$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: y5KgLOnwJhCOwjNhv5PkU3rclO/bazEMsaGhjFccGbA= Subject key identifier: 20:36:FE:12:14:8D:47:2D:AD:ED:80:FC:6B:76:71:A0:22:C3:3C:5D Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 735C84A0AB2269659BD4119E5EF50CB388A240D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 0228 Signing time: Wed 15 Apr 2026 22:40:03 +0000 Manifest this update: Wed 15 Apr 2026 22:35:03 +0000 Manifest next update: Sun 19 Apr 2026 01:30:03 +0000 Files and hashes: 1: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: dHsvYJlAkWLZ+9oRBKQmKMQW97rJ2/h7gXe20m1YARk=) 2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: gsdXX/duHLIGBlXHNlDaHKiWX/urg+G15cVtwivSaZc=) 3: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: KZiUhytZ+u1JUEs5oAO0im20rBMlG+1PABUFNLIBgvU=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: t/STBzz8ddYfLmUydecDyGfVBJtfAeKtMXZhDBw1IOw=) 5: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 5WZW84f5HKjOAxkfssvW8CwqxpjYyS1AvzYSlCFenJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5c:84:a0:ab:22:69:65:9b:d4:11:9e:5e:f5:0c:b3:88:a2:40:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Apr 15 22:35:03 2026 GMT Not After : Apr 19 01:30:03 2026 GMT Subject: CN=2036FE12148D472DADED80FC6B7671A022C33C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:df:3a:22:8b:32:98:ff:f6:60:e0:f2:42: f6:a2:92:51:95:51:c6:a0:45:90:a6:5e:21:2e:5b: 34:9e:19:08:d5:a4:a0:17:ca:a5:ba:ad:4b:8a:44: d4:a7:b8:3b:69:6a:88:84:49:a8:aa:1c:01:60:cd: 0b:b6:63:2f:05:9b:70:57:11:3d:34:8b:db:f0:fa: 56:0b:a9:82:43:5d:56:db:f7:f7:fb:f4:c3:5d:7e: 53:ee:df:a8:a2:aa:f7:6a:aa:81:68:e2:32:22:97: 12:5e:cd:b5:49:11:a2:b9:ca:2a:0c:ee:c4:46:4a: 21:dd:e6:37:c7:26:78:23:b2:92:ce:3f:18:ff:48: e2:6b:0a:3b:03:0d:91:02:ee:e2:57:1d:f2:a0:f6: df:aa:e8:9c:4f:8b:eb:03:4e:d2:c1:8a:d7:d8:0f: 0e:ce:d7:ec:db:75:91:6c:98:82:13:cc:9f:5e:25: 03:64:34:cf:03:23:42:54:5d:38:0d:4d:73:5e:a4: e4:4b:cb:6e:c0:66:76:1e:3a:43:b3:a9:b7:1d:8c: 5e:f1:72:69:6a:0f:08:7f:a1:c4:4b:4a:7f:1e:d1: bf:ad:f4:fd:63:c9:fa:67:68:cd:82:aa:c9:f1:f2: 73:41:c3:a3:f1:ad:1d:47:f0:ca:68:9e:6e:5d:45: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:FE:12:14:8D:47:2D:AD:ED:80:FC:6B:76:71:A0:22:C3:3C:5D X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:68:1a:bf:17:c2:9f:31:8c:36:7e:97:b2:81:84:11:e6:eb: 27:b3:b0:e1:be:78:11:78:3e:7a:16:b2:f1:a2:fb:dc:95:bc: eb:94:48:50:b0:71:f3:6a:57:d4:8a:ec:62:f5:0e:05:7f:4e: 55:f8:2c:e1:db:ca:b5:19:ea:b8:81:1c:59:23:cb:88:ec:44: 9c:85:15:46:36:da:bb:68:1c:f7:b7:7b:f8:06:f6:2b:56:f2: 56:78:74:90:3a:ae:2c:ba:fa:12:01:93:c0:be:c7:05:19:aa: 66:84:94:97:74:d6:a1:cb:ed:7f:56:e4:fd:c2:fd:e5:7f:ea: ea:cf:bb:64:94:9b:28:11:d6:f4:b9:2f:6c:c4:ef:bd:e0:84: e5:17:df:1d:1e:e7:7b:85:d2:5a:87:52:26:7a:b7:7a:2b:34: b4:ff:36:d7:f3:c2:51:51:9f:3e:27:4b:24:df:61:44:11:d3: a8:7e:6a:eb:fb:eb:fa:3f:0e:0f:d1:9b:81:7d:22:8d:42:14: 52:bf:43:cf:48:01:65:03:ad:4a:9b:33:c9:72:3d:65:24:8b: 6a:86:e8:d8:c1:08:36:35:6a:77:0f:5a:fc:fe:01:0b:97:50: ae:6e:01:08:ff:53:13:be:e2:2d:cb:56:fc:4d:09:03:e1:ca: a7:04:4a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1yEoKsiaWWb1BGeXvUMs4iiQNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNjA0MTUyMjM1MDNaFw0yNjA0MTkwMTMwMDNaMDMxMTAvBgNV BAMTKDIwMzZGRTEyMTQ4RDQ3MkRBREVEODBGQzZCNzY3MUEwMjJDMzNDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdd86IosymP/2YODyQvaiklGV UcagRZCmXiEuWzSeGQjVpKAXyqW6rUuKRNSnuDtpaoiESaiqHAFgzQu2Yy8Fm3BX ET00i9vw+lYLqYJDXVbb9/f79MNdflPu36iiqvdqqoFo4jIilxJezbVJEaK5yioM 7sRGSiHd5jfHJngjspLOPxj/SOJrCjsDDZEC7uJXHfKg9t+q6JxPi+sDTtLBitfY Dw7O1+zbdZFsmIITzJ9eJQNkNM8DI0JUXTgNTXNepORLy27AZnYeOkOzqbcdjF7x cmlqDwh/ocRLSn8e0b+t9P1jyfpnaM2Cqsnx8nNBw6PxrR1H8Mponm5dRW+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDb+EhSNRy2t7YD8a3ZxoCLDPF0wHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9oGr8Xwp8xjDZ+l7KBhBHm6yezsOG+eBF4 PnoWsvGi+9yVvOuUSFCwcfNqV9SK7GL1DgV/TlX4LOHbyrUZ6riBHFkjy4jsRJyF FUY22rtoHPe3e/gG9itW8lZ4dJA6riy6+hIBk8C+xwUZqmaElJd01qHL7X9W5P3C /eV/6urPu2SUmygR1vS5L2zE773ghOUX3x0e53uF0lqHUiZ6t3orNLT/NtfzwlFR nz4nSyTfYUQR06h+auv76/o/Dg/Rm4F9Io1CFFK/Q89IAWUDrUqbM8lyPWUki2qG 6NjBCDY1ancPWvz+AQuXUK5uAQj/UxO+4i3LVvxNCQPhyqcESl0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:47:47 2026 by rpki-client