$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: PJmbnNEeI/qyS94kilf7qH7sROG620VMOKBgofZK+7M= Subject key identifier: E8:FC:A7:66:38:69:77:06:FA:45:B9:8E:AD:7E:B8:F8:7B:A8:58:95 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 63D6B45FB429D17C6191FF5C3AB58789CDC66079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 0261 Signing time: Fri 17 Apr 2026 13:30:00 +0000 Manifest this update: Fri 17 Apr 2026 13:25:00 +0000 Manifest next update: Mon 20 Apr 2026 21:09:00 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: x5Hp+HOblAHOHP0M7M1Nf47NaRwReuKAEuMVfjybHpo=) 2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: oqbOgRrMBUEg7/9/Dk/A63RCmC4Hz3xeOkDG+GmeZTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d6:b4:5f:b4:29:d1:7c:61:91:ff:5c:3a:b5:87:89:cd:c6:60:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Apr 17 13:25:00 2026 GMT Not After : Apr 20 21:09:00 2026 GMT Subject: CN=E8FCA76638697706FA45B98EAD7EB8F87BA85895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:0c:9c:d1:b9:34:c2:4a:90:35:3c:75:06: d0:eb:ac:e1:1f:54:50:a0:22:d7:0e:05:64:aa:4f: 35:03:20:56:e5:c5:11:cf:36:d8:8b:ad:6e:d5:b0: d5:1c:fe:c0:f4:5c:29:57:ce:da:a3:bd:6c:74:7d: 07:cd:5e:f0:e2:a4:87:5a:9b:18:ae:6e:20:6d:ff: c3:a7:09:0f:7f:1d:f0:4f:1e:48:48:e5:45:22:96: 49:5a:79:35:fb:e3:c6:75:a9:20:aa:da:2d:fe:02: eb:7c:96:83:7f:fd:4d:3f:26:f8:72:d9:56:a5:19: 79:2d:b0:66:41:4c:05:a2:77:15:8c:e6:9d:0e:2b: db:15:24:f7:08:66:08:c5:c7:f4:18:c5:05:1a:7f: 23:f8:be:75:3a:6b:53:55:7c:6b:6a:3a:53:db:24: 22:94:30:8f:d5:65:4c:b7:7a:f8:f4:ba:55:f1:40: 0c:fb:61:9e:37:f7:b0:52:08:9a:7e:a3:49:80:93: 17:81:11:18:c9:00:88:97:c9:e7:ab:ae:ad:42:c6: f9:8b:4f:76:0e:e8:4c:c3:9a:a6:ce:ff:3e:7a:f3: ee:13:43:cc:cf:9d:97:5f:a0:d9:4e:83:15:03:82: 7f:21:dc:4a:3f:3c:b4:85:ea:c1:12:5d:77:21:fc: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:A7:66:38:69:77:06:FA:45:B9:8E:AD:7E:B8:F8:7B:A8:58:95 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:97:30:1c:07:1b:2d:e5:2a:13:44:ac:59:94:1f:c3:dc:db: fc:5c:e2:93:2f:8a:16:f4:f0:14:cf:2f:8b:69:4e:61:db:51: 61:50:57:d7:6b:b1:96:f1:33:40:0c:33:62:6e:82:69:21:ab: 02:ec:57:73:9a:ff:9b:b4:05:0a:c3:b2:fc:40:25:2e:d8:77: 3c:db:25:eb:44:3c:1f:08:89:f8:26:98:55:7c:ca:fe:e0:0a: 8a:46:85:c0:d8:b1:59:d3:c0:ec:e0:0d:43:75:3f:44:f8:a9: 41:49:45:f5:cd:ba:5e:76:b7:d2:bc:b1:22:bf:20:fb:03:ab: f5:98:0a:5a:ee:d7:55:c6:3c:7a:f5:aa:b6:35:29:26:35:de: bd:3c:8b:74:cf:bd:bd:c7:72:fb:2a:68:cc:4c:95:85:d2:b3: bd:61:5f:31:e4:ac:b1:0f:43:fc:73:66:dc:ff:6f:c0:e5:24: f5:70:20:c6:8a:be:d7:70:30:bf:83:73:5c:fb:ef:69:42:ba: dc:1f:4f:62:05:30:f3:39:f7:08:a5:7c:3e:a5:84:04:ef:12: 85:e4:52:c0:dc:bf:63:9c:ce:b2:31:e5:bf:14:36:d3:ce:e7: 8d:d1:b4:a7:d5:2a:c5:71:1f:3b:73:0f:1d:41:ac:6c:da:8e: f6:25:13:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9a0X7Qp0Xxhkf9cOrWHic3GYHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNjA0MTcxMzI1MDBaFw0yNjA0MjAyMTA5MDBaMDMxMTAvBgNV BAMTKEU4RkNBNzY2Mzg2OTc3MDZGQTQ1Qjk4RUFEN0VCOEY4N0JBODU4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5gyc0bk0wkqQNTx1BtDrrOEf VFCgItcOBWSqTzUDIFblxRHPNtiLrW7VsNUc/sD0XClXztqjvWx0fQfNXvDipIda mxiubiBt/8OnCQ9/HfBPHkhI5UUilklaeTX748Z1qSCq2i3+Aut8loN//U0/Jvhy 2ValGXktsGZBTAWidxWM5p0OK9sVJPcIZgjFx/QYxQUafyP4vnU6a1NVfGtqOlPb JCKUMI/VZUy3evj0ulXxQAz7YZ4397BSCJp+o0mAkxeBERjJAIiXyeerrq1CxvmL T3YO6EzDmqbO/z568+4TQ8zPnZdfoNlOgxUDgn8h3Eo/PLSF6sESXXch/NUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PynZjhpdwb6RbmOrX64+HuoWJUwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeXMBwHGy3lKhNErFmUH8Pc2/xc4pMvihb0 8BTPL4tpTmHbUWFQV9drsZbxM0AMM2JugmkhqwLsV3Oa/5u0BQrDsvxAJS7Ydzzb JetEPB8IifgmmFV8yv7gCopGhcDYsVnTwOzgDUN1P0T4qUFJRfXNul52t9K8sSK/ IPsDq/WYClru11XGPHr1qrY1KSY13r08i3TPvb3HcvsqaMxMlYXSs71hXzHkrLEP Q/xzZtz/b8DlJPVwIMaKvtdwML+Dc1z772lCutwfT2IFMPM59wilfD6lhATvEoXk UsDcv2OczrIx5b8UNtPO543RtKfVKsVxHztzDx1BrGzajvYlE5Q= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:31 2026 by rpki-client