$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: wMCDkbVNAxy4nUSUJHAMt3zpN+D5mPKz6BIq/JEa06w= Subject key identifier: 56:C7:4C:E2:FD:2F:CA:8D:9D:D7:BA:86:51:77:F9:B0:0E:5B:2F:08 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 3FEAF94B9BAEF3921C60F60D49A3BB6C988456FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: CF Signing time: Mon 20 Apr 2026 08:42:15 +0000 Manifest this update: Mon 20 Apr 2026 08:37:15 +0000 Manifest next update: Thu 23 Apr 2026 18:27:15 +0000 Files and hashes: 1: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: 1xmBszaNkXHAaHWexWXjjevVQlbPTZUW9Twd2FzpZH8=) 2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: gP6dAzMR/WXv6bwbVfa+d+Rc9Y0EVWXjuXcT3Exr1xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ea:f9:4b:9b:ae:f3:92:1c:60:f6:0d:49:a3:bb:6c:98:84:56:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Apr 20 08:37:15 2026 GMT Not After : Apr 23 18:27:15 2026 GMT Subject: CN=56C74CE2FD2FCA8D9DD7BA865177F9B00E5B2F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:cc:ad:af:a5:f5:6a:d5:d2:26:1f:44:8a: b7:0c:a5:06:cf:aa:eb:ca:df:95:b2:fd:e9:fc:5c: e1:e1:24:d0:8a:2c:9c:d4:34:91:1b:ea:37:e7:f1: 58:38:7b:2e:5a:ba:93:34:3c:d5:f6:94:7f:14:a9: 76:70:10:a8:0f:1d:a4:b3:39:72:8f:3e:23:e7:cb: d9:68:a3:7d:86:9d:0e:ec:88:6d:59:aa:dc:84:b0: d8:19:da:a5:24:85:93:d6:18:36:06:36:27:c4:6a: 02:cb:b0:43:b5:0d:ce:dd:fa:84:30:fc:7c:61:73: 2d:e5:28:b1:25:15:3c:f7:25:83:e9:b7:69:67:e6: 26:36:c5:30:91:a2:75:b3:8a:43:72:ba:14:52:15: 7f:f0:8a:65:ec:3d:c9:62:1a:83:af:13:64:51:e0: 68:76:28:15:30:91:36:ff:ca:f6:c6:3a:d9:c0:95: 78:0e:8a:7d:2a:4d:81:46:3c:f1:aa:a1:90:9c:25: 61:e8:ff:d5:c3:25:c3:af:0a:5c:a6:c9:65:77:50: 78:89:44:10:b7:4a:c2:29:5e:79:b0:14:8f:26:16: 2d:d3:e5:d6:b2:f6:36:65:86:57:50:84:a8:ba:d0: 77:67:32:d7:af:0a:b5:7a:e0:f5:c4:8f:ac:2c:9f: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C7:4C:E2:FD:2F:CA:8D:9D:D7:BA:86:51:77:F9:B0:0E:5B:2F:08 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3b:e1:cb:b0:f7:78:9c:71:b5:4a:4d:21:1f:1f:19:51:52: bf:b2:6f:23:b5:b9:f7:64:e9:97:58:f5:4d:3b:27:f1:e4:37: d8:39:bf:db:4a:26:a3:40:18:fb:07:c0:10:5d:48:4c:28:d5: 42:97:09:76:25:60:d6:60:98:5f:df:e3:44:77:79:35:ef:ef: a1:fd:b5:d9:1b:c0:f2:f1:e7:e7:23:53:fe:c7:d4:ea:da:6c: 37:07:92:93:0d:e3:8a:f2:9a:54:99:f2:c9:d6:cb:ff:1d:b9: 8f:4f:30:c1:aa:2e:ee:f3:f4:0f:d6:80:65:ad:d9:a2:e7:ba: 31:fe:e0:e9:ba:e7:63:7c:8b:3b:25:ff:ff:71:dd:fa:73:43: 7f:da:32:ab:cb:3d:7b:9b:b7:6d:12:0e:87:2c:4e:80:ba:bd: 78:44:f6:20:4d:8a:f1:54:f1:79:69:59:f6:91:93:92:0c:b0: 3b:b3:51:78:9c:6e:f1:30:c6:4a:87:aa:12:19:49:ba:30:6f: 41:f5:0b:1d:a0:78:75:80:e7:22:63:29:3f:df:03:ba:6d:29: bf:c2:8f:7c:7b:e4:ad:89:53:01:f7:97:f1:d6:f9:b0:1d:fc: 61:39:78:59:7d:a1:02:94:6d:20:2e:5c:c2:b8:8b:26:6c:5f: 99:c0:34:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+r5S5uu85IcYPYNSaO7bJiEVvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNjA0MjAwODM3MTVaFw0yNjA0MjMxODI3MTVaMDMxMTAvBgNV BAMTKDU2Qzc0Q0UyRkQyRkNBOEQ5REQ3QkE4NjUxNzdGOUIwMEU1QjJGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoPMytr6X1atXSJh9EircMpQbP quvK35Wy/en8XOHhJNCKLJzUNJEb6jfn8Vg4ey5aupM0PNX2lH8UqXZwEKgPHaSz OXKPPiPny9loo32GnQ7siG1ZqtyEsNgZ2qUkhZPWGDYGNifEagLLsEO1Dc7d+oQw /Hxhcy3lKLElFTz3JYPpt2ln5iY2xTCRonWzikNyuhRSFX/wimXsPcliGoOvE2RR 4Gh2KBUwkTb/yvbGOtnAlXgOin0qTYFGPPGqoZCcJWHo/9XDJcOvClymyWV3UHiJ RBC3SsIpXnmwFI8mFi3T5day9jZlhldQhKi60HdnMtevCrV64PXEj6wsn7tDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsdM4v0vyo2d17qGUXf5sA5bLwgwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY74cuw93iccbVKTSEfHxlRUr+ybyO1ufdk 6ZdY9U07J/HkN9g5v9tKJqNAGPsHwBBdSEwo1UKXCXYlYNZgmF/f40R3eTXv76H9 tdkbwPLx5+cjU/7H1OrabDcHkpMN44rymlSZ8snWy/8duY9PMMGqLu7z9A/WgGWt 2aLnujH+4Om652N8izsl//9x3fpzQ3/aMqvLPXubt20SDocsToC6vXhE9iBNivFU 8XlpWfaRk5IMsDuzUXicbvEwxkqHqhIZSbowb0H1Cx2geHWA5yJjKT/fA7ptKb/C j3x75K2JUwH3l/HW+bAd/GE5eFl9oQKUbSAuXMK4iyZsX5nANI4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client