$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: /QO0gxeinuO7W8fPB7V4yv9Sj5tfsBW6DChfcvrXYCY= Subject key identifier: CF:DA:D0:7D:40:64:91:A6:B4:D4:2D:24:52:FF:8F:92:3F:A1:89:6E Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 2939E96C462D6FC94ADDF09784D5ABA6BC0EF91D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 026B Signing time: Fri 17 Apr 2026 16:01:20 +0000 Manifest this update: Fri 17 Apr 2026 15:56:20 +0000 Manifest next update: Tue 21 Apr 2026 01:04:20 +0000 Files and hashes: 1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: iWmsB5/p4SJdDGDDgDskDvuw8kDYYc32pXBSynfi4D4=) 2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: WTpBpvKR890Syqxa6avvQWcRw6GgaVVtjnqm7fq2BQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:39:e9:6c:46:2d:6f:c9:4a:dd:f0:97:84:d5:ab:a6:bc:0e:f9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Apr 17 15:56:20 2026 GMT Not After : Apr 21 01:04:20 2026 GMT Subject: CN=CFDAD07D406491A6B4D42D2452FF8F923FA1896E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:62:20:f0:aa:c9:33:3c:b9:42:56:83:65: f6:7e:cc:74:53:7e:11:50:23:44:05:75:15:9a:d9: 5f:23:58:99:23:1e:7a:46:e2:a0:b5:3a:a0:7f:ba: e1:a2:3e:60:0f:cb:28:ae:97:94:dc:d4:f5:9f:d9: 02:d5:28:9f:34:75:42:df:cb:a2:04:d0:ae:d8:09: 1f:28:be:5f:c0:57:04:4c:39:fc:1d:9f:a9:88:ed: be:68:2d:0d:7f:ea:42:cd:dc:a6:a9:dd:2a:6d:cf: fe:02:0f:52:32:22:d2:d6:3e:e4:54:00:10:39:6b: d7:e9:34:dc:e5:c2:53:37:e2:ff:9d:05:eb:fc:49: 8e:00:95:8e:a0:d5:43:be:14:02:16:1e:03:8a:ba: 77:be:a1:47:6e:4c:1c:30:13:b0:73:2a:bb:e2:67: b7:11:91:94:8d:a8:b3:98:52:a8:d9:3c:9b:66:8e: 4f:27:d6:71:01:f4:dc:89:27:c4:c4:29:fd:3a:0f: 72:ef:e0:ab:0f:9b:1e:1e:52:68:43:2c:8e:3b:2d: f7:1d:aa:12:bb:e9:f7:37:2f:44:1f:0e:90:22:eb: d6:20:63:ca:32:f9:6e:31:ed:2b:6b:89:6e:33:ab: df:d6:48:a0:b5:d6:82:52:97:ec:ed:49:b7:d9:49: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:D0:7D:40:64:91:A6:B4:D4:2D:24:52:FF:8F:92:3F:A1:89:6E X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ce:e2:65:12:00:35:88:41:11:93:86:05:41:77:57:cd:9e: 65:37:69:31:f7:a3:09:56:a6:7a:00:e5:03:80:0a:f3:05:e5: 70:1c:de:e3:09:d8:a7:e7:f7:52:75:d3:30:83:3d:6c:4d:d9: b6:7a:27:52:e6:b3:77:ad:a2:c8:7c:29:3d:4b:a4:5b:9a:e8: 60:0c:52:6b:3a:f5:ae:29:81:b5:fd:70:b1:c5:3c:88:a8:74: eb:e0:f7:3c:39:c7:03:01:e7:a5:81:e8:68:cb:48:d0:1f:2d: be:27:46:f0:77:61:57:5a:b1:98:08:a0:99:a5:96:a0:cb:a8: 32:1d:ef:44:1c:8b:d1:e9:a6:73:25:d4:75:80:66:bd:31:30: a4:73:80:a0:21:a1:c2:b6:cc:0c:b5:5b:2d:d1:37:8b:f7:4a: b2:a1:37:db:69:f7:b6:55:96:cb:f2:0b:96:10:35:d3:87:43: f6:41:17:fb:60:79:69:a9:b9:40:af:c3:85:69:3e:92:36:1d: cb:7e:98:87:b7:0f:70:1b:2e:f3:1c:10:87:ab:23:02:b2:1b: 94:23:40:db:e6:26:e5:53:c4:bb:8e:fc:20:33:ff:bc:c6:8b: a9:48:91:0c:14:ac:19:4a:c3:77:4b:f5:d2:e3:db:22:91:e9: 2a:ae:20:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTnpbEYtb8lK3fCXhNWrprwO+R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNjA0MTcxNTU2MjBaFw0yNjA0MjEwMTA0MjBaMDMxMTAvBgNV BAMTKENGREFEMDdENDA2NDkxQTZCNEQ0MkQyNDUyRkY4RjkyM0ZBMTg5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwxGIg8KrJMzy5QlaDZfZ+zHRT fhFQI0QFdRWa2V8jWJkjHnpG4qC1OqB/uuGiPmAPyyiul5Tc1PWf2QLVKJ80dULf y6IE0K7YCR8ovl/AVwRMOfwdn6mI7b5oLQ1/6kLN3Kap3Sptz/4CD1IyItLWPuRU ABA5a9fpNNzlwlM34v+dBev8SY4AlY6g1UO+FAIWHgOKune+oUduTBwwE7BzKrvi Z7cRkZSNqLOYUqjZPJtmjk8n1nEB9NyJJ8TEKf06D3Lv4KsPmx4eUmhDLI47Lfcd qhK76fc3L0QfDpAi69YgY8oy+W4x7StriW4zq9/WSKC11oJSl+ztSbfZSWjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9rQfUBkkaa01C0kUv+Pkj+hiW4wHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHO4mUSADWIQRGThgVBd1fNnmU3aTH3owlW pnoA5QOACvMF5XAc3uMJ2Kfn91J10zCDPWxN2bZ6J1Lms3etosh8KT1LpFua6GAM Ums69a4pgbX9cLHFPIiodOvg9zw5xwMB56WB6GjLSNAfLb4nRvB3YVdasZgIoJml lqDLqDId70Qci9HppnMl1HWAZr0xMKRzgKAhocK2zAy1Wy3RN4v3SrKhN9tp97ZV lsvyC5YQNdOHQ/ZBF/tgeWmpuUCvw4VpPpI2Hct+mIe3D3AbLvMcEIerIwKyG5Qj QNvmJuVTxLuO/CAz/7zGi6lIkQwUrBlKw3dL9dLj2yKR6SquIJI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:49 2026 by rpki-client