$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: 4bc4ETJ9SJSUQSPrN/tWvaDvXBsvK4R3+ZibdTGCQYY= Subject key identifier: 13:AA:02:D7:09:3D:C0:62:0F:CA:54:54:8E:04:D1:DB:4E:53:BF:DE Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 500EEA48E522E78C02EC7EB18302C57F1E89839A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 034D Signing time: Mon 20 Apr 2026 21:02:29 +0000 Manifest this update: Mon 20 Apr 2026 20:57:29 +0000 Manifest next update: Thu 23 Apr 2026 23:14:29 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 2: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) 3: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 4: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: pmgGMA+83uG4YYxvCB00NIvRYDXfk+tCzVc3EwrJAnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0e:ea:48:e5:22:e7:8c:02:ec:7e:b1:83:02:c5:7f:1e:89:83:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Apr 20 20:57:29 2026 GMT Not After : Apr 23 23:14:29 2026 GMT Subject: CN=13AA02D7093DC0620FCA54548E04D1DB4E53BFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:93:d7:6c:5f:3b:77:04:88:b3:26:5a:b7: d4:2a:de:28:9f:a1:1d:bd:be:68:5f:64:6a:60:b4: 1e:b0:5e:ea:c0:4a:a4:b6:b9:72:3f:f9:20:65:f8: 7f:17:a2:92:c1:d1:74:f7:ac:ce:d1:18:76:7c:86: 7e:0b:97:34:9a:fc:53:14:19:7e:4c:0a:4c:53:4f: aa:04:4e:7b:51:10:d0:71:f5:da:32:3e:8a:81:59: 39:12:78:a0:9d:ae:f1:77:0a:a5:9a:5d:5a:fd:8a: fa:ad:21:d8:cd:f7:ea:f5:a5:0a:bc:62:37:50:fe: e1:47:d9:03:20:e4:58:a6:d7:f3:c8:b8:84:2e:ec: 7e:69:09:03:68:cf:be:87:fc:cf:75:1b:fa:93:e0: 45:7d:a5:ba:d6:14:df:a3:3d:5f:a0:52:29:67:0d: a0:57:11:13:05:0b:aa:6e:a0:bf:91:f1:8d:17:b3: 9c:e3:b6:42:b2:47:53:9f:73:1a:a8:7c:18:28:1b: 05:d6:81:d7:67:a5:23:e2:95:78:36:3f:2b:6d:66: 5f:06:bc:e3:a3:63:6e:32:00:46:9e:81:fd:83:c1: cb:47:d2:f0:e4:2a:2e:bb:f8:ab:74:6f:41:57:29: 6c:2a:f5:c3:fd:c8:a9:25:22:f0:a2:1f:5c:70:3e: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:02:D7:09:3D:C0:62:0F:CA:54:54:8E:04:D1:DB:4E:53:BF:DE X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0f:38:e4:fb:47:4f:5d:45:d1:c8:6a:04:d0:81:b8:1c:68: d6:7f:51:7d:2d:71:8e:8c:93:d2:f5:dd:ad:43:fa:7c:bb:66: 38:5a:7a:c7:85:73:84:3d:cd:d0:8d:67:9f:f6:b7:6f:e3:b6: ac:6c:30:86:13:b5:19:28:9c:86:c7:12:cd:b3:f4:a3:7c:0d: 0a:03:97:3f:35:21:05:25:6e:54:ff:58:32:ef:7e:52:0b:ba: 94:15:7b:ab:f2:48:8c:da:48:91:74:df:83:1f:20:01:3e:b2: 07:d0:c1:7e:13:d9:de:83:10:f6:44:cd:60:8e:10:af:cd:c0: f5:ad:cc:c0:c3:4c:dd:5a:07:e0:95:67:27:68:7e:6d:ac:76: 92:e3:05:e6:5e:b8:1e:c5:13:da:4d:03:85:d5:a0:fc:5b:32: 5a:23:2e:6d:39:b0:02:26:18:f2:74:c4:e8:a0:25:ef:3c:bc: 49:e0:69:94:2d:e5:f2:8b:a4:7b:72:3b:68:79:2b:53:35:a4: 7e:eb:7e:15:03:1e:de:4b:63:c4:5c:7e:fa:9a:8c:fb:f2:a2: 8e:1e:4b:4a:09:4f:f9:e6:d5:90:d1:ec:0e:5b:52:56:a1:a1: 47:b3:4c:b4:d0:71:50:10:01:12:5c:70:16:9e:e8:55:30:ae: df:31:6c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUA7qSOUi54wC7H6xgwLFfx6Jg5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNjA0MjAyMDU3MjlaFw0yNjA0MjMyMzE0MjlaMDMxMTAvBgNV BAMTKDEzQUEwMkQ3MDkzREMwNjIwRkNBNTQ1NDhFMDREMURCNEU1M0JGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiJPXbF87dwSIsyZat9Qq3iif oR29vmhfZGpgtB6wXurASqS2uXI/+SBl+H8XopLB0XT3rM7RGHZ8hn4LlzSa/FMU GX5MCkxTT6oETntRENBx9doyPoqBWTkSeKCdrvF3CqWaXVr9ivqtIdjN9+r1pQq8 YjdQ/uFH2QMg5Fim1/PIuIQu7H5pCQNoz76H/M91G/qT4EV9pbrWFN+jPV+gUiln DaBXERMFC6puoL+R8Y0Xs5zjtkKyR1OfcxqofBgoGwXWgddnpSPilXg2PyttZl8G vOOjY24yAEaegf2DwctH0vDkKi67+Kt0b0FXKWwq9cP9yKklIvCiH1xwPrf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6oC1wk9wGIPylRUjgTR205Tv94wHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4POOT7R09dRdHIagTQgbgcaNZ/UX0tcY6M k9L13a1D+ny7ZjhaeseFc4Q9zdCNZ5/2t2/jtqxsMIYTtRkonIbHEs2z9KN8DQoD lz81IQUlblT/WDLvflILupQVe6vySIzaSJF034MfIAE+sgfQwX4T2d6DEPZEzWCO EK/NwPWtzMDDTN1aB+CVZydofm2sdpLjBeZeuB7FE9pNA4XVoPxbMlojLm05sAIm GPJ0xOigJe88vEngaZQt5fKLpHtyO2h5K1M1pH7rfhUDHt5LY8RcfvqajPvyoo4e S0oJT/nm1ZDR7A5bUlahoUezTLTQcVAQARJccBae6FUwrt8xbEI= -----END CERTIFICATE-----Generated at Wed Apr 22 07:26:57 2026 by rpki-client