$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: +OFC3QHDC5yFZtojDdcclomIZ02oz2y72tze2VXva5M= Subject key identifier: ED:E3:68:EF:72:A2:48:44:B7:9D:78:66:14:35:82:DD:97:5B:FD:15 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 6198CDCC2E52421F886C1BB1E697DDCF050ECE67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0162 Signing time: Fri 17 Apr 2026 08:31:55 +0000 Manifest this update: Fri 17 Apr 2026 08:26:55 +0000 Manifest next update: Mon 20 Apr 2026 16:02:55 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: VwqZQ2hYIJIpswzvgku070aTaUCXAfj4FutWWR2nxCU=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: 4ZwdrhMNP2K+ewMb1/PcLGEYyRjVPWlsAqNzpMSTLyQ=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: sQjzMKfSbeLjhatpOUa2jqoPr0yDGU2BnKpmrQbbfNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:cd:cc:2e:52:42:1f:88:6c:1b:b1:e6:97:dd:cf:05:0e:ce:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Apr 17 08:26:55 2026 GMT Not After : Apr 20 16:02:55 2026 GMT Subject: CN=EDE368EF72A24844B79D7866143582DD975BFD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:2e:f8:8b:db:d1:4e:c4:8f:57:3d:2d:8e: 09:50:d2:b4:5b:5e:95:d4:db:84:7f:12:4a:11:d5: 2c:45:97:c2:08:2e:ff:46:32:a8:06:71:35:27:c7: a0:c4:bb:56:03:12:23:69:e6:6b:90:e1:12:af:c4: e2:9d:17:ed:20:af:5e:ec:75:11:02:c8:b9:7e:11: 0b:76:e3:e1:33:14:b0:dd:7d:dd:28:5d:ef:5b:13: 51:57:ce:93:54:d5:26:fc:4c:27:a8:e3:66:83:35: 3d:84:aa:f5:0a:95:f4:ac:5e:e1:20:ea:bb:f4:5e: 78:83:66:bc:a4:3f:1f:d7:7e:dc:f6:85:a6:a0:62: c1:5e:06:ff:c0:0b:43:fb:77:2e:37:67:2e:5d:cc: 4f:e4:63:0c:d5:8d:0b:aa:7d:c5:85:cd:00:45:12: e6:e9:99:82:24:d4:68:ab:40:14:fe:c2:a3:97:7e: e5:63:bf:94:17:ee:84:5f:50:0f:fb:84:d1:30:1a: 1a:f2:d7:54:0c:7c:4a:23:0c:1d:c6:4f:0c:86:7b: 76:23:1b:63:b2:ca:42:fa:c5:5d:07:f7:24:d4:72: fc:fb:ec:76:d9:32:5d:b7:1d:3c:4a:28:55:3e:0e: f8:d4:88:39:4f:4e:7a:5f:c6:2a:2f:99:3f:82:9b: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E3:68:EF:72:A2:48:44:B7:9D:78:66:14:35:82:DD:97:5B:FD:15 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:84:21:b0:d4:13:57:a3:dc:ea:85:ab:37:21:c7:9d:7f: 6c:c5:e8:6d:5a:d5:45:85:3f:08:23:9e:43:7a:5a:f1:7f:9a: 13:e5:d5:37:6a:8c:1a:7b:36:0f:df:c6:9f:2d:e7:ed:fb:75: 43:74:20:bc:d1:6b:a1:f1:9c:df:bf:37:38:8b:10:f3:3d:6f: 66:32:84:02:96:87:23:ca:4f:70:8a:91:df:26:58:50:ad:a8: 18:1c:be:7b:d1:75:6d:6d:43:79:28:35:18:0c:73:9c:01:97: ec:43:75:6e:98:39:4d:80:76:4e:43:92:c2:37:df:17:97:d9: f5:ec:40:33:e9:b2:7f:44:e6:5e:09:4b:99:81:9b:2a:01:33: df:d4:05:00:7c:8b:e6:ad:36:b0:e7:5d:56:c6:29:ac:80:a5: a6:a9:67:84:a5:74:bd:8a:ca:3c:39:ef:5e:52:7f:20:a9:ea: d7:6f:25:e2:a7:0e:81:e5:14:2a:39:d4:72:91:5e:1b:aa:d8: 01:1d:1a:82:1d:2c:62:39:bf:8c:7d:62:14:c2:e6:e6:c5:0f: f4:c6:1e:a8:4d:6d:c0:6d:66:ba:5a:ab:fb:d5:e0:e6:ce:3a: c6:56:ca:eb:b3:f2:26:75:36:da:9a:b5:62:c1:e8:c5:cd:ad: 4e:7e:7b:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZjNzC5SQh+IbBux5pfdzwUOzmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNjA0MTcwODI2NTVaFw0yNjA0MjAxNjAyNTVaMDMxMTAvBgNV BAMTKEVERTM2OEVGNzJBMjQ4NDRCNzlENzg2NjE0MzU4MkREOTc1QkZEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/my74i9vRTsSPVz0tjglQ0rRb XpXU24R/EkoR1SxFl8IILv9GMqgGcTUnx6DEu1YDEiNp5muQ4RKvxOKdF+0gr17s dRECyLl+EQt24+EzFLDdfd0oXe9bE1FXzpNU1Sb8TCeo42aDNT2EqvUKlfSsXuEg 6rv0XniDZrykPx/Xftz2haagYsFeBv/AC0P7dy43Zy5dzE/kYwzVjQuqfcWFzQBF EubpmYIk1GirQBT+wqOXfuVjv5QX7oRfUA/7hNEwGhry11QMfEojDB3GTwyGe3Yj G2OyykL6xV0H9yTUcvz77HbZMl23HTxKKFU+DvjUiDlPTnpfxiovmT+Cm6tpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7eNo73KiSES3nXhmFDWC3Zdb/RUwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqshCGw1BNXo9zqhas3Icedf2zF6G1a1UWF PwgjnkN6WvF/mhPl1TdqjBp7Ng/fxp8t5+37dUN0ILzRa6HxnN+/NziLEPM9b2Yy hAKWhyPKT3CKkd8mWFCtqBgcvnvRdW1tQ3koNRgMc5wBl+xDdW6YOU2Adk5DksI3 3xeX2fXsQDPpsn9E5l4JS5mBmyoBM9/UBQB8i+atNrDnXVbGKayApaapZ4SldL2K yjw5715SfyCp6tdvJeKnDoHlFCo51HKRXhuq2AEdGoIdLGI5v4x9YhTC5ubFD/TG HqhNbcBtZrpaq/vV4ObOOsZWyuuz8iZ1NtqatWLB6MXNrU5+e6M= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:21 2026 by rpki-client