$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: wyMSoxQqJZuY1V4W7eaV6tlmB7RwxvoWirR/Wn3uYrY= Subject key identifier: 65:6A:DB:DA:04:E6:A7:69:D9:0B:40:DF:07:06:7A:D6:E8:B0:75:C1 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 72E12D93B495C9A55EBC97CBC194F7CBFE44D1D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 0126 Signing time: Fri 17 Apr 2026 07:30:43 +0000 Manifest this update: Fri 17 Apr 2026 07:25:43 +0000 Manifest next update: Mon 20 Apr 2026 15:25:43 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: sbJYmZ5H/v70+PT2btvtTNc/2eKMaLpEgYDwpNdUjmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:2d:93:b4:95:c9:a5:5e:bc:97:cb:c1:94:f7:cb:fe:44:d1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Apr 17 07:25:43 2026 GMT Not After : Apr 20 15:25:43 2026 GMT Subject: CN=656ADBDA04E6A769D90B40DF07067AD6E8B075C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:1d:c7:46:47:7b:ec:dc:de:f8:ed:68:8a: 98:6c:bb:3c:27:41:a6:e8:83:2b:2f:2d:db:3a:a9: fe:9e:78:7f:60:29:32:71:2f:35:f2:5e:61:99:52: fa:4c:6b:2c:b8:08:fb:01:27:27:e3:b5:ed:a2:78: 5d:42:f8:49:50:ee:a3:66:0b:bd:1f:64:cc:dd:5d: 07:96:3e:5c:82:89:c2:85:92:3f:68:b2:56:00:6e: 37:7c:bc:30:88:76:9f:d4:c6:3e:95:a4:52:57:e0: ca:20:27:dc:42:04:24:15:db:4c:65:2a:29:f6:df: 74:e9:17:10:c8:e0:6a:75:fd:2a:c0:de:eb:e0:5a: 91:33:c1:4c:43:32:00:5e:bb:3d:a9:55:8c:37:00: 0e:bb:94:a3:db:a4:a6:4f:bc:34:c4:65:13:49:7a: 22:43:c1:1d:ab:b5:cc:c2:46:a4:1b:2e:3e:1a:92: 93:a3:1d:9c:a9:a9:37:9e:43:6c:b9:24:f0:52:9e: df:22:db:96:80:e7:c0:43:4c:23:48:f3:67:ce:9e: 8f:2e:00:03:f0:a8:29:fd:e6:58:86:8b:50:fc:57: 93:73:52:84:72:15:4c:c2:fb:d6:de:14:5b:ff:91: a1:ef:cd:d8:f0:a6:a5:6c:2e:bf:34:9e:63:86:86: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:DB:DA:04:E6:A7:69:D9:0B:40:DF:07:06:7A:D6:E8:B0:75:C1 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5a:59:b7:67:83:eb:fa:8d:e3:d4:9b:e1:23:33:be:4c:1c: ad:02:2e:08:03:7b:b6:f7:89:f0:8d:de:b9:56:a8:4c:dd:a6: 53:b3:52:9a:43:a4:ab:c6:ce:a9:15:ad:c2:30:d3:ed:6a:00: 33:26:b1:4c:6b:5a:01:3e:18:3e:10:18:75:6b:a8:22:89:87: 14:de:e6:f7:ac:c1:b5:1f:0c:b3:cf:d5:55:11:39:5c:62:45: af:f7:ac:a5:43:29:b0:d6:4d:c8:92:79:3f:96:9b:17:17:c2: e4:6d:4f:77:eb:56:b7:3b:a6:40:0c:09:7f:d3:eb:46:50:22: 88:d7:ae:42:5e:3a:7d:c5:fb:dd:ee:77:28:9b:c6:64:90:eb: f6:07:00:ba:94:3b:a2:e4:7f:e1:20:ff:8e:69:17:58:bd:e7: c2:44:06:87:58:bc:59:34:5b:d4:18:e5:0d:be:79:5a:c3:b9: 31:9e:14:e3:40:04:99:bc:0c:f9:79:2f:ce:41:30:c9:4d:d3: 5d:4a:cb:25:ef:8d:97:0e:b0:dc:a7:bf:c6:99:25:93:60:6c: b6:95:f1:58:5d:e8:f5:ad:34:8f:2e:92:b0:9e:61:66:d8:a7: fe:ed:cd:bc:53:be:b3:4d:09:41:ee:c0:3c:c6:52:a9:bc:61: fe:76:a8:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuEtk7SVyaVevJfLwZT3y/5E0dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNjA0MTcwNzI1NDNaFw0yNjA0MjAxNTI1NDNaMDMxMTAvBgNV BAMTKDY1NkFEQkRBMDRFNkE3NjlEOTBCNDBERjA3MDY3QUQ2RThCMDc1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvR3HRkd77Nze+O1oiphsuzwn QabogysvLds6qf6eeH9gKTJxLzXyXmGZUvpMayy4CPsBJyfjte2ieF1C+ElQ7qNm C70fZMzdXQeWPlyCicKFkj9oslYAbjd8vDCIdp/Uxj6VpFJX4MogJ9xCBCQV20xl Kin233TpFxDI4Gp1/SrA3uvgWpEzwUxDMgBeuz2pVYw3AA67lKPbpKZPvDTEZRNJ eiJDwR2rtczCRqQbLj4akpOjHZypqTeeQ2y5JPBSnt8i25aA58BDTCNI82fOno8u AAPwqCn95liGi1D8V5NzUoRyFUzC+9beFFv/kaHvzdjwpqVsLr80nmOGhh81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWrb2gTmp2nZC0DfBwZ61uiwdcEwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5aWbdng+v6jePUm+EjM75MHK0CLggDe7b3 ifCN3rlWqEzdplOzUppDpKvGzqkVrcIw0+1qADMmsUxrWgE+GD4QGHVrqCKJhxTe 5veswbUfDLPP1VUROVxiRa/3rKVDKbDWTciSeT+WmxcXwuRtT3frVrc7pkAMCX/T 60ZQIojXrkJeOn3F+93udyibxmSQ6/YHALqUO6Lkf+Eg/45pF1i958JEBodYvFk0 W9QY5Q2+eVrDuTGeFONABJm8DPl5L85BMMlN011KyyXvjZcOsNynv8aZJZNgbLaV 8Vhd6PWtNI8ukrCeYWbYp/7tzbxTvrNNCUHuwDzGUqm8Yf52qP4= -----END CERTIFICATE-----Generated at Sat Apr 18 03:31:47 2026 by rpki-client