$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: IAeJh/s6fzGF8fstr5vCVtgvdmyL++FUF0Fbf692g2M= Subject key identifier: AA:4C:F5:2E:3B:5C:8E:74:E1:FC:DD:EF:45:A3:20:27:74:D1:94:7A Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 6627BC7501E1319F904A6180DDE4CFFAEAC449E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 0532 Signing time: Thu 16 Apr 2026 03:21:25 +0000 Manifest this update: Thu 16 Apr 2026 03:16:25 +0000 Manifest next update: Sun 19 Apr 2026 07:00:25 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 2: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: ysMdOwUra+7jVOgXJ6f6dklHOmUAhsYeO5IuTGY1UB0=) 3: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) 4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:27:bc:75:01:e1:31:9f:90:4a:61:80:dd:e4:cf:fa:ea:c4:49:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Apr 16 03:16:25 2026 GMT Not After : Apr 19 07:00:25 2026 GMT Subject: CN=AA4CF52E3B5C8E74E1FCDDEF45A3202774D1947A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:33:c1:b9:5f:70:01:2c:2a:6b:0e:78:36: 0c:60:d8:63:9c:6d:0c:90:22:40:38:b5:1e:9d:d8: c0:93:1c:b9:3c:a1:39:24:b6:0c:af:ad:92:10:15: 33:14:24:87:63:69:5e:38:0a:2a:ac:e7:c1:53:a6: 67:ad:92:09:9f:4a:16:c5:08:59:40:d0:90:fb:7f: b6:14:e4:68:4e:9c:28:95:7c:04:06:ea:da:67:80: 76:9b:1f:0b:07:ae:e0:4c:b1:3d:82:f5:f9:32:00: aa:1e:2f:ae:e4:ce:aa:3e:63:b1:0f:7d:8b:07:de: 15:19:49:9c:d1:22:a8:ed:2d:ef:23:56:34:37:f6: d6:1e:4f:59:78:42:84:b4:fb:0c:ef:4c:75:73:fc: ff:db:a6:5d:c6:0e:68:f6:cb:63:b2:e5:09:62:3a: 09:46:da:9f:b0:e4:1e:a4:e9:ea:3d:36:fb:5e:4c: 5a:14:dc:10:91:00:ab:5c:a1:a1:96:b0:01:04:a2: 27:d6:03:8e:c3:9f:5d:11:23:83:12:b8:f2:07:5a: 58:bf:5e:6a:1a:c6:25:15:58:21:ae:45:95:94:eb: b5:60:b5:6b:11:44:39:35:24:8b:b5:f2:1a:13:4c: 9e:25:14:d4:a2:8d:f9:e3:c2:94:25:9a:36:10:83: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:F5:2E:3B:5C:8E:74:E1:FC:DD:EF:45:A3:20:27:74:D1:94:7A X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:4c:01:92:81:ae:69:13:b6:8b:78:c8:03:a2:29:fe:1e: b2:6b:53:39:a9:34:c6:2d:68:34:84:ba:40:46:64:3e:9c:b3: c1:30:9e:28:26:11:a6:a8:6c:4f:c1:a5:86:ca:4a:cc:ef:98: b6:14:6e:5b:85:61:42:8b:6d:d5:f9:ae:78:9b:b4:a7:39:5e: 08:bd:b2:e9:a6:7a:30:2a:50:b6:63:e7:08:13:c4:65:fb:8d: 4d:6b:82:d3:f9:1b:fa:3c:b6:17:63:d8:88:0f:d5:77:8b:b1: 5b:fc:fb:ca:46:43:d5:0d:67:8b:cf:1b:4d:9f:f0:f0:40:4d: ec:27:f8:13:d5:a8:ca:dd:11:74:10:02:87:13:8e:db:07:da: 32:7c:3b:e2:e4:ae:a0:30:75:5f:52:f7:73:da:f6:40:0e:3e: 14:8d:5e:32:77:f8:48:1b:3f:bf:ec:1e:07:a6:10:74:52:1a: d9:46:01:b8:d8:6a:a8:d9:09:4e:d0:88:56:b7:6c:92:fc:7c: 1d:51:96:08:45:7f:c4:47:c0:19:2e:55:d5:d7:c7:d1:10:98: 46:5e:ab:83:2e:62:02:75:0c:45:7f:52:50:35:11:c9:3e:54: 51:54:38:83:86:a7:c1:1e:02:39:39:15:bd:15:2a:81:a7:0a: 88:cb:50:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZie8dQHhMZ+QSmGA3eTP+urESeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNjA0MTYwMzE2MjVaFw0yNjA0MTkwNzAwMjVaMDMxMTAvBgNV BAMTKEFBNENGNTJFM0I1QzhFNzRFMUZDRERFRjQ1QTMyMDI3NzREMTk0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WDPBuV9wASwqaw54Ngxg2GOc bQyQIkA4tR6d2MCTHLk8oTkktgyvrZIQFTMUJIdjaV44Ciqs58FTpmetkgmfShbF CFlA0JD7f7YU5GhOnCiVfAQG6tpngHabHwsHruBMsT2C9fkyAKoeL67kzqo+Y7EP fYsH3hUZSZzRIqjtLe8jVjQ39tYeT1l4QoS0+wzvTHVz/P/bpl3GDmj2y2Oy5Qli OglG2p+w5B6k6eo9NvteTFoU3BCRAKtcoaGWsAEEoifWA47Dn10RI4MSuPIHWli/ XmoaxiUVWCGuRZWU67VgtWsRRDk1JIu18hoTTJ4lFNSijfnjwpQlmjYQg9hjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkz1LjtcjnTh/N3vRaMgJ3TRlHowHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrWTAGSga5pE7aLeMgDoin+HrJrUzmpNMYt aDSEukBGZD6cs8EwnigmEaaobE/BpYbKSszvmLYUbluFYUKLbdX5rnibtKc5Xgi9 summejAqULZj5wgTxGX7jU1rgtP5G/o8thdj2IgP1XeLsVv8+8pGQ9UNZ4vPG02f 8PBATewn+BPVqMrdEXQQAocTjtsH2jJ8O+LkrqAwdV9S93Pa9kAOPhSNXjJ3+Egb P7/sHgemEHRSGtlGAbjYaqjZCU7QiFa3bJL8fB1RlghFf8RHwBkuVdXXx9EQmEZe q4MuYgJ1DEV/UlA1Eck+VFFUOIOGp8EeAjk5Fb0VKoGnCojLUME= -----END CERTIFICATE-----Generated at Sat Apr 18 08:59:54 2026 by rpki-client