$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: yNkD7pAS3IHhfa08fRovJAmvx18b9fR9HOGjW0WlB2w= Subject key identifier: DD:EC:55:75:3C:BE:59:04:F2:7C:C3:EB:08:35:CD:30:07:27:D5:BC Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 18D9FCD983CF7D6E8154E21D5BC71C7A8493E974 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: E0 Signing time: Wed 15 Apr 2026 08:11:34 +0000 Manifest this update: Wed 15 Apr 2026 08:06:34 +0000 Manifest next update: Sat 18 Apr 2026 12:48:34 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 2: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) 3: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: PSMRDWFJMBCuJ2tM+17Qh++HElX+8gkgRmA+A0rYZN4=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d9:fc:d9:83:cf:7d:6e:81:54:e2:1d:5b:c7:1c:7a:84:93:e9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Apr 15 08:06:34 2026 GMT Not After : Apr 18 12:48:34 2026 GMT Subject: CN=DDEC55753CBE5904F27CC3EB0835CD300727D5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:df:e4:3e:b6:40:45:22:45:4c:ee:92:8a: df:82:3b:61:de:11:83:c2:b3:23:e4:d3:4e:10:4f: d8:8c:9b:c6:ba:16:3d:f6:16:ea:05:78:8c:3f:31: a8:c7:fb:b5:40:19:94:18:77:16:ff:2f:d7:6e:fe: 8d:0e:8b:8d:f6:07:62:62:87:94:db:69:74:3b:8a: 70:ce:89:47:41:dc:aa:75:2f:39:7a:30:9b:e3:d1: 85:d0:fc:5d:91:bb:75:e6:46:84:72:ad:b3:8b:05: 07:3f:e2:20:d5:b3:b4:a7:20:2f:8b:8c:85:57:c5: 68:a6:82:eb:88:8e:2b:3a:58:02:a7:7e:f9:53:aa: 30:c4:0f:f5:fa:4b:e1:bb:1a:50:65:f8:9c:ca:f0: dc:02:26:1a:4a:4a:2d:05:a6:84:96:83:84:5d:b2: ed:cb:d7:6f:02:09:99:61:1c:76:96:18:90:20:a8: fb:0f:73:c6:a3:34:a6:7d:e4:a8:14:9d:75:50:2c: 97:2d:8b:44:2e:6b:2f:68:4c:b5:41:0e:18:54:10: 1b:01:1f:f4:d9:fa:5c:7f:86:78:4f:34:f1:61:63: 0d:52:44:21:c6:71:7c:e6:6e:3d:53:a7:3f:8b:c4: 6d:69:c7:3e:69:3a:a6:46:64:60:49:0c:83:d4:59: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EC:55:75:3C:BE:59:04:F2:7C:C3:EB:08:35:CD:30:07:27:D5:BC X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:34:f2:af:ea:c5:09:10:e3:55:82:de:52:c9:21:5b:5b:9d: 72:b8:d4:a1:96:af:83:77:c6:fa:2c:68:51:19:10:18:f4:1f: ed:46:c9:7f:de:7b:9c:67:f4:c8:3d:25:72:9d:69:c8:06:98: 6a:4d:c4:b7:43:71:cb:1d:45:f3:df:70:0e:fb:89:61:dc:51: e3:52:f3:d3:21:26:f9:42:ce:4a:64:39:2e:7a:bd:3f:c4:b2: 9f:7f:5d:96:df:b5:13:59:49:60:07:6f:fe:1c:6d:fb:15:6a: 45:7e:c6:71:60:0b:c8:3c:ad:e3:f7:4d:c0:37:5c:85:cb:1e: 68:94:b0:9b:76:48:53:e5:6e:af:64:23:bd:9d:eb:c9:2c:bd: bc:9f:cf:db:39:ae:93:05:1c:50:ab:69:6a:bd:8f:ec:84:28: d3:d0:90:81:b8:67:85:d9:49:df:cf:02:d8:1a:a7:8c:48:26: 3a:69:38:2d:10:9f:39:a3:a5:07:7d:23:b6:da:6f:fe:66:b9: 68:d6:e5:cc:8f:ef:46:52:61:41:71:e4:76:ff:59:f3:ea:3b: 41:85:4b:f6:bb:40:9f:95:f8:02:33:ea:cd:59:25:46:3a:a6: fb:a0:0f:e7:7b:2c:78:64:d0:26:2d:1f:c5:06:88:41:df:cf: 2b:40:a9:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNn82YPPfW6BVOIdW8cceoST6XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNjA0MTUwODA2MzRaFw0yNjA0MTgxMjQ4MzRaMDMxMTAvBgNV BAMTKERERUM1NTc1M0NCRTU5MDRGMjdDQzNFQjA4MzVDRDMwMDcyN0Q1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrN/kPrZARSJFTO6Sit+CO2He EYPCsyPk004QT9iMm8a6Fj32FuoFeIw/MajH+7VAGZQYdxb/L9du/o0Oi432B2Ji h5TbaXQ7inDOiUdB3Kp1Lzl6MJvj0YXQ/F2Ru3XmRoRyrbOLBQc/4iDVs7SnIC+L jIVXxWimguuIjis6WAKnfvlTqjDED/X6S+G7GlBl+JzK8NwCJhpKSi0FpoSWg4Rd su3L128CCZlhHHaWGJAgqPsPc8ajNKZ95KgUnXVQLJcti0Quay9oTLVBDhhUEBsB H/TZ+lx/hnhPNPFhYw1SRCHGcXzmbj1Tpz+LxG1pxz5pOqZGZGBJDIPUWcaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3exVdTy+WQTyfMPrCDXNMAcn1bwwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs08q/qxQkQ41WC3lLJIVtbnXK41KGWr4N3 xvosaFEZEBj0H+1GyX/ee5xn9Mg9JXKdacgGmGpNxLdDccsdRfPfcA77iWHcUeNS 89MhJvlCzkpkOS56vT/Esp9/XZbftRNZSWAHb/4cbfsVakV+xnFgC8g8reP3TcA3 XIXLHmiUsJt2SFPlbq9kI72d68ksvbyfz9s5rpMFHFCraWq9j+yEKNPQkIG4Z4XZ Sd/PAtgap4xIJjppOC0QnzmjpQd9I7bab/5muWjW5cyP70ZSYUFx5Hb/WfPqO0GF S/a7QJ+V+AIz6s1ZJUY6pvugD+d7LHhk0CYtH8UGiEHfzytAqVQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:39:58 2026 by rpki-client