$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: uC0AXnbwR3UcRPzg+jeKYfL1YJ8ijx7PznoNMjMGKSs= Subject key identifier: 3D:C9:77:BE:90:FF:F0:E0:F5:6F:C6:A0:94:C8:42:A0:DA:FB:7E:9D Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 20928B4D8431C7DC3B0DEC69E2C94721933ECDD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 027D Signing time: Sat 18 Apr 2026 03:42:45 +0000 Manifest this update: Sat 18 Apr 2026 03:37:44 +0000 Manifest next update: Tue 21 Apr 2026 12:37:44 +0000 Files and hashes: 1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: Bc+i0dB8URC30zcYP3qYTMCzW+j8pBJAq8JVAqncbHo=) 2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:8b:4d:84:31:c7:dc:3b:0d:ec:69:e2:c9:47:21:93:3e:cd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Apr 18 03:37:44 2026 GMT Not After : Apr 21 12:37:44 2026 GMT Subject: CN=3DC977BE90FFF0E0F56FC6A094C842A0DAFB7E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:d7:46:14:34:79:0a:02:ca:cc:97:a6:06: 45:aa:5f:91:c3:d7:b0:fd:25:ca:91:91:7b:ca:76: 47:c0:42:d1:b4:f7:5d:e7:39:d5:b0:11:0a:36:6f: 81:38:d8:6b:e2:a5:c5:e5:95:51:ba:57:7c:16:c6: 21:92:19:db:6f:b0:7e:24:63:b0:d8:60:7e:8e:7d: db:41:6c:2a:69:14:a8:d0:29:6c:ef:d7:45:ba:25: eb:09:08:b5:fd:50:59:38:85:b6:85:59:f0:aa:cf: 0e:d8:63:35:eb:02:14:cb:f5:85:76:20:c1:d5:35: fa:91:95:11:75:9f:6b:e2:6d:99:1b:10:91:92:5e: 02:77:63:ad:de:ed:39:5f:f6:e7:ed:b1:c7:21:20: 0f:d6:9c:77:31:57:1c:75:a1:69:80:cd:fa:cb:a3: 76:1c:af:f7:a3:44:40:14:d0:87:ba:1b:26:af:4b: 63:3f:b7:5f:60:0f:b8:13:eb:7d:0a:d7:52:be:56: 05:67:f7:c1:46:07:a1:3e:bb:14:55:2c:5a:fd:96: f3:78:5f:4b:ff:08:3d:18:0f:99:e3:7c:11:b0:9c: 11:b5:bd:e7:a0:2e:f8:be:b8:df:35:a4:b2:f5:58: 37:d4:de:45:0d:e4:68:2f:c3:ca:56:03:e5:e3:b7: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C9:77:BE:90:FF:F0:E0:F5:6F:C6:A0:94:C8:42:A0:DA:FB:7E:9D X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:9c:cf:01:c4:12:21:31:fa:25:62:a3:58:11:28:92:79:b1: eb:f8:c6:95:62:00:82:82:4b:68:ae:a6:fd:d1:d6:f6:b7:dd: 53:dd:00:a8:bd:d8:73:c2:7f:18:c4:19:0e:a3:2d:ec:2a:11: 3a:eb:90:25:b2:02:72:55:1c:0c:c4:0a:5d:fe:3b:9e:20:42: 9e:a5:4b:32:d1:f9:b9:7e:c9:3f:aa:24:75:cd:5e:27:53:f0: b6:0a:07:61:43:dd:a6:20:6d:34:4f:d9:62:f2:68:18:f5:ed: 83:bb:37:fb:ec:04:4f:ee:d7:73:79:b9:38:f0:6d:02:09:74: 32:31:c5:95:41:61:ec:87:eb:83:de:5d:a5:35:07:f8:ff:14: ba:30:53:2e:9a:78:45:5f:4b:3e:6f:ac:42:84:dc:1b:dc:2d: d2:e1:e3:8d:42:5b:9f:5f:a7:1d:b5:20:51:09:c9:0a:58:1c: 77:a8:e5:b9:b0:5a:e3:e9:68:17:41:2f:ef:e2:d1:64:30:78: f0:36:87:8f:97:f8:ec:83:d5:53:bf:c3:6e:fb:d0:8d:8b:13: a7:f0:e9:d0:2b:1a:c8:0b:2c:f0:11:f2:42:5a:9c:3d:99:b6: 94:b8:4c:9b:01:85:0c:66:5b:56:3a:66:9a:08:18:fa:21:c4: 53:01:e1:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJKLTYQxx9w7Dexp4slHIZM+zdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNjA0MTgwMzM3NDRaFw0yNjA0MjExMjM3NDRaMDMxMTAvBgNV BAMTKDNEQzk3N0JFOTBGRkYwRTBGNTZGQzZBMDk0Qzg0MkEwREFGQjdFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtetdGFDR5CgLKzJemBkWqX5HD 17D9JcqRkXvKdkfAQtG0913nOdWwEQo2b4E42GvipcXllVG6V3wWxiGSGdtvsH4k Y7DYYH6OfdtBbCppFKjQKWzv10W6JesJCLX9UFk4hbaFWfCqzw7YYzXrAhTL9YV2 IMHVNfqRlRF1n2vibZkbEJGSXgJ3Y63e7Tlf9uftscchIA/WnHcxVxx1oWmAzfrL o3Ycr/ejREAU0Ie6GyavS2M/t19gD7gT630K11K+VgVn98FGB6E+uxRVLFr9lvN4 X0v/CD0YD5njfBGwnBG1veegLvi+uN81pLL1WDfU3kUN5Ggvw8pWA+Xjt2ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPcl3vpD/8OD1b8aglMhCoNr7fp0wHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuczwHEEiEx+iVio1gRKJJ5sev4xpViAIKC S2iupv3R1va33VPdAKi92HPCfxjEGQ6jLewqETrrkCWyAnJVHAzECl3+O54gQp6l SzLR+bl+yT+qJHXNXidT8LYKB2FD3aYgbTRP2WLyaBj17YO7N/vsBE/u13N5uTjw bQIJdDIxxZVBYeyH64PeXaU1B/j/FLowUy6aeEVfSz5vrEKE3BvcLdLh441CW59f px21IFEJyQpYHHeo5bmwWuPpaBdBL+/i0WQwePA2h4+X+OyD1VO/w2770I2LE6fw 6dArGsgLLPAR8kJanD2ZtpS4TJsBhQxmW1Y6ZpoIGPohxFMB4VE= -----END CERTIFICATE-----Generated at Sun Apr 19 14:20:45 2026 by rpki-client