$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: 156cb7j94VkYAvgvXZIuMV4DtWgN+BygbF7vX3Y2zzM= Subject key identifier: B6:E2:F7:A9:B3:11:E8:C2:1E:55:5D:88:FC:0F:01:CE:E9:80:AA:E2 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 7ED777EECEF44B1D5B1C8641B526AB7CC6E12892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 013E Signing time: Mon 20 Apr 2026 18:12:37 +0000 Manifest this update: Mon 20 Apr 2026 18:07:37 +0000 Manifest next update: Thu 23 Apr 2026 23:23:37 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: nTxvfzbVq44zUZXE82ddhbhvRb/9HTOGQMubywSYTGE=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: VrbRBoxOLArpkrqv0CgqRXIbC24YLbBmO0Yj8Vtecy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d7:77:ee:ce:f4:4b:1d:5b:1c:86:41:b5:26:ab:7c:c6:e1:28:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Apr 20 18:07:37 2026 GMT Not After : Apr 23 23:23:37 2026 GMT Subject: CN=B6E2F7A9B311E8C21E555D88FC0F01CEE980AAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:20:40:9e:95:4c:13:ae:61:85:ca:a8:c9: f8:fb:51:7b:61:85:a2:e2:04:95:c4:d6:ae:9f:ee: 6f:16:6b:f4:1c:1b:fc:dc:f1:c6:8b:ed:ea:f5:ad: 3a:ae:70:ef:fe:b2:11:13:0a:2d:4d:54:f6:e9:af: 93:a1:dd:61:c8:b2:6e:f3:b7:f3:87:15:0e:99:19: d2:e1:a5:bf:12:ff:2e:79:70:b7:46:51:04:7d:59: 1f:be:85:ce:c2:44:b3:60:77:b2:fd:7a:62:06:0a: f7:35:9b:8e:2f:19:c2:e9:c4:9a:7c:7b:4a:35:73: 98:df:95:f9:af:68:2e:1d:cc:54:06:11:93:8e:b3: 51:bb:ec:f8:c8:8b:6e:38:09:87:53:4f:7d:a0:ad: b8:05:bc:49:d8:96:f7:13:82:e4:f1:fc:83:7c:7f: 36:d1:de:d7:c5:ad:28:19:c8:c5:63:7b:5c:72:5b: 52:9d:8b:91:46:ba:c1:1a:0c:7c:98:8a:e2:8a:f7: d7:a3:7b:4f:70:d6:ec:18:33:1f:58:cd:2e:62:5e: c9:04:bd:46:df:21:ea:72:48:29:dd:5c:e9:84:d0: 8f:4f:9d:be:a1:5e:9c:aa:61:68:ff:33:9d:fd:72: 9e:96:41:32:2e:0e:5e:2b:54:90:67:e3:31:44:80: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E2:F7:A9:B3:11:E8:C2:1E:55:5D:88:FC:0F:01:CE:E9:80:AA:E2 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:97:b1:74:8b:09:17:13:be:2c:2b:42:ff:23:42:93:41: 6d:15:1a:15:ab:8a:58:c9:1e:85:19:d8:9e:ca:86:49:7c:3c: 7b:dd:9d:16:1e:b5:fd:89:d3:35:5d:71:78:88:db:ef:00:6a: ee:11:1d:1a:20:9a:76:5c:73:d9:67:98:27:40:dc:fc:fe:b7: 2f:3e:84:b0:6b:95:c4:2b:74:d6:25:13:fe:55:71:3d:08:35: 10:aa:19:cc:7f:bb:e9:7c:f7:4c:32:71:68:c6:b5:89:3f:d9: 27:24:c3:2a:9f:d3:8f:57:68:9b:1d:25:82:af:10:6b:36:6f: f2:80:f8:9c:87:12:63:0a:05:8c:c4:55:aa:e0:f2:ec:b1:26: cd:2c:54:66:c0:82:50:a5:85:95:3b:8c:88:fd:61:33:2e:3a: c8:c9:e9:c8:b6:42:eb:3d:62:d9:29:81:75:a5:58:c4:f9:bd: 54:56:59:51:e2:c1:e1:ec:55:52:90:7f:47:c7:4f:28:a4:a0: 70:e2:1d:07:4c:7c:18:0b:f3:0d:74:63:84:b6:2f:95:ac:c3: 23:b6:1e:06:9a:00:53:a6:3c:ed:ac:1d:59:9a:6a:24:49:15: 79:81:0a:f8:82:99:3b:24:35:5b:d9:48:39:dc:65:c4:dd:51: 95:91:ff:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftd37s70Sx1bHIZBtSarfMbhKJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNjA0MjAxODA3MzdaFw0yNjA0MjMyMzIzMzdaMDMxMTAvBgNV BAMTKEI2RTJGN0E5QjMxMUU4QzIxRTU1NUQ4OEZDMEYwMUNFRTk4MEFBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yiBAnpVME65hhcqoyfj7UXth haLiBJXE1q6f7m8Wa/QcG/zc8caL7er1rTqucO/+shETCi1NVPbpr5Oh3WHIsm7z t/OHFQ6ZGdLhpb8S/y55cLdGUQR9WR++hc7CRLNgd7L9emIGCvc1m44vGcLpxJp8 e0o1c5jflfmvaC4dzFQGEZOOs1G77PjIi244CYdTT32grbgFvEnYlvcTguTx/IN8 fzbR3tfFrSgZyMVje1xyW1Kdi5FGusEaDHyYiuKK99eje09w1uwYMx9YzS5iXskE vUbfIepySCndXOmE0I9Pnb6hXpyqYWj/M539cp6WQTIuDl4rVJBn4zFEgLEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtuL3qbMR6MIeVV2I/A8BzumAquIwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqcl7F0iwkXE74sK0L/I0KTQW0VGhWriljJ HoUZ2J7Khkl8PHvdnRYetf2J0zVdcXiI2+8Aau4RHRogmnZcc9lnmCdA3Pz+ty8+ hLBrlcQrdNYlE/5VcT0INRCqGcx/u+l890wycWjGtYk/2Sckwyqf049XaJsdJYKv EGs2b/KA+JyHEmMKBYzEVarg8uyxJs0sVGbAglClhZU7jIj9YTMuOsjJ6ci2Qus9 YtkpgXWlWMT5vVRWWVHiweHsVVKQf0fHTyikoHDiHQdMfBgL8w10Y4S2L5WswyO2 HgaaAFOmPO2sHVmaaiRJFXmBCviCmTskNVvZSDncZcTdUZWR/7k= -----END CERTIFICATE-----Generated at Wed Apr 22 10:27:23 2026 by rpki-client