$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: UVD6zDTDsMecB3gF39D4zpwBeIKH6lcLbnuqnZt2Wkg= Subject key identifier: 02:DC:A8:A9:B9:C0:2C:18:A3:0F:AA:EA:50:0F:C9:78:6A:B2:67:64 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 543CD8EE7E61BC7E589E5A3184417D658B49F841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 0527 Signing time: Sat 18 Apr 2026 06:32:09 +0000 Manifest this update: Sat 18 Apr 2026 06:27:09 +0000 Manifest next update: Tue 21 Apr 2026 07:19:09 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=) 2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: IQzSw38UamATF9MgvrRBCx0Gl/rUiGXHEnjn295Qa6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3c:d8:ee:7e:61:bc:7e:58:9e:5a:31:84:41:7d:65:8b:49:f8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Apr 18 06:27:09 2026 GMT Not After : Apr 21 07:19:09 2026 GMT Subject: CN=02DCA8A9B9C02C18A30FAAEA500FC9786AB26764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:dd:95:97:40:99:74:11:ac:a8:f2:35:43: 36:4b:6b:ea:48:4b:32:20:c3:6c:17:ef:64:cc:cc: c9:20:a1:5d:57:68:4d:bb:45:21:d0:1b:9a:c1:bc: fe:a4:88:73:ae:f3:95:5a:32:88:26:08:5c:98:a3: e2:a4:02:96:49:70:17:d1:eb:4a:ac:52:cb:a8:3c: 7c:57:b6:39:e4:2f:6e:00:56:00:43:7f:ad:79:d6: 08:f8:e7:f2:d1:52:dd:69:40:50:cf:a1:fc:40:04: 52:db:ca:6d:73:2c:7b:04:0a:6b:65:11:bb:cb:30: 3d:5a:fc:12:84:5d:c5:ad:93:ef:f1:6c:2f:a2:50: 59:fe:45:38:04:9f:77:be:51:48:e5:e9:3a:40:58: 8e:b1:58:00:6b:e8:9b:75:ed:56:57:ac:bb:c1:f4: 9b:d9:10:40:93:68:21:d0:b6:e8:6d:e4:6b:e2:a8: aa:37:82:f4:02:5b:b2:27:71:bd:fc:51:68:6d:9a: 61:2c:81:54:da:ef:1a:29:ce:f8:bb:01:7a:2a:69: 49:87:e6:54:a6:54:4c:de:1c:2c:14:5d:cc:82:1b: e3:23:8d:18:94:ab:01:8b:2c:1c:c9:02:7a:ea:bd: 3d:2b:74:50:b4:6a:e6:51:56:52:d7:f1:3d:26:85: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DC:A8:A9:B9:C0:2C:18:A3:0F:AA:EA:50:0F:C9:78:6A:B2:67:64 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:6f:4a:00:99:39:bd:ed:93:b5:02:75:14:f6:5e:e2:bd: 9a:ec:2b:19:c0:2a:0e:07:ba:56:c8:39:52:e3:aa:45:e4:7d: 6a:8e:4d:fe:89:7d:22:61:d5:32:df:89:b4:a8:f2:83:cd:31: 49:49:05:b6:ce:f6:6d:06:20:01:d5:ab:d1:b1:87:da:90:fb: 78:7c:f9:a0:41:2d:b4:7b:61:69:e0:69:b7:9c:2f:44:5f:2d: 54:86:fb:60:7c:19:66:19:a2:a0:7e:4d:29:fb:a9:2d:44:5e: 9a:04:44:b9:ac:71:3b:3a:0a:95:01:58:e9:fe:59:f1:73:ed: 81:1b:5a:ac:5e:44:9a:c7:3d:e5:13:38:4e:8c:af:1f:6b:d1: 78:5e:1f:0a:ba:0e:e2:07:75:f7:8e:3a:ff:0a:70:ac:ab:5f: 27:63:c4:13:be:10:82:17:1e:ae:3f:2c:80:b6:b7:8d:c0:8e: 5e:f7:57:fd:85:8d:31:2e:48:f3:e0:5f:d0:6e:26:86:d9:1f: c3:21:da:39:fe:26:bd:ca:b2:c2:6e:a3:e9:a0:e4:6c:0d:1a: 39:1a:f2:3d:ec:f6:d5:e1:29:00:25:f8:a7:4f:3d:76:d1:29: ee:b9:bb:ab:30:d6:e0:39:3c:1e:6f:9e:07:76:e6:d2:f4:72: b5:94:4e:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDzY7n5hvH5YnloxhEF9ZYtJ+EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNjA0MTgwNjI3MDlaFw0yNjA0MjEwNzE5MDlaMDMxMTAvBgNV BAMTKDAyRENBOEE5QjlDMDJDMThBMzBGQUFFQTUwMEZDOTc4NkFCMjY3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuN2Vl0CZdBGsqPI1QzZLa+pI SzIgw2wX72TMzMkgoV1XaE27RSHQG5rBvP6kiHOu85VaMogmCFyYo+KkApZJcBfR 60qsUsuoPHxXtjnkL24AVgBDf6151gj45/LRUt1pQFDPofxABFLbym1zLHsECmtl EbvLMD1a/BKEXcWtk+/xbC+iUFn+RTgEn3e+UUjl6TpAWI6xWABr6Jt17VZXrLvB 9JvZEECTaCHQtuht5GviqKo3gvQCW7Incb38UWhtmmEsgVTa7xopzvi7AXoqaUmH 5lSmVEzeHCwUXcyCG+MjjRiUqwGLLBzJAnrqvT0rdFC0auZRVlLX8T0mhXGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtyoqbnALBijD6rqUA/JeGqyZ2QwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6db0oAmTm97ZO1AnUU9l7ivZrsKxnAKg4H ulbIOVLjqkXkfWqOTf6JfSJh1TLfibSo8oPNMUlJBbbO9m0GIAHVq9Gxh9qQ+3h8 +aBBLbR7YWngabecL0RfLVSG+2B8GWYZoqB+TSn7qS1EXpoERLmscTs6CpUBWOn+ WfFz7YEbWqxeRJrHPeUTOE6Mrx9r0XheHwq6DuIHdfeOOv8KcKyrXydjxBO+EIIX Hq4/LIC2t43Ajl73V/2FjTEuSPPgX9BuJobZH8Mh2jn+Jr3KssJuo+mg5GwNGjka 8j3s9tXhKQAl+KdPPXbRKe65u6sw1uA5PB5vngd25tL0crWUTk8= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:19 2026 by rpki-client