:DA:C4:4B:43:6B:CB:7D:65:F1:95:E5:2D:5B:FE:B4 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 557EBBDCE211C74CB1858775F25ABC2B640FE05B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: CD Signing time: Wed 15 Apr 2026 23:22:16 +0000 Manifest this update: Wed 15 Apr 2026 23:17:16 +0000 Manifest next update: Sun 19 Apr 2026 04:07:16 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: gP6dAzMR/WXv6bwbVfa+d+Rc9Y0EVWXjuXcT3Exr1xI=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: YHcxJz8UdItbuxqtZLB0xfx1FpHmmzlf5luWRcIxams=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7e:bb:dc:e2:11:c7:4c:b1:85:87:75:f2:5a:bc:2b:64:0f:e0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Apr 15 23:17:16 2026 GMT Not After : Apr 19 04:07:16 2026 GMT Subject: CN=4373518AEFDAC44B436BCB7D65F195E52D5BFEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:c7:88:81:46:4a:10:cd:55:a3:a9:90:94: 1e:66:ae:96:86:0f:82:0b:84:34:13:ab:10:22:64: 79:84:f7:04:42:58:6f:b0:c9:46:a0:2e:36:2b:cb: c4:39:0f:ea:da:b0:c3:29:f5:24:9b:aa:b3:04:c1: 03:c3:27:1a:4b:aa:48:05:68:eb:37:b8:f7:34:50: 9e:3a:3a:8e:8b:ee:e1:ca:f5:2a:a2:70:e2:57:64: 7e:e0:94:ad:ec:df:d6:ab:19:7b:54:90:a2:5d:76: 54:60:f4:35:6a:ab:64:31:5a:aa:51:42:0c:9a:52: 6b:73:cf:6a:38:e6:c6:47:2f:ea:9e:34:17:9f:6d: e5:c1:93:c6:a7:99:be:66:e5:84:32:b1:20:f9:71: c1:9a:cb:2a:6b:c0:08:89:ec:e4:73:65:b4:24:68: 81:9b:bb:9e:19:a4:1c:b9:38:b3:a1:cb:44:99:9f: ec:37:af:b5:e6:d7:3c:f6:1a:8e:1c:c7:7f:55:45: ce:78:41:ef:5e:8d:d6:00:96:40:57:77:7b:3e:79: 9c:45:68:98:76:8c:d1:9f:54:02:6b:71:b9:39:52: 7f:89:3b:95:b5:b7:4b:66:10:dd:5c:8d:50:53:3c: 7f:5e:36:c0:bd:63:d0:b4:e2:cc:8e:7c:25:d0:43: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:73:51:8A:EF:DA:C4:4B:43:6B:CB:7D:65:F1:95:E5:2D:5B:FE:B4 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:08:22:50:44:38:d5:f6:4f:59:48:e7:73:c5:85:3e:d4:05: 04:67:e1:a5:fd:a8:6d:37:71:5a:4f:a2:84:1c:00:a7:ac:27: 5a:66:4a:bc:6c:e8:22:b1:f0:13:97:c1:4f:40:ef:7a:c5:fc: 45:68:9f:21:bd:f1:17:3d:41:3e:3c:f0:72:48:9e:3f:fc:21: 4d:56:2f:ad:0a:b7:6e:17:f5:af:14:c8:64:8a:65:f0:9f:bc: b7:9f:71:32:e3:5d:0c:f8:df:bc:62:d4:f7:0c:5f:25:a8:70: bd:97:18:cb:be:0f:2b:d4:70:fa:aa:96:ec:6e:d0:3f:53:87: c8:d6:3e:8f:45:1b:1c:19:92:7d:e9:97:d0:e7:3e:90:74:06: c6:94:3c:1b:a3:87:1d:aa:0a:3c:4b:6d:ba:c7:47:46:d8:c1: f5:b1:c7:12:46:99:96:1e:a1:b5:f2:00:68:07:82:d7:94:14: 0e:5c:1e:51:8f:e9:a8:85:c7:07:5f:45:b4:ea:15:fb:ef:d5: d0:8e:4d:00:ba:9b:72:00:d4:d1:11:ab:a4:e7:ea:5a:f7:63: 5d:57:65:91:1a:ea:e0:cc:3b:1d:a0:9d:00:e7:da:65:70:9e: a3:16:b9:28:cd:c1:5d:06:8f:27:a6:72:46:6a:b2:c9:ab:90: d8:82:c1:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVX673OIRx0yxhYd18lq8K2QP4FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNjA0MTUyMzE3MTZaFw0yNjA0MTkwNDA3MTZaMDMxMTAvBgNV BAMTKDQzNzM1MThBRUZEQUM0NEI0MzZCQ0I3RDY1RjE5NUU1MkQ1QkZFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ88eIgUZKEM1Vo6mQlB5mrpaG D4ILhDQTqxAiZHmE9wRCWG+wyUagLjYry8Q5D+rasMMp9SSbqrMEwQPDJxpLqkgF aOs3uPc0UJ46Oo6L7uHK9SqicOJXZH7glK3s39arGXtUkKJddlRg9DVqq2QxWqpR QgyaUmtzz2o45sZHL+qeNBefbeXBk8anmb5m5YQysSD5ccGayyprwAiJ7ORzZbQk aIGbu54ZpBy5OLOhy0SZn+w3r7Xm1zz2Go4cx39VRc54Qe9ejdYAlkBXd3s+eZxF aJh2jNGfVAJrcbk5Un+JO5W1t0tmEN1cjVBTPH9eNsC9Y9C04syOfCXQQ+Q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3NRiu/axEtDa8t9ZfGV5S1b/rQwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUIIlBEONX2T1lI53PFhT7UBQRn4aX9qG03 cVpPooQcAKesJ1pmSrxs6CKx8BOXwU9A73rF/EVonyG98Rc9QT488HJInj/8IU1W L60Kt24X9a8UyGSKZfCfvLefcTLjXQz437xi1PcMXyWocL2XGMu+DyvUcPqqluxu 0D9Th8jWPo9FGxwZkn3pl9DnPpB0BsaUPBujhx2qCjxLbbrHR0bYwfWxxxJGmZYe obXyAGgHgteUFA5cHlGP6aiFxwdfRbTqFfvv1dCOTQC6m3IA1NERq6Tn6lr3Y11X ZZEa6uDMOx2gnQDn2mVwnqMWuSjNwV0GjyemckZqssmrkNiCwS0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:44 2026 by rpki-client