$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: DhWFCH4zbAq268lKFZitoD34JTfsM7Dum5cGKCSy1z4= Subject key identifier: CD:5F:88:41:67:B6:EC:5E:DB:AB:3E:DD:9A:4F:94:A7:87:58:A3:74 Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 664F115252DF8E6C5B5924201B8AB0A2ADD5FE36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 01EC Signing time: Fri 17 Apr 2026 13:41:16 +0000 Manifest this update: Fri 17 Apr 2026 13:36:16 +0000 Manifest next update: Mon 20 Apr 2026 18:40:16 +0000 Files and hashes: 1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: qHXQ3QdEStqD3uKNvFn/PgcoJYTH2F/sc5gVhh/RXSU=) 2: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: CRwU0L1ssLkMhvFPkriFbIaLrVr0CAOnZXuoJx/zYFU=) 3: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: vkkcqh0CCnM2APJ3leskvRLD2ITpZS/X/KUJgbnZ/CA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:11:52:52:df:8e:6c:5b:59:24:20:1b:8a:b0:a2:ad:d5:fe:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Apr 17 13:36:16 2026 GMT Not After : Apr 20 18:40:16 2026 GMT Subject: CN=CD5F884167B6EC5EDBAB3EDD9A4F94A78758A374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:7c:b6:46:78:87:47:83:2d:22:31:26:50: 80:36:73:05:a3:cb:09:43:23:64:8b:f1:f2:61:d1: 33:47:e9:bf:c0:73:42:85:0f:4f:bf:79:ba:7f:59: 57:ee:d0:ec:3c:4e:b1:fd:43:6e:c0:ab:c2:b7:a4: 5a:6e:b5:34:46:9c:c5:20:1a:b5:ed:d1:e6:c6:5c: 0b:48:29:0d:20:84:91:33:5d:f6:08:67:8f:8c:46: c7:4d:b5:56:32:3a:96:c5:73:dc:52:76:bb:72:f4: 67:a1:ab:29:e1:54:77:95:7e:ef:dc:38:ab:32:77: ef:d8:16:e1:81:ab:48:19:e5:34:37:3f:d8:1a:91: cf:f5:6f:5a:b1:56:35:cc:f8:48:48:3b:ad:ae:23: aa:14:98:ff:c2:7f:8a:c6:b4:0b:46:aa:35:10:7a: d4:86:c9:87:af:06:14:c6:e3:80:ba:61:35:32:9c: 50:01:62:9f:4b:d5:1c:35:34:0e:90:94:2f:4d:40: d9:e5:b4:51:6b:9c:fb:ee:0f:e0:99:0d:2d:40:d9: 91:d7:1b:7f:9b:a1:5d:03:98:7e:13:18:8e:dc:9c: 9d:b0:71:2a:db:ae:0b:da:77:dc:d2:8d:0c:14:69: 2b:6d:b9:31:27:78:01:20:6f:55:62:65:a9:70:c2: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:88:41:67:B6:EC:5E:DB:AB:3E:DD:9A:4F:94:A7:87:58:A3:74 X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:07:4c:a6:db:7d:c8:ef:1b:31:c8:e9:fc:2c:08:a1:19:a6: 0c:9d:eb:13:09:35:ef:46:0a:67:b1:c7:82:49:4a:ac:27:c2: 80:f5:42:0f:cc:26:16:c4:7f:2a:6d:be:42:53:75:7e:ec:fb: 04:74:4b:18:b6:d1:72:76:b8:86:c7:ab:87:7a:d5:f2:61:ae: e5:d4:f4:9b:eb:3f:db:30:76:e1:7c:47:52:82:0c:7e:3a:72: b4:21:8f:0a:78:7e:0b:8f:91:8e:ad:95:ed:f3:a1:78:76:55: 36:d3:90:a9:cc:0b:27:f1:5a:3a:76:76:09:33:4b:6a:6e:5c: ba:db:bb:cf:8a:3c:08:85:28:b1:27:a3:ea:15:e1:31:89:c5: 87:cb:67:fe:7e:80:11:89:03:89:7f:45:f3:40:a5:c2:eb:0f: 28:5d:2a:0f:cb:5d:96:0e:db:41:63:76:65:63:a4:82:aa:7f: fc:bc:dd:47:41:fe:99:d7:ab:67:a8:03:7f:a7:fd:ab:44:9d: 15:2a:52:c3:40:84:6d:98:18:64:c0:02:80:96:df:09:8a:a1: 43:17:b8:5a:c7:69:25:c9:7e:f2:ea:77:ed:ca:0f:60:75:c8: 6a:70:d3:86:d0:49:f5:0f:3a:fc:55:fa:88:19:04:a1:e4:d7: 81:14:a2:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZk8RUlLfjmxbWSQgG4qwoq3V/jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNjA0MTcxMzM2MTZaFw0yNjA0MjAxODQwMTZaMDMxMTAvBgNV BAMTKENENUY4ODQxNjdCNkVDNUVEQkFCM0VERDlBNEY5NEE3ODc1OEEzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tXy2RniHR4MtIjEmUIA2cwWj ywlDI2SL8fJh0TNH6b/Ac0KFD0+/ebp/WVfu0Ow8TrH9Q27Aq8K3pFputTRGnMUg GrXt0ebGXAtIKQ0ghJEzXfYIZ4+MRsdNtVYyOpbFc9xSdrty9GehqynhVHeVfu/c OKsyd+/YFuGBq0gZ5TQ3P9gakc/1b1qxVjXM+EhIO62uI6oUmP/Cf4rGtAtGqjUQ etSGyYevBhTG44C6YTUynFABYp9L1Rw1NA6QlC9NQNnltFFrnPvuD+CZDS1A2ZHX G3+boV0DmH4TGI7cnJ2wcSrbrgvad9zSjQwUaSttuTEneAEgb1ViZalwwhBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzV+IQWe27F7bqz7dmk+Up4dYo3QwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMHTKbbfcjvGzHI6fwsCKEZpgyd6xMJNe9G Cmexx4JJSqwnwoD1Qg/MJhbEfyptvkJTdX7s+wR0Sxi20XJ2uIbHq4d61fJhruXU 9JvrP9swduF8R1KCDH46crQhjwp4fguPkY6tle3zoXh2VTbTkKnMCyfxWjp2dgkz S2puXLrbu8+KPAiFKLEno+oV4TGJxYfLZ/5+gBGJA4l/RfNApcLrDyhdKg/LXZYO 20FjdmVjpIKqf/y83UdB/pnXq2eoA3+n/atEnRUqUsNAhG2YGGTAAoCW3wmKoUMX uFrHaSXJfvLqd+3KD2B1yGpw04bQSfUPOvxV+ogZBKHk14EUonM= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:30 2026 by rpki-client