$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: rSinqF0p4hHWJ9qlqYBDr7HE1J4XyH2WoF96/l7s3T0= Subject key identifier: 25:D1:EE:CC:62:98:97:7A:84:E1:27:CE:C8:49:0F:37:2B:8E:6D:70 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 2D5AA00E34E4C8F4FB768E8E879966081BA3F1AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 03AA Signing time: Sun 19 Apr 2026 08:02:47 +0000 Manifest this update: Sun 19 Apr 2026 07:57:46 +0000 Manifest next update: Wed 22 Apr 2026 10:31:46 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: kj3Va/8wSHksYied1qkOcAHkBVKdF7m1RMTnT7xu/jU=) 2: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 4zBW+UQ76Hv01Wbbwf5eF4kgEpmM4CbfzvVDFe12n+0=) 3: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: pqpmvzEVRmWuN5D6QrfPm2L6wE5D0jUQeK/eBAQ1YAg=) 4: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: X5EvMEBlrSRW+HPtHYFfHFbBOHTDK9FLsUNGXxD6WIM=) 5: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 6: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: yYK46UzMnyhIEh7W6TaYqux96YYC1ov1TUUXPqlN0vk=) 7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: m5ppv+yynAEqteuPqjvU2pSSwALPEakKRId/1LTSW8g=) 8: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 9: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: z56FNRqMW1pl4C3SYz2WwOR/mBmukms0xuWoBahs0W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:a0:0e:34:e4:c8:f4:fb:76:8e:8e:87:99:66:08:1b:a3:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Apr 19 07:57:46 2026 GMT Not After : Apr 22 10:31:46 2026 GMT Subject: CN=25D1EECC6298977A84E127CEC8490F372B8E6D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:a4:ad:7d:4a:d5:6a:9d:ca:b9:2c:c6:bb: 3a:4a:40:d0:e2:86:77:a6:58:0e:64:e5:0e:1a:a8: c3:0d:86:a3:09:cf:c9:e8:2e:d9:1b:44:7f:c6:ac: 8a:6a:a4:bd:1a:93:5d:5f:06:80:c1:ef:17:60:81: 16:4f:3a:e0:6b:18:5a:15:a2:63:4b:54:65:04:8e: 6e:47:d1:7f:35:a9:ac:d0:7a:50:a6:b2:51:b1:2d: a9:37:30:b0:0e:2d:c0:81:bb:ef:a1:c3:2a:65:75: fd:cf:51:d9:87:6f:2e:f6:18:6d:7e:78:b7:63:75: 9c:a8:17:f2:5f:ac:b3:39:30:68:7a:35:e6:fd:f5: 86:27:f2:76:b3:8f:66:89:48:8e:2a:46:2f:22:34: 17:d3:77:90:45:41:8e:08:17:0a:a4:3d:0a:07:70: 19:55:8f:74:12:de:2c:92:89:b4:ce:9c:3e:0d:4e: ff:0a:2d:05:15:e3:df:45:e7:87:64:66:eb:be:a8: 05:4c:76:89:11:05:52:90:e0:c8:ce:21:95:f1:04: cc:fb:3d:c5:92:49:e4:66:b4:05:18:ed:1b:b0:ff: 71:7a:44:aa:35:a1:ff:c1:4c:f6:33:f5:1d:11:b6: c9:a6:83:70:f5:b1:4b:a0:fd:fc:0c:0a:39:85:a3: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:EE:CC:62:98:97:7A:84:E1:27:CE:C8:49:0F:37:2B:8E:6D:70 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d7:5e:f2:e3:04:c0:9b:7a:be:b4:78:8f:89:ac:0e:e3:2a: 08:8b:56:dd:d0:77:06:a9:56:ce:25:26:64:fe:c3:ca:ce:23: 3c:b1:8a:8a:22:c3:4e:86:f4:67:50:08:cf:19:01:48:76:3b: cb:35:3b:9b:1c:24:8b:4d:e1:06:10:23:38:38:75:8f:9c:cd: 13:d4:85:81:3c:50:84:fe:5a:33:13:fd:a9:4b:a4:c1:05:61: ef:25:70:29:df:44:4b:d2:9e:11:a5:f3:56:67:a1:89:dd:8f: 86:e4:bf:a5:26:bc:53:5d:60:f2:b1:26:97:01:77:c6:e4:d7: 90:f4:e8:d1:78:0e:e9:ee:3e:17:16:f5:bf:c9:74:68:5d:e9: af:78:7d:a5:20:af:e3:3a:6c:3f:83:3f:68:54:3d:a1:73:ec: c4:65:db:65:e7:56:7e:61:43:54:12:fb:50:4f:80:e6:af:cc: 90:4f:e1:84:e7:2f:d3:bf:85:6a:a1:bc:b3:1b:d5:7d:d4:21: b0:e9:b1:33:3e:25:68:87:0e:f5:58:91:90:18:51:0e:a5:00: f3:6a:5a:1b:98:90:7e:76:fd:4d:df:49:f0:6e:20:3f:02:cc: c9:01:61:94:a5:c0:81:b2:68:db:c8:5e:ae:49:db:3c:48:af: 05:f1:aa:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVqgDjTkyPT7do6Oh5lmCBuj8aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNjA0MTkwNzU3NDZaFw0yNjA0MjIxMDMxNDZaMDMxMTAvBgNV BAMTKDI1RDFFRUNDNjI5ODk3N0E4NEUxMjdDRUM4NDkwRjM3MkI4RTZENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJ6StfUrVap3KuSzGuzpKQNDi hnemWA5k5Q4aqMMNhqMJz8noLtkbRH/GrIpqpL0ak11fBoDB7xdggRZPOuBrGFoV omNLVGUEjm5H0X81qazQelCmslGxLak3MLAOLcCBu++hwypldf3PUdmHby72GG1+ eLdjdZyoF/JfrLM5MGh6Neb99YYn8nazj2aJSI4qRi8iNBfTd5BFQY4IFwqkPQoH cBlVj3QS3iySibTOnD4NTv8KLQUV499F54dkZuu+qAVMdokRBVKQ4MjOIZXxBMz7 PcWSSeRmtAUY7Ruw/3F6RKo1of/BTPYz9R0Rtsmmg3D1sUug/fwMCjmFozutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdHuzGKYl3qE4SfOyEkPNyuObXAwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXXXvLjBMCber60eI+JrA7jKgiLVt3Qdwap Vs4lJmT+w8rOIzyxiooiw06G9GdQCM8ZAUh2O8s1O5scJItN4QYQIzg4dY+czRPU hYE8UIT+WjMT/alLpMEFYe8lcCnfREvSnhGl81ZnoYndj4bkv6UmvFNdYPKxJpcB d8bk15D06NF4DunuPhcW9b/JdGhd6a94faUgr+M6bD+DP2hUPaFz7MRl22XnVn5h Q1QS+1BPgOavzJBP4YTnL9O/hWqhvLMb1X3UIbDpsTM+JWiHDvVYkZAYUQ6lAPNq WhuYkH52/U3fSfBuID8CzMkBYZSlwIGyaNvIXq5J2zxIrwXxqp0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:52 2026 by rpki-client