$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: BMzaNUxt1kd9zsQCe0IDbD6FOTrThHb6FNrt9fBy6oM= Subject key identifier: 70:AE:C4:FB:C0:01:DA:C5:27:B4:B6:B8:85:6C:70:2A:87:33:83:40 Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 1CBB6E7E25EA049272BB3D7A80FAF1FE9F588DF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0288 Signing time: Fri 17 Apr 2026 23:12:24 +0000 Manifest this update: Fri 17 Apr 2026 23:07:24 +0000 Manifest next update: Tue 21 Apr 2026 04:36:24 +0000 Files and hashes: 1: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: EaLsiirdq2C7saG2qYILLRvhQDxHkjvrrVTBVXS3pAY=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bb:6e:7e:25:ea:04:92:72:bb:3d:7a:80:fa:f1:fe:9f:58:8d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Apr 17 23:07:24 2026 GMT Not After : Apr 21 04:36:24 2026 GMT Subject: CN=70AEC4FBC001DAC527B4B6B8856C702A87338340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:f9:bb:ed:80:df:91:a9:31:86:a7:aa:c3: 9c:02:19:07:90:af:0e:e3:a3:d2:2a:1e:84:48:12: 7f:85:69:92:45:f9:50:f8:65:56:e3:a3:44:ea:96: 80:a3:aa:79:ff:38:04:1f:ae:f9:64:7f:39:52:91: e1:40:19:bd:06:e5:f4:5c:a0:92:17:2f:5f:e6:42: 52:76:b4:0c:54:57:d9:bf:43:07:89:39:09:f8:ec: d8:b2:68:d5:4d:79:a5:8d:dd:ad:f8:4b:64:12:8b: fa:52:db:e3:12:e5:68:80:a9:72:a8:55:35:05:16: a8:75:9c:33:27:9d:e4:ac:1c:fc:ad:33:c9:3d:96: 79:d8:d7:f6:85:69:64:29:b9:47:b4:9d:83:42:25: 5a:7b:63:22:03:22:f2:5f:d5:8d:a9:70:b0:3d:b6: fb:0d:0d:ba:2a:09:53:de:5a:ac:ef:42:f2:ab:6c: e0:f0:73:da:75:7f:be:24:2d:34:df:ea:ad:42:23: c4:d1:05:ce:4c:be:3c:d3:ae:65:68:13:0b:86:f6: 57:89:a6:05:c3:d7:fc:72:a3:6b:b7:8f:57:47:71: ee:8f:b8:bf:67:76:6e:ff:fd:36:12:33:21:3c:12: 51:74:73:82:e5:b1:cf:8d:e5:a8:b2:85:7e:29:33: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AE:C4:FB:C0:01:DA:C5:27:B4:B6:B8:85:6C:70:2A:87:33:83:40 X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e2:5a:97:86:f2:2e:96:c6:4b:c5:39:4f:73:b5:32:49:0a: 97:fb:fe:bd:96:a8:05:b9:a8:21:24:ae:9b:6e:6e:28:e9:7c: da:d1:f6:92:b0:c5:7d:4a:35:dd:4b:ff:8d:2c:4c:35:23:85: 69:4c:64:21:05:ac:d8:b7:65:74:af:df:7d:b9:b4:4d:e9:fa: 7a:47:50:de:6d:3b:e4:54:9e:2f:6c:d4:51:f2:08:4e:80:76: 33:ae:50:d7:13:df:03:73:88:6c:00:da:ac:70:41:68:b2:9f: b3:b1:00:53:70:3a:f9:c7:e4:69:d1:3d:e5:fb:ba:cb:f8:4c: 85:3c:7a:35:cf:5e:33:41:d4:c1:bb:7b:dd:92:0c:63:0f:03: 90:74:98:b1:7b:00:f4:0e:01:25:ce:f8:f0:73:b6:df:e6:01: af:de:84:3c:1c:c7:8a:ba:c3:40:2b:bb:dd:54:35:2b:91:f5: 6b:e0:77:85:7b:0a:48:2a:bf:79:fe:e6:fa:36:1f:a9:19:cd: 43:2b:8a:96:a3:07:1c:01:20:af:34:df:51:08:79:2a:9b:7d: 7d:48:6d:b8:b7:31:be:85:30:c4:af:99:77:40:1b:f1:20:a9: 6a:78:1d:07:26:0e:04:1a:74:c1:dd:5a:69:2e:27:59:a3:f3: ce:ea:5a:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLtufiXqBJJyuz16gPrx/p9YjfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNjA0MTcyMzA3MjRaFw0yNjA0MjEwNDM2MjRaMDMxMTAvBgNV BAMTKDcwQUVDNEZCQzAwMURBQzUyN0I0QjZCODg1NkM3MDJBODczMzgzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9Pm77YDfkakxhqeqw5wCGQeQ rw7jo9IqHoRIEn+FaZJF+VD4ZVbjo0TqloCjqnn/OAQfrvlkfzlSkeFAGb0G5fRc oJIXL1/mQlJ2tAxUV9m/QweJOQn47NiyaNVNeaWN3a34S2QSi/pS2+MS5WiAqXKo VTUFFqh1nDMnneSsHPytM8k9lnnY1/aFaWQpuUe0nYNCJVp7YyIDIvJf1Y2pcLA9 tvsNDboqCVPeWqzvQvKrbODwc9p1f74kLTTf6q1CI8TRBc5MvjzTrmVoEwuG9leJ pgXD1/xyo2u3j1dHce6PuL9ndm7//TYSMyE8ElF0c4Llsc+N5aiyhX4pMy/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcK7E+8AB2sUntLa4hWxwKoczg0AwHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKriWpeG8i6WxkvFOU9ztTJJCpf7/r2WqAW5 qCEkrptubijpfNrR9pKwxX1KNd1L/40sTDUjhWlMZCEFrNi3ZXSv3325tE3p+npH UN5tO+RUni9s1FHyCE6AdjOuUNcT3wNziGwA2qxwQWiyn7OxAFNwOvnH5GnRPeX7 usv4TIU8ejXPXjNB1MG7e92SDGMPA5B0mLF7APQOASXO+PBztt/mAa/ehDwcx4q6 w0Aru91UNSuR9Wvgd4V7Ckgqv3n+5vo2H6kZzUMripajBxwBIK8031EIeSqbfX1I bbi3Mb6FMMSvmXdAG/EgqWp4HQcmDgQadMHdWmkuJ1mj887qWsw= -----END CERTIFICATE-----Generated at Sat Apr 18 03:01:41 2026 by rpki-client