$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: EdR8yAa7A8mVWDk7Pyw9v7xyNP73vBkYdgchTwKwAD8= Subject key identifier: 84:60:20:A1:10:4D:90:A3:2F:67:8F:A5:0A:2B:FA:89:48:DD:5E:4D Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 1F756718A1DDA4DE80E815500CB6717D10ABF907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 056E Signing time: Fri 17 Apr 2026 00:11:50 +0000 Manifest this update: Fri 17 Apr 2026 00:06:50 +0000 Manifest next update: Mon 20 Apr 2026 03:36:50 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa (hash: otTw7cTD+7X2MD76zWvi6+MqPArwOlTIQa8qqypdI0I=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 4: 3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa (hash: xUH6hBErmhVIAC7hqy3cXz0kV3U+6cg7ogjiBk1mZyg=) 5: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: OZ05RlKqMvxaw7/btfY2Q5tIpykIy+VAKJNL7leM+9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:75:67:18:a1:dd:a4:de:80:e8:15:50:0c:b6:71:7d:10:ab:f9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Apr 17 00:06:50 2026 GMT Not After : Apr 20 03:36:50 2026 GMT Subject: CN=846020A1104D90A32F678FA50A2BFA8948DD5E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:57:fd:ed:bf:19:0a:c8:28:b4:90:4f:dc: 97:b2:0e:24:28:bb:e5:a9:7a:0a:86:bd:d7:c0:91: 07:64:b8:06:67:57:e8:ec:e4:3c:eb:22:f8:72:e7: 39:38:ba:3d:78:91:fb:9f:9e:59:35:6e:ae:0b:c8: 06:62:cf:1e:21:b8:96:d4:c7:a0:7b:6b:20:4c:fb: dd:ad:5c:47:29:4d:3f:88:f9:1f:49:5a:da:6f:39: bc:93:13:7b:4d:e1:0a:86:44:e7:6a:f0:92:97:30: 5f:13:2e:c0:1d:c8:fc:26:f3:3b:e1:0f:5e:9c:ec: 28:b8:b2:52:e2:a2:97:80:b0:08:41:a8:44:39:bf: e6:69:ba:42:fb:7e:93:f2:4e:be:dc:65:05:2d:ba: 11:56:56:c1:63:53:b3:74:8d:1d:0c:02:eb:59:4a: da:91:b3:1e:24:e5:ed:56:65:39:ff:59:90:5b:65: 63:8d:c7:bd:c2:2a:63:5f:97:43:04:65:d0:2c:3b: 50:bf:25:42:c9:a6:e8:35:68:3a:2f:4d:fb:e2:5b: 87:1a:fd:1b:57:c4:7a:61:40:6b:ea:84:79:68:c1: e8:33:bd:13:90:f7:16:0e:b2:41:1e:77:fd:fd:0c: 63:18:bf:e9:af:47:1f:98:97:6b:13:74:c7:bf:0b: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:20:A1:10:4D:90:A3:2F:67:8F:A5:0A:2B:FA:89:48:DD:5E:4D X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cd:c5:9c:32:45:b4:f7:9b:f1:90:d7:86:58:a3:3a:ce:ab: f0:f5:15:46:e0:7a:84:bf:79:6d:12:a5:32:88:8c:03:5a:44: 55:ce:f3:97:46:69:ab:7d:d2:d7:cc:00:dc:5d:83:3c:7d:0b: ac:73:31:20:2d:b9:94:23:3c:60:f9:2c:5e:fe:1d:d1:ce:f6: 6f:dd:b2:1b:74:83:68:86:3d:82:39:13:ac:3d:ad:3b:c8:08: c0:32:26:57:dc:9b:03:6c:95:e2:30:b4:76:cb:4f:03:fa:f5: 62:73:f0:a9:ac:40:d9:9b:55:0f:96:42:5b:44:35:09:59:c0: cc:08:1e:a3:c3:d6:85:60:50:1b:a6:32:a4:18:9d:8e:0f:52: 8c:f8:96:fe:7e:b5:d7:b2:d1:73:a7:4f:72:ef:45:ad:5b:be: 18:5f:0c:a9:6d:05:0c:31:b3:40:ac:5e:98:85:e3:63:bf:66: 7f:b4:b6:31:d6:32:5d:82:ba:6a:88:f4:04:e6:a4:9d:c2:15: 4e:81:cb:b6:67:78:44:76:5f:09:d8:5b:4d:46:ed:f7:10:20: 53:ae:b5:4f:7f:b6:64:c9:d4:64:6e:6d:e3:c9:e8:84:eb:3b: 32:03:3a:73:53:8f:60:3e:8b:01:02:6d:15:22:c2:a8:93:ae: 52:da:06:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3VnGKHdpN6A6BVQDLZxfRCr+QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjA0MTcwMDA2NTBaFw0yNjA0MjAwMzM2NTBaMDMxMTAvBgNV BAMTKDg0NjAyMEExMTA0RDkwQTMyRjY3OEZBNTBBMkJGQTg5NDhERDVFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w1f97b8ZCsgotJBP3JeyDiQo u+WpegqGvdfAkQdkuAZnV+js5DzrIvhy5zk4uj14kfufnlk1bq4LyAZizx4huJbU x6B7ayBM+92tXEcpTT+I+R9JWtpvObyTE3tN4QqGROdq8JKXMF8TLsAdyPwm8zvh D16c7Ci4slLiopeAsAhBqEQ5v+ZpukL7fpPyTr7cZQUtuhFWVsFjU7N0jR0MAutZ StqRsx4k5e1WZTn/WZBbZWONx73CKmNfl0MEZdAsO1C/JULJpug1aDovTfviW4ca /RtXxHphQGvqhHlowegzvROQ9xYOskEed/39DGMYv+mvRx+Yl2sTdMe/C9GRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGAgoRBNkKMvZ4+lCiv6iUjdXk0wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETNxZwyRbT3m/GQ14ZYozrOq/D1FUbgeoS/ eW0SpTKIjANaRFXO85dGaat90tfMANxdgzx9C6xzMSAtuZQjPGD5LF7+HdHO9m/d sht0g2iGPYI5E6w9rTvICMAyJlfcmwNsleIwtHbLTwP69WJz8KmsQNmbVQ+WQltE NQlZwMwIHqPD1oVgUBumMqQYnY4PUoz4lv5+tdey0XOnT3LvRa1bvhhfDKltBQwx s0CsXpiF42O/Zn+0tjHWMl2CumqI9ATmpJ3CFU6By7ZneER2XwnYW01G7fcQIFOu tU9/tmTJ1GRubePJ6ITrOzIDOnNTj2A+iwECbRUiwqiTrlLaBh0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:49 2026 by rpki-client