$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: xNl3/YXEeTBevDgsTCoFb03g7cpMih7b7DZcc/VCFD4= Subject key identifier: 9B:50:1A:AD:75:86:73:F2:85:03:60:96:F6:36:35:C1:33:EF:8A:1E Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 4BD4A45A436D4E55A69472D6E3E0A562328E4C3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: 015D Signing time: Sun 19 Apr 2026 01:32:35 +0000 Manifest this update: Sun 19 Apr 2026 01:27:35 +0000 Manifest next update: Wed 22 Apr 2026 06:29:35 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: dlU31/PNTFXkn6n7ClYVAw6I+KLZ0cUWi5Qz+bZyRWY=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: 7Oi5j12RVi3qx9bBfzHfHE0vUABfTWWODw/d5Ig7GBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:a4:5a:43:6d:4e:55:a6:94:72:d6:e3:e0:a5:62:32:8e:4c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Apr 19 01:27:35 2026 GMT Not After : Apr 22 06:29:35 2026 GMT Subject: CN=9B501AAD758673F285036096F63635C133EF8A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:82:2a:5e:1d:f2:88:b6:07:6c:bc:8d:99: 99:cf:d5:d2:b2:9e:0e:49:35:36:82:d4:cc:17:42: 24:04:cc:06:b7:f5:a0:f1:43:4c:34:96:31:da:7f: 33:d0:33:35:0d:ef:51:c9:e7:9d:bf:d1:ff:f8:7f: 6c:8a:fa:d9:95:a6:a0:f1:6b:ef:1c:41:78:e4:a0: 53:d4:59:c7:6f:c1:13:7d:49:69:c2:cb:7e:2f:48: 14:97:c3:82:d1:be:ab:71:24:29:50:8f:67:d0:b9: 82:3e:26:23:e1:2b:cd:e0:86:60:54:11:9d:78:69: 06:52:58:70:33:12:0d:9b:bd:d1:a9:82:6c:46:10: fa:6f:0c:20:6a:74:19:c5:94:7f:4e:17:a0:65:e1: 44:4d:9e:9a:06:22:55:c9:b1:d0:0c:21:b2:e5:44: 99:e6:df:4f:89:74:ae:32:33:cc:7f:b2:4e:30:47: 5b:fe:17:eb:a2:76:b0:a8:37:eb:df:aa:4e:0a:8b: 34:c9:4f:bc:31:50:80:3d:51:9b:8f:4e:ce:35:2f: 4b:d7:a4:74:a2:60:00:32:e4:c6:32:08:1f:bb:5d: 56:d7:b0:1d:a7:49:81:94:93:4c:db:ea:b5:74:9d: fc:66:9e:95:37:a6:b8:35:49:bc:83:e2:33:3c:ba: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:1A:AD:75:86:73:F2:85:03:60:96:F6:36:35:C1:33:EF:8A:1E X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a8:4a:b0:75:00:86:9a:eb:ad:35:b8:fd:2b:79:0b:3b:d8: cc:01:5b:f1:6a:a1:23:e5:23:7a:ba:10:05:6b:fe:1a:92:e3: 50:98:3f:d3:13:b8:c2:ee:1a:2b:95:f4:ab:5a:38:b9:80:a0: f0:5a:cf:1d:be:2b:e0:f3:5e:40:55:24:ab:6b:ef:a9:09:59: 2e:8f:c6:b6:04:5d:e0:68:03:d3:8e:88:99:15:76:7d:26:cd: bd:c2:bb:50:6e:f2:5c:2d:52:63:91:ec:06:7f:d6:5b:ee:af: 59:5b:80:3d:1f:75:d5:d0:4f:1f:0e:ef:69:5e:31:75:77:8f: ec:26:c8:e8:02:53:8f:85:b9:ee:48:9b:c9:94:0d:bd:f2:24: 3a:a3:bd:7e:38:db:c1:aa:6e:40:01:de:60:f7:26:bf:7d:04: de:7e:7a:1e:36:de:dc:32:61:ef:e3:f8:19:cf:6e:0a:a6:03: 6c:0e:38:49:6a:e9:2a:6a:cf:87:2d:3c:14:69:64:60:44:09: 25:fa:83:57:ce:a2:c0:da:5d:41:b1:83:d1:5d:bc:b7:14:72: 97:24:1f:f4:39:86:1c:ed:c6:9f:e7:6c:37:b4:52:b6:9a:44: 0d:89:d1:25:47:a2:48:c8:df:e5:67:35:8c:ea:4a:78:b1:ec: b5:fd:31:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9SkWkNtTlWmlHLW4+ClYjKOTD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNjA0MTkwMTI3MzVaFw0yNjA0MjIwNjI5MzVaMDMxMTAvBgNV BAMTKDlCNTAxQUFENzU4NjczRjI4NTAzNjA5NkY2MzYzNUMxMzNFRjhBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUw4IqXh3yiLYHbLyNmZnP1dKy ng5JNTaC1MwXQiQEzAa39aDxQ0w0ljHafzPQMzUN71HJ552/0f/4f2yK+tmVpqDx a+8cQXjkoFPUWcdvwRN9SWnCy34vSBSXw4LRvqtxJClQj2fQuYI+JiPhK83ghmBU EZ14aQZSWHAzEg2bvdGpgmxGEPpvDCBqdBnFlH9OF6Bl4URNnpoGIlXJsdAMIbLl RJnm30+JdK4yM8x/sk4wR1v+F+uidrCoN+vfqk4KizTJT7wxUIA9UZuPTs41L0vX pHSiYAAy5MYyCB+7XVbXsB2nSYGUk0zb6rV0nfxmnpU3prg1SbyD4jM8upehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1AarXWGc/KFA2CW9jY1wTPvih4wHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmoSrB1AIaa6601uP0reQs72MwBW/FqoSPl I3q6EAVr/hqS41CYP9MTuMLuGiuV9KtaOLmAoPBazx2+K+DzXkBVJKtr76kJWS6P xrYEXeBoA9OOiJkVdn0mzb3Cu1Bu8lwtUmOR7AZ/1lvur1lbgD0fddXQTx8O72le MXV3j+wmyOgCU4+Fue5Im8mUDb3yJDqjvX4428GqbkAB3mD3Jr99BN5+eh423twy Ye/j+BnPbgqmA2wOOElq6Spqz4ctPBRpZGBECSX6g1fOosDaXUGxg9FdvLcUcpck H/Q5hhztxp/nbDe0UraaRA2J0SVHokjI3+VnNYzqSnix7LX9MUE= -----END CERTIFICATE-----Generated at Sun Apr 19 12:52:41 2026 by rpki-client