$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: /3qjj9lhjTEmWAEgbUNy2A060LRrZk5ZUbvKNS9hmQU= Subject key identifier: 4B:E1:5D:BB:E5:76:1C:DB:A1:64:DC:C0:2B:31:9A:44:6F:9C:6A:2B Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 2F28BF94B851F9AA76A071DCC569385F6DB072D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0570 Signing time: Tue 28 Apr 2026 05:42:12 +0000 Manifest this update: Tue 28 Apr 2026 05:37:12 +0000 Manifest next update: Fri 01 May 2026 13:26:12 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: u8DqVVAwVKs3FlFTH5HU/LBXX8EYHurHkYvQkKzRNO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 May 2026 13:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:28:bf:94:b8:51:f9:aa:76:a0:71:dc:c5:69:38:5f:6d:b0:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Apr 28 05:37:12 2026 GMT Not After : May 1 13:26:12 2026 GMT Subject: CN=4BE15DBBE5761CDBA164DCC02B319A446F9C6A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:8d:2f:17:c1:8c:46:89:14:8d:f5:fd:5b: 73:8e:04:82:c5:a9:09:93:c1:a8:41:44:b5:5c:cc: 61:ec:2d:57:f6:74:bd:82:ce:6f:e8:cc:a1:3b:77: 80:d0:68:e9:b6:94:14:18:56:72:37:84:91:75:96: b9:41:fc:02:26:57:e7:f2:f3:f9:f8:5e:aa:85:5e: 7a:b4:b2:cd:25:7e:f6:4d:7f:2f:33:38:e7:a1:cd: af:c9:88:22:81:a3:93:0f:29:6b:6d:5c:66:16:10: 32:cd:83:2b:cb:5a:91:10:0d:ff:d2:98:e2:1d:27: 46:87:63:1a:56:20:5a:c3:63:b0:62:dc:9c:63:88: 9a:36:bc:c8:f4:a7:cf:d1:e7:bf:20:1b:b8:9f:bf: e6:e4:21:2e:0b:8a:9b:8a:3a:42:f3:ab:5b:31:b0: b6:36:bb:87:8f:ad:c7:de:94:3f:f0:0d:e6:6f:c4: 42:73:ac:02:18:23:c6:a4:b2:f6:ff:72:90:42:70: 84:d3:62:b7:fa:ca:ba:62:f0:82:58:d5:47:53:25: 2d:b7:87:6f:25:33:14:ed:8e:a8:9f:03:0d:90:5a: 04:09:b2:3f:a2:22:65:80:98:36:71:09:99:76:1e: 95:59:ad:b4:d9:33:d6:79:f8:da:ed:b9:da:aa:8b: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:5D:BB:E5:76:1C:DB:A1:64:DC:C0:2B:31:9A:44:6F:9C:6A:2B X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:78:f5:16:58:cf:05:98:ec:09:84:e5:8c:15:49:6b:b3:0d: 08:ac:0f:86:e2:e4:69:79:d4:2b:50:18:c7:58:ca:da:31:b5: 7d:22:e1:16:57:f8:99:ad:e7:d5:9a:3a:1c:00:e4:b1:1d:10: 08:95:d0:4f:d2:76:7c:65:a2:67:70:7a:87:d0:0d:cf:fe:63: d9:87:20:2e:23:d4:94:65:16:0a:fc:00:65:51:e0:2f:b3:37: dc:f1:df:34:df:a8:d0:f7:97:29:9b:62:b1:ca:78:c7:67:0e: e3:4d:61:a7:34:53:dd:cb:49:f8:d7:a7:c7:a7:fd:d7:a4:c2: df:96:e7:93:a0:9f:a6:2b:be:f5:49:fd:38:7a:c9:38:7e:f0: d5:4e:ee:ff:22:c8:d1:96:70:fe:27:34:fc:c5:36:07:c0:0e: c2:6f:0f:69:b4:d8:e0:dd:00:fc:64:a4:9f:61:d5:ba:03:ea: 30:94:f5:ea:c9:26:b3:91:2f:ca:36:2c:60:88:46:f7:5c:0d: 96:be:ed:d2:df:5e:b3:8c:4b:bb:22:db:c3:7f:e9:6e:ac:9d: 94:ad:98:66:66:34:57:8c:a1:1a:41:10:9e:56:32:5e:96:84: 0c:cd:bf:50:0e:ce:d0:05:21:b5:ae:f8:96:26:61:19:3e:59: a4:c2:2f:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyi/lLhR+ap2oHHcxWk4X22wctMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNjA0MjgwNTM3MTJaFw0yNjA1MDExMzI2MTJaMDMxMTAvBgNV BAMTKDRCRTE1REJCRTU3NjFDREJBMTY0RENDMDJCMzE5QTQ0NkY5QzZBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPeY0vF8GMRokUjfX9W3OOBILF qQmTwahBRLVczGHsLVf2dL2Czm/ozKE7d4DQaOm2lBQYVnI3hJF1lrlB/AImV+fy 8/n4XqqFXnq0ss0lfvZNfy8zOOehza/JiCKBo5MPKWttXGYWEDLNgyvLWpEQDf/S mOIdJ0aHYxpWIFrDY7Bi3JxjiJo2vMj0p8/R578gG7ifv+bkIS4LipuKOkLzq1sx sLY2u4ePrcfelD/wDeZvxEJzrAIYI8aksvb/cpBCcITTYrf6yrpi8IJY1UdTJS23 h28lMxTtjqifAw2QWgQJsj+iImWAmDZxCZl2HpVZrbTZM9Z5+Nrtudqqix7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+Fdu+V2HNuhZNzAKzGaRG+caiswHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANJ49RZYzwWY7AmE5YwVSWuzDQisD4bi5Gl5 1CtQGMdYytoxtX0i4RZX+Jmt59WaOhwA5LEdEAiV0E/SdnxlomdweofQDc/+Y9mH IC4j1JRlFgr8AGVR4C+zN9zx3zTfqND3lymbYrHKeMdnDuNNYac0U93LSfjXp8en /dekwt+W55Ogn6YrvvVJ/Th6yTh+8NVO7v8iyNGWcP4nNPzFNgfADsJvD2m02ODd APxkpJ9h1boD6jCU9erJJrORL8o2LGCIRvdcDZa+7dLfXrOMS7si28N/6W6snZSt mGZmNFeMoRpBEJ5WMl6WhAzNv1AOztAFIbWu+JYmYRk+WaTCL+E= -----END CERTIFICATE-----Generated at Wed Apr 29 00:03:08 2026 by rpki-client