$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: MqwaJ149MxJZNg1lJEiYVW8lY5MJIX8rxmgSakQaIoQ= Subject key identifier: 09:9E:67:C7:8B:FB:4C:28:B8:47:55:74:35:0C:F6:E9:BA:92:84:AD Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 4AB0A5541A4BEFE7F2F8B1A1C37609975676B592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0189 Signing time: Fri 17 Apr 2026 11:32:15 +0000 Manifest this update: Fri 17 Apr 2026 11:27:15 +0000 Manifest next update: Mon 20 Apr 2026 13:36:15 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: IUjZnhhDuHQYhERBJZR4p6tMQXSqA9N1fOmmUBPxHn4=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b0:a5:54:1a:4b:ef:e7:f2:f8:b1:a1:c3:76:09:97:56:76:b5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Apr 17 11:27:15 2026 GMT Not After : Apr 20 13:36:15 2026 GMT Subject: CN=099E67C78BFB4C28B8475574350CF6E9BA9284AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:c1:a3:10:7a:5e:e7:c8:02:51:31:45:50: 7b:f8:a7:33:4a:3e:1b:76:c2:dd:19:c1:1d:f0:70: 2e:5c:db:4a:6f:04:01:20:52:95:9c:67:c6:97:5c: ff:d2:7c:41:b1:a7:94:d9:b4:84:36:c3:aa:8b:67: 78:b0:21:6b:77:1f:50:91:dc:89:4e:4c:d3:03:cb: f1:bb:49:36:e7:6b:85:07:c8:8c:b7:0e:60:81:82: c5:d2:19:09:10:b3:05:81:82:12:89:76:17:38:7e: 6c:63:e6:b2:e8:ba:6a:5d:1c:ba:b8:aa:9e:4a:74: 43:5c:78:de:08:54:65:87:bf:1f:96:ab:70:d5:39: 27:0d:ee:ec:e7:68:94:e8:e5:ce:0b:32:b0:6b:0a: 76:6d:2c:55:fa:57:dd:2d:e8:f4:2d:e0:85:81:c4: 5f:af:8c:20:7d:00:08:59:e2:fb:c8:27:d8:3e:f6: eb:b3:73:ef:5b:da:e8:d3:a0:29:dd:3e:4a:3a:54: 33:fc:b0:e4:b1:6b:e7:04:ca:76:13:c5:97:54:5b: 6f:72:f7:0b:47:2d:ed:ee:3a:f5:83:03:d2:09:e5: 9b:2f:d9:21:c8:55:5a:4e:ac:b2:98:da:c2:a2:22: ed:69:77:b2:2e:e6:e1:4b:e9:f4:f6:b0:14:63:95: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9E:67:C7:8B:FB:4C:28:B8:47:55:74:35:0C:F6:E9:BA:92:84:AD X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:4c:35:7e:48:1d:14:9e:72:4f:20:a0:4e:b1:f0:87:11: 13:d0:bf:dd:b1:fe:92:04:a3:21:1d:04:9c:7f:8f:1d:c4:75: 1f:42:c0:e2:92:42:da:3e:ef:98:eb:8c:b1:77:8e:4d:f7:09: 4c:f9:e2:fd:85:a7:8d:d3:7e:12:af:fa:fb:16:0f:ea:5e:52: 73:d3:26:71:51:23:1a:80:f5:4e:30:94:b4:43:fe:40:bf:21: 32:ce:97:49:6e:57:8f:0c:b6:30:80:78:fb:fb:2c:6d:f8:45: cf:ab:7a:b6:71:e9:e9:ee:15:8d:e9:82:9d:e8:f7:ca:ec:48: 49:cb:69:11:92:7f:79:0f:a1:f0:63:84:c0:ac:ac:5c:c5:0c: 6f:fb:e2:1a:d6:03:84:be:4c:40:54:db:25:60:6c:86:f0:22: 60:d3:0f:3c:40:d5:f6:25:ef:bf:6c:61:1e:ca:1b:04:e7:25: 3c:5d:dd:be:72:a9:e2:80:dc:57:51:f8:39:05:da:87:2d:92: b8:bf:c0:28:c2:0f:f3:c7:16:cf:3c:40:51:43:1f:7b:03:41: 7d:78:9b:11:21:fa:0d:0a:54:f8:02:cc:77:17:0a:f8:ab:c7: 3d:b4:aa:4e:d3:d6:e1:58:49:b6:68:39:7a:20:15:73:a9:5d: 8d:18:02:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrClVBpL7+fy+LGhw3YJl1Z2tZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNjA0MTcxMTI3MTVaFw0yNjA0MjAxMzM2MTVaMDMxMTAvBgNV BAMTKDA5OUU2N0M3OEJGQjRDMjhCODQ3NTU3NDM1MENGNkU5QkE5Mjg0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxScGjEHpe58gCUTFFUHv4pzNK Pht2wt0ZwR3wcC5c20pvBAEgUpWcZ8aXXP/SfEGxp5TZtIQ2w6qLZ3iwIWt3H1CR 3IlOTNMDy/G7STbna4UHyIy3DmCBgsXSGQkQswWBghKJdhc4fmxj5rLoumpdHLq4 qp5KdENceN4IVGWHvx+Wq3DVOScN7uznaJTo5c4LMrBrCnZtLFX6V90t6PQt4IWB xF+vjCB9AAhZ4vvIJ9g+9uuzc+9b2ujToCndPko6VDP8sOSxa+cEynYTxZdUW29y 9wtHLe3uOvWDA9IJ5Zsv2SHIVVpOrLKY2sKiIu1pd7Iu5uFL6fT2sBRjlTPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCZ5nx4v7TCi4R1V0NQz26bqShK0wHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKGTDV+SB0UnnJPIKBOsfCHERPQv92x/pIE oyEdBJx/jx3EdR9CwOKSQto+75jrjLF3jk33CUz54v2Fp43TfhKv+vsWD+peUnPT JnFRIxqA9U4wlLRD/kC/ITLOl0luV48MtjCAePv7LG34Rc+rerZx6enuFY3pgp3o 98rsSEnLaRGSf3kPofBjhMCsrFzFDG/74hrWA4S+TEBU2yVgbIbwImDTDzxA1fYl 779sYR7KGwTnJTxd3b5yqeKA3FdR+DkF2octkri/wCjCD/PHFs88QFFDH3sDQX14 mxEh+g0KVPgCzHcXCvirxz20qk7T1uFYSbZoOXogFXOpXY0YAp0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:57 2026 by rpki-client