$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: JmO2aLbRn1bo3jFu/rYD3blr9ETh8kD6SHml2O97yWk= Subject key identifier: 21:98:DA:CD:FE:DA:29:2D:0C:03:AE:A8:9A:71:07:EE:D4:60:75:7F Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 3CC7D70BA220A6DDD061C5FE818C286675CDFC88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 0569 Signing time: Sat 18 Apr 2026 18:42:31 +0000 Manifest this update: Sat 18 Apr 2026 18:37:31 +0000 Manifest next update: Tue 21 Apr 2026 21:40:31 +0000 Files and hashes: 1: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: l2C5QMgcuC+RO497qSLHaEtcZMdcTeDqYxZZOZ+OOKc=) 2: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) 3: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 4: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 6: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c7:d7:0b:a2:20:a6:dd:d0:61:c5:fe:81:8c:28:66:75:cd:fc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Apr 18 18:37:31 2026 GMT Not After : Apr 21 21:40:31 2026 GMT Subject: CN=2198DACDFEDA292D0C03AEA89A7107EED460757F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:3d:dd:68:e8:6b:67:a5:24:ec:bd:ae:a7: f7:54:3b:a9:a8:0b:92:a2:c7:22:e3:dc:bb:5a:1e: 7a:04:b4:91:6d:76:35:21:82:61:a7:60:44:55:03: 6e:3c:3a:24:5b:06:b3:46:56:66:54:8e:7f:55:38: ff:f4:6d:a0:c0:06:97:7b:4f:31:14:21:19:3c:3a: 11:61:8b:93:58:02:4a:2c:c5:50:49:38:2a:4d:00: b3:bb:0d:9e:2d:1d:b2:ec:31:cd:11:1d:da:df:2d: 96:7b:8f:61:e6:26:2e:80:33:0b:02:1a:7c:08:a4: 97:49:cb:41:7b:fc:0e:62:11:4a:47:f1:fd:e4:dc: 58:e6:22:b0:2b:9a:b2:ba:bb:fd:ba:70:2b:b7:49: dc:56:2c:e8:88:9d:85:1f:a2:c7:13:5a:99:82:61: 00:93:37:6d:44:73:1f:e6:8f:eb:0b:43:b1:20:22: 11:c5:1d:78:ed:af:4a:fd:04:af:22:c0:f2:a7:3a: e3:d1:63:3c:e9:22:1d:e3:14:f0:c2:9e:6c:74:a8: c3:4c:ea:20:8a:52:96:dc:e1:11:3d:72:58:bc:17: 17:bc:f0:3d:1d:b1:38:dc:7d:18:b2:6d:22:ed:36: 22:bc:9b:a1:b0:31:a7:71:69:e5:1b:ff:2a:60:46: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:98:DA:CD:FE:DA:29:2D:0C:03:AE:A8:9A:71:07:EE:D4:60:75:7F X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:db:ed:03:72:2d:61:2f:ba:3e:65:df:06:f6:18:61:03: c7:e4:60:b0:40:2d:28:95:e9:85:55:a0:e1:f5:d2:e7:cb:24: 56:52:ac:67:ff:ae:a3:4f:20:b8:23:81:89:2a:b7:f2:d9:3a: 4d:98:93:f7:e5:c7:0e:e4:3f:d4:45:37:5d:7e:a3:0f:ec:7b: c7:4c:b3:8b:a8:2c:1b:52:d4:37:dd:80:71:0e:7b:5e:95:42: f9:94:ca:26:47:26:22:c4:4e:5f:50:c7:1e:07:01:9d:30:f3: f3:39:e5:8b:ac:65:bf:09:a1:98:00:83:1b:70:be:99:4f:aa: 20:8f:33:fa:de:0c:55:53:61:cd:c0:f0:1e:ba:ce:c2:1d:6c: ae:db:a0:33:47:ee:1f:82:b7:f4:7c:7d:7d:a0:d6:a9:da:d1: 2b:8a:dc:18:6e:45:e6:7c:3a:ea:01:17:45:37:f6:2f:93:48: c4:a9:e7:25:c8:24:eb:d9:ac:28:1d:e9:e7:2a:57:82:70:48: 8a:99:64:8c:23:e4:b2:26:e7:81:ef:83:f9:ae:e0:dd:0d:86: 93:70:d4:b6:ff:3c:8b:54:fb:21:4a:01:03:dd:f7:7c:c5:60: f3:d7:cb:03:0a:f1:75:a6:d8:01:b2:a9:fc:67:45:b5:42:93: 05:ac:87:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMfXC6Igpt3QYcX+gYwoZnXN/IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNjA0MTgxODM3MzFaFw0yNjA0MjEyMTQwMzFaMDMxMTAvBgNV BAMTKDIxOThEQUNERkVEQTI5MkQwQzAzQUVBODlBNzEwN0VFRDQ2MDc1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojD3daOhrZ6Uk7L2up/dUO6mo C5KixyLj3LtaHnoEtJFtdjUhgmGnYERVA248OiRbBrNGVmZUjn9VOP/0baDABpd7 TzEUIRk8OhFhi5NYAkosxVBJOCpNALO7DZ4tHbLsMc0RHdrfLZZ7j2HmJi6AMwsC GnwIpJdJy0F7/A5iEUpH8f3k3FjmIrArmrK6u/26cCu3SdxWLOiInYUfoscTWpmC YQCTN21Ecx/mj+sLQ7EgIhHFHXjtr0r9BK8iwPKnOuPRYzzpIh3jFPDCnmx0qMNM 6iCKUpbc4RE9cli8Fxe88D0dsTjcfRiybSLtNiK8m6GwMadxaeUb/ypgRmsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZjazf7aKS0MA66omnEH7tRgdX8wHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJK2+0Dci1hL7o+Zd8G9hhhA8fkYLBALSiV 6YVVoOH10ufLJFZSrGf/rqNPILgjgYkqt/LZOk2Yk/flxw7kP9RFN11+ow/se8dM s4uoLBtS1DfdgHEOe16VQvmUyiZHJiLETl9Qxx4HAZ0w8/M55YusZb8JoZgAgxtw vplPqiCPM/reDFVTYc3A8B66zsIdbK7boDNH7h+Ct/R8fX2g1qna0SuK3BhuReZ8 OuoBF0U39i+TSMSp5yXIJOvZrCgd6ecqV4JwSIqZZIwj5LIm54Hvg/mu4N0NhpNw 1Lb/PItU+yFKAQPd93zFYPPXywMK8XWm2AGyqfxnRbVCkwWsh5U= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:32 2026 by rpki-client