$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: gY2V3loM8ZbV50k+o24HsWimGqPS4KVT/QweNu5eiVM= Subject key identifier: 1C:80:86:BC:B2:A6:3D:17:57:C0:AB:95:4E:1B:FD:CF:F0:72:77:13 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 168944DB611A84B847DAE860950C61D8891A89DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 02CD Signing time: Thu 16 Apr 2026 15:31:19 +0000 Manifest this update: Thu 16 Apr 2026 15:26:19 +0000 Manifest next update: Sun 19 Apr 2026 19:59:19 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) 3: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: M7SRv84d/oYER4BurK4PZgSEGk4K7KK5TO3mQIrfz50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:89:44:db:61:1a:84:b8:47:da:e8:60:95:0c:61:d8:89:1a:89:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Apr 16 15:26:19 2026 GMT Not After : Apr 19 19:59:19 2026 GMT Subject: CN=1C8086BCB2A63D1757C0AB954E1BFDCFF0727713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:60:17:0b:70:85:2c:5e:7b:d1:1b:80:fc: 12:47:78:44:76:00:6d:d1:85:2a:aa:02:f0:f2:bb: 13:ce:e7:de:1d:b7:3e:24:78:da:d7:70:1c:61:46: d6:f7:87:2a:00:ad:d5:fa:bb:bf:24:6b:2a:13:23: cf:12:ea:3f:7d:67:1d:e5:8d:c7:cf:46:46:0e:bf: 43:ce:cd:c6:cf:e1:0b:cb:16:2c:65:a4:ad:ff:8f: 0c:b7:a7:9e:a1:75:43:d4:70:5d:71:c4:1b:57:65: a1:e7:af:b9:82:c0:7b:e1:bd:32:16:b2:58:df:14: 3d:5f:77:9c:0c:14:4e:5e:10:93:13:1b:61:e9:d9: bb:39:a3:7c:20:3f:2f:10:3d:f5:f2:3c:0a:5f:ec: b7:30:5d:10:21:69:ab:7a:b9:04:72:63:f3:12:1c: ef:13:88:62:52:94:d7:70:28:ae:02:92:07:fe:75: 70:24:13:96:96:5a:7f:6f:8c:ca:b5:3b:53:76:4f: a8:12:27:aa:bd:21:e3:59:1c:38:2d:bf:9c:74:e9: 9e:f3:87:e6:f9:31:e5:5a:b6:9b:00:10:f6:10:83: 5a:73:6a:7d:ba:32:ce:bb:70:3d:c1:46:c8:4a:75: 8d:c9:81:b9:9f:6a:5c:e5:e1:35:fe:ea:6c:58:a7: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:80:86:BC:B2:A6:3D:17:57:C0:AB:95:4E:1B:FD:CF:F0:72:77:13 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:61:75:2c:84:20:3a:19:d6:36:65:74:ec:d8:f2:28:3d:08: 2a:1d:18:7e:13:54:4f:02:a1:e3:a0:30:81:32:52:5c:d0:66: cd:e5:d1:6f:71:c7:11:87:cf:14:b1:a3:13:8b:9a:16:12:eb: 97:17:99:8b:0c:85:f6:6b:2b:ab:59:5c:33:c6:68:02:96:99: 07:2a:c6:23:37:4c:61:0e:db:93:de:0f:13:47:37:1d:bf:d1: 6b:9b:be:6e:89:22:17:ec:6e:c4:05:0c:4b:88:5b:7e:b5:65: bf:28:e3:12:21:92:3f:1a:23:d7:a4:d0:4d:7e:ed:c8:75:ba: 77:91:16:ff:10:33:19:82:aa:3c:8a:c2:7e:f0:ed:5c:48:39: 03:f7:b2:09:57:43:96:6d:87:c7:14:08:c8:16:e7:ab:08:d2: 7d:5b:8a:18:b4:41:97:a0:c7:6a:b7:56:e1:0d:d8:0c:1f:10: d5:82:c2:f0:cd:8a:02:f3:ee:32:69:93:e8:d9:15:b4:9b:82: e8:21:91:8f:e5:8d:ce:6f:f0:33:c9:03:1a:55:e5:99:af:de: 36:8e:5a:18:10:84:cc:bb:93:7a:f6:10:49:67:e8:79:56:06: f7:f1:b4:f2:3c:ca:6f:54:f1:9d:07:c1:01:c0:82:26:9e:e2: b0:c6:47:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFolE22EahLhH2uhglQxh2Ikaid0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNjA0MTYxNTI2MTlaFw0yNjA0MTkxOTU5MTlaMDMxMTAvBgNV BAMTKDFDODA4NkJDQjJBNjNEMTc1N0MwQUI5NTRFMUJGRENGRjA3Mjc3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi0GAXC3CFLF570RuA/BJHeER2 AG3RhSqqAvDyuxPO594dtz4keNrXcBxhRtb3hyoArdX6u78kayoTI88S6j99Zx3l jcfPRkYOv0POzcbP4QvLFixlpK3/jwy3p56hdUPUcF1xxBtXZaHnr7mCwHvhvTIW sljfFD1fd5wMFE5eEJMTG2Hp2bs5o3wgPy8QPfXyPApf7LcwXRAhaat6uQRyY/MS HO8TiGJSlNdwKK4Ckgf+dXAkE5aWWn9vjMq1O1N2T6gSJ6q9IeNZHDgtv5x06Z7z h+b5MeVatpsAEPYQg1pzan26Ms67cD3BRshKdY3Jgbmfalzl4TX+6mxYp0IhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHICGvLKmPRdXwKuVThv9z/BydxMwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1hdSyEIDoZ1jZldOzY8ig9CCodGH4TVE8C oeOgMIEyUlzQZs3l0W9xxxGHzxSxoxOLmhYS65cXmYsMhfZrK6tZXDPGaAKWmQcq xiM3TGEO25PeDxNHNx2/0Wubvm6JIhfsbsQFDEuIW361Zb8o4xIhkj8aI9ek0E1+ 7ch1uneRFv8QMxmCqjyKwn7w7VxIOQP3sglXQ5Zth8cUCMgW56sI0n1bihi0QZeg x2q3VuEN2AwfENWCwvDNigLz7jJpk+jZFbSbgughkY/ljc5v8DPJAxpV5Zmv3jaO WhgQhMy7k3r2EEln6HlWBvfxtPI8ym9U8Z0HwQHAgiae4rDGR+E= -----END CERTIFICATE-----Generated at Fri Apr 17 22:24:07 2026 by rpki-client