$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: ORhEwh57QlyQ1nfhCJBTQIjECWo+yIQkCpBt/6p6J00= Subject key identifier: 3B:58:93:77:CA:A1:9F:7C:DA:35:21:77:54:3A:5F:6E:68:BB:6C:CF Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 5E7D08868B999F76DB08DB81D21EF79E04C0115F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 017F Signing time: Fri 17 Apr 2026 19:11:58 +0000 Manifest this update: Fri 17 Apr 2026 19:06:58 +0000 Manifest next update: Tue 21 Apr 2026 07:07:58 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) 2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: +nZSby/m321mTxc1j/222CxAih6e0ObAob916AX9Ni8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7d:08:86:8b:99:9f:76:db:08:db:81:d2:1e:f7:9e:04:c0:11:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Apr 17 19:06:58 2026 GMT Not After : Apr 21 07:07:58 2026 GMT Subject: CN=3B589377CAA19F7CDA352177543A5F6E68BB6CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:62:f1:f8:20:a2:a8:17:cd:c7:86:9d:d6: 3a:d9:19:2e:b8:fa:f6:43:0b:88:4f:f9:af:e1:be: 40:20:5f:30:c9:c1:c5:09:5a:78:41:9d:9c:03:8d: 3f:f4:f7:74:d1:da:73:8e:d8:bf:d3:a8:77:13:a6: c1:3f:a5:c4:d1:ca:dc:52:b8:a6:dd:2b:f3:72:f5: 7c:28:bd:a0:c9:02:95:df:4a:47:13:38:01:6f:fd: a3:9d:9a:54:41:1d:05:7a:de:1e:7a:34:ac:07:e0: d5:a4:33:72:fe:d7:13:62:93:66:7c:41:ac:94:70: 74:52:7a:b3:5e:a5:0a:53:56:27:fc:47:9a:92:de: 4e:ec:eb:28:3f:b2:f1:45:6f:46:8f:86:90:78:8e: e6:39:e4:da:85:c0:f8:e5:22:86:bd:ef:4f:fd:eb: d8:f0:d5:97:e7:66:a2:d9:83:4b:71:ca:81:6c:ad: dc:47:08:e1:54:e6:d1:4e:db:a0:07:67:02:5e:42: 2c:87:60:ab:08:d6:96:4c:5e:06:d9:00:b4:72:11: 86:02:ba:11:39:cd:45:b2:64:81:4e:2c:c1:93:cd: 51:90:4a:55:70:d9:f8:8e:08:80:f5:16:07:d9:4b: 45:dc:07:9e:e3:9d:b0:90:e0:70:2a:8c:53:09:08: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:58:93:77:CA:A1:9F:7C:DA:35:21:77:54:3A:5F:6E:68:BB:6C:CF X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:33:21:45:a3:89:62:5a:80:c1:ab:09:43:af:a5:84:b2: 0b:60:39:96:7a:e7:78:5c:70:06:5f:51:84:09:b8:17:aa:5c: 1f:6a:ec:c0:6d:18:b5:b0:ba:92:5e:58:33:9f:c0:19:0f:ce: ad:8a:f6:e0:22:09:d4:41:56:c1:6a:78:f7:d4:36:68:cd:e6: 88:3d:c6:fe:f4:7b:4b:7d:20:c7:09:85:7f:53:b7:91:3a:60: b7:56:21:21:bb:b4:eb:49:c6:1d:2f:c5:32:01:a6:b3:f7:63: 4d:62:33:fa:7f:2b:0a:41:1f:2a:17:93:08:28:67:e9:cb:d0: a3:31:49:c0:79:ea:7c:cb:3d:da:70:45:a3:6b:81:03:22:87: e0:40:53:ef:bb:32:f3:d8:ea:b4:f5:18:28:02:be:c8:93:86: 97:9c:2e:0d:00:42:b9:da:b0:88:e0:07:48:e8:c1:aa:5c:e0: d2:a7:6f:02:12:2c:77:36:59:86:01:5f:d1:11:1f:c8:a7:af: 79:c8:d3:9e:b6:59:c2:50:d0:42:46:84:76:7b:d5:d1:f8:b8: 39:a9:1d:b1:26:b5:1f:5d:01:70:fb:ad:eb:13:d1:67:57:63: de:6f:a9:f4:d7:6a:63:72:f5:58:58:cd:dc:9b:c3:e4:5f:fc: 36:d8:b3:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn0IhouZn3bbCNuB0h73ngTAEV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNjA0MTcxOTA2NThaFw0yNjA0MjEwNzA3NThaMDMxMTAvBgNV BAMTKDNCNTg5Mzc3Q0FBMTlGN0NEQTM1MjE3NzU0M0E1RjZFNjhCQjZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVGLx+CCiqBfNx4ad1jrZGS64 +vZDC4hP+a/hvkAgXzDJwcUJWnhBnZwDjT/093TR2nOO2L/TqHcTpsE/pcTRytxS uKbdK/Ny9XwovaDJApXfSkcTOAFv/aOdmlRBHQV63h56NKwH4NWkM3L+1xNik2Z8 QayUcHRSerNepQpTVif8R5qS3k7s6yg/svFFb0aPhpB4juY55NqFwPjlIoa970/9 69jw1ZfnZqLZg0txyoFsrdxHCOFU5tFO26AHZwJeQiyHYKsI1pZMXgbZALRyEYYC uhE5zUWyZIFOLMGTzVGQSlVw2fiOCID1FgfZS0XcB57jnbCQ4HAqjFMJCJwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1iTd8qhn3zaNSF3VDpfbmi7bM8wHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZVMyFFo4liWoDBqwlDr6WEsgtgOZZ653hc cAZfUYQJuBeqXB9q7MBtGLWwupJeWDOfwBkPzq2K9uAiCdRBVsFqePfUNmjN5og9 xv70e0t9IMcJhX9Tt5E6YLdWISG7tOtJxh0vxTIBprP3Y01iM/p/KwpBHyoXkwgo Z+nL0KMxScB56nzLPdpwRaNrgQMih+BAU++7MvPY6rT1GCgCvsiThpecLg0AQrna sIjgB0jowapc4NKnbwISLHc2WYYBX9ERH8inr3nI0562WcJQ0EJGhHZ71dH4uDmp HbEmtR9dAXD7resT0WdXY95vqfTXamNy9VhYzdybw+Rf/DbYs2w= -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:26 2026 by rpki-client