$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: OskX2kHdXiHlpN1FVv7SDiKp7yIwG28GMu+xQZI1ql0= Subject key identifier: 9B:A9:AC:FC:67:E1:60:39:22:03:FD:A0:A4:76:A3:A9:76:E7:4D:DD Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 68AC20D5303273F6DB5F081169AA89C09D5C4940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 0112 Signing time: Fri 17 Apr 2026 11:40:50 +0000 Manifest this update: Fri 17 Apr 2026 11:35:50 +0000 Manifest next update: Mon 20 Apr 2026 11:53:50 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=) 3: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: ZogtcoAywjH9xwKBfeEj1rFGDKTI5+0KcheyvrDSo/0=) 4: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ac:20:d5:30:32:73:f6:db:5f:08:11:69:aa:89:c0:9d:5c:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Apr 17 11:35:50 2026 GMT Not After : Apr 20 11:53:50 2026 GMT Subject: CN=9BA9ACFC67E160392203FDA0A476A3A976E74DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:4a:94:a8:fd:f9:f7:d1:bb:42:d8:e5:25: c2:2f:3c:b4:42:a6:24:ac:8d:04:5a:29:5a:a3:24: aa:e8:56:fb:89:27:40:2e:d1:5e:0b:09:27:53:87: 28:09:41:56:62:bb:51:38:f6:47:00:b0:4a:02:6c: 87:47:78:38:d8:c6:ac:79:e1:5c:7c:81:37:23:b7: 8b:e6:2b:86:b6:fb:3d:a5:59:48:d7:01:a0:fc:e0: 8e:e3:7f:b8:9a:7f:13:dc:03:df:0b:6e:26:99:a4: 56:02:78:0a:5b:eb:71:ad:af:85:ad:18:8c:3c:d8: b7:48:8a:85:11:c7:79:0e:bc:95:e8:5f:2a:44:e5: dd:a8:e6:76:3b:2a:41:c7:42:2b:4b:48:1e:1b:c9: 37:b3:b4:d7:32:de:66:2e:45:10:3d:af:33:01:7b: 92:06:d9:8c:79:2d:f3:83:2d:47:61:2e:b2:f6:a4: 4c:3f:c3:53:33:32:6c:94:65:75:2a:28:89:da:62: d7:03:55:e1:23:2b:c0:83:5a:bf:52:c7:31:3a:5a: 1e:18:c9:7e:41:e2:f3:dd:96:bb:73:f2:6a:83:50: af:da:79:39:6e:2c:f1:5d:1d:1a:eb:c9:8a:3e:6e: 18:ef:aa:69:2f:72:f5:ef:9f:6c:82:ed:dd:c5:18: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:AC:FC:67:E1:60:39:22:03:FD:A0:A4:76:A3:A9:76:E7:4D:DD X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6b:34:40:d9:4e:6c:a0:71:47:c9:30:cd:20:c2:3d:0c:e8: 56:62:7f:ea:ee:e8:54:31:ef:09:19:c0:ca:6f:be:01:48:2f: 96:97:a6:c2:d0:86:7a:6f:fb:ed:c3:17:7a:a0:a8:c7:1f:99: b0:aa:7d:1f:64:69:b8:ad:98:60:b5:86:80:11:50:85:dc:42: a3:f8:b1:97:b3:9a:14:f4:48:a9:30:9a:58:fb:2e:09:ea:3d: 3c:34:cf:20:b8:8d:29:f5:c9:2d:24:5e:85:65:81:c7:83:fd: b8:d7:73:97:18:0b:a2:c5:fd:4a:f3:48:ca:54:2a:f0:d0:bd: d5:40:c1:b2:a9:6f:0d:0f:88:9a:7d:80:05:7e:fb:97:97:59: bb:af:0f:67:1e:43:ef:69:82:d9:e8:e8:d0:8c:54:59:76:d1: 40:4d:f0:7f:17:d6:75:b2:82:9d:04:fc:18:b1:c8:b3:66:8e: 8f:7c:8d:90:30:e4:d2:49:05:bd:d1:d3:f9:e1:bb:64:32:0f: b0:27:ae:1c:e6:4a:d4:25:61:0b:4b:00:4c:85:c0:ca:6c:c8: 4c:57:b9:a5:38:3c:67:4a:76:87:01:f4:3b:2d:31:e6:13:87: 82:e3:cc:12:85:56:a9:67:d5:95:ac:d8:7f:96:79:5d:80:a9: e0:1e:d4:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKwg1TAyc/bbXwgRaaqJwJ1cSUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNjA0MTcxMTM1NTBaFw0yNjA0MjAxMTUzNTBaMDMxMTAvBgNV BAMTKDlCQTlBQ0ZDNjdFMTYwMzkyMjAzRkRBMEE0NzZBM0E5NzZFNzREREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3UqUqP3599G7QtjlJcIvPLRC piSsjQRaKVqjJKroVvuJJ0Au0V4LCSdThygJQVZiu1E49kcAsEoCbIdHeDjYxqx5 4Vx8gTcjt4vmK4a2+z2lWUjXAaD84I7jf7iafxPcA98LbiaZpFYCeApb63Gtr4Wt GIw82LdIioURx3kOvJXoXypE5d2o5nY7KkHHQitLSB4byTeztNcy3mYuRRA9rzMB e5IG2Yx5LfODLUdhLrL2pEw/w1MzMmyUZXUqKInaYtcDVeEjK8CDWr9SxzE6Wh4Y yX5B4vPdlrtz8mqDUK/aeTluLPFdHRrryYo+bhjvqmkvcvXvn2yC7d3FGPaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6ms/GfhYDkiA/2gpHajqXbnTd0wHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABrNEDZTmygcUfJMM0gwj0M6FZif+ru6FQx 7wkZwMpvvgFIL5aXpsLQhnpv++3DF3qgqMcfmbCqfR9kabitmGC1hoARUIXcQqP4 sZezmhT0SKkwmlj7LgnqPTw0zyC4jSn1yS0kXoVlgceD/bjXc5cYC6LF/UrzSMpU KvDQvdVAwbKpbw0PiJp9gAV++5eXWbuvD2ceQ+9pgtno6NCMVFl20UBN8H8X1nWy gp0E/BixyLNmjo98jZAw5NJJBb3R0/nhu2QyD7AnrhzmStQlYQtLAEyFwMpsyExX uaU4PGdKdocB9DstMeYTh4LjzBKFVqln1ZWs2H+WeV2AqeAe1Og= -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:31 2026 by rpki-client