$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft File: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft (raw, json) Hash identifier: GSyUn6PHDyfLsOEHH+eX4i2WFZIA0EV6E4PUf6SKYNs= Subject key identifier: 23:E4:33:66:AF:B7:E3:7B:EF:E7:5B:96:7C:27:3F:CA:55:99:9A:ED Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 7448653A64806CD5C58B72CB4D11E325B21E5819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft Manifest number: 0570 Signing time: Thu 16 Apr 2026 18:51:05 +0000 Manifest this update: Thu 16 Apr 2026 18:46:05 +0000 Manifest next update: Sun 19 Apr 2026 20:11:05 +0000 Files and hashes: 1: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: jo1KBhyVAdW9OA6F09uw8oWD6mwExSlA3+C7KIHuN6Q=) 2: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: Qw0+ysqj1KVf5j9DqaI7K+MxmgUrT3GSkvMgHW/v67k=) 3: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: 5O6lNVyD/C/5OKP6UYKpCdBH3i5ncEPG5K/VMMXfd54=) 4: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: /5tB0DAJa4sen7YCfad9KHCwDszSFMjEl56O7fFNIMo=) 5: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: pZ5vmt3P3V8uH/pHzOPkvbypUprjrLuGJdhlSVtPm9g=) 6: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: pJsTkpfzo7xE3BJVA5XsGXVaKZmkODwYxkUzqV/Mjn8=) 7: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VOIfqkhYV7A27hR2M6TBmFMxRIbI/EYr5T6urcxa98=) 8: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: pGI4/Kwvdhil44H0XWJAjsDRNFz8v7WG9O+CZDRu6VE=) 9: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: u3+Gv4d4/BRtcFioQ3iXkvS00ZPXgNATtZCq1qGFDDg=) 10: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 2Mq27Z4GY+v9moCxeCYZL1fUogW3fFAswHd6GqXUVIg=) 11: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: yS1IVsiEnwbOnSqpJEXN10El0v2hiAqhJMpyuNOQA9k=) 12: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: Tfax70osRa+squxlZvOIKvXWhimgGcgYtiz1uMyhE3E=) 13: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: jnP7c+pGP7PrVIikM4daA4hESYwCEHPqKerxGkWW0Ys=) 14: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: oy0y83CTwZgxshL7I//54BVUyro1yeEXDZHxRWdB8m4=) 15: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: TTh2GTDjmWSaoJl188YHUmBX+BSZHYyGpQm/zpjZNWw=) 16: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kQuHiDr0EacrTshG7dHgP6puMqC4eSM0VYASsjgtGzA=) 17: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: lBBQyFRPhNcF77tjvxke5+xF3Cs16rylkx1CIl6we88=) 18: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: YmPVLnSWobx5YhLdzaTVU3ly0HHNz0UejiZ/btj52uk=) 19: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: V3W/3hcFKl4/DOk4z/ipZIeDt+GJvtUyOIrpUDtwmvw=) 20: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: t8xpmwGTwBIEy+kGSQyDv0b1KxVpoPSxkwa6NrrmDaA=) 21: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: qOHmsXxOnT/77ezyNoXktCRxuQDt7aEAeLXvslUNW+I=) 22: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: z/2LdyQoJ/vUvRAoMVBjAtXimeSSxsGynq/LixqHwBo=) 23: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: sx7Ai/XKUoWhDvvqEtGwymbGQ4Y2JINv0ygpz/5KsWo=) 24: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: 38Z8RhmOGwuZZ8bo8ApZ8Vt6uHkxh6jkggk/GIF6j2w=) 25: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: OPgctcDdxT8SYsP0oUqZFX65ifax+hBFU+ZED4ybb5M=) 26: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl (hash: PEWBbrAVrl+CihUELBtglO6uuNymrTvFr5ywlLotwPE=) 27: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: /9+wQDA/pPBkivDuenKeLQSITF6OhmVLuuy1cGgfjlw=) 28: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: MdLxnaQRIgohnJ5EF+rgtm0ISUaZP3ORSkVcAUCFKs8=) 29: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: oPagBimqhudPYpPJNbFjZ2B6yoqYzPSrxyN2XBm/wsE=) 30: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: /8JBKRuOu3HmoBk4eXsCkAe6KkGAWuZP1vMK8BDuQfk=) 31: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: buNXmMusUG2kwKSmAQu3isavGdpbNW0SL5z8JYEY7qc=) 32: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: cxt1Yq/IKja1ffWBBrz4GZsuAGipucxRXhH3AmwoEWs=) 33: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: OIESnpY4oHzRxvi4zbTiBv7LuhxOpAJnAq903LiQaxo=) 34: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: amR4nrg/9FRneM1hYFFEXvekiDFUlRRKM/5Rs+DhOGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:48:65:3a:64:80:6c:d5:c5:8b:72:cb:4d:11:e3:25:b2:1e:58:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Apr 16 18:46:05 2026 GMT Not After : Apr 19 20:11:05 2026 GMT Subject: CN=23E43366AFB7E37BEFE75B967C273FCA55999AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:45:40:7c:3d:33:71:16:dd:19:73:36:f5: 5f:ec:26:0c:16:bd:75:c9:38:d1:60:0c:1f:37:5e: 76:34:00:8e:48:fc:83:d6:d1:bf:77:f3:2f:02:d2: 41:d6:68:87:ea:64:1b:ff:a6:7a:08:4b:a5:6c:db: 4a:18:74:18:c6:e3:3f:89:5d:5b:7c:bd:5d:c3:5d: 07:ae:43:07:8b:3b:3a:d6:31:88:dc:5f:a7:dc:ae: eb:e8:16:b4:27:ba:c5:b6:e4:5b:3e:80:1c:20:55: 8d:7a:e7:62:b2:98:1b:27:1e:31:ae:8c:7e:74:6f: 86:ee:41:38:f3:17:ce:3e:3b:d3:ce:65:02:5a:a3: 45:d7:f1:52:3f:4c:ce:97:3e:88:d7:cc:a3:f0:f5: 6e:41:44:81:20:6d:16:1e:40:f0:16:ef:37:9a:7c: dd:5e:04:07:20:64:67:21:c2:31:c3:8d:ef:1f:8e: 57:c4:84:55:72:b5:50:98:0f:4f:ab:b5:86:9d:f6: 5f:7d:53:dc:b4:3a:f8:82:25:1d:63:08:77:0d:9e: c7:d1:4c:ab:e7:96:2f:9c:1e:5b:ed:1f:01:2e:92: 28:89:c3:db:05:37:0e:a6:13:13:bf:25:30:91:9c: 66:47:61:1e:66:76:52:c6:79:1b:b3:5d:84:e1:0d: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:33:66:AF:B7:E3:7B:EF:E7:5B:96:7C:27:3F:CA:55:99:9A:ED X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:9d:44:b1:a6:20:18:79:7d:a6:ad:c5:d1:9d:e3:42:c0: 62:b2:d6:46:d1:0c:fc:b5:3d:32:01:89:4d:a1:d2:1f:8c:9d: c3:f3:2d:c7:69:75:98:d2:0c:ba:0d:e4:d4:29:7a:90:93:22: 92:8d:3f:36:4f:8b:1f:3d:b4:2f:ff:78:ef:b7:c6:7e:a1:e5: 91:23:53:5e:e2:1c:84:eb:7b:85:73:97:ae:ba:7b:9f:7f:cb: 51:eb:15:38:4a:d9:26:38:88:d7:aa:a2:a9:8c:b5:0d:cc:43: fc:89:9e:94:75:f4:ca:75:af:c0:d2:fa:25:d0:4a:0f:14:5d: 55:72:44:0b:18:ac:3f:09:09:5b:66:24:1e:1d:b1:bb:be:8f: 0f:59:9f:b1:f1:52:74:67:17:48:11:50:f7:5e:84:55:8a:38: f9:9e:db:55:2a:06:29:14:03:1c:73:91:8b:48:ae:7a:e0:63: e6:71:48:07:b0:43:75:12:85:d7:f2:8f:21:3c:92:52:43:72: 0a:52:05:5e:b2:d3:5b:bb:b4:8b:ab:4b:56:5a:a7:7b:4b:77: c0:a7:f1:00:61:86:67:f2:04:ca:b3:e3:e5:f7:bc:35:52:52: b8:39:74:72:ea:85:5d:ad:e5:a9:73:a1:44:d0:56:dc:f1:26: 20:22:ca:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEhlOmSAbNXFi3LLTRHjJbIeWBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNjA0MTYxODQ2MDVaFw0yNjA0MTkyMDExMDVaMDMxMTAvBgNV BAMTKDIzRTQzMzY2QUZCN0UzN0JFRkU3NUI5NjdDMjczRkNBNTU5OTlBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR10VAfD0zcRbdGXM29V/sJgwW vXXJONFgDB83XnY0AI5I/IPW0b938y8C0kHWaIfqZBv/pnoIS6Vs20oYdBjG4z+J XVt8vV3DXQeuQweLOzrWMYjcX6fcruvoFrQnusW25Fs+gBwgVY1652KymBsnHjGu jH50b4buQTjzF84+O9POZQJao0XX8VI/TM6XPojXzKPw9W5BRIEgbRYeQPAW7zea fN1eBAcgZGchwjHDje8fjlfEhFVytVCYD0+rtYad9l99U9y0OviCJR1jCHcNnsfR TKvnli+cHlvtHwEukiiJw9sFNw6mExO/JTCRnGZHYR5mdlLGeRuzXYThDWZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+QzZq+343vv51uWfCc/ylWZmu0wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZC RDhEMEJFOTIzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcQnUSxpiAYeX2mrcXRneNCwGKy1kbRDPy1 PTIBiU2h0h+MncPzLcdpdZjSDLoN5NQpepCTIpKNPzZPix89tC//eO+3xn6h5ZEj U17iHITre4Vzl666e59/y1HrFThK2SY4iNeqoqmMtQ3MQ/yJnpR19Mp1r8DS+iXQ Sg8UXVVyRAsYrD8JCVtmJB4dsbu+jw9Zn7HxUnRnF0gRUPdehFWKOPme21UqBikU AxxzkYtIrnrgY+ZxSAewQ3UShdfyjyE8klJDcgpSBV6y01u7tIurS1Zap3tLd8Cn 8QBhhmfyBMqz4+X3vDVSUrg5dHLqhV2t5alzoUTQVtzxJiAiyrQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:33:22 2026 by rpki-client