$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: CZ3W0eCM1QNGkaQmQehpkxqW19RMYxSBoXv6K6i0m9U= Subject key identifier: 7D:F9:35:A7:42:9D:21:3B:75:5D:23:E6:67:62:F8:DC:4A:3F:55:10 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 0E7FEA5F81C69970DE18AC8B0D01F09BBF8D28C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 0132 Signing time: Wed 15 Apr 2026 23:00:47 +0000 Manifest this update: Wed 15 Apr 2026 22:55:47 +0000 Manifest next update: Sat 18 Apr 2026 23:57:47 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: rlAk01qgo81/GyDWLqEtu/858Z8exrj8fE7sYE4lAmo=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: Ga3Ln5lbJr/jOn/mktQk4Ls62tUtKHvTiYJE3HVfL+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7f:ea:5f:81:c6:99:70:de:18:ac:8b:0d:01:f0:9b:bf:8d:28:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Apr 15 22:55:47 2026 GMT Not After : Apr 18 23:57:47 2026 GMT Subject: CN=7DF935A7429D213B755D23E66762F8DC4A3F5510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:cf:f9:83:ea:78:b3:73:5b:fe:d2:5f:46: ad:2d:46:d5:13:e8:13:a3:69:4f:b7:8f:7f:99:91: 32:d3:ab:c0:23:86:68:70:90:f6:71:83:df:6b:db: cb:c5:53:64:3b:fe:3d:91:aa:11:46:f9:42:6c:50: 31:7d:51:f0:ce:95:33:5a:14:f1:60:b7:69:bb:a4: 89:44:a2:84:9d:58:d7:77:23:58:cf:0e:f3:99:22: 52:9b:ce:b4:0b:23:6f:1c:3b:5e:a6:08:df:18:b2: f5:4d:d0:07:fa:2b:9b:a0:4e:91:0c:b0:66:0f:e6: fa:d0:07:5a:55:4d:a2:86:d8:5c:a3:2b:13:c2:77: ae:f8:ad:01:52:af:01:cd:b9:30:8a:a3:52:8c:87: b8:a2:f7:ac:59:99:ae:18:28:c6:2c:55:83:0e:c8: f0:8a:25:3f:9a:b3:8f:ab:c8:9c:10:35:39:8f:f5: fa:eb:e3:6b:8a:25:90:30:a1:e0:1e:91:f1:a3:cc: 7b:c6:f5:79:2b:c3:17:71:77:6b:3c:b3:5f:88:2f: ae:b0:33:bd:57:80:44:61:6e:74:20:1f:a6:38:a8: d0:af:4e:5b:48:c1:6b:46:00:52:1c:09:de:69:20: 2b:71:42:a4:77:09:8f:76:51:c9:a7:f7:a9:dc:e2: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:35:A7:42:9D:21:3B:75:5D:23:E6:67:62:F8:DC:4A:3F:55:10 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:bd:12:93:1e:98:6d:fb:46:67:3f:3e:62:9f:97:b2:87:cc: 20:54:a2:df:b8:10:f9:6b:e1:b1:66:f7:42:fa:27:0c:7d:48: fc:48:68:9a:94:96:48:fb:54:ac:a9:58:22:43:b8:ff:ad:39: 99:32:c4:6a:03:87:5d:46:31:71:91:2e:c9:bc:89:50:83:3a: e0:9d:71:7c:e9:cc:97:55:5b:a6:c7:ae:55:53:e0:3b:57:ec: 40:62:6a:99:5a:66:33:30:d0:27:68:77:0a:93:50:f6:fb:f0: fa:e1:19:79:67:2c:0f:6d:cb:74:92:13:a6:2d:88:0e:86:72: 8f:24:49:07:b5:86:a7:db:56:28:0b:f6:71:17:4b:4f:d7:83: 33:55:bf:5e:bb:82:31:8d:6c:62:59:a5:48:e5:51:4d:13:1e: 55:ac:40:05:7e:45:66:e3:34:97:8d:9a:c8:d2:ac:4d:02:db: f6:40:74:66:56:0e:5a:5b:bc:ee:bd:81:e4:78:21:72:8a:11: cf:a5:73:3e:7f:45:23:90:ee:20:bb:54:43:20:45:3c:15:01: 29:56:79:f3:ba:21:d0:8e:2b:b4:6e:4e:75:92:7e:a2:48:23: b8:2a:58:d2:a4:f9:3e:00:ad:1f:e9:67:1e:3b:eb:8c:2f:79: 3e:0b:7b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDn/qX4HGmXDeGKyLDQHwm7+NKMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNjA0MTUyMjU1NDdaFw0yNjA0MTgyMzU3NDdaMDMxMTAvBgNV BAMTKDdERjkzNUE3NDI5RDIxM0I3NTVEMjNFNjY3NjJGOERDNEEzRjU1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINc/5g+p4s3Nb/tJfRq0tRtUT 6BOjaU+3j3+ZkTLTq8AjhmhwkPZxg99r28vFU2Q7/j2RqhFG+UJsUDF9UfDOlTNa FPFgt2m7pIlEooSdWNd3I1jPDvOZIlKbzrQLI28cO16mCN8YsvVN0Af6K5ugTpEM sGYP5vrQB1pVTaKG2FyjKxPCd674rQFSrwHNuTCKo1KMh7ii96xZma4YKMYsVYMO yPCKJT+as4+ryJwQNTmP9frr42uKJZAwoeAekfGjzHvG9Xkrwxdxd2s8s1+IL66w M71XgERhbnQgH6Y4qNCvTltIwWtGAFIcCd5pICtxQqR3CY92Ucmn96nc4ueVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffk1p0KdITt1XSPmZ2L43Eo/VRAwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM69EpMemG37Rmc/PmKfl7KHzCBUot+4EPlr 4bFm90L6Jwx9SPxIaJqUlkj7VKypWCJDuP+tOZkyxGoDh11GMXGRLsm8iVCDOuCd cXzpzJdVW6bHrlVT4DtX7EBiaplaZjMw0CdodwqTUPb78PrhGXlnLA9ty3SSE6Yt iA6Gco8kSQe1hqfbVigL9nEXS0/XgzNVv167gjGNbGJZpUjlUU0THlWsQAV+RWbj NJeNmsjSrE0C2/ZAdGZWDlpbvO69geR4IXKKEc+lcz5/RSOQ7iC7VEMgRTwVASlW efO6IdCOK7RuTnWSfqJII7gqWNKk+T4ArR/pZx4764wveT4Le1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:41 2026 by rpki-client