$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft File: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json) Hash identifier: 5seCp0Acs4LYYTP0UWggPBy2F5flbMzhVFNyjfBbiDY= Subject key identifier: 4B:C8:CE:EE:F4:BD:27:F3:EB:EC:5C:13:91:57:AB:07:A6:44:02:1C Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 78FBA50E1593CADFBF38034525682A69844E3BE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft Manifest number: E0 Signing time: Fri 17 Apr 2026 12:41:09 +0000 Manifest this update: Fri 17 Apr 2026 12:36:09 +0000 Manifest next update: Mon 20 Apr 2026 15:31:09 +0000 Files and hashes: 1: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: zMpVgEWzPdDK17NtW9oxpCMK4fkWK+NftKAxjrfh35o=) 2: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: NPtGQfnjNiCvn81mxs4KeV6zEFVnWZPCAxC6gItEmqo=) 3: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NDeOIbsC2Gb17cgUpeSYzxHEHiZeh+ueNQnGf7HfQng=) 4: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: wnaZXzJu/9XYkLWvstgZSpRMBHg1zffk2A9AEFHpANM=) 5: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: LWSN+OOVgP5g9xcwwR15CS7HhslaezIfEbjBNEwvwaI=) 6: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: exw8qvXdH0h/i/iO9aGiJYVINYBL9B4OLjeNga7fN9c=) 7: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: Ngb3LnXQ11YHQrKg5E3aodFpuV+UGL7buohqyUmiTrA=) 8: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: q0yJUvBcjd2NEtr8e4z3fwmDmV4NBgtGO2qntKq/f+g=) 9: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: 3ZpfdTtxXj52cP2nsv6kg1TUa5J+9S8J6u9CtjkNgCU=) 10: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: /GwhlBmTeqRQ0qTqfr/7dYrst12Hg3GNSY71ebWYL0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fb:a5:0e:15:93:ca:df:bf:38:03:45:25:68:2a:69:84:4e:3b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Apr 17 12:36:09 2026 GMT Not After : Apr 20 15:31:09 2026 GMT Subject: CN=4BC8CEEEF4BD27F3EBEC5C139157AB07A644021C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:07:23:1e:00:bb:d1:30:65:9f:0e:15:78: 2c:35:55:74:9b:63:16:61:65:45:10:df:a1:1f:f8: b6:e5:6d:43:ab:df:96:e1:17:20:7e:54:aa:2a:c4: 0c:2e:ba:ef:69:93:fd:45:63:a0:e0:45:a1:fe:1a: 3c:dd:18:0a:d2:4f:c7:4f:72:a1:bd:88:e8:75:78: a9:bb:3e:8b:d6:cf:1d:6a:f4:91:d0:d7:6c:17:53: ff:16:c4:3b:34:63:34:8d:d8:9c:41:df:83:7c:38: 8c:d9:a3:0b:05:f0:25:b0:eb:5a:d9:2f:0c:0c:5c: 94:9a:87:e1:a9:ce:a9:48:50:43:7f:77:d6:3c:e0: e1:a3:8e:51:7c:37:94:10:3f:b6:14:c4:03:18:1d: 1b:8b:d1:26:0e:ee:d6:1d:3b:7e:80:a4:74:5e:b4: b8:f1:8e:98:20:cc:bf:db:6d:05:ba:74:0b:8a:d7: bb:cb:a4:ed:f9:14:f8:79:02:79:41:45:8d:31:84: fe:af:c4:2c:97:d4:01:8b:0e:3e:d2:70:02:f0:ed: 4e:c5:8b:c4:4a:84:b5:c6:e7:7c:db:1e:06:63:2c: 85:82:09:b5:f5:a9:46:59:94:6f:f8:05:cf:eb:f7: 75:84:95:0b:c9:89:93:eb:5b:d5:c2:c6:31:5c:60: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C8:CE:EE:F4:BD:27:F3:EB:EC:5C:13:91:57:AB:07:A6:44:02:1C X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:b1:e8:98:1f:63:67:16:1b:ab:e7:aa:40:c4:49:4c:0d: 06:6a:67:3a:86:20:22:8a:19:46:bf:24:92:93:90:ba:6a:c7: 27:a8:fc:79:28:7c:37:93:97:f8:f5:46:cb:7b:12:8f:c2:1a: 20:04:50:d4:de:30:09:34:9d:8f:bc:45:ab:3f:5d:a6:62:40: c2:f5:f3:11:7e:ed:92:4a:56:58:bd:59:e2:d8:9c:a7:9c:d7: 1f:3e:45:ea:48:99:75:24:15:7a:09:fa:13:f7:63:ab:e2:60: 77:ff:d1:a3:7a:68:7e:f2:5b:3a:21:9d:61:01:fd:f7:46:42: 4c:a3:0f:f5:b0:33:2f:88:d2:05:72:88:a2:85:d7:70:97:a5: 10:89:c6:b5:6c:e6:41:09:72:5b:4f:1d:a0:65:65:fa:77:6f: 44:b2:30:5c:4c:8e:97:80:45:ca:b3:ec:35:9b:3c:10:f5:b4: 78:ee:a7:20:af:63:1f:81:a9:c5:70:13:30:41:cc:a4:76:c7: 65:e8:50:ed:ce:a4:80:16:70:1c:f3:68:97:d2:45:e9:b1:04: 81:66:38:af:d5:7a:1c:46:38:20:ac:78:ba:2d:ad:1b:85:b2: f9:03:38:2c:03:7a:31:68:c0:bb:b2:09:27:e6:73:cb:a5:f0: 74:5a:52:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePulDhWTyt+/OANFJWgqaYROO+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNjA0MTcxMjM2MDlaFw0yNjA0MjAxNTMxMDlaMDMxMTAvBgNV BAMTKDRCQzhDRUVFRjRCRDI3RjNFQkVDNUMxMzkxNTdBQjA3QTY0NDAyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGgcjHgC70TBlnw4VeCw1VXSb YxZhZUUQ36Ef+LblbUOr35bhFyB+VKoqxAwuuu9pk/1FY6DgRaH+GjzdGArST8dP cqG9iOh1eKm7PovWzx1q9JHQ12wXU/8WxDs0YzSN2JxB34N8OIzZowsF8CWw61rZ LwwMXJSah+GpzqlIUEN/d9Y84OGjjlF8N5QQP7YUxAMYHRuL0SYO7tYdO36ApHRe tLjxjpggzL/bbQW6dAuK17vLpO35FPh5AnlBRY0xhP6vxCyX1AGLDj7ScALw7U7F i8RKhLXG53zbHgZjLIWCCbX1qUZZlG/4Bc/r93WElQvJiZPrW9XCxjFcYBTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8jO7vS9J/Pr7FwTkVerB6ZEAhwwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG35seiYH2NnFhur56pAxElMDQZqZzqGICKK GUa/JJKTkLpqxyeo/HkofDeTl/j1Rst7Eo/CGiAEUNTeMAk0nY+8Ras/XaZiQML1 8xF+7ZJKVli9WeLYnKec1x8+RepImXUkFXoJ+hP3Y6viYHf/0aN6aH7yWzohnWEB /fdGQkyjD/WwMy+I0gVyiKKF13CXpRCJxrVs5kEJcltPHaBlZfp3b0SyMFxMjpeA Rcqz7DWbPBD1tHjupyCvYx+BqcVwEzBBzKR2x2XoUO3OpIAWcBzzaJfSRemxBIFm OK/VehxGOCCseLotrRuFsvkDOCwDejFowLuyCSfmc8ul8HRaUoo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:29 2026 by rpki-client