$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: UtIct9iA70MaVxcKU8IZFv81/Magy/TcqkV2QV0pWdw= Subject key identifier: BB:C4:25:EC:B1:F1:DD:EF:B9:7E:11:C7:2E:DB:51:11:A3:DE:FF:F7 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 698DED892E122ED13C481424C087707D0A2DDC97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01ED Signing time: Mon 20 Apr 2026 15:11:51 +0000 Manifest this update: Mon 20 Apr 2026 15:06:51 +0000 Manifest next update: Thu 23 Apr 2026 23:02:51 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: ZeiQpSd24EJlvacg3Hpga8BJTTOxtjcyXpQy+RT+KRg=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8d:ed:89:2e:12:2e:d1:3c:48:14:24:c0:87:70:7d:0a:2d:dc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Apr 20 15:06:51 2026 GMT Not After : Apr 23 23:02:51 2026 GMT Subject: CN=BBC425ECB1F1DDEFB97E11C72EDB5111A3DEFFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:fd:28:07:5b:b4:85:83:f3:05:70:ea:89: 98:31:5f:1e:d9:c6:e5:bb:df:35:c0:45:ed:e2:50: f6:89:aa:3b:ee:be:9d:7e:0d:75:11:71:48:42:72: bf:6c:ef:1b:72:ce:f5:6b:33:28:b9:5c:13:0e:7e: 62:2e:bc:88:f6:98:2c:e3:c5:45:89:02:d4:6d:10: 06:3a:cc:7c:8e:38:5c:95:9f:b8:7c:b3:5b:a8:fa: ce:e9:98:35:00:f5:9d:3a:c6:c2:82:32:6d:d2:69: 8e:b6:20:63:86:a6:a0:3e:f6:05:e8:79:f8:fc:e2: 98:a6:0d:36:fa:67:42:6a:7a:c0:84:38:01:b6:67: 98:50:58:42:ad:e5:8d:6f:94:19:e7:ea:4b:25:cd: 9b:40:b6:6e:58:36:e4:6a:60:c9:fc:40:19:eb:29: 44:c8:ae:10:23:bc:ed:fc:6a:27:73:55:06:5c:f2: be:b0:70:dc:31:c3:a9:b0:56:de:fd:7a:dd:a1:cc: 39:eb:ee:a6:a1:09:e0:bb:ce:2d:36:8a:9c:0f:89: d3:e2:8b:ac:7f:2b:dd:73:e0:c5:d0:c3:cc:f2:28: 1a:1e:aa:02:13:51:7a:72:45:25:c9:1e:b0:0d:d5: de:c1:6d:41:a0:95:be:7b:6d:0c:c7:b7:4d:73:64: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:25:EC:B1:F1:DD:EF:B9:7E:11:C7:2E:DB:51:11:A3:DE:FF:F7 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:db:d2:0b:ee:4a:ed:50:b6:2d:ea:01:42:b9:f3:fb:07:41: 1d:7d:73:e5:b3:f5:15:d7:2c:6d:8a:c2:4a:b1:fe:f1:c7:e9: 3d:a7:bb:58:7f:2b:a0:99:60:82:eb:d7:c9:d4:0f:ba:77:d6: 3a:f8:e3:a4:7d:5d:92:bc:18:fe:09:d1:99:60:65:55:a7:09: c3:c2:1d:80:50:5b:63:42:cc:bd:3f:1c:58:de:78:72:b2:1b: 85:56:92:4b:dc:a2:19:d5:ff:40:f9:34:07:97:24:36:d4:6d: 9b:94:b1:e1:85:46:d4:d2:03:74:fd:3b:79:bc:63:c9:15:47: 8e:c9:8e:0f:98:e7:aa:69:13:b4:90:49:60:3c:d4:7b:16:c9: 9f:a9:ef:5d:6b:5a:b3:12:2a:93:08:bd:68:c3:56:15:b1:6c: 96:78:a9:01:6a:61:eb:5a:15:ce:ff:b1:74:8b:e9:dd:46:96: 2a:c2:5e:04:86:3d:4d:78:0f:9b:3d:cc:e0:de:26:0b:81:86: 4c:ec:9e:94:15:0c:fb:26:22:e4:c9:b2:9e:d9:b8:54:fa:bb: 71:a0:ba:e5:ba:52:17:49:7a:ab:fb:3a:84:1c:ea:62:d6:5d: ce:da:76:aa:bc:53:48:62:58:54:53:0c:ba:14:58:f9:75:b4: 09:75:1e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaY3tiS4SLtE8SBQkwIdwfQot3JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjA0MjAxNTA2NTFaFw0yNjA0MjMyMzAyNTFaMDMxMTAvBgNV BAMTKEJCQzQyNUVDQjFGMURERUZCOTdFMTFDNzJFREI1MTExQTNERUZGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9v0oB1u0hYPzBXDqiZgxXx7Z xuW73zXARe3iUPaJqjvuvp1+DXURcUhCcr9s7xtyzvVrMyi5XBMOfmIuvIj2mCzj xUWJAtRtEAY6zHyOOFyVn7h8s1uo+s7pmDUA9Z06xsKCMm3SaY62IGOGpqA+9gXo efj84pimDTb6Z0JqesCEOAG2Z5hQWEKt5Y1vlBnn6kslzZtAtm5YNuRqYMn8QBnr KUTIrhAjvO38aidzVQZc8r6wcNwxw6mwVt79et2hzDnr7qahCeC7zi02ipwPidPi i6x/K91z4MXQw8zyKBoeqgITUXpyRSXJHrAN1d7BbUGglb57bQzHt01zZI0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8Ql7LHx3e+5fhHHLttREaPe//cwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfb0gvuSu1Qti3qAUK58/sHQR19c+Wz9RXX LG2Kwkqx/vHH6T2nu1h/K6CZYILr18nUD7p31jr446R9XZK8GP4J0ZlgZVWnCcPC HYBQW2NCzL0/HFjeeHKyG4VWkkvcohnV/0D5NAeXJDbUbZuUseGFRtTSA3T9O3m8 Y8kVR47Jjg+Y56ppE7SQSWA81HsWyZ+p711rWrMSKpMIvWjDVhWxbJZ4qQFqYeta Fc7/sXSL6d1GlirCXgSGPU14D5s9zODeJguBhkzsnpQVDPsmIuTJsp7ZuFT6u3Gg uuW6UhdJeqv7OoQc6mLWXc7adqq8U0hiWFRTDLoUWPl1tAl1Hlc= -----END CERTIFICATE-----Generated at Wed Apr 22 10:00:33 2026 by rpki-client