$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: S0dpJrNAeIRuBtDOHmOr0yD3m3KH3XtuLVN/88U0JZU= Subject key identifier: C9:9D:6A:3B:EA:17:B0:47:88:E0:B6:55:D8:11:1A:7F:03:78:E7:7C Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 727B3F3879E9CF53740A19DFB942D3B63B99E387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0374 Signing time: Thu 16 Apr 2026 21:52:17 +0000 Manifest this update: Thu 16 Apr 2026 21:47:17 +0000 Manifest next update: Sun 19 Apr 2026 23:28:17 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: rJLeSFxZhtvtOvlQOMi8u/gDGH+k7o5GeYij/SS3wHM=) 2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7b:3f:38:79:e9:cf:53:74:0a:19:df:b9:42:d3:b6:3b:99:e3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Apr 16 21:47:17 2026 GMT Not After : Apr 19 23:28:17 2026 GMT Subject: CN=C99D6A3BEA17B04788E0B655D8111A7F0378E77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:74:9b:13:fc:39:00:67:68:ac:e0:72:ee: 93:10:51:50:cc:59:6a:b6:c4:74:5d:43:48:9e:b0: 39:89:4f:54:80:da:96:4c:ac:6a:0e:b5:34:44:d9: b7:22:36:8d:ef:e2:8c:b2:96:12:4b:45:70:0e:5b: b8:28:dd:96:dc:f3:e2:0b:05:90:61:ff:b5:a3:3f: 6b:af:69:14:fe:6a:dd:27:03:f2:99:b7:35:65:4d: 4a:4c:59:31:3e:98:f5:7d:f7:82:64:be:00:79:02: 20:4a:d8:55:12:2b:bb:92:f2:bd:ea:4a:14:a0:f9: 87:60:42:bd:4e:b1:27:15:77:98:c6:a7:e2:7a:3f: 00:05:44:7b:0f:ed:9d:08:7e:aa:bb:76:22:a5:4e: d5:90:d9:83:2c:19:cf:41:bd:24:3f:8c:25:67:66: c3:56:a6:5f:cc:9b:54:96:8a:f7:58:3f:6c:b7:a7: cd:5d:c3:18:d6:94:0f:3d:ab:ac:4b:20:51:38:5f: 55:9e:4b:0b:d2:8d:f7:01:c0:83:d1:72:88:f1:fc: 28:b1:c7:f7:ba:8e:79:ae:6e:e6:3d:f5:b4:4f:15: 9f:00:0e:d3:f2:26:28:c7:35:6e:23:cf:8f:f3:39: 15:3a:5b:2b:cb:86:52:0e:da:45:9a:b6:df:3b:0f: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9D:6A:3B:EA:17:B0:47:88:E0:B6:55:D8:11:1A:7F:03:78:E7:7C X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:fc:b5:c4:8a:92:95:60:a3:f7:85:31:b6:73:7a:bd:8d: 1c:14:d5:fe:36:b8:39:46:7c:1d:d1:13:e2:df:6d:ef:84:13: 2c:88:dd:ec:60:2b:31:1b:48:61:d5:85:32:a7:c4:be:75:ad: 1f:3e:53:f7:40:b6:41:60:1c:3b:79:10:70:16:a8:be:f8:09: 77:0d:6c:55:5a:7d:3e:58:04:6d:9d:72:47:3e:99:c9:4b:9b: e1:ed:7d:96:2b:97:6e:6a:b2:72:cf:65:8f:ea:1b:61:35:c7: 4b:2b:df:80:4a:8d:86:65:98:5e:ae:87:3b:64:33:f5:15:af: c6:78:23:9b:ae:8b:82:8f:e2:1f:96:3e:3f:ba:ec:6c:a0:a4: b2:8e:9f:76:10:f3:f0:c8:69:c1:ba:ea:7a:e4:3f:d5:b5:11: 5a:59:ec:5b:9f:69:9c:c1:b5:37:03:66:87:a0:3c:eb:c0:3c: 38:6b:ac:6b:ce:dd:18:39:74:09:e9:a4:ba:58:1c:2f:2b:2f: bd:b4:83:fa:56:cc:e8:8d:53:5b:20:0e:09:15:b5:99:c7:6f: 42:20:af:f1:9f:e6:fe:4d:f7:d9:35:9b:e2:b2:d2:7d:50:ed: 95:af:ba:23:06:29:3c:77:be:54:5c:24:06:3f:de:e8:42:cc: f0:c9:29:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcns/OHnpz1N0ChnfuULTtjuZ44cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNjA0MTYyMTQ3MTdaFw0yNjA0MTkyMzI4MTdaMDMxMTAvBgNV BAMTKEM5OUQ2QTNCRUExN0IwNDc4OEUwQjY1NUQ4MTExQTdGMDM3OEU3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/E3SbE/w5AGdorOBy7pMQUVDM WWq2xHRdQ0iesDmJT1SA2pZMrGoOtTRE2bciNo3v4oyylhJLRXAOW7go3Zbc8+IL BZBh/7WjP2uvaRT+at0nA/KZtzVlTUpMWTE+mPV994JkvgB5AiBK2FUSK7uS8r3q ShSg+YdgQr1OsScVd5jGp+J6PwAFRHsP7Z0Ifqq7diKlTtWQ2YMsGc9BvSQ/jCVn ZsNWpl/Mm1SWivdYP2y3p81dwxjWlA89q6xLIFE4X1WeSwvSjfcBwIPRcojx/Cix x/e6jnmubuY99bRPFZ8ADtPyJijHNW4jz4/zORU6WyvLhlIO2kWatt87D77hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZ1qO+oXsEeI4LZV2BEafwN453wwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTW/LXEipKVYKP3hTG2c3q9jRwU1f42uDlG fB3RE+Lfbe+EEyyI3exgKzEbSGHVhTKnxL51rR8+U/dAtkFgHDt5EHAWqL74CXcN bFVafT5YBG2dckc+mclLm+HtfZYrl25qsnLPZY/qG2E1x0sr34BKjYZlmF6uhztk M/UVr8Z4I5uui4KP4h+WPj+67GygpLKOn3YQ8/DIacG66nrkP9W1EVpZ7FufaZzB tTcDZoegPOvAPDhrrGvO3Rg5dAnppLpYHC8rL720g/pWzOiNU1sgDgkVtZnHb0Ig r/Gf5v5N99k1m+Ky0n1Q7ZWvuiMGKTx3vlRcJAY/3uhCzPDJKbs= -----END CERTIFICATE-----Generated at Sat Apr 18 04:17:34 2026 by rpki-client