$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: D17S9XwdWUCppVeYd3QTZlVNJp+MCTdwJTzxxU1u6BE= Subject key identifier: 9B:D7:F1:7B:EC:48:D2:88:E2:06:A4:45:FB:BE:67:96:1F:E5:98:C0 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 37E3266FF4D7E450878B8E03B93DEB362A9F8F3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 0301 Signing time: Thu 16 Apr 2026 07:52:30 +0000 Manifest this update: Thu 16 Apr 2026 07:47:30 +0000 Manifest next update: Sun 19 Apr 2026 17:52:30 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: CTnFJuukO8JQv+JMG5Acq5G1RX6ylJwCvJqka+QEIOw=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:26:6f:f4:d7:e4:50:87:8b:8e:03:b9:3d:eb:36:2a:9f:8f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Apr 16 07:47:30 2026 GMT Not After : Apr 19 17:52:30 2026 GMT Subject: CN=9BD7F17BEC48D288E206A445FBBE67961FE598C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:04:3f:da:be:db:1e:25:9c:25:96:98:d0: a2:09:8c:10:bf:2b:1f:01:72:6c:e3:66:bc:e7:e0: 00:0b:1d:fa:a0:bb:09:3e:d4:28:2a:1e:75:6e:28: 16:a8:3d:f0:c4:11:3e:7e:c5:10:9c:77:57:47:a9: a6:0e:76:b3:11:52:d0:d7:d1:0d:df:de:b9:d7:b8: f9:60:d4:47:6b:10:22:ed:b4:33:a7:04:f8:1e:a4: 91:7d:ff:89:fd:43:52:3b:c4:36:db:d9:59:0b:92: c3:5a:8c:86:c6:91:99:28:c4:af:f9:e6:ba:d3:c1: 59:88:43:45:14:03:03:e7:75:b0:b3:86:f3:70:77: 04:2c:ab:cf:db:8c:e0:b3:2f:af:03:39:17:9e:f5: 82:27:79:97:5e:75:32:d7:d0:a1:1e:f0:55:68:2a: ae:95:ce:a7:5b:bb:30:4e:7d:ca:fc:8c:b8:5b:c0: 24:e1:d0:ab:d1:f2:bb:70:d8:37:6f:fe:6b:ed:c1: ed:6e:c5:b0:f0:f0:06:1a:c2:de:1e:6d:d1:a6:40: f1:ee:9d:c2:2f:1b:3e:6e:74:14:8f:25:c0:c0:21: 73:24:6e:dc:c2:08:ad:9c:07:3b:e8:66:25:79:36: c2:a9:04:68:72:88:ba:e3:c1:78:43:c1:97:65:d0: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:F1:7B:EC:48:D2:88:E2:06:A4:45:FB:BE:67:96:1F:E5:98:C0 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f3:4c:0d:0c:09:4f:74:f8:76:33:f8:9f:11:af:d4:30:42: a5:1b:b0:a7:17:2b:c4:9c:8b:c5:df:2c:6b:52:e5:11:e2:fb: b4:2b:1d:5f:b3:e6:7b:aa:45:0e:3b:8d:5b:f0:49:04:ce:26: 0f:ad:ba:2c:75:1d:65:c9:6d:d0:41:8d:67:95:ca:88:4c:1a: b5:1d:e4:b0:12:0b:cc:23:85:62:ea:29:7e:66:4c:c8:76:41: 79:d7:80:c4:ba:c7:71:3b:77:dc:a9:06:54:15:9c:70:4e:e0: cf:59:90:dc:c6:02:d1:be:46:94:3a:72:da:b0:43:52:11:13: df:0b:2a:87:20:d4:8c:e1:6f:20:5a:30:67:cf:b3:86:2d:61: 13:98:b9:28:3c:df:70:d7:e5:5e:2e:30:d3:e6:87:2b:40:65: bf:df:dd:f9:46:49:69:a9:30:0d:89:74:7d:1f:3a:b7:2d:79: d3:69:4d:72:bd:ed:b8:9a:d6:a7:8b:de:45:5f:41:fe:97:ad: 66:7b:81:a3:20:25:b2:17:2e:bc:5d:41:ce:81:0c:fd:76:c6: 34:2c:21:d8:59:6c:f6:b3:98:e3:52:0a:2f:61:55:1c:18:0d: 5c:f8:51:07:a0:5a:b3:60:5c:fa:1e:ea:e4:d7:b2:bd:1b:24: 23:11:10:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+Mmb/TX5FCHi44DuT3rNiqfjz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNjA0MTYwNzQ3MzBaFw0yNjA0MTkxNzUyMzBaMDMxMTAvBgNV BAMTKDlCRDdGMTdCRUM0OEQyODhFMjA2QTQ0NUZCQkU2Nzk2MUZFNTk4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTQQ/2r7bHiWcJZaY0KIJjBC/ Kx8BcmzjZrzn4AALHfqguwk+1CgqHnVuKBaoPfDEET5+xRCcd1dHqaYOdrMRUtDX 0Q3f3rnXuPlg1EdrECLttDOnBPgepJF9/4n9Q1I7xDbb2VkLksNajIbGkZkoxK/5 5rrTwVmIQ0UUAwPndbCzhvNwdwQsq8/bjOCzL68DORee9YIneZdedTLX0KEe8FVo Kq6VzqdbuzBOfcr8jLhbwCTh0KvR8rtw2Ddv/mvtwe1uxbDw8AYawt4ebdGmQPHu ncIvGz5udBSPJcDAIXMkbtzCCK2cBzvoZiV5NsKpBGhyiLrjwXhDwZdl0P0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9fxe+xI0ojiBqRF+75nlh/lmMAwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDzTA0MCU90+HYz+J8Rr9QwQqUbsKcXK8Sc i8XfLGtS5RHi+7QrHV+z5nuqRQ47jVvwSQTOJg+tuix1HWXJbdBBjWeVyohMGrUd 5LASC8wjhWLqKX5mTMh2QXnXgMS6x3E7d9ypBlQVnHBO4M9ZkNzGAtG+RpQ6ctqw Q1IRE98LKocg1IzhbyBaMGfPs4YtYROYuSg833DX5V4uMNPmhytAZb/f3flGSWmp MA2JdH0fOrctedNpTXK97bia1qeL3kVfQf6XrWZ7gaMgJbIXLrxdQc6BDP12xjQs IdhZbPazmONSCi9hVRwYDVz4UQegWrNgXPoe6uTXsr0bJCMREBE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:43 2026 by rpki-client