$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: lGF2UgtFjwy7nlcXJcEPndPqyVZHt5NKtjokx5bHgCU= Subject key identifier: FE:DE:F7:BA:52:37:9C:D0:7B:CE:C4:FB:15:41:6E:FF:68:ED:3A:04 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 0D34FFAF81732584E637DD9263397D20F01F3CE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0197 Signing time: Wed 15 Apr 2026 13:41:41 +0000 Manifest this update: Wed 15 Apr 2026 13:36:41 +0000 Manifest next update: Sat 18 Apr 2026 20:20:41 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: R2bBhDo/BLTV3gPixXX0KUfxu86BeB+t2Uqv23WvGJo=) 2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:34:ff:af:81:73:25:84:e6:37:dd:92:63:39:7d:20:f0:1f:3c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Apr 15 13:36:41 2026 GMT Not After : Apr 18 20:20:41 2026 GMT Subject: CN=FEDEF7BA52379CD07BCEC4FB15416EFF68ED3A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:ab:80:df:59:d4:5f:d2:f1:ea:d2:48:4e: 8a:9e:16:2c:2b:e2:70:a2:fd:45:90:be:15:cd:23: 6e:05:3b:6f:7b:83:c9:db:ca:a6:c7:0f:a0:65:93: e0:70:b6:c7:e2:d8:c8:3a:ac:61:06:fb:c7:20:cb: 0d:c2:ce:bb:c1:cd:2c:41:3a:2a:aa:b4:3b:2f:04: 55:f9:15:b6:88:ae:c4:d7:bc:94:eb:73:8b:a7:e1: 83:c4:eb:40:62:33:64:ca:e3:93:c0:8f:ad:25:07: f2:4c:93:9c:44:71:10:e5:05:53:4c:6f:d7:06:84: d5:8b:2d:9c:25:d1:c1:64:28:3e:fa:2f:a0:37:67: e8:75:ad:91:1a:6d:6e:c3:4e:29:ea:8d:c3:57:3f: f2:85:89:0f:4a:47:48:1b:c9:22:0b:4c:86:6d:1a: 43:69:10:de:9e:87:e0:39:44:05:07:54:52:3f:bb: 45:7d:65:8b:9d:ba:ae:94:b1:0d:c0:d2:62:53:ac: 0f:d5:37:e0:87:2e:8b:b0:c5:b6:41:87:bf:46:77: 5a:52:fd:3c:fe:14:57:c3:b0:30:13:11:53:e4:33: a3:3d:77:d6:66:b4:35:6f:dd:a1:21:14:58:46:a8: a6:91:60:12:63:75:b5:3b:e8:ad:76:b1:eb:66:c1: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:F7:BA:52:37:9C:D0:7B:CE:C4:FB:15:41:6E:FF:68:ED:3A:04 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ca:14:56:62:c9:aa:bb:12:0f:d0:f9:ef:50:49:67:c8:61: 11:e5:60:46:8c:48:9a:8f:89:1f:b0:f5:52:f1:0e:b5:c0:85: 92:68:94:bf:a3:b0:d4:d9:38:de:45:d3:ae:2f:58:15:b1:42: 6d:52:6d:90:f6:f9:e5:4e:33:a6:88:ef:d3:23:3c:22:66:4e: ac:58:84:67:26:b6:e4:9a:01:31:ee:c2:f3:aa:50:91:92:45: 59:97:97:5a:fd:82:3f:7a:f4:5b:f9:7c:57:c4:d3:a8:9e:87: 0b:09:ba:f0:33:74:7a:93:5f:60:2d:5a:49:c1:e4:58:29:03: 32:85:3c:43:73:8d:65:cf:3e:cc:d3:0a:4d:ed:c1:52:e3:bc: 91:66:0d:a1:df:4d:c2:29:51:de:fe:71:39:1a:65:39:a8:f7: 25:89:a8:c7:e4:9a:e3:93:d3:73:e5:ca:6b:c7:6d:9e:5a:56: a5:ef:25:9e:82:55:2e:e9:69:66:36:64:c9:d8:1e:a1:ab:d5: 19:c8:99:88:89:56:1f:0f:ee:e0:8e:1e:7c:2f:aa:00:d4:9b: 88:2f:9a:b4:cf:e7:51:6b:60:fa:81:07:13:6b:13:11:2c:c7: c9:d0:4c:32:2b:38:0c:8c:7a:78:e3:61:bf:a2:af:a3:d7:01: db:c5:44:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTT/r4FzJYTmN92SYzl9IPAfPOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNjA0MTUxMzM2NDFaFw0yNjA0MTgyMDIwNDFaMDMxMTAvBgNV BAMTKEZFREVGN0JBNTIzNzlDRDA3QkNFQzRGQjE1NDE2RUZGNjhFRDNBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQauA31nUX9Lx6tJIToqeFiwr 4nCi/UWQvhXNI24FO297g8nbyqbHD6Blk+Bwtsfi2Mg6rGEG+8cgyw3CzrvBzSxB OiqqtDsvBFX5FbaIrsTXvJTrc4un4YPE60BiM2TK45PAj60lB/JMk5xEcRDlBVNM b9cGhNWLLZwl0cFkKD76L6A3Z+h1rZEabW7DTinqjcNXP/KFiQ9KR0gbySILTIZt GkNpEN6eh+A5RAUHVFI/u0V9ZYuduq6UsQ3A0mJTrA/VN+CHLouwxbZBh79Gd1pS /Tz+FFfDsDATEVPkM6M9d9ZmtDVv3aEhFFhGqKaRYBJjdbU76K12setmwWOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/t73ulI3nNB7zsT7FUFu/2jtOgQwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3KFFZiyaq7Eg/Q+e9QSWfIYRHlYEaMSJqP iR+w9VLxDrXAhZJolL+jsNTZON5F064vWBWxQm1SbZD2+eVOM6aI79MjPCJmTqxY hGcmtuSaATHuwvOqUJGSRVmXl1r9gj969Fv5fFfE06iehwsJuvAzdHqTX2AtWknB 5FgpAzKFPENzjWXPPszTCk3twVLjvJFmDaHfTcIpUd7+cTkaZTmo9yWJqMfkmuOT 03PlymvHbZ5aVqXvJZ6CVS7paWY2ZMnYHqGr1RnImYiJVh8P7uCOHnwvqgDUm4gv mrTP51FrYPqBBxNrExEsx8nQTDIrOAyMenjjYb+ir6PXAdvFRLQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:44 2026 by rpki-client