$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: QmjGJ38PfZapcNaRYbX71z4T3HFxCxEQqf0YEPPbDQA= Subject key identifier: 22:2E:FE:E0:78:C6:2B:A7:F5:ED:A3:0F:1B:09:7D:22:C1:AC:3A:92 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 32E15D590F311EEA866DFD4F833D5512226047F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 03D6 Signing time: Sat 18 Apr 2026 08:11:39 +0000 Manifest this update: Sat 18 Apr 2026 08:06:39 +0000 Manifest next update: Tue 21 Apr 2026 12:37:39 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: t+Kmgb/Lc66WNXM/hz6kB0P2sTm/RM/6FwDlJaBmzfk=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: IxN9svLI+xbQZepLoYvevJgYJZXm9f4dHwY2r7LPXIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e1:5d:59:0f:31:1e:ea:86:6d:fd:4f:83:3d:55:12:22:60:47:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Apr 18 08:06:39 2026 GMT Not After : Apr 21 12:37:39 2026 GMT Subject: CN=222EFEE078C62BA7F5EDA30F1B097D22C1AC3A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:fa:ff:53:d5:d4:3c:b5:83:39:dd:f2:b3: 91:d4:9a:f8:e1:59:c8:cb:9f:a3:06:b1:9a:ee:40: fb:eb:3b:79:f4:69:4e:89:85:0b:ab:ce:54:bd:c9: 79:10:16:d5:e6:c8:84:94:d3:14:ce:68:d7:c5:ce: 67:66:66:4e:4f:c8:64:08:b2:a2:a9:63:2c:13:5a: b7:91:e2:cd:bd:41:1b:fd:e1:6e:28:89:ff:94:39: 96:aa:48:7d:c2:80:45:96:6b:91:e4:50:af:ab:7f: 3a:30:01:d2:a1:14:05:f8:c0:74:c8:ac:86:7e:13: 65:d1:76:9e:68:79:76:2c:00:5e:fe:29:cc:40:0b: 9e:15:b1:11:74:59:d3:83:61:de:6f:f9:5b:e5:54: 63:80:67:b8:85:bc:57:70:0b:5d:4e:e8:db:03:9d: ef:5b:31:af:8e:1a:06:15:36:89:64:9d:bf:89:7f: b9:d7:70:4e:1b:11:7a:1e:cd:61:7f:41:9f:2a:ab: ce:30:10:c9:51:00:7b:94:12:1d:10:1b:ef:fd:8a: 95:8b:68:5d:21:47:a3:73:fb:51:49:0b:17:25:92: 15:e0:69:a0:01:a7:0c:c7:7f:b1:66:87:e7:91:6b: a4:b8:fe:c6:d8:1d:d3:7d:e3:93:f5:a5:94:00:99: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2E:FE:E0:78:C6:2B:A7:F5:ED:A3:0F:1B:09:7D:22:C1:AC:3A:92 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:c3:ff:92:fd:48:46:c7:51:9f:64:07:4e:b0:68:21:87: 2c:4e:fa:45:03:15:5a:1d:46:50:f2:62:da:ff:bc:54:e5:22: bc:6f:d6:a6:4b:ab:63:32:c8:e9:b0:f3:7f:aa:2f:fd:d7:40: 80:55:83:4c:61:02:5b:ac:c0:95:4a:e0:c2:35:54:95:43:c6: aa:89:49:e5:a6:6f:ed:55:96:5d:97:0f:4f:e4:fe:18:1e:80: 89:03:21:50:5d:9f:3e:1b:68:21:53:12:90:5f:0e:a0:2e:ad: 52:42:39:7a:ad:7f:50:ab:6c:a7:63:ef:51:56:90:6b:e7:a5: aa:6c:c6:b3:a8:24:85:b5:69:97:c4:6c:11:4c:c8:a2:01:d3: 1b:92:a9:9a:03:78:f7:e3:42:a0:2e:65:05:14:32:f0:b2:3d: 7f:9f:35:12:f2:7b:a8:0b:16:5c:64:68:41:74:ac:cf:22:14: 7b:af:b4:17:b0:93:22:b0:cd:be:60:2b:54:3d:52:5c:56:48: 8d:36:b9:f3:44:72:ed:1f:f5:ac:d7:3f:6e:59:7c:4e:54:9b: 40:c2:f8:3b:f6:33:e8:62:2e:7e:6a:50:5e:c7:fa:6b:73:ae: 5d:e9:dd:b8:78:93:65:8d:b8:d2:6c:7d:a4:b8:72:6e:0c:0b: 82:81:3f:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuFdWQ8xHuqGbf1Pgz1VEiJgR/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNjA0MTgwODA2MzlaFw0yNjA0MjExMjM3MzlaMDMxMTAvBgNV BAMTKDIyMkVGRUUwNzhDNjJCQTdGNUVEQTMwRjFCMDk3RDIyQzFBQzNBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN/r/U9XUPLWDOd3ys5HUmvjh WcjLn6MGsZruQPvrO3n0aU6JhQurzlS9yXkQFtXmyISU0xTOaNfFzmdmZk5PyGQI sqKpYywTWreR4s29QRv94W4oif+UOZaqSH3CgEWWa5HkUK+rfzowAdKhFAX4wHTI rIZ+E2XRdp5oeXYsAF7+KcxAC54VsRF0WdODYd5v+VvlVGOAZ7iFvFdwC11O6NsD ne9bMa+OGgYVNolknb+Jf7nXcE4bEXoezWF/QZ8qq84wEMlRAHuUEh0QG+/9ipWL aF0hR6Nz+1FJCxclkhXgaaABpwzHf7Fmh+eRa6S4/sbYHdN945P1pZQAmfYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIi7+4HjGK6f17aMPGwl9IsGsOpIwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyqw/+S/UhGx1GfZAdOsGghhyxO+kUDFVod RlDyYtr/vFTlIrxv1qZLq2MyyOmw83+qL/3XQIBVg0xhAluswJVK4MI1VJVDxqqJ SeWmb+1Vll2XD0/k/hgegIkDIVBdnz4baCFTEpBfDqAurVJCOXqtf1CrbKdj71FW kGvnpapsxrOoJIW1aZfEbBFMyKIB0xuSqZoDePfjQqAuZQUUMvCyPX+fNRLye6gL FlxkaEF0rM8iFHuvtBewkyKwzb5gK1Q9UlxWSI02ufNEcu0f9azXP25ZfE5Um0DC +Dv2M+hiLn5qUF7H+mtzrl3p3bh4k2WNuNJsfaS4cm4MC4KBPzg= -----END CERTIFICATE-----Generated at Sun Apr 19 14:24:06 2026 by rpki-client