$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: kZP7nKH5hgbHZDgT8K9zR9hX9T63UWWJlykK2G6uTE8= Subject key identifier: B8:B6:86:0A:60:B6:E6:3A:79:28:05:EA:EA:C5:54:40:BE:6C:F1:F6 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 18C462014AB2F359F7089904E416F45E69FF4BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 023B Signing time: Fri 17 Apr 2026 13:12:40 +0000 Manifest this update: Fri 17 Apr 2026 13:07:40 +0000 Manifest next update: Mon 20 Apr 2026 14:33:40 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 3: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: ZZwY1UZgEh2aHc4Vo7AXQF37PKPLlzS2yVuK/9yqafA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c4:62:01:4a:b2:f3:59:f7:08:99:04:e4:16:f4:5e:69:ff:4b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Apr 17 13:07:40 2026 GMT Not After : Apr 20 14:33:40 2026 GMT Subject: CN=B8B6860A60B6E63A792805EAEAC55440BE6CF1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:1e:44:26:ef:2e:6b:32:a7:56:a7:1e:a9: 8e:5b:82:7e:01:24:2d:19:0d:00:dd:f2:19:98:36: 71:20:1a:9b:54:c9:87:25:90:ab:9c:be:51:e7:fa: 89:50:50:c7:eb:c8:ce:e9:7b:39:8b:e7:b2:78:07: c1:21:cc:99:ca:25:6f:9c:f0:b5:a0:e0:9d:c3:73: 77:f0:83:ce:90:7d:2e:7d:6d:ea:51:6f:27:ba:3f: 56:8d:71:4b:74:0c:2e:75:42:a7:ab:12:1b:c5:24: f0:0c:7f:68:66:73:c9:24:5b:b4:3b:c2:d3:51:16: 16:93:83:6d:3e:35:6c:77:1f:a6:87:41:20:95:9c: 4c:da:ec:55:1c:64:1c:d1:52:0a:3b:46:23:2c:00: d6:1d:a4:c7:27:12:08:d3:4b:53:41:a0:38:53:d8: 52:6c:a7:f7:e9:cc:c5:e6:e6:42:b1:29:2b:4f:c6: b3:3c:ff:69:d9:40:b4:93:61:01:00:00:a7:3a:ea: d5:c5:2d:f6:ea:c7:83:c3:d4:7a:d1:b7:de:26:2d: e2:92:bc:0d:00:b2:4f:41:d9:e7:73:3a:e5:8f:10: 27:3c:ff:59:17:eb:39:97:ce:8f:eb:d4:bb:f6:e7: 6c:dd:7f:e2:97:da:fd:ef:e2:a2:1d:e8:27:8e:b4: bd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:86:0A:60:B6:E6:3A:79:28:05:EA:EA:C5:54:40:BE:6C:F1:F6 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:8a:52:e2:ae:9e:ae:36:5a:29:56:61:40:c5:e5:f1:a7: 21:f9:74:de:09:e3:99:05:d1:d7:18:6c:a7:06:01:42:8e:fe: 58:aa:a6:6a:a5:5a:28:4a:90:20:18:13:8a:99:68:eb:1f:89: b9:af:db:1e:9e:36:dc:15:66:cf:b3:2a:47:32:e2:42:02:ba: 71:f8:60:79:33:8e:16:e5:25:62:3e:0b:a0:49:c9:9e:5a:7b: a7:12:83:1c:0e:14:9c:48:7e:ab:82:7e:21:52:13:a1:9c:d9: 0d:99:70:b4:7b:34:10:71:4e:db:53:ba:e2:1f:21:6f:65:35: a0:26:b7:ba:31:b3:93:bb:01:05:c5:ea:c3:73:1c:58:8d:e6: 6d:9d:b4:06:d6:96:e0:cc:8d:e2:2e:fa:80:5c:18:e1:70:e8: 4d:4b:67:ab:d8:6a:2a:da:48:2b:b9:d4:9f:0e:07:b2:d2:54: db:69:f2:fc:f5:40:53:64:e0:54:90:3e:2d:e1:cb:f2:4a:74: 53:72:0b:34:0b:93:86:b2:6d:4f:d6:c7:8b:93:29:fe:dd:b8: 07:e0:b6:fc:8f:c6:62:da:76:f2:a5:59:c0:ab:ef:b3:d9:6e: af:85:16:24:5c:b7:84:13:5f:7b:ac:81:51:b9:cb:ba:d9:80: 5f:be:72:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMRiAUqy81n3CJkE5Bb0Xmn/S9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNjA0MTcxMzA3NDBaFw0yNjA0MjAxNDMzNDBaMDMxMTAvBgNV BAMTKEI4QjY4NjBBNjBCNkU2M0E3OTI4MDVFQUVBQzU1NDQwQkU2Q0YxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbR5EJu8uazKnVqceqY5bgn4B JC0ZDQDd8hmYNnEgGptUyYclkKucvlHn+olQUMfryM7pezmL57J4B8EhzJnKJW+c 8LWg4J3Dc3fwg86QfS59bepRbye6P1aNcUt0DC51QqerEhvFJPAMf2hmc8kkW7Q7 wtNRFhaTg20+NWx3H6aHQSCVnEza7FUcZBzRUgo7RiMsANYdpMcnEgjTS1NBoDhT 2FJsp/fpzMXm5kKxKStPxrM8/2nZQLSTYQEAAKc66tXFLfbqx4PD1HrRt94mLeKS vA0Ask9B2edzOuWPECc8/1kX6zmXzo/r1Lv252zdf+KX2v3v4qId6CeOtL2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuLaGCmC25jp5KAXq6sVUQL5s8fYwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBXilLirp6uNlopVmFAxeXxpyH5dN4J45kF 0dcYbKcGAUKO/liqpmqlWihKkCAYE4qZaOsfibmv2x6eNtwVZs+zKkcy4kICunH4 YHkzjhblJWI+C6BJyZ5ae6cSgxwOFJxIfquCfiFSE6Gc2Q2ZcLR7NBBxTttTuuIf IW9lNaAmt7oxs5O7AQXF6sNzHFiN5m2dtAbWluDMjeIu+oBcGOFw6E1LZ6vYaira SCu51J8OB7LSVNtp8vz1QFNk4FSQPi3hy/JKdFNyCzQLk4aybU/Wx4uTKf7duAfg tvyPxmLadvKlWcCr77PZbq+FFiRct4QTX3usgVG5y7rZgF++cgU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:40:49 2026 by rpki-client