$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: Vf3kn+a0ABm75vVBjg2z9Q87EwyZsLC3A3D42ZkLkoo= Subject key identifier: 57:5C:80:3B:19:6D:C9:41:7A:DD:3F:E0:D7:D3:FB:83:BA:B4:B6:6E Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 35E0BC4F1CE191FBD49384335CFB93B452A13B61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: EA Signing time: Wed 22 Apr 2026 01:51:52 +0000 Manifest this update: Wed 22 Apr 2026 01:46:52 +0000 Manifest next update: Sat 25 Apr 2026 05:57:52 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: tYPc5aCvGkiRIBgZugBoJlQ1450ouWyBRb2hDfw5uy8=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e0:bc:4f:1c:e1:91:fb:d4:93:84:33:5c:fb:93:b4:52:a1:3b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Apr 22 01:46:52 2026 GMT Not After : Apr 25 05:57:52 2026 GMT Subject: CN=575C803B196DC9417ADD3FE0D7D3FB83BAB4B66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:f8:eb:29:9e:96:e6:e8:f7:25:8f:a9:24: af:0b:8a:a5:34:b0:2c:16:9f:3a:59:1f:b3:e6:43: 12:22:2b:21:9f:ea:3d:e4:89:bc:49:26:16:af:12: bc:8d:b8:e1:1a:6f:3f:75:95:ad:37:3c:1e:f0:b0: 33:9c:75:02:11:ef:60:1d:3f:63:cb:f9:95:b8:82: 40:7c:ab:00:6b:99:c9:9d:79:64:79:80:79:e2:e8: c5:86:19:4e:a2:3a:ee:61:7b:bd:32:a4:ff:b5:a6: 80:60:7f:aa:a3:17:8a:06:90:ee:9f:07:63:e6:08: c8:1e:4a:e4:97:6f:83:4e:a7:74:3e:87:77:e6:9e: 70:cf:05:3d:cb:b0:cd:30:13:5c:01:7d:2e:7c:55: e6:7e:e5:05:fd:12:4a:a5:06:27:42:5a:34:f5:de: d6:ec:63:d3:3b:bd:25:36:ce:45:a1:3d:4e:1a:95: 1f:a2:b9:c4:00:4a:3a:42:7f:10:1b:94:af:c2:09: 1a:ef:f6:d9:3b:54:0c:22:07:66:72:15:18:39:91: a8:ce:b8:08:c1:f0:f0:89:2c:ab:66:d3:a3:9a:ef: a8:d6:67:95:05:28:c5:61:f5:47:4d:60:77:4a:b4: af:48:b3:a3:16:cc:32:79:f7:90:1c:87:ae:13:44: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:80:3B:19:6D:C9:41:7A:DD:3F:E0:D7:D3:FB:83:BA:B4:B6:6E X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a2:cd:79:75:de:17:ad:a8:60:f7:f8:c9:bf:fa:a1:1b:43: 80:b7:35:3a:9d:1b:46:9f:a9:52:be:59:55:62:25:c6:6e:ba: fc:f0:28:79:47:bf:6a:89:0a:4c:35:13:bd:e7:4b:40:54:3a: df:34:25:b2:42:8c:0d:13:e6:3d:43:12:d0:ae:04:ec:c0:26: d9:57:c5:cf:c5:f5:66:a8:dc:50:29:6b:f6:a8:d6:96:cd:99: 1a:f1:d2:42:16:ac:c6:be:d1:44:85:29:fe:15:78:88:ca:ed: da:b6:d6:71:a4:41:b4:2c:80:16:ba:d4:68:14:9c:ac:84:90: e1:75:7e:05:de:86:a2:df:a0:0d:c4:d7:01:3e:7e:18:0c:58: c1:b7:c8:61:6d:bb:21:3f:68:7d:b3:4d:fb:9d:52:89:c3:a6: 52:b3:f5:96:45:9f:12:26:b5:af:3e:ce:2e:99:c9:fb:f5:02: 08:c1:4e:49:73:98:e3:3f:79:89:35:a5:0c:15:ce:09:49:64: 2c:a3:15:9e:8b:94:dc:c2:7f:de:2d:11:cb:8b:5a:00:78:05: d5:0a:1d:2f:ff:10:46:c8:04:2e:94:d2:01:14:eb:37:7a:df: c3:58:2e:92:99:aa:7e:6f:84:86:dc:00:5b:80:d9:fd:ec:28: b9:1e:cc:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeC8TxzhkfvUk4QzXPuTtFKhO2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNjA0MjIwMTQ2NTJaFw0yNjA0MjUwNTU3NTJaMDMxMTAvBgNV BAMTKDU3NUM4MDNCMTk2REM5NDE3QUREM0ZFMEQ3RDNGQjgzQkFCNEI2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6/jrKZ6W5uj3JY+pJK8LiqU0 sCwWnzpZH7PmQxIiKyGf6j3kibxJJhavEryNuOEabz91la03PB7wsDOcdQIR72Ad P2PL+ZW4gkB8qwBrmcmdeWR5gHni6MWGGU6iOu5he70ypP+1poBgf6qjF4oGkO6f B2PmCMgeSuSXb4NOp3Q+h3fmnnDPBT3LsM0wE1wBfS58VeZ+5QX9EkqlBidCWjT1 3tbsY9M7vSU2zkWhPU4alR+iucQASjpCfxAblK/CCRrv9tk7VAwiB2ZyFRg5kajO uAjB8PCJLKtm06Oa76jWZ5UFKMVh9UdNYHdKtK9Is6MWzDJ595Ach64TRKqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1yAOxltyUF63T/g19P7g7q0tm4wHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGizXl13hetqGD3+Mm/+qEbQ4C3NTqdG0af qVK+WVViJcZuuvzwKHlHv2qJCkw1E73nS0BUOt80JbJCjA0T5j1DEtCuBOzAJtlX xc/F9Wao3FApa/ao1pbNmRrx0kIWrMa+0USFKf4VeIjK7dq21nGkQbQsgBa61GgU nKyEkOF1fgXehqLfoA3E1wE+fhgMWMG3yGFtuyE/aH2zTfudUonDplKz9ZZFnxIm ta8+zi6Zyfv1AgjBTklzmOM/eYk1pQwVzglJZCyjFZ6LlNzCf94tEcuLWgB4BdUK HS//EEbIBC6U0gEU6zd638NYLpKZqn5vhIbcAFuA2f3sKLkezII= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:46 2026 by rpki-client