$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: LpnULNFagfya+XrpQlr5TBW3fCFbRtaurjTIl5iSHjo= Subject key identifier: F5:56:BB:73:2E:8A:5C:46:40:56:94:01:38:68:F1:AA:3B:46:DB:9F Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 04B806E4B1E45544FDCEF894FE676CF250053D18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: EB Signing time: Fri 17 Apr 2026 11:21:13 +0000 Manifest this update: Fri 17 Apr 2026 11:16:13 +0000 Manifest next update: Mon 20 Apr 2026 15:26:13 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: uosZ8rcK+OlTxX51VWJYPfTbmmr7Cnfg+UL2HnoxiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b8:06:e4:b1:e4:55:44:fd:ce:f8:94:fe:67:6c:f2:50:05:3d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Apr 17 11:16:13 2026 GMT Not After : Apr 20 15:26:13 2026 GMT Subject: CN=F556BB732E8A5C46405694013868F1AA3B46DB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:9b:82:87:d1:78:93:d9:bc:22:35:3f:0e: d5:b0:d8:a1:30:13:15:b1:56:99:92:a0:a6:ce:06: 04:75:98:ac:52:1a:01:96:bd:cd:22:48:57:31:50: c5:f7:d0:2c:a6:38:92:ee:5f:df:14:4b:45:41:6a: ac:01:2e:29:30:cf:fe:ae:7b:fb:1c:d1:a3:fa:d0: 8e:f6:db:54:e0:cb:e8:e0:b6:9a:38:b9:8f:09:ce: 01:a1:88:2a:b2:6d:9b:01:3d:64:30:be:da:a2:af: 0e:c4:3f:e2:13:37:5f:89:60:b5:97:62:5a:bc:bc: d3:88:a2:27:8c:e0:81:06:9d:85:d4:9b:e4:fb:6f: 73:ae:13:ac:d4:dc:e6:a2:72:3f:f8:cd:6a:cc:cc: 4e:cd:e0:ad:34:aa:d7:0c:55:9e:75:69:a8:07:fb: ee:d8:f4:eb:58:63:d5:2c:ec:a9:c1:35:db:cf:86: 83:8f:34:78:0a:5b:8c:4c:ba:81:f2:8c:66:7a:0b: 41:44:82:61:7d:87:3e:4f:4e:83:ad:ca:84:eb:96: 74:60:75:64:e6:96:b2:40:05:fd:7b:52:2f:98:32: af:8a:e5:ba:03:ad:b4:18:2a:ee:9d:9e:fa:59:55: b6:84:c9:1c:57:57:76:c2:65:b7:b0:37:8a:23:31: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:BB:73:2E:8A:5C:46:40:56:94:01:38:68:F1:AA:3B:46:DB:9F X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8b:34:dd:fa:fc:5d:6e:15:ec:3b:5c:de:39:f3:87:19:39: 3f:4b:91:e2:98:27:eb:bd:95:f0:9c:35:fa:93:a8:72:c5:cc: 57:50:74:ea:b0:92:5f:c4:97:39:0c:44:68:aa:39:2f:46:d2: 0a:fc:46:25:79:80:93:06:ad:8d:0d:af:ca:77:98:cf:e6:15: f4:7d:5f:c7:48:75:fe:2c:08:dd:e6:d1:01:06:c6:41:84:ef: 94:d5:5c:ce:77:7e:0f:92:75:ce:9c:c3:e6:e3:f8:b2:9f:61: 63:15:d3:c4:d3:0b:72:d2:19:ba:5a:19:b4:cc:23:a0:b9:eb: 60:b6:87:d7:82:6b:73:c3:2d:be:c2:d1:e0:2b:03:95:c7:12: f3:b6:eb:58:45:a1:d3:61:2c:83:31:ee:80:d0:8d:92:fc:80: 1e:ef:5a:72:92:e2:06:e6:57:a4:e0:28:ea:03:1c:73:e8:b6: b8:8b:c4:0d:c4:3e:4e:77:29:c4:e9:43:9e:b9:ca:85:32:e9: e8:65:7c:68:59:5f:ed:8d:05:0f:de:be:89:10:e1:08:7c:b1: 8a:f9:5b:d2:8a:c8:21:2e:bd:67:77:36:17:d6:86:5e:eb:aa: dc:56:d0:19:64:be:3f:48:4d:78:4a:aa:04:09:69:1a:f3:37: d5:81:2a:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLgG5LHkVUT9zviU/mds8lAFPRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjA0MTcxMTE2MTNaFw0yNjA0MjAxNTI2MTNaMDMxMTAvBgNV BAMTKEY1NTZCQjczMkU4QTVDNDY0MDU2OTQwMTM4NjhGMUFBM0I0NkRCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYN5uCh9F4k9m8IjU/DtWw2KEw ExWxVpmSoKbOBgR1mKxSGgGWvc0iSFcxUMX30CymOJLuX98US0VBaqwBLikwz/6u e/sc0aP60I7221Tgy+jgtpo4uY8JzgGhiCqybZsBPWQwvtqirw7EP+ITN1+JYLWX Ylq8vNOIoieM4IEGnYXUm+T7b3OuE6zU3Oaicj/4zWrMzE7N4K00qtcMVZ51aagH ++7Y9OtYY9Us7KnBNdvPhoOPNHgKW4xMuoHyjGZ6C0FEgmF9hz5PToOtyoTrlnRg dWTmlrJABf17Ui+YMq+K5boDrbQYKu6dnvpZVbaEyRxXV3bCZbewN4ojMSxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Va7cy6KXEZAVpQBOGjxqjtG258wHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiLNN36/F1uFew7XN4584cZOT9LkeKYJ+u9 lfCcNfqTqHLFzFdQdOqwkl/ElzkMRGiqOS9G0gr8RiV5gJMGrY0Nr8p3mM/mFfR9 X8dIdf4sCN3m0QEGxkGE75TVXM53fg+Sdc6cw+bj+LKfYWMV08TTC3LSGbpaGbTM I6C562C2h9eCa3PDLb7C0eArA5XHEvO261hFodNhLIMx7oDQjZL8gB7vWnKS4gbm V6TgKOoDHHPotriLxA3EPk53KcTpQ565yoUy6ehlfGhZX+2NBQ/evokQ4Qh8sYr5 W9KKyCEuvWd3NhfWhl7rqtxW0Blkvj9ITXhKqgQJaRrzN9WBKhY= -----END CERTIFICATE-----Generated at Sat Apr 18 08:38:56 2026 by rpki-client