$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: G02T4bpwBmPyc7h2B1w8lG3FgjHREp68jwkfb1Q4Q4o= Subject key identifier: 35:1A:D3:BB:2E:B0:3E:AC:65:35:8D:64:69:39:2E:21:E8:B6:AD:E0 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 4E71DCECE3ACBBE52AB42F1BC02E5B4507AC6480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 09:01:55 +0000 Manifest this update: Fri 17 Apr 2026 08:56:55 +0000 Manifest next update: Mon 20 Apr 2026 11:17:55 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) 2: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: 51UCVow47gQfetnjY80RNzMO470jwV3FC1kK7ma/0kA=) 3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:71:dc:ec:e3:ac:bb:e5:2a:b4:2f:1b:c0:2e:5b:45:07:ac:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Apr 17 08:56:55 2026 GMT Not After : Apr 20 11:17:55 2026 GMT Subject: CN=351AD3BB2EB03EAC65358D6469392E21E8B6ADE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:2d:5d:4d:97:83:ed:a0:06:64:38:8c:81: 86:a6:2b:26:60:ff:f2:f9:f2:e3:f1:3f:c8:9f:71: 10:b8:99:a8:b8:27:b3:f7:9f:a4:28:61:cc:65:fc: 2e:bd:47:8d:e3:85:7c:12:cc:89:67:96:a3:bd:26: e1:7a:ac:6a:8f:36:62:ef:a9:b8:55:41:3b:65:4d: 27:d4:2c:05:c8:8d:6c:e4:34:70:8a:cb:61:b3:38: 7d:ae:0d:cf:67:79:70:56:37:5b:55:c9:54:e2:e4: 87:e2:ae:2d:cd:b3:11:88:f8:fd:ff:b1:f7:e0:76: 3a:93:50:cd:a2:04:cb:22:c4:76:7d:8e:bd:0c:76: b7:dc:bf:da:c8:22:67:8f:4a:b5:f7:b5:e1:c0:02: d2:d1:11:58:33:75:3a:15:bf:35:e5:ca:27:ae:74: 26:82:c5:a1:7d:23:fe:f3:27:ad:a8:ea:2e:24:27: c9:8d:2a:75:56:4b:fd:da:0f:7e:27:3d:95:12:f5: 9e:e4:79:94:33:99:4a:3d:e8:41:20:a6:15:25:74: 6c:16:78:ca:3c:e9:50:5f:11:0c:6a:63:dc:68:8e: ca:7a:12:ca:cd:de:73:35:84:f5:b0:b2:e7:5a:46: 15:c1:a0:16:21:75:44:2b:2e:88:29:de:52:c7:75: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:D3:BB:2E:B0:3E:AC:65:35:8D:64:69:39:2E:21:E8:B6:AD:E0 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d5:0a:98:3d:8a:f0:cd:c2:ef:e7:9a:74:93:2b:bb:d0:98: 9b:b3:25:c1:31:70:4f:64:3e:00:5a:16:f7:81:12:e9:ca:e4: fb:aa:81:32:a7:20:05:22:57:5e:42:15:6d:36:b5:74:b6:c8: a4:44:78:ed:14:e7:b9:fe:3b:86:52:67:f4:1c:e0:21:30:a1: 50:8f:83:fa:fa:6a:9c:1b:8d:b1:0e:a6:88:1f:8b:82:af:95: 3e:72:bf:bb:86:51:54:5a:70:8b:31:06:98:16:81:52:b8:f1: 27:9b:46:16:fb:c4:80:2b:95:8f:d6:55:5e:2a:cf:3d:f8:34: b3:8f:1b:2a:a5:72:29:64:16:f2:3c:86:d1:a0:58:bb:bc:a9: b7:ef:fd:6f:90:3d:41:02:49:a7:8a:88:d0:45:3c:6a:7e:ff: e2:e4:93:e9:35:6f:77:a8:f7:a0:d0:cf:ad:75:6c:a8:b7:91: 5b:64:83:53:58:aa:ca:d2:cc:77:46:aa:b4:6a:69:96:5c:64: 25:1e:a0:51:f2:e7:49:42:8d:1a:10:28:c2:21:9c:39:8c:65: 43:8d:aa:81:19:c6:20:fb:3e:d3:7e:ca:49:da:d0:cb:d7:b0: 89:13:d3:82:9b:55:2f:1a:54:38:e9:ae:e7:b8:a9:e1:ca:f6: 49:27:bc:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnHc7OOsu+UqtC8bwC5bRQesZIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNjA0MTcwODU2NTVaFw0yNjA0MjAxMTE3NTVaMDMxMTAvBgNV BAMTKDM1MUFEM0JCMkVCMDNFQUM2NTM1OEQ2NDY5MzkyRTIxRThCNkFERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23y1dTZeD7aAGZDiMgYamKyZg //L58uPxP8ifcRC4mai4J7P3n6QoYcxl/C69R43jhXwSzIlnlqO9JuF6rGqPNmLv qbhVQTtlTSfULAXIjWzkNHCKy2GzOH2uDc9neXBWN1tVyVTi5Ifiri3NsxGI+P3/ sffgdjqTUM2iBMsixHZ9jr0Mdrfcv9rIImePSrX3teHAAtLREVgzdToVvzXlyieu dCaCxaF9I/7zJ62o6i4kJ8mNKnVWS/3aD34nPZUS9Z7keZQzmUo96EEgphUldGwW eMo86VBfEQxqY9xojsp6EsrN3nM1hPWwsudaRhXBoBYhdUQrLogp3lLHdeMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRrTuy6wPqxlNY1kaTkuIei2reAwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbVCpg9ivDNwu/nmnSTK7vQmJuzJcExcE9k PgBaFveBEunK5PuqgTKnIAUiV15CFW02tXS2yKREeO0U57n+O4ZSZ/Qc4CEwoVCP g/r6apwbjbEOpogfi4KvlT5yv7uGUVRacIsxBpgWgVK48SebRhb7xIArlY/WVV4q zz34NLOPGyqlcilkFvI8htGgWLu8qbfv/W+QPUECSaeKiNBFPGp+/+Lkk+k1b3eo 96DQz611bKi3kVtkg1NYqsrSzHdGqrRqaZZcZCUeoFHy50lCjRoQKMIhnDmMZUON qoEZxiD7PtN+ykna0MvXsIkT04KbVS8aVDjprue4qeHK9kknvMg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:30 2026 by rpki-client