$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: WFfB/LBwrlmvbVSihKQa6eE0WddSXxE/a5dF3oqLT34= Subject key identifier: D2:E5:36:1F:EC:88:5F:30:0B:65:04:F6:DA:DB:DA:82:58:72:68:86 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 6802A67797AAB9F3A7D7DDFAE625784A15E0CF92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 025D Signing time: Fri 17 Apr 2026 12:01:22 +0000 Manifest this update: Fri 17 Apr 2026 11:56:22 +0000 Manifest next update: Mon 20 Apr 2026 12:21:22 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: tVZdHcBElXLQTu/bvNSQqGBwoSROAPYyZST8W8JiBLY=) 2: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: CXESiF39/zdqFO4kWJXfJHnRP2PbRrFhOJj52y4VFwg=) 3: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: sxjeekt3EB01ApyWNOyawOI9DLjFzp9c1ekOopzAZU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:02:a6:77:97:aa:b9:f3:a7:d7:dd:fa:e6:25:78:4a:15:e0:cf:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Apr 17 11:56:22 2026 GMT Not After : Apr 20 12:21:22 2026 GMT Subject: CN=D2E5361FEC885F300B6504F6DADBDA8258726886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:dd:45:3b:78:24:6d:08:09:1a:be:53:c4: 5a:e5:b7:8b:8b:96:61:e3:42:25:79:a9:0e:f0:05: 37:e8:75:00:e9:be:44:45:15:3e:1f:3b:17:a0:36: 10:1a:5c:83:a3:99:c7:ac:21:79:30:b1:7e:02:aa: 52:31:6d:b2:dd:28:e8:d4:ea:73:19:68:48:59:02: cd:db:13:6f:dd:2f:3c:40:4b:dd:f8:fa:2d:36:51: 20:43:db:4b:fc:4b:a7:24:07:fd:1a:54:12:90:d9: 0a:6a:ed:7d:ed:d3:8d:3f:48:7c:7a:dd:ae:b6:f1: a5:5d:cf:2e:81:4a:d4:23:42:a8:b7:ef:1d:33:3c: b2:3c:f2:88:e7:5f:bc:bf:58:e1:8b:90:92:84:51: ff:38:7e:6d:65:95:17:05:8e:d7:b6:2b:73:ad:0f: 5d:c3:28:4b:f4:1c:a9:4b:bc:b7:c2:91:7a:74:7e: 08:2e:ad:7d:f1:b8:dd:8f:26:6a:24:c7:05:ed:24: 10:ab:49:f0:fd:c7:98:24:28:07:03:a6:9d:ee:e6: f0:62:90:25:fa:5b:69:03:57:92:31:60:9e:6f:b9: be:95:59:8a:90:08:ab:81:05:ca:3c:63:5a:bd:45: c3:b4:98:bf:54:32:45:ea:4d:f9:d9:37:e7:f5:2a: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:36:1F:EC:88:5F:30:0B:65:04:F6:DA:DB:DA:82:58:72:68:86 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f9:ed:49:56:7b:58:6b:75:eb:7b:cd:b4:b9:a4:16:e6:b2: 9b:eb:ba:03:8a:45:f8:62:74:c4:b4:36:b2:90:a2:fc:9e:83: 2b:de:66:80:f1:e7:c9:de:03:53:a6:93:19:bf:57:23:cc:f8: d9:6c:04:59:34:04:91:89:31:d1:24:29:c6:f0:47:49:dc:1e: a6:18:2d:ee:1c:d5:3c:be:d8:6b:72:b2:69:ac:b0:0d:49:32: ca:7c:f1:09:e3:bd:7e:4c:bb:5b:b4:76:b5:ed:dd:c4:fa:95: 80:43:b5:01:8b:27:b4:7a:04:0c:49:1b:43:f9:62:96:a6:a4: a4:85:92:27:db:c0:38:20:8a:2e:d0:0b:ad:be:39:34:fa:19: 74:9a:c7:8f:f7:05:2f:c9:9e:c8:34:20:dd:b3:67:e1:68:a9: 2e:a9:42:d6:6a:a1:49:44:ce:0f:b6:74:a4:e4:c5:37:87:c7: b1:51:07:ee:e5:40:2d:dd:a7:d8:1b:f3:68:cf:93:6b:42:ba: b9:85:eb:00:19:81:a8:7d:41:86:2d:f9:89:f0:92:46:b9:e8: 02:1c:c1:46:3e:de:bb:29:86:a3:4e:9b:94:8e:d9:b9:a7:18: 13:77:52:bb:c3:4d:47:b7:7e:94:24:47:a5:06:d8:b1:8f:55: 46:59:94:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAKmd5equfOn19365iV4ShXgz5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNjA0MTcxMTU2MjJaFw0yNjA0MjAxMjIxMjJaMDMxMTAvBgNV BAMTKEQyRTUzNjFGRUM4ODVGMzAwQjY1MDRGNkRBREJEQTgyNTg3MjY4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFd1FO3gkbQgJGr5TxFrlt4uL lmHjQiV5qQ7wBTfodQDpvkRFFT4fOxegNhAaXIOjmcesIXkwsX4CqlIxbbLdKOjU 6nMZaEhZAs3bE2/dLzxAS934+i02USBD20v8S6ckB/0aVBKQ2Qpq7X3t040/SHx6 3a628aVdzy6BStQjQqi37x0zPLI88ojnX7y/WOGLkJKEUf84fm1llRcFjte2K3Ot D13DKEv0HKlLvLfCkXp0fggurX3xuN2PJmokxwXtJBCrSfD9x5gkKAcDpp3u5vBi kCX6W2kDV5IxYJ5vub6VWYqQCKuBBco8Y1q9RcO0mL9UMkXqTfnZN+f1Kn/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0uU2H+yIXzALZQT22tvaglhyaIYwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL57UlWe1hrdet7zbS5pBbmspvrugOKRfhi dMS0NrKQovyegyveZoDx58neA1Omkxm/VyPM+NlsBFk0BJGJMdEkKcbwR0ncHqYY Le4c1Ty+2GtysmmssA1JMsp88QnjvX5Mu1u0drXt3cT6lYBDtQGLJ7R6BAxJG0P5 YpampKSFkifbwDggii7QC62+OTT6GXSax4/3BS/Jnsg0IN2zZ+FoqS6pQtZqoUlE zg+2dKTkxTeHx7FRB+7lQC3dp9gb82jPk2tCurmF6wAZgah9QYYt+Ynwkka56AIc wUY+3rsphqNOm5SO2bmnGBN3UrvDTUe3fpQkR6UG2LGPVUZZlD0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:20 2026 by rpki-client