$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: OK5cIXAZmIb6eR4sizJ8YaTBRHvKSXnieTlCcdoCKpE= Subject key identifier: B8:69:7B:7F:D6:07:15:A9:1D:8B:5C:D4:C0:6C:74:24:8A:AA:FE:59 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 1C2AACF63EB63081510690607C1725E7A723408F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 020D Signing time: Thu 16 Apr 2026 22:30:51 +0000 Manifest this update: Thu 16 Apr 2026 22:25:51 +0000 Manifest next update: Mon 20 Apr 2026 06:09:51 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: 5ZsIXUIJqY9rtwbyTJJJawgkXjAps+4X10I2a5wHa68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2a:ac:f6:3e:b6:30:81:51:06:90:60:7c:17:25:e7:a7:23:40:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Apr 16 22:25:51 2026 GMT Not After : Apr 20 06:09:51 2026 GMT Subject: CN=B8697B7FD60715A91D8B5CD4C06C74248AAAFE59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:35:a3:3d:06:11:77:be:0c:89:9b:dc:40: f9:2d:0b:90:bc:4a:73:05:ec:ea:c1:5e:46:b0:96: 82:6f:cb:ac:fc:25:0f:90:33:b4:29:44:2b:b8:83: a8:da:6c:ce:1e:41:16:fe:0e:9a:86:e9:c5:22:e7: fc:4e:3c:8e:de:ee:19:ba:9a:fe:ee:b7:7e:f2:88: 39:96:27:79:b7:31:2c:4b:a2:fc:db:bc:65:21:f4: 1a:fa:c0:af:c2:d1:37:eb:67:a6:69:a8:6f:71:46: a6:90:88:5a:64:ab:73:b5:bc:76:0e:b0:59:67:2a: 30:6f:e1:20:31:bc:02:92:3b:15:5c:6e:88:b0:48: 09:1c:aa:7b:41:41:00:8e:2d:c3:1a:2e:fb:e4:49: 19:b2:b0:59:0b:e4:66:25:01:82:23:dd:9f:ed:14: 95:b4:6c:ce:94:52:f9:e2:ac:2f:c3:91:12:ab:ed: b0:d9:b7:01:27:d3:ca:fb:c1:32:49:cf:31:3c:36: fe:bc:47:6d:4f:23:85:2b:ec:e3:92:cb:b3:8c:c2: 73:f5:c5:d6:46:16:a1:72:98:a0:cf:f9:73:08:8a: 96:d9:3b:df:c8:0e:c5:9d:55:47:58:cd:3c:77:d2: a4:fb:24:76:30:6d:d7:62:b5:72:06:f6:db:c7:1c: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:69:7B:7F:D6:07:15:A9:1D:8B:5C:D4:C0:6C:74:24:8A:AA:FE:59 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:28:ed:87:71:f8:f8:76:1f:fb:21:99:26:7d:a9:21:e1:53: e2:88:49:62:3c:51:d0:36:8b:23:e2:45:6c:c4:bb:89:09:58: 85:6c:be:0c:12:e9:17:5d:cc:eb:82:67:da:e9:c5:af:38:10: bc:37:fa:e5:f4:98:69:ca:d9:d6:71:96:dc:31:d6:d5:1b:af: 87:21:64:7d:5f:2b:b8:3b:24:f1:26:9a:b4:12:2c:08:a2:ca: 1c:2f:1d:21:c1:f3:60:8c:9a:56:e1:bf:36:ce:39:44:ed:8f: 26:81:37:df:39:5e:2e:dd:93:62:0e:fb:b8:05:7c:3e:47:16: 34:34:c6:81:0a:ba:1c:d1:fe:29:0f:e3:0f:88:15:73:56:62: 7a:fc:c7:59:37:59:ed:db:55:df:1b:88:e1:e1:ed:cb:63:d1: 13:15:e9:a4:5d:2b:8b:b4:2e:cd:3e:64:55:44:de:78:a0:25: 79:73:3d:09:cf:f9:6e:ac:c6:d8:71:5c:b7:48:a5:e7:6e:15: 7d:a4:8c:f1:9b:d6:0f:03:03:25:e7:21:76:9e:f7:23:6f:b3: 29:6f:6f:31:7d:1e:ed:63:5a:f8:d7:1a:7e:14:da:6d:3b:23: 1c:07:c7:f1:66:57:39:74:cb:ad:d5:55:75:6e:76:a8:2d:ae: e5:f5:ac:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCqs9j62MIFRBpBgfBcl56cjQI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNjA0MTYyMjI1NTFaFw0yNjA0MjAwNjA5NTFaMDMxMTAvBgNV BAMTKEI4Njk3QjdGRDYwNzE1QTkxRDhCNUNENEMwNkM3NDI0OEFBQUZFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrzWjPQYRd74MiZvcQPktC5C8 SnMF7OrBXkawloJvy6z8JQ+QM7QpRCu4g6jabM4eQRb+DpqG6cUi5/xOPI7e7hm6 mv7ut37yiDmWJ3m3MSxLovzbvGUh9Br6wK/C0TfrZ6ZpqG9xRqaQiFpkq3O1vHYO sFlnKjBv4SAxvAKSOxVcboiwSAkcqntBQQCOLcMaLvvkSRmysFkL5GYlAYIj3Z/t FJW0bM6UUvnirC/DkRKr7bDZtwEn08r7wTJJzzE8Nv68R21PI4Ur7OOSy7OMwnP1 xdZGFqFymKDP+XMIipbZO9/IDsWdVUdYzTx30qT7JHYwbdditXIG9tvHHPgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGl7f9YHFakdi1zUwGx0JIqq/lkwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMo7Ydx+Ph2H/shmSZ9qSHhU+KISWI8UdA2 iyPiRWzEu4kJWIVsvgwS6RddzOuCZ9rpxa84ELw3+uX0mGnK2dZxltwx1tUbr4ch ZH1fK7g7JPEmmrQSLAiiyhwvHSHB82CMmlbhvzbOOUTtjyaBN985Xi7dk2IO+7gF fD5HFjQ0xoEKuhzR/ikP4w+IFXNWYnr8x1k3We3bVd8biOHh7ctj0RMV6aRdK4u0 Ls0+ZFVE3nigJXlzPQnP+W6sxthxXLdIpeduFX2kjPGb1g8DAyXnIXae9yNvsylv bzF9Hu1jWvjXGn4U2m07IxwHx/FmVzl0y63VVXVudqgtruX1rM8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:48 2026 by rpki-client