$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: os85hK4GxOqk17Fh01ouFNwyspCuvJrqNfYonmEYxjk= Subject key identifier: C9:26:2A:2E:BC:AC:0E:A0:3D:E1:E8:8A:25:26:F7:F3:5F:8D:E0:AF Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 59720BC7567E5EC567FD29F5A66653096CB7F666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 0220 Signing time: Thu 16 Apr 2026 02:01:40 +0000 Manifest this update: Thu 16 Apr 2026 01:56:40 +0000 Manifest next update: Sun 19 Apr 2026 11:32:40 +0000 Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: H9OpT+02ibCGq1l9MJtxZ5Fc409KldQ22cK1GbK/0eM=) 2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: wXTznUQArBkuy9DW6FChuphpm7A6SXPjvzN1WzF38y4=) 3: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: WbgcAemfUr/WaWV4NJzSBFx+o8EoJ/udbhhfWwBxR6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:0b:c7:56:7e:5e:c5:67:fd:29:f5:a6:66:53:09:6c:b7:f6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Apr 16 01:56:40 2026 GMT Not After : Apr 19 11:32:40 2026 GMT Subject: CN=C9262A2EBCAC0EA03DE1E88A2526F7F35F8DE0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:0d:51:53:17:86:a2:b0:fe:79:71:f8:c7: 7d:e9:2b:dc:eb:d2:f1:91:26:1c:c2:e8:ba:2f:a4: ed:95:79:bb:11:88:dd:94:16:dd:e4:35:ac:58:f5: 15:99:00:4b:5c:cb:c4:2c:fb:c9:0b:70:b9:14:68: 6c:dd:80:23:17:9a:9d:42:63:93:1e:e0:e1:65:48: c7:1a:3f:e5:25:e6:4e:c0:0c:6c:b4:3e:05:f1:d7: b9:42:7a:3f:5d:a8:ed:25:10:f5:0a:6f:f5:0d:25: e4:9d:3b:12:f3:07:de:06:5c:9f:98:d6:fe:e6:44: 4a:68:c1:bd:1c:1a:ca:89:83:b3:ec:2e:18:a3:ac: 37:e5:c2:57:b5:07:e4:e2:b4:76:c4:67:0f:b4:90: 17:2d:a9:dd:45:66:d8:41:23:cc:34:fb:1b:60:22: 64:b0:28:7e:60:a5:5e:5d:37:3f:64:04:63:80:79: 1d:b2:0c:5f:b9:c1:3b:d8:7d:bc:76:51:d2:7f:2e: ce:d4:55:a1:9f:b7:7f:e1:b6:b1:2b:39:eb:1a:8b: 0a:5b:80:31:d7:23:a5:c5:a4:87:6a:db:b4:86:ad: 88:57:86:0d:9c:89:44:1e:26:6d:04:f8:9f:0d:f5: 31:14:fa:f7:bd:b4:19:07:fd:5f:f6:50:ed:4f:ec: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:26:2A:2E:BC:AC:0E:A0:3D:E1:E8:8A:25:26:F7:F3:5F:8D:E0:AF X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d2:36:26:a0:5f:05:ff:e6:60:01:a8:f1:ab:3e:90:75:e8: 73:ca:a6:b7:c8:d5:84:a2:e3:78:32:99:3d:5e:b2:1d:42:2b: e8:4d:f0:8c:cb:39:59:fa:d4:27:83:e5:ec:e6:24:11:2f:91: 89:fd:20:87:c9:5c:e4:8a:10:8b:81:20:f4:93:98:52:b4:3a: 0c:27:81:7a:a4:c6:b4:dc:b9:d5:33:f2:4f:fd:cd:af:c3:25: 3f:f5:14:c2:24:64:16:19:3e:fb:c8:e0:d1:7c:a0:61:8c:09: de:04:7f:00:fe:30:6a:12:80:a6:a8:42:70:19:28:18:48:b7: 9c:f3:f0:1e:ae:9e:fc:b3:e0:58:df:a8:55:a9:c6:35:c4:1b: 63:ae:10:03:2c:a3:63:4e:cd:e2:08:5d:98:7d:40:08:fd:ef: 5c:19:c3:22:6a:bf:b7:cd:e1:ed:41:7c:f4:7d:b2:a8:8d:14: 10:c1:e6:4a:56:ce:59:93:90:ae:98:b5:e8:80:67:d0:d2:cd: 1e:b7:7b:55:3c:ec:ed:63:37:b6:8c:99:d8:03:6a:39:4f:00: 46:5e:be:b5:05:11:40:fe:91:07:ef:36:c4:62:8d:db:1e:5b: a1:0d:4f:be:76:58:8b:e3:e5:24:7a:ea:ae:62:86:40:7b:c4: b0:02:c9:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXILx1Z+XsVn/Sn1pmZTCWy39mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNjA0MTYwMTU2NDBaFw0yNjA0MTkxMTMyNDBaMDMxMTAvBgNV BAMTKEM5MjYyQTJFQkNBQzBFQTAzREUxRTg4QTI1MjZGN0YzNUY4REUwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNA1RUxeGorD+eXH4x33pK9zr 0vGRJhzC6LovpO2VebsRiN2UFt3kNaxY9RWZAEtcy8Qs+8kLcLkUaGzdgCMXmp1C Y5Me4OFlSMcaP+Ul5k7ADGy0PgXx17lCej9dqO0lEPUKb/UNJeSdOxLzB94GXJ+Y 1v7mREpowb0cGsqJg7PsLhijrDflwle1B+TitHbEZw+0kBctqd1FZthBI8w0+xtg ImSwKH5gpV5dNz9kBGOAeR2yDF+5wTvYfbx2UdJ/Ls7UVaGft3/htrErOesaiwpb gDHXI6XFpIdq27SGrYhXhg2ciUQeJm0E+J8N9TEU+ve9tBkH/V/2UO1P7PI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySYqLrysDqA94eiKJSb381+N4K8wHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/SNiagXwX/5mABqPGrPpB16HPKprfI1YSi 43gymT1esh1CK+hN8IzLOVn61CeD5ezmJBEvkYn9IIfJXOSKEIuBIPSTmFK0Ogwn gXqkxrTcudUz8k/9za/DJT/1FMIkZBYZPvvI4NF8oGGMCd4EfwD+MGoSgKaoQnAZ KBhIt5zz8B6unvyz4FjfqFWpxjXEG2OuEAMso2NOzeIIXZh9QAj971wZwyJqv7fN 4e1BfPR9sqiNFBDB5kpWzlmTkK6YteiAZ9DSzR63e1U87O1jN7aMmdgDajlPAEZe vrUFEUD+kQfvNsRijdseW6ENT752WIvj5SR66q5ihkB7xLACycE= -----END CERTIFICATE-----Generated at Sat Apr 18 00:26:58 2026 by rpki-client