$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: vJSboLl9Ek/2VAJHwONOGy2Rg++8L5dGCcVWL72r7UE= Subject key identifier: 95:1D:8D:90:67:33:83:EC:29:23:B5:A8:56:4A:CD:71:CF:84:3D:6F Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 5CA1D3B954396A3E08C23D6CA3B5EEC5EC882251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 02B0 Signing time: Mon 20 Apr 2026 00:00:59 +0000 Manifest this update: Sun 19 Apr 2026 23:55:59 +0000 Manifest next update: Thu 23 Apr 2026 10:22:59 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=) 2: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: lrzBfqehJUlOwQPEPsr6iJ4tqPpR4/esNBwJ2KIVmbs=) 3: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=) 4: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: I16OAIVcV3yFbOc/TMvL7PaH1iG60q5zXTLP+nVnvjI=) 5: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: LcQ4CetZUkMH7Rvj9sVRz+nMJ5rJbPUeEXrVNt9jxkA=) 6: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: 01SsgRERq8uXI8ZxTMxzNLwIB/dzTpRvXKGHIsaTGiQ=) 7: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=) 8: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: eJA0++OLa3UdGPpoOUqZv74371ixeJ+IVvYxJZnXXyk=) 9: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 10:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a1:d3:b9:54:39:6a:3e:08:c2:3d:6c:a3:b5:ee:c5:ec:88:22:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Apr 19 23:55:59 2026 GMT Not After : Apr 23 10:22:59 2026 GMT Subject: CN=951D8D90673383EC2923B5A8564ACD71CF843D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:fd:61:f8:77:59:b4:36:6f:c3:62:a2:dd: 60:56:7d:6e:d5:ec:d4:97:1d:1f:17:b7:71:07:a3: 0d:7e:5f:a5:0f:1e:c6:92:0c:c2:13:c9:f9:c3:93: 58:05:78:9d:6f:2d:af:ab:13:9a:33:4d:a2:72:4d: c4:8b:8a:07:22:ce:4e:93:5d:3c:f2:3b:97:a1:61: 7f:5a:2d:e8:66:7d:9f:1b:88:84:09:db:a7:2f:de: f0:99:47:bf:b1:5e:15:ba:cb:84:3b:ba:1e:23:92: f6:5f:9b:77:73:b6:88:9e:1a:8d:de:8b:29:3d:bd: c4:67:47:46:a9:03:d2:07:ab:af:49:6f:50:9f:b8: fb:8d:db:17:5c:34:cc:54:92:22:66:73:53:1b:90: 8d:75:52:e2:df:ed:7a:52:b0:f3:76:5b:38:d4:f9: 88:63:e7:52:1b:40:23:a4:f8:17:48:b3:89:e2:73: 06:80:8d:3d:f8:c7:1d:c2:37:5f:87:6a:05:91:e6: 53:18:c1:95:c9:bf:a8:5c:42:02:4e:a0:41:3f:b2: 6f:97:f9:1c:2a:71:36:73:84:87:a0:7d:90:01:bd: 2f:b7:52:f0:cb:c9:b0:f4:7e:cc:a1:50:26:98:8d: 86:19:06:40:ec:cb:ab:7c:23:78:16:70:c7:1c:0b: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1D:8D:90:67:33:83:EC:29:23:B5:A8:56:4A:CD:71:CF:84:3D:6F X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:00:8f:46:90:c4:63:d9:e4:1c:b3:36:ca:37:de:71:5c:ab: e9:c5:76:62:05:c0:17:66:5b:90:e0:68:ec:90:4a:03:28:da: b5:eb:86:5e:34:46:9e:41:c3:58:b2:7f:c6:8a:18:ef:37:df: 50:d7:2b:53:c6:c6:63:3e:8c:b1:5b:56:fa:c3:28:80:ea:e5: b7:9a:10:7a:82:93:18:a9:c5:d8:da:00:7e:28:cb:5f:b9:3d: e4:58:81:c0:3f:90:d5:1e:54:5a:1b:e9:5e:20:58:7d:73:0e: 5e:55:75:ee:4a:bc:fb:8e:de:37:94:1a:30:7f:c4:7a:a5:35: 91:03:04:10:08:e2:b7:dd:a6:7f:d8:24:84:98:f2:f4:24:97: 71:48:6d:69:c2:c5:0c:1a:43:42:8b:da:09:b7:44:5d:7b:c9: 9a:94:95:58:21:0c:e1:d7:44:83:f2:66:af:0a:80:f9:3f:5f: e7:27:af:05:99:4c:5d:5a:a3:3f:19:c1:89:cb:04:78:dd:54: ff:ea:1c:94:c8:14:8c:b2:d3:af:fc:f0:7a:30:1a:51:d2:ac: 15:c1:e1:c8:71:c2:49:8c:6c:9d:1d:28:2c:e9:e3:c1:01:ec: f7:1a:0c:b4:ec:ab:34:78:85:ad:ee:47:11:d9:da:3c:4a:e9: f1:ba:8d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKHTuVQ5aj4Iwj1so7XuxeyIIlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNjA0MTkyMzU1NTlaFw0yNjA0MjMxMDIyNTlaMDMxMTAvBgNV BAMTKDk1MUQ4RDkwNjczMzgzRUMyOTIzQjVBODU2NEFDRDcxQ0Y4NDNENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxiv1h+HdZtDZvw2Ki3WBWfW7V 7NSXHR8Xt3EHow1+X6UPHsaSDMITyfnDk1gFeJ1vLa+rE5ozTaJyTcSLigcizk6T XTzyO5ehYX9aLehmfZ8biIQJ26cv3vCZR7+xXhW6y4Q7uh4jkvZfm3dztoieGo3e iyk9vcRnR0apA9IHq69Jb1CfuPuN2xdcNMxUkiJmc1MbkI11UuLf7XpSsPN2WzjU +Yhj51IbQCOk+BdIs4nicwaAjT34xx3CN1+HagWR5lMYwZXJv6hcQgJOoEE/sm+X +RwqcTZzhIegfZABvS+3UvDLybD0fsyhUCaYjYYZBkDsy6t8I3gWcMccC9ynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlR2NkGczg+wpI7WoVkrNcc+EPW8wHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Aj0aQxGPZ5ByzNso33nFcq+nFdmIFwBdm W5DgaOyQSgMo2rXrhl40Rp5Bw1iyf8aKGO8331DXK1PGxmM+jLFbVvrDKIDq5bea EHqCkxipxdjaAH4oy1+5PeRYgcA/kNUeVFob6V4gWH1zDl5Vde5KvPuO3jeUGjB/ xHqlNZEDBBAI4rfdpn/YJISY8vQkl3FIbWnCxQwaQ0KL2gm3RF17yZqUlVghDOHX RIPyZq8KgPk/X+cnrwWZTF1aoz8ZwYnLBHjdVP/qHJTIFIyy06/88HowGlHSrBXB 4chxwkmMbJ0dKCzp48EB7PcaDLTsqzR4ha3uRxHZ2jxK6fG6jcE= -----END CERTIFICATE-----Generated at Wed Apr 22 09:52:55 2026 by rpki-client