$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: THa2YX8gGhJAqe0KfEhDYEVf+0o/vD42h6vlZpxqWSY= Subject key identifier: 2F:43:0E:0A:A7:D9:6F:D2:75:C6:98:E5:0E:50:5A:90:5B:67:CF:AA Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 2641795A62FC4E3EDBF53E7541D521E380305C68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: D8 Signing time: Thu 16 Apr 2026 23:02:44 +0000 Manifest this update: Thu 16 Apr 2026 22:57:44 +0000 Manifest next update: Mon 20 Apr 2026 10:55:44 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) 3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: cU97kOo/+arS4awQHwESYY+9AP6bJWtOOwy3DHI/nVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:41:79:5a:62:fc:4e:3e:db:f5:3e:75:41:d5:21:e3:80:30:5c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Apr 16 22:57:44 2026 GMT Not After : Apr 20 10:55:44 2026 GMT Subject: CN=2F430E0AA7D96FD275C698E50E505A905B67CFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:dc:4b:58:11:e2:0a:82:ab:b1:b7:5e:e9:49: 94:f7:c3:23:45:8c:95:c3:29:80:49:5d:6d:4d:2a: b6:1a:b6:de:fb:30:6a:78:21:19:a3:72:52:8a:48: 0d:cd:4f:d4:8a:f1:70:89:31:32:bc:74:c5:fd:1b: 81:c7:23:60:17:84:6f:51:ec:90:dd:aa:6d:38:be: e9:d5:94:4e:19:56:30:c3:71:75:ec:75:bb:ff:ad: ac:67:a2:b8:0e:8b:ca:db:88:af:c2:49:93:94:dc: 37:eb:27:a0:f7:65:89:1e:56:6e:2c:2a:70:a4:57: 95:fa:74:2b:cf:26:04:7b:37:92:99:f2:fa:f5:92: 8d:62:05:5a:9f:47:52:5f:d3:e3:15:76:5e:c6:01: cd:e6:1d:a6:e3:23:ea:dc:85:93:b6:d3:b4:8f:e5: 09:f9:7f:75:08:41:2b:26:26:f7:ef:86:be:24:69: 09:9d:c9:5b:0d:18:82:4a:3f:c2:cd:aa:f4:dd:eb: dd:a0:50:c7:f0:91:81:c0:74:e4:cd:3e:f4:fd:b4: e2:c0:b7:c4:46:66:b9:81:73:67:db:6b:25:d4:37: 8e:38:fc:80:40:a8:66:94:10:aa:26:8c:55:c5:bc: 2d:51:9e:54:3f:2b:6e:55:07:79:61:3d:9f:c1:1e: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:0E:0A:A7:D9:6F:D2:75:C6:98:E5:0E:50:5A:90:5B:67:CF:AA X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:c8:78:71:41:b7:00:88:ea:22:fe:a8:8e:89:47:f8:8a: 3a:29:1c:1d:e4:ec:3e:e9:c2:97:f1:f5:44:f2:c3:f5:70:71: 2b:c0:2a:0c:3e:46:8b:96:c7:6b:8b:64:16:10:60:b5:6d:19: ab:89:65:5e:e0:65:5c:b4:da:b9:72:f8:05:f9:e6:5f:ec:27: eb:3b:2c:3a:0b:8d:de:72:21:bc:ce:0b:19:17:62:70:45:bf: e5:91:01:68:36:52:20:58:c0:44:12:1c:61:0e:7c:e9:8a:23: 95:37:7e:6f:05:88:2a:91:62:4f:d6:12:32:3c:57:c3:68:a0: 8d:31:3a:ab:4b:1a:22:c5:95:4b:4f:95:37:a3:ee:20:34:a1: ba:ac:9f:e6:fb:9e:3f:ff:c2:0d:fe:4d:88:80:35:eb:3a:33: dd:2f:83:46:1a:fc:1c:d2:e4:d2:e6:c7:95:54:76:9c:f7:8b: 9e:4d:f0:75:77:b5:49:f9:5c:04:32:b3:e5:80:27:99:f0:51: fc:14:9d:11:93:8b:47:b9:0c:51:46:84:09:6d:e7:da:b1:5a: af:10:13:d5:3e:3e:df:e2:62:57:4a:5f:80:a3:2f:c4:a1:9d: e8:8a:f8:13:1c:f1:22:48:10:b0:8b:0d:76:88:e0:a8:87:dd: 26:a5:e9:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkF5WmL8Tj7b9T51QdUh44AwXGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNjA0MTYyMjU3NDRaFw0yNjA0MjAxMDU1NDRaMDMxMTAvBgNV BAMTKDJGNDMwRTBBQTdEOTZGRDI3NUM2OThFNTBFNTA1QTkwNUI2N0NGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD83EtYEeIKgquxt17pSZT3wyNF jJXDKYBJXW1NKrYatt77MGp4IRmjclKKSA3NT9SK8XCJMTK8dMX9G4HHI2AXhG9R 7JDdqm04vunVlE4ZVjDDcXXsdbv/raxnorgOi8rbiK/CSZOU3DfrJ6D3ZYkeVm4s KnCkV5X6dCvPJgR7N5KZ8vr1ko1iBVqfR1Jf0+MVdl7GAc3mHabjI+rchZO207SP 5Qn5f3UIQSsmJvfvhr4kaQmdyVsNGIJKP8LNqvTd692gUMfwkYHAdOTNPvT9tOLA t8RGZrmBc2fbayXUN444/IBAqGaUEKomjFXFvC1RnlQ/K25VB3lhPZ/BHiNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0MOCqfZb9J1xpjlDlBakFtnz6owHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxFyHhxQbcAiOoi/qiOiUf4ijopHB3k7D7p wpfx9UTyw/VwcSvAKgw+RouWx2uLZBYQYLVtGauJZV7gZVy02rly+AX55l/sJ+s7 LDoLjd5yIbzOCxkXYnBFv+WRAWg2UiBYwEQSHGEOfOmKI5U3fm8FiCqRYk/WEjI8 V8NooI0xOqtLGiLFlUtPlTej7iA0obqsn+b7nj//wg3+TYiANes6M90vg0Ya/BzS 5NLmx5VUdpz3i55N8HV3tUn5XAQys+WAJ5nwUfwUnRGTi0e5DFFGhAlt59qxWq8Q E9U+Pt/iYldKX4CjL8ShneiK+BMc8SJIELCLDXaI4KiH3Sal6ZY= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:38 2026 by rpki-client