$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: ZFS1T2lH7EcokzlLMqoEyfVQPz1Q/LZDZ4f9h/5KfKw= Subject key identifier: 82:A1:26:3D:00:08:3E:2B:D1:E9:48:D4:4F:FC:75:97:9D:85:8C:F8 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 1E24E2E3987CDBEEB07761D3845C6CA61EAA593F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 02C5 Signing time: Tue 21 Apr 2026 07:20:53 +0000 Manifest this update: Tue 21 Apr 2026 07:15:53 +0000 Manifest next update: Fri 24 Apr 2026 18:03:53 +0000 Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: P55i4iEoPKio56PqbqjtfUvF/xA4iwMGpdwlyTMPx4g=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 18:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:24:e2:e3:98:7c:db:ee:b0:77:61:d3:84:5c:6c:a6:1e:aa:59:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Apr 21 07:15:53 2026 GMT Not After : Apr 24 18:03:53 2026 GMT Subject: CN=82A1263D00083E2BD1E948D44FFC75979D858CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:36:0f:b4:c1:05:0e:4f:4e:bd:19:cf:93: 4b:91:29:cd:a3:11:4b:fd:c1:47:09:94:db:1c:ed: 5a:96:25:ea:4c:29:54:40:58:2c:eb:13:8a:ba:5a: ee:d6:a1:80:34:c4:54:10:b8:96:5a:2e:9c:92:2b: fa:d3:ad:65:0b:6f:53:47:01:f7:57:5d:05:f9:50: 70:50:50:12:47:fb:7a:25:b4:fe:98:ae:ed:94:1c: 06:76:17:dc:5d:6c:5e:23:25:9d:e4:87:c4:b3:a3: 2a:f9:b1:9c:48:16:fd:5b:23:83:e8:da:cf:44:6e: 31:5d:d1:ae:6e:94:e5:9c:9d:d1:89:3f:c5:4c:c2: 6a:63:54:1e:2c:1e:99:b9:bb:ff:df:f3:9c:48:75: ca:3a:d2:bc:21:65:7e:ec:b9:30:36:74:ae:fa:83: 18:a3:fb:36:4d:67:5f:9f:05:3f:f9:5a:02:65:fb: 1f:89:e1:26:ac:ff:16:47:48:28:bf:2a:8f:88:87: 6a:31:ef:c1:e9:51:cd:75:f4:a3:36:cd:57:13:df: ef:33:3f:05:f2:98:f4:5d:05:65:cb:13:3c:19:f3: 3f:d0:e7:6c:28:3c:80:5f:84:2d:2a:b9:47:50:e5: 9a:f8:6a:15:82:b0:c4:b0:fe:52:a4:e8:ba:c4:c0: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A1:26:3D:00:08:3E:2B:D1:E9:48:D4:4F:FC:75:97:9D:85:8C:F8 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:af:32:68:68:d6:c6:f8:78:31:27:72:43:60:e0:98:df:7c: 58:e0:e5:11:86:9b:73:b2:c7:5e:f4:6e:d0:34:b5:4b:f3:0f: 7a:ed:b3:5c:7f:fa:02:b6:76:ca:cd:5a:ea:4a:48:7b:93:3e: c2:f7:53:15:8e:4c:cd:56:c6:95:bb:7b:c8:83:1c:93:e3:40: 32:71:7f:b4:3f:03:7f:6f:12:46:5e:64:8a:39:a9:8a:57:1d: f6:4d:9b:88:ae:73:f8:9b:e0:1f:fc:7a:95:75:fa:46:c5:bb: e7:6e:9b:2a:b4:68:3e:34:cf:b2:bb:81:aa:31:34:6d:2a:98: 0b:60:81:2a:fe:5e:4f:27:3a:36:3a:95:fd:97:8f:17:5a:84: b3:2e:87:b8:58:3e:7a:d7:7b:02:8c:c9:fb:37:cc:4f:f2:fa: 95:a2:a0:e8:b5:bf:79:da:5b:34:b2:af:8f:7f:87:c4:5b:1b: 86:4a:83:62:d1:a3:05:e9:a0:3d:ac:98:72:b4:3c:53:c2:24: 2a:e7:50:9f:f5:61:9c:7c:ff:42:f8:f4:53:2c:50:cd:4f:9f: 36:ef:35:d5:87:31:91:f4:11:34:27:d3:26:fe:e7:cc:e0:5a: 21:39:be:2c:d9:c0:ac:57:b9:8b:a4:43:02:ce:37:c4:4d:51: 37:ca:eb:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiTi45h82+6wd2HThFxsph6qWT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNjA0MjEwNzE1NTNaFw0yNjA0MjQxODAzNTNaMDMxMTAvBgNV BAMTKDgyQTEyNjNEMDAwODNFMkJEMUU5NDhENDRGRkM3NTk3OUQ4NThDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwzYPtMEFDk9OvRnPk0uRKc2j EUv9wUcJlNsc7VqWJepMKVRAWCzrE4q6Wu7WoYA0xFQQuJZaLpySK/rTrWULb1NH AfdXXQX5UHBQUBJH+3oltP6Yru2UHAZ2F9xdbF4jJZ3kh8Szoyr5sZxIFv1bI4Po 2s9EbjFd0a5ulOWcndGJP8VMwmpjVB4sHpm5u//f85xIdco60rwhZX7suTA2dK76 gxij+zZNZ1+fBT/5WgJl+x+J4Sas/xZHSCi/Ko+Ih2ox78HpUc119KM2zVcT3+8z PwXymPRdBWXLEzwZ8z/Q52woPIBfhC0quUdQ5Zr4ahWCsMSw/lKk6LrEwAldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgqEmPQAIPivR6UjUT/x1l52FjPgwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSvMmho1sb4eDEnckNg4JjffFjg5RGGm3Oy x170btA0tUvzD3rts1x/+gK2dsrNWupKSHuTPsL3UxWOTM1WxpW7e8iDHJPjQDJx f7Q/A39vEkZeZIo5qYpXHfZNm4iuc/ib4B/8epV1+kbFu+dumyq0aD40z7K7gaox NG0qmAtggSr+Xk8nOjY6lf2XjxdahLMuh7hYPnrXewKMyfs3zE/y+pWioOi1v3na WzSyr49/h8RbG4ZKg2LRowXpoD2smHK0PFPCJCrnUJ/1YZx8/0L49FMsUM1Pnzbv NdWHMZH0ETQn0yb+58zgWiE5vizZwKxXuYukQwLON8RNUTfK6yo= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:35 2026 by rpki-client