$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 7o70PjwbGp7hOJkpJx7zZvVTLKKDG94YHD5gaucA5Zc= Subject key identifier: 63:93:34:4F:08:6D:37:E0:B4:16:0F:07:A0:91:8B:E1:8B:B4:8A:A4 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 1854FF3B4737C0B39827E89A7C2D0B6861EC87E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 03B3 Signing time: Fri 17 Apr 2026 18:00:42 +0000 Manifest this update: Fri 17 Apr 2026 17:55:42 +0000 Manifest next update: Tue 21 Apr 2026 05:39:42 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: ut3+OT8It885Lz5dXnhZ2x9NrektaJ+O3H/O6dn2YWU=) 3: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: kxE+YtkjQwMwVt4zg/wVK2OFJkZkHoSNen/DvmhHfJg=) 4: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: 4C3lNSjc1OP8wE40y1T2v3j6x3XPnMRVmG/J/aIJFiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:54:ff:3b:47:37:c0:b3:98:27:e8:9a:7c:2d:0b:68:61:ec:87:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Apr 17 17:55:42 2026 GMT Not After : Apr 21 05:39:42 2026 GMT Subject: CN=6393344F086D37E0B4160F07A0918BE18BB48AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:06:05:a6:87:51:e1:dc:43:15:d8:df:dc: 9a:a3:9d:40:ab:79:58:c2:e2:b8:ca:ac:08:73:16: ee:7f:22:d8:7c:c5:35:f8:53:99:d2:69:6f:f8:a4: 54:e9:6c:cf:aa:4f:64:1e:8b:51:5d:6d:92:56:95: 09:f7:08:5e:7b:54:d3:49:57:40:3d:2e:32:dd:6e: 27:20:7c:87:78:9f:c6:9e:c5:1c:84:22:85:b0:27: 05:35:65:38:ff:f8:ef:ad:28:95:d0:9c:e6:b9:2f: 35:e1:0d:ea:23:65:59:46:c2:00:fb:69:ea:35:9b: d4:27:9d:bd:f0:c4:e3:79:c8:00:db:7c:4c:e7:7b: c1:ea:a9:ad:40:54:aa:c9:d4:72:b5:bb:03:88:e5: 93:f6:8b:c4:0f:a8:05:74:dd:9b:bb:ac:63:4f:7f: 13:a5:14:d2:9c:1c:7a:bf:00:d6:a2:09:3c:bd:19: 32:64:77:08:3f:8f:a1:f4:ce:a9:51:36:33:fe:98: 60:ed:af:c3:7e:03:30:a7:6c:a2:d2:bf:70:70:ff: f8:c0:d5:84:8b:7f:69:0c:de:4f:f4:99:76:e5:02: 6a:9b:f4:3e:fb:d5:3b:0d:4d:7d:0f:81:2b:1b:74: 5c:0f:66:0d:aa:ea:3c:ed:b7:8a:7f:ae:fb:d3:c1: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:34:4F:08:6D:37:E0:B4:16:0F:07:A0:91:8B:E1:8B:B4:8A:A4 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ac:08:dc:87:15:2d:6a:c0:b7:9d:30:39:32:05:19:65:53: 70:a6:2b:70:f9:24:a1:69:bc:fc:90:68:76:0f:da:5a:6b:4a: 02:6e:83:26:d0:21:38:44:12:d6:ae:12:53:87:ef:db:ef:12: 14:6f:e0:cd:6a:f3:bd:e3:9d:d4:0a:fa:62:5e:a7:f0:06:5f: b9:92:a4:ee:11:73:16:8e:c8:02:7a:b6:4e:4b:15:24:aa:b1: 1f:9a:aa:66:ad:b5:33:b7:22:fd:02:c6:e4:93:fb:c9:f7:6f: e5:34:b6:14:64:18:41:a5:a3:96:07:54:5f:31:e2:f0:28:94: 65:0e:26:ca:d0:fa:5d:5d:19:83:53:d2:b3:81:5b:0f:40:d5: f9:e3:c7:b7:c1:7a:ee:00:0c:f3:32:69:7a:9e:b0:56:60:da: e3:70:f7:8f:4b:12:9a:2f:f0:7f:39:83:41:92:33:db:a1:7b: 63:33:9d:bc:58:ba:b5:e3:a6:e4:ac:a1:fb:c9:69:62:39:f6: 3e:d3:42:3e:05:f4:99:a4:a5:d3:8b:01:c5:95:e5:f7:4a:59: cf:9e:f0:de:ec:fb:43:33:61:16:41:f8:1b:60:03:9e:c5:dd: 16:f3:e2:90:4d:69:89:d5:db:06:b1:75:6a:fd:a5:d4:47:ec: 26:ff:c4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFT/O0c3wLOYJ+iafC0LaGHsh+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjA0MTcxNzU1NDJaFw0yNjA0MjEwNTM5NDJaMDMxMTAvBgNV BAMTKDYzOTMzNDRGMDg2RDM3RTBCNDE2MEYwN0EwOTE4QkUxOEJCNDhBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lAYFpodR4dxDFdjf3JqjnUCr eVjC4rjKrAhzFu5/Ith8xTX4U5nSaW/4pFTpbM+qT2Qei1FdbZJWlQn3CF57VNNJ V0A9LjLdbicgfId4n8aexRyEIoWwJwU1ZTj/+O+tKJXQnOa5LzXhDeojZVlGwgD7 aeo1m9Qnnb3wxON5yADbfEzne8Hqqa1AVKrJ1HK1uwOI5ZP2i8QPqAV03Zu7rGNP fxOlFNKcHHq/ANaiCTy9GTJkdwg/j6H0zqlRNjP+mGDtr8N+AzCnbKLSv3Bw//jA 1YSLf2kM3k/0mXblAmqb9D771TsNTX0PgSsbdFwPZg2q6jztt4p/rvvTwQ8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5M0TwhtN+C0Fg8HoJGL4Yu0iqQwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmsCNyHFS1qwLedMDkyBRllU3CmK3D5JKFp vPyQaHYP2lprSgJugybQIThEEtauElOH79vvEhRv4M1q873jndQK+mJep/AGX7mS pO4RcxaOyAJ6tk5LFSSqsR+aqmattTO3Iv0CxuST+8n3b+U0thRkGEGlo5YHVF8x 4vAolGUOJsrQ+l1dGYNT0rOBWw9A1fnjx7fBeu4ADPMyaXqesFZg2uNw949LEpov 8H85g0GSM9uhe2MznbxYurXjpuSsofvJaWI59j7TQj4F9JmkpdOLAcWV5fdKWc+e 8N7s+0MzYRZB+BtgA57F3Rbz4pBNaYnV2waxdWr9pdRH7Cb/xMg= -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:48 2026 by rpki-client