$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: 7cJGQevUOAN5u06sPjtzuTvncYFDrnYMqLZRpcFy61E= Subject key identifier: 42:E0:D6:12:3C:25:57:40:DF:03:B9:34:03:D7:7E:A3:72:6A:1A:A7 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 47F9D1799DA3D2158B5AEC124FC6DD8B31F63C31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 03B7 Signing time: Thu 16 Apr 2026 02:31:25 +0000 Manifest this update: Thu 16 Apr 2026 02:26:25 +0000 Manifest next update: Sun 19 Apr 2026 08:13:25 +0000 Files and hashes: 1: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: 6fH1E2XiN11R45YeiVi/qasA6bheKToWNvCZcYmCi5U=) 2: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: DmGOYbuQJFJ+kIRoU6OMH6WN9WshNxuiM0M3zqkQV6U=) 3: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: IYKQVNRoQRqNvogZPmlDdgm67DSs3++0URey1SE7htE=) 4: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: qmXcGhHVMXdLAmw0DoQXCy+bPJwGQZoi74LgcW6JVlA=) 5: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: 2GieUC+DWct38EkxbolERLB2iQ5GzTRUAOHt+PgljZI=) 6: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) 7: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 8: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: Al1Cb9gaat4a2Ee45ZJPgZJcZy5w/2h4JhkpuSVxWBg=) 9: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: wRDFqbZTPTa3AkPVgMxOMULgqudJoTKiuzDPhVfykeA=) 10: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 11: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: Mmm5mL3Vho0Zn2SvpxdRQZo0YZiYgn3MoAHSAJ9DMDE=) 12: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f9:d1:79:9d:a3:d2:15:8b:5a:ec:12:4f:c6:dd:8b:31:f6:3c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Apr 16 02:26:25 2026 GMT Not After : Apr 19 08:13:25 2026 GMT Subject: CN=42E0D6123C255740DF03B93403D77EA3726A1AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:07:f5:50:56:4f:bc:7a:07:8b:a4:b2:d5: 71:52:12:5b:b8:a4:da:5c:32:07:b7:39:43:f5:a1: 7a:45:2a:6f:bf:ad:31:cf:21:f6:6b:7f:74:a4:eb: 1c:98:9f:f5:15:5a:4b:e6:f3:ed:53:c3:81:1b:c3: 80:0d:b8:17:3f:a2:7b:e7:2d:94:df:d8:a8:0d:36: 77:a5:93:2f:b1:f6:7e:03:3f:d2:db:8c:b3:c5:e0: 74:47:7f:bf:66:c4:02:24:63:fd:ad:03:e9:ad:e0: 15:9f:5e:ed:8d:b2:0c:f8:47:2c:0b:11:ff:f1:2a: 4f:1a:ff:97:8b:f6:3e:4a:f7:9e:89:b4:c5:a6:75: 86:4c:15:26:94:2b:8b:2b:fb:d9:b7:20:2d:06:80: d7:82:4d:ea:86:5b:51:f7:ba:f2:d1:24:6f:59:d1: da:ff:dc:c3:de:62:23:5d:ab:89:a5:6b:d0:76:e2: d3:3d:e8:32:39:74:c4:fd:3c:d6:d9:18:55:a1:d8: f0:85:b4:0f:1c:4d:d8:18:ee:ff:2e:0c:21:e0:7a: a1:eb:6d:53:02:7f:b3:a0:2b:4a:6a:53:a3:58:2e: 26:2b:14:fb:c3:fa:18:b8:96:9e:23:67:66:0f:11: 88:8b:4c:f8:72:d7:06:d8:66:80:ab:8d:d2:db:01: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:D6:12:3C:25:57:40:DF:03:B9:34:03:D7:7E:A3:72:6A:1A:A7 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:17:f2:cc:58:ba:27:aa:54:73:78:d9:5b:97:43:3b:00:a9: d6:60:3e:8c:ea:68:f5:3d:6d:1f:6e:64:2d:6f:d9:1f:a8:ce: 55:42:c5:2e:aa:55:c6:a4:fb:77:38:89:d3:42:99:9d:07:0d: 22:12:cc:31:df:e1:d5:93:cf:38:1a:ed:41:70:e2:bc:62:bb: 27:8f:a1:04:17:65:04:f5:8d:c8:49:73:2c:b2:ed:f4:97:36: 75:3c:f8:7f:17:cd:59:4d:43:ad:29:37:df:b6:fc:08:91:4e: f3:7e:f4:0c:e2:5f:e6:1a:b0:39:54:87:a0:f4:63:e2:e2:67: d2:09:c7:b4:69:ec:37:72:73:84:7a:81:8a:62:99:91:83:03: 45:9a:60:ad:84:0a:cf:d2:e4:ef:8e:28:6a:67:4e:dc:a7:06: 08:8e:7f:79:61:b7:c6:cc:a3:31:a9:b6:de:f6:10:5d:83:ff: 84:13:9b:49:55:47:1a:fc:fc:9f:28:f7:17:d8:2f:22:b4:aa: 73:d8:73:37:0b:67:30:94:44:1c:7a:6f:8e:6f:fa:e5:3f:16: bd:ab:21:dd:c6:74:ec:a1:5a:e9:9a:33:73:71:c5:6f:cc:1a: 24:0f:4c:af:97:2e:fc:a3:60:cf:e7:14:8e:45:f3:19:09:6d: 7d:11:6d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/nReZ2j0hWLWuwST8bdizH2PDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjA0MTYwMjI2MjVaFw0yNjA0MTkwODEzMjVaMDMxMTAvBgNV BAMTKDQyRTBENjEyM0MyNTU3NDBERjAzQjkzNDAzRDc3RUEzNzI2QTFBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4Qf1UFZPvHoHi6Sy1XFSElu4 pNpcMge3OUP1oXpFKm+/rTHPIfZrf3Sk6xyYn/UVWkvm8+1Tw4Ebw4ANuBc/onvn LZTf2KgNNnelky+x9n4DP9LbjLPF4HRHf79mxAIkY/2tA+mt4BWfXu2Nsgz4RywL Ef/xKk8a/5eL9j5K956JtMWmdYZMFSaUK4sr+9m3IC0GgNeCTeqGW1H3uvLRJG9Z 0dr/3MPeYiNdq4mla9B24tM96DI5dMT9PNbZGFWh2PCFtA8cTdgY7v8uDCHgeqHr bVMCf7OgK0pqU6NYLiYrFPvD+hi4lp4jZ2YPEYiLTPhy1wbYZoCrjdLbAXtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQuDWEjwlV0DfA7k0A9d+o3JqGqcwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4X8sxYuieqVHN42VuXQzsAqdZgPozqaPU9 bR9uZC1v2R+ozlVCxS6qVcak+3c4idNCmZ0HDSISzDHf4dWTzzga7UFw4rxiuyeP oQQXZQT1jchJcyyy7fSXNnU8+H8XzVlNQ60pN9+2/AiRTvN+9AziX+YasDlUh6D0 Y+LiZ9IJx7Rp7Ddyc4R6gYpimZGDA0WaYK2ECs/S5O+OKGpnTtynBgiOf3lht8bM ozGptt72EF2D/4QTm0lVRxr8/J8o9xfYLyK0qnPYczcLZzCURBx6b45v+uU/Fr2r Id3GdOyhWumaM3NxxW/MGiQPTK+XLvyjYM/nFI5F8xkJbX0RbdM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:00 2026 by rpki-client