$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: BMyCaocwJDoVwFt68XzlZbnIUgfn/QLkbP+pCwzaj4A= Subject key identifier: 28:64:1D:88:8B:FE:97:08:D6:C0:CC:8A:52:AA:E2:EE:6C:34:1E:9E Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 413E1DFD8C5FFE0FD96CE2B4C1A82D8C4E35157B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0269 Signing time: Fri 17 Apr 2026 06:31:02 +0000 Manifest this update: Fri 17 Apr 2026 06:26:02 +0000 Manifest next update: Mon 20 Apr 2026 12:04:02 +0000 Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: SBiP/YlBcg3yhlJwtSzoMi66ss/J73DrnJlnd2EiYn0=) 2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: tg7oTYGEZ2y6EAZnzLfwX6fiXnxgi/X70lPZSwsCDsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3e:1d:fd:8c:5f:fe:0f:d9:6c:e2:b4:c1:a8:2d:8c:4e:35:15:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Apr 17 06:26:02 2026 GMT Not After : Apr 20 12:04:02 2026 GMT Subject: CN=28641D888BFE9708D6C0CC8A52AAE2EE6C341E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:ef:8c:eb:b1:a4:c8:ef:cb:70:77:5f:ce: 9d:b4:62:a0:9b:a1:84:32:52:52:de:8d:85:16:11: 3e:45:73:32:bd:74:c7:5b:16:20:c5:8d:17:65:49: 8a:68:8c:49:0c:fc:68:0e:25:fe:a0:18:63:dc:78: f4:ac:f1:b1:40:50:b2:a5:58:83:d7:07:2a:4a:e2: 5e:c8:04:25:76:5e:96:f1:d9:b3:4d:85:d9:f2:df: 41:fd:9f:6d:e6:22:c6:c3:a4:f2:1a:78:28:88:77: 24:5a:2f:65:1a:69:60:ed:c1:6a:45:54:b0:f7:8e: b8:89:03:d4:38:b6:92:2e:d8:ec:8e:6f:53:5e:e8: 31:30:36:87:17:e8:13:c8:56:73:0e:81:15:9d:f1: ee:7d:4f:0d:db:6c:2b:52:ec:bb:e5:f6:90:74:c4: ed:e9:d9:88:cc:04:c1:6d:43:72:5f:f1:3c:79:05: 69:4e:1f:df:5c:1a:04:3e:26:d8:5a:c7:af:6b:0f: 1e:9e:84:19:75:ac:24:a8:dc:7f:6d:b6:05:31:8d: 4f:d9:a4:86:6b:3d:24:56:00:2c:e0:70:57:c9:d1: 0f:3c:0b:bf:22:77:55:4d:3e:6a:59:55:fd:b1:3c: 6d:48:78:8e:86:1a:b0:6a:7f:eb:16:03:47:3e:2a: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:1D:88:8B:FE:97:08:D6:C0:CC:8A:52:AA:E2:EE:6C:34:1E:9E X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:87:10:7d:6b:33:dd:0f:6f:c8:97:6f:21:57:ef:22:94: 72:76:2d:0b:4a:f0:1e:68:ec:bd:b3:0f:07:11:84:83:b8:5e: 7d:aa:78:fb:fe:01:34:3e:52:90:24:7b:ed:20:81:ff:4a:1e: a8:fa:a0:19:4a:ff:62:3e:84:d1:78:2f:0d:51:68:8e:7e:62: e6:4e:86:45:52:68:38:01:6a:34:7e:51:f9:d6:f6:66:26:84: 2e:c7:79:31:95:a6:af:e0:2e:58:a7:e3:b4:1c:ba:bc:b7:6f: 8a:c6:aa:89:c8:2b:8c:86:eb:f7:66:b2:db:bd:62:34:b6:30: f2:52:4d:65:ba:c9:7b:62:f0:db:15:b2:69:51:87:54:33:4c: 2c:36:00:3c:e1:a4:1e:cb:15:1c:99:92:3a:f3:37:69:c7:26: a1:53:21:6e:57:15:1e:af:f9:2d:82:d7:8f:ef:14:57:58:8c: 5a:df:be:fc:63:ec:d4:c9:f4:db:89:ca:ab:fb:ac:21:b8:b4: 9c:df:71:c6:90:6d:ef:26:4d:5b:ae:d7:c0:1f:a2:44:d7:72: a9:3d:e3:6c:2e:ef:59:dd:74:db:06:7e:26:e9:63:d0:3b:59: a9:1c:31:d7:ba:9b:f5:4d:a8:1b:ad:eb:25:1b:21:17:f1:85: ad:a0:d5:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQT4d/Yxf/g/ZbOK0wagtjE41FXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNjA0MTcwNjI2MDJaFw0yNjA0MjAxMjA0MDJaMDMxMTAvBgNV BAMTKDI4NjQxRDg4OEJGRTk3MDhENkMwQ0M4QTUyQUFFMkVFNkMzNDFFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBu+M67GkyO/LcHdfzp20YqCb oYQyUlLejYUWET5FczK9dMdbFiDFjRdlSYpojEkM/GgOJf6gGGPcePSs8bFAULKl WIPXBypK4l7IBCV2Xpbx2bNNhdny30H9n23mIsbDpPIaeCiIdyRaL2UaaWDtwWpF VLD3jriJA9Q4tpIu2OyOb1Ne6DEwNocX6BPIVnMOgRWd8e59Tw3bbCtS7Lvl9pB0 xO3p2YjMBMFtQ3Jf8Tx5BWlOH99cGgQ+Jthax69rDx6ehBl1rCSo3H9ttgUxjU/Z pIZrPSRWACzgcFfJ0Q88C78id1VNPmpZVf2xPG1IeI6GGrBqf+sWA0c+Ks6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGQdiIv+lwjWwMyKUqri7mw0Hp4wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsohxB9azPdD2/Il28hV+8ilHJ2LQtK8B5o 7L2zDwcRhIO4Xn2qePv+ATQ+UpAke+0ggf9KHqj6oBlK/2I+hNF4Lw1RaI5+YuZO hkVSaDgBajR+UfnW9mYmhC7HeTGVpq/gLlin47Qcury3b4rGqonIK4yG6/dmstu9 YjS2MPJSTWW6yXti8NsVsmlRh1QzTCw2ADzhpB7LFRyZkjrzN2nHJqFTIW5XFR6v +S2C14/vFFdYjFrfvvxj7NTJ9NuJyqv7rCG4tJzfccaQbe8mTVuu18AfokTXcqk9 42wu71nddNsGfibpY9A7WakcMde6m/VNqBut6yUbIRfxha2g1SU= -----END CERTIFICATE-----Generated at Sat Apr 18 05:48:34 2026 by rpki-client