$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: 6eT7PUjVsJzcZEMXta3/23lKBSU5BKcJQivb/mY1Bmk= Subject key identifier: A0:92:E0:86:02:74:58:82:17:4F:C9:54:33:EB:98:61:67:10:F9:01 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 05C4CF4FC163E5FB747C000B8416754660A211B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 0232 Signing time: Fri 17 Apr 2026 08:31:17 +0000 Manifest this update: Fri 17 Apr 2026 08:26:17 +0000 Manifest next update: Mon 20 Apr 2026 09:05:17 +0000 Files and hashes: 1: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=) 2: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=) 3: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=) 4: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=) 5: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=) 6: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=) 7: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: 1LuHQR3uLTZCXftQJz9sZqxIK3fxw4E8pkF1Lc+Iz2I=) 8: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=) 9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c4:cf:4f:c1:63:e5:fb:74:7c:00:0b:84:16:75:46:60:a2:11:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Apr 17 08:26:17 2026 GMT Not After : Apr 20 09:05:17 2026 GMT Subject: CN=A092E08602745882174FC95433EB98616710F901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:63:05:bb:ad:b8:67:3e:4f:e1:70:3f:1e: a5:ec:38:2d:a8:d6:c5:b0:59:0c:57:34:3c:3f:e0: 34:de:6f:48:a4:5f:86:b0:67:13:99:b4:a0:38:76: 2f:1f:8b:2d:8e:b5:66:4c:3e:65:97:a6:1b:cd:2d: 31:0f:09:41:67:0e:47:c9:51:e5:5e:7f:32:60:ee: e2:cf:d7:b7:eb:16:51:a4:4a:c6:39:76:87:5b:00: d4:e1:c1:9e:d3:92:7e:85:25:22:fc:92:8c:c9:92: 57:42:66:84:d4:69:0e:b6:1c:19:46:5a:b6:e2:34: 22:8a:fb:bb:da:4f:56:93:52:d8:40:c1:72:05:a9: 38:65:2d:1e:13:43:2e:bf:59:a1:40:e7:e7:ad:8f: bc:95:8d:16:42:76:45:f4:0e:e2:18:59:e7:4f:4d: 80:ca:25:a8:c4:b0:74:eb:68:9a:3a:1c:11:ca:6f: 95:bf:55:cd:29:35:f3:d5:41:a7:bd:2f:e8:d2:06: 34:42:db:0f:9d:d8:a2:12:bf:b2:0b:a2:29:fd:ce: 16:01:b9:b0:b4:84:8e:68:4d:39:26:7b:29:4e:dc: 4a:1e:f1:73:22:18:c8:85:e4:0c:67:a6:f1:49:4a: 68:78:79:5d:31:00:25:12:c9:31:a1:02:31:24:38: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:E0:86:02:74:58:82:17:4F:C9:54:33:EB:98:61:67:10:F9:01 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5c:99:ea:0f:a3:4d:ec:8a:55:d7:ff:c1:f8:6f:c6:84:eb: 95:fc:e4:42:39:90:21:ab:5f:79:65:8e:ef:39:cf:dc:09:6e: 50:74:ac:82:65:f4:df:16:7c:4d:e0:a8:0e:70:44:68:2a:08: eb:32:40:6b:9f:41:ba:b1:3b:ca:b1:58:b1:41:78:ac:ba:e9: 19:d8:cc:09:26:34:27:ce:78:b6:7e:20:d8:b9:ae:2f:56:8b: e5:bc:dd:67:4d:bb:63:89:db:5e:1a:b9:a5:d2:b2:0b:6c:29: 6a:60:69:c5:11:b0:d2:c1:ef:58:9b:1e:cd:32:14:9c:49:c6: cd:66:f6:4f:34:33:10:ce:5a:c8:25:7f:7f:3e:20:27:be:8e: ed:7c:dc:f5:7f:fb:c3:65:66:67:9f:a0:4d:c4:38:a1:c1:63: 0a:ac:c5:8a:fa:c4:ba:56:f3:a6:03:36:86:c8:0c:0a:c1:77: e7:8c:02:ca:61:5c:1d:f0:08:17:7b:e5:cc:74:a3:b5:31:10: 0b:42:dc:e4:a7:8c:5a:72:e6:da:3e:61:3d:f3:56:33:a7:89: 12:c1:c3:39:05:38:bd:6b:3e:72:c6:45:15:5c:e2:b0:9a:eb: 85:5d:c9:e3:62:60:e7:e2:fe:9c:76:b6:96:43:e6:32:57:d7: 73:cc:86:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcTPT8Fj5ft0fAALhBZ1RmCiEbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNjA0MTcwODI2MTdaFw0yNjA0MjAwOTA1MTdaMDMxMTAvBgNV BAMTKEEwOTJFMDg2MDI3NDU4ODIxNzRGQzk1NDMzRUI5ODYxNjcxMEY5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1emMFu624Zz5P4XA/HqXsOC2o 1sWwWQxXNDw/4DTeb0ikX4awZxOZtKA4di8fiy2OtWZMPmWXphvNLTEPCUFnDkfJ UeVefzJg7uLP17frFlGkSsY5dodbANThwZ7Tkn6FJSL8kozJkldCZoTUaQ62HBlG WrbiNCKK+7vaT1aTUthAwXIFqThlLR4TQy6/WaFA5+etj7yVjRZCdkX0DuIYWedP TYDKJajEsHTraJo6HBHKb5W/Vc0pNfPVQae9L+jSBjRC2w+d2KISv7ILoin9zhYB ubC0hI5oTTkmeylO3Eoe8XMiGMiF5AxnpvFJSmh4eV0xACUSyTGhAjEkODYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJLghgJ0WIIXT8lUM+uYYWcQ+QEwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZcmeoPo03silXX/8H4b8aE65X85EI5kCGr X3llju85z9wJblB0rIJl9N8WfE3gqA5wRGgqCOsyQGufQbqxO8qxWLFBeKy66RnY zAkmNCfOeLZ+INi5ri9Wi+W83WdNu2OJ214auaXSsgtsKWpgacURsNLB71ibHs0y FJxJxs1m9k80MxDOWsglf38+ICe+ju183PV/+8NlZmefoE3EOKHBYwqsxYr6xLpW 86YDNobIDArBd+eMAsphXB3wCBd75cx0o7UxEAtC3OSnjFpy5to+YT3zVjOniRLB wzkFOL1rPnLGRRVc4rCa64VdyeNiYOfi/px2tpZD5jJX13PMhjs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:06:27 2026 by rpki-client