$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: px9kOphtVykkoV8+9gMgnlKcKTYPtIAL63IgT25anSk= Subject key identifier: C0:E8:5B:17:AE:9F:10:9B:A4:82:A6:4F:7C:5C:2A:40:C9:CA:A3:1A Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 07C6BAA7BBC9F49A75D5D9E2CDF7F3F33B53B92B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 0147 Signing time: Sat 18 Apr 2026 07:50:42 +0000 Manifest this update: Sat 18 Apr 2026 07:45:42 +0000 Manifest next update: Tue 21 Apr 2026 09:08:42 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: C39+1H0Bi9PjQOJYBQUdIEuPft+etivv7dszlwc93Yw=) 2: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: +/N3DsGhdJUZyRGC4N9f9R2ZbeB7qPD2DAQ97WyJYBk=) 3: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: W8SFgzAcNx+p0aNxC8pTxKp3qid7yNPp1uJj8RpO6jw=) 4: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: 21V3VhnP5vTGuoZJBlAnPnSOpi0hh8WGXahM4wGxnKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c6:ba:a7:bb:c9:f4:9a:75:d5:d9:e2:cd:f7:f3:f3:3b:53:b9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Apr 18 07:45:42 2026 GMT Not After : Apr 21 09:08:42 2026 GMT Subject: CN=C0E85B17AE9F109BA482A64F7C5C2A40C9CAA31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:8b:95:eb:b9:86:e6:95:6e:f9:93:6a:c7: 66:04:50:a9:c0:07:d8:1f:74:e3:be:c8:dc:84:fc: b3:4b:df:d8:1f:a9:87:a2:3f:e1:b6:2c:6f:04:9c: fc:90:42:c7:1f:e8:f6:b9:4d:a5:e5:b4:79:80:43: 0d:21:9b:2f:06:b3:4e:7e:5b:97:50:4d:47:e8:71: 7e:41:03:12:6b:c3:89:e9:5e:d9:19:9a:23:b7:23: 72:bb:0f:2a:da:fe:48:d4:f0:f7:fb:5c:b5:07:00: 0c:1f:53:3d:77:83:f7:0e:c8:14:26:51:c0:52:54: 53:47:a0:d2:d6:f5:74:00:64:de:00:d4:52:a9:45: d7:50:60:cc:df:22:36:c4:10:cd:d5:eb:f8:20:bd: d2:a2:0c:be:8a:4a:8d:29:ce:da:54:0a:b6:5b:ba: 19:09:f0:0e:44:ae:1d:1b:18:30:7d:fa:ee:68:97: cc:44:b4:c0:4e:fc:a1:12:e5:39:9a:2f:58:09:2d: 99:ce:4a:21:fa:3e:3c:5b:33:80:38:2c:b7:f9:be: 28:42:d5:fe:38:c6:2e:10:60:b6:47:69:34:6d:1f: 2f:75:5e:b9:ce:34:c3:86:22:d0:61:5f:f1:22:b3: b2:66:10:50:d1:66:88:3b:33:85:db:3e:8e:f4:9d: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:5B:17:AE:9F:10:9B:A4:82:A6:4F:7C:5C:2A:40:C9:CA:A3:1A X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:44:54:24:0b:fc:80:d1:08:de:8a:4a:a5:53:6d:7a:d6:c9: f4:7c:ae:7e:fe:0e:ec:21:0d:db:a8:98:b2:30:71:f4:de:76: fb:53:ca:0d:8d:37:ee:cf:87:d8:15:44:64:4d:ee:8b:cf:85: 06:9a:d1:5d:5b:dc:4d:25:e2:b4:87:fa:98:26:41:31:1c:d4: 68:72:12:3f:cf:74:87:eb:94:af:1e:82:31:51:9b:d4:70:03: 82:20:f5:99:13:a1:bd:99:a5:22:82:06:83:90:ef:51:0e:76: 30:09:b5:7c:6a:82:d2:21:86:b2:e1:6b:c2:ab:f2:50:36:e9: fc:96:8c:62:0c:8b:15:1e:e6:d5:23:b6:1b:cd:30:7e:c9:9d: 97:19:4e:f6:80:97:0c:2e:f8:0e:b3:ed:35:92:c9:3b:88:97: c6:f3:6b:61:fe:72:c6:5a:3d:a9:e6:6a:50:9f:56:97:1a:93: e4:cd:d2:15:a2:ae:2b:90:d5:4a:7e:33:b8:9e:90:70:c0:9f: 7f:f0:88:8d:67:05:3c:95:5f:df:19:5c:a3:54:67:eb:45:43: 87:1d:4b:04:24:2a:52:24:bd:03:41:74:7b:4a:d4:15:fe:ed: d7:e5:61:15:3a:2f:c2:60:62:21:98:53:79:cb:fc:d7:d6:79: 71:42:39:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8a6p7vJ9Jp11dnizffz8ztTuSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNjA0MTgwNzQ1NDJaFw0yNjA0MjEwOTA4NDJaMDMxMTAvBgNV BAMTKEMwRTg1QjE3QUU5RjEwOUJBNDgyQTY0RjdDNUMyQTQwQzlDQUEzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGIuV67mG5pVu+ZNqx2YEUKnA B9gfdOO+yNyE/LNL39gfqYeiP+G2LG8EnPyQQscf6Pa5TaXltHmAQw0hmy8Gs05+ W5dQTUfocX5BAxJrw4npXtkZmiO3I3K7Dyra/kjU8Pf7XLUHAAwfUz13g/cOyBQm UcBSVFNHoNLW9XQAZN4A1FKpRddQYMzfIjbEEM3V6/ggvdKiDL6KSo0pztpUCrZb uhkJ8A5Erh0bGDB9+u5ol8xEtMBO/KES5TmaL1gJLZnOSiH6PjxbM4A4LLf5vihC 1f44xi4QYLZHaTRtHy91XrnONMOGItBhX/Eis7JmEFDRZog7M4XbPo70nXbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOhbF66fEJukgqZPfFwqQMnKoxowHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJEVCQL/IDRCN6KSqVTbXrWyfR8rn7+Duwh DduomLIwcfTedvtTyg2NN+7Ph9gVRGRN7ovPhQaa0V1b3E0l4rSH+pgmQTEc1Ghy Ej/PdIfrlK8egjFRm9RwA4Ig9ZkTob2ZpSKCBoOQ71EOdjAJtXxqgtIhhrLha8Kr 8lA26fyWjGIMixUe5tUjthvNMH7JnZcZTvaAlwwu+A6z7TWSyTuIl8bza2H+csZa PanmalCfVpcak+TN0hWiriuQ1Up+M7iekHDAn3/wiI1nBTyVX98ZXKNUZ+tFQ4cd SwQkKlIkvQNBdHtK1BX+7dflYRU6L8JgYiGYU3nL/NfWeXFCOVY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:17 2026 by rpki-client