$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: EAoDFoPbNpdfCkhkSXVjGdetBnneXI4orVilBT8ddEM= Subject key identifier: B3:F1:34:BE:29:2D:FE:9E:73:F8:BE:EC:43:F0:19:DC:57:6E:1E:AE Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 6A1D7B05F0CD9A62407960D178C717A68CE4D321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 011D Signing time: Wed 15 Apr 2026 18:30:58 +0000 Manifest this update: Wed 15 Apr 2026 18:25:58 +0000 Manifest next update: Sat 18 Apr 2026 20:51:58 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: kUrOt/jAQ9R+MPAXr/Unl5UEW7zIvn1LFrVs4xgTARM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1d:7b:05:f0:cd:9a:62:40:79:60:d1:78:c7:17:a6:8c:e4:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Apr 15 18:25:58 2026 GMT Not After : Apr 18 20:51:58 2026 GMT Subject: CN=B3F134BE292DFE9E73F8BEEC43F019DC576E1EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:78:67:37:e7:f3:6a:d1:08:5d:96:07:22: 40:95:2f:da:86:4d:51:19:a2:1e:b4:e6:83:04:7c: 27:88:d0:ec:f3:f9:f8:2e:39:92:d3:8e:fb:3b:4d: 7e:c5:da:a2:c9:17:47:90:54:ec:bf:58:f0:fb:db: 09:98:f4:31:81:01:10:54:3c:ac:22:b3:9e:1b:c4: df:9e:b6:e7:ba:ae:37:93:82:2e:33:3d:1f:3b:7a: f8:03:19:30:91:df:fa:68:b2:e8:f0:e8:72:52:34: 2e:56:d4:12:7f:c8:92:32:6a:9b:65:65:c4:84:25: 8b:11:ea:f0:00:f6:bf:cb:a5:61:1a:30:ed:14:48: 03:33:dd:86:61:15:e0:2a:0c:50:c3:44:70:cf:1f: a0:76:c9:8f:cd:ec:99:df:30:70:e1:5e:15:cf:e1: a9:1f:0c:c9:5d:f3:7b:5a:ef:04:b1:8c:ff:4a:d9: b9:a8:4d:9d:b0:a0:59:21:82:02:32:f9:5f:a7:4b: b0:bb:0b:c4:8b:7f:bd:07:00:95:9d:d7:e5:6c:f3: fd:03:67:f1:ac:38:34:58:bb:30:ed:00:9b:ad:26: 9d:e7:7b:2f:ee:38:23:40:42:18:f6:b4:6c:06:00: 52:4c:a0:e4:d7:cb:9a:b6:cd:48:f6:52:cd:8d:e1: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:34:BE:29:2D:FE:9E:73:F8:BE:EC:43:F0:19:DC:57:6E:1E:AE X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d3:fe:47:10:15:9b:72:fd:6c:f9:de:b3:7c:6c:ea:16:a3: c0:d3:f0:f3:9c:5f:97:0b:62:e2:a7:b0:a2:b0:e1:84:6b:f4: d8:fd:78:2a:5e:c4:aa:97:e8:28:07:d7:1b:82:04:23:08:47: 8b:7d:62:17:89:eb:4e:0b:cb:0e:b4:11:6f:b7:7c:7c:a5:c0: ed:f6:ad:e2:4a:26:05:c5:c1:e9:e9:12:27:db:08:1f:2c:e6: b0:f6:e6:d9:7e:5f:39:c4:9f:2c:3c:fb:e3:a7:f3:b3:df:c2: 84:b8:ee:7f:b9:2d:af:1c:c0:45:d1:08:23:51:99:ae:60:28: a3:d0:c0:91:d5:68:94:4b:ac:30:6a:95:8c:83:c1:e6:75:ac: 0c:02:f1:3b:50:11:4b:8f:10:b1:5d:03:51:7c:8b:ff:8c:2c: 6e:b9:8a:63:9b:52:be:b2:61:ce:d9:b9:13:f0:d2:eb:2d:f2: 8a:c1:0b:3e:f8:d2:79:76:2b:27:da:14:b7:92:9e:98:c3:fa: 1a:86:fd:f0:b6:4f:b7:7c:b9:3f:18:06:a8:3c:80:e4:8c:2e: f5:51:fa:12:d4:a3:86:82:19:23:10:59:38:7d:33:e9:78:e8: 47:6e:c9:99:1d:17:8f:c5:3d:7b:14:a2:84:8d:06:f3:a8:ce: 0d:07:0a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUah17BfDNmmJAeWDReMcXpozk0yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNjA0MTUxODI1NThaFw0yNjA0MTgyMDUxNThaMDMxMTAvBgNV BAMTKEIzRjEzNEJFMjkyREZFOUU3M0Y4QkVFQzQzRjAxOURDNTc2RTFFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhnhnN+fzatEIXZYHIkCVL9qG TVEZoh605oMEfCeI0Ozz+fguOZLTjvs7TX7F2qLJF0eQVOy/WPD72wmY9DGBARBU PKwis54bxN+etue6rjeTgi4zPR87evgDGTCR3/posujw6HJSNC5W1BJ/yJIyaptl ZcSEJYsR6vAA9r/LpWEaMO0USAMz3YZhFeAqDFDDRHDPH6B2yY/N7JnfMHDhXhXP 4akfDMld83ta7wSxjP9K2bmoTZ2woFkhggIy+V+nS7C7C8SLf70HAJWd1+Vs8/0D Z/GsODRYuzDtAJutJp3ney/uOCNAQhj2tGwGAFJMoOTXy5q2zUj2Us2N4djXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/E0vikt/p5z+L7sQ/AZ3FduHq4wHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3T/kcQFZty/Wz53rN8bOoWo8DT8POcX5cL YuKnsKKw4YRr9Nj9eCpexKqX6CgH1xuCBCMIR4t9YheJ604Lyw60EW+3fHylwO32 reJKJgXFwenpEifbCB8s5rD25tl+XznEnyw8++On87PfwoS47n+5La8cwEXRCCNR ma5gKKPQwJHVaJRLrDBqlYyDweZ1rAwC8TtQEUuPELFdA1F8i/+MLG65imObUr6y Yc7ZuRPw0ust8orBCz740nl2KyfaFLeSnpjD+hqG/fC2T7d8uT8YBqg8gOSMLvVR +hLUo4aCGSMQWTh9M+l46EduyZkdF4/FPXsUooSNBvOozg0HClk= -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:16 2026 by rpki-client