$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: 61YBtnJ1Xk3ztxsfZeWtT8N3knuV1llEHmy9OjTwm/g= Subject key identifier: 66:C2:E1:F6:A5:D5:A0:13:79:1F:43:C7:C3:B5:EE:88:A5:8A:8E:9E Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 4FEDB6D3269CE650E4772FAAC1201FF4F37C2DF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 0233 Signing time: Mon 20 Apr 2026 12:11:05 +0000 Manifest this update: Mon 20 Apr 2026 12:06:05 +0000 Manifest next update: Thu 23 Apr 2026 13:21:05 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: SnMbgMOxWF6U2uyaAr5mP0bLC0JpKov3uB08AyMeVTY=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=) 3: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: rYUV8ptdpkEKDhkT6h3dn4n49HBUOph+obaU2HR+ung=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ed:b6:d3:26:9c:e6:50:e4:77:2f:aa:c1:20:1f:f4:f3:7c:2d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Apr 20 12:06:05 2026 GMT Not After : Apr 23 13:21:05 2026 GMT Subject: CN=66C2E1F6A5D5A013791F43C7C3B5EE88A58A8E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:7f:1c:ee:43:16:c9:04:77:2d:be:fe:19: c6:ef:46:df:51:a9:7b:8d:11:e8:3c:12:91:8c:0b: c3:2f:84:76:e8:a9:0b:e0:a7:12:40:65:db:71:0d: a7:5f:a4:56:47:be:96:e0:cd:89:b3:02:79:fa:72: a6:b9:2d:fb:a7:16:f0:9c:ae:c4:cf:83:3a:47:6b: 9a:83:19:b2:fb:a7:31:79:12:a0:4c:e6:f2:2d:71: 33:cb:50:c7:1c:37:f6:cf:cc:d8:4a:f8:31:42:62: ff:ec:85:78:dd:f3:a7:06:1a:5f:51:97:4d:08:42: 1a:1d:c5:54:14:b3:54:72:e4:c0:2c:15:09:01:8c: 17:fe:cf:b3:cb:ed:ac:57:c9:3d:1e:10:dd:f1:c2: e0:89:73:b3:6d:9e:3c:53:e8:49:f6:bd:68:e8:6c: 9f:48:34:7b:2e:9d:f3:57:56:0b:a0:0e:65:1a:e8: fc:11:b0:d6:49:c9:5b:47:2a:f9:10:d5:75:b6:58: b1:23:8b:71:22:90:0b:8b:13:89:83:c1:4d:6e:57: d9:99:23:cc:55:62:42:e6:ab:24:92:5e:0f:3f:21: c3:7b:fb:b0:35:94:99:ab:0f:8c:52:32:26:7b:5a: 82:a7:16:2e:80:40:c0:a8:d2:b5:d0:9a:a0:d4:3c: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:E1:F6:A5:D5:A0:13:79:1F:43:C7:C3:B5:EE:88:A5:8A:8E:9E X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:93:47:40:ba:6b:d0:e3:24:9e:72:33:66:de:11:00:a5:76: cf:a5:fc:72:d7:a1:ca:0a:8a:fb:e2:ca:52:c1:cb:f4:bc:19: d3:e3:e4:32:d8:9f:94:fc:9e:ff:3f:21:e1:a1:7f:fa:5f:a1: b5:23:e0:16:07:bd:d8:c4:c7:7e:19:a8:6f:cb:b1:40:6a:49: 39:6c:f2:4b:ff:44:6b:db:45:56:f4:06:a9:2d:99:e8:2d:23: 24:dc:f4:f4:ff:18:15:33:f1:8b:66:b8:76:e0:dc:cd:ea:2b: 48:9a:00:67:cb:c5:8b:90:bb:e7:ef:03:32:5d:e8:0d:07:56: 17:09:2f:86:ec:e6:c9:84:c8:97:67:07:82:c0:91:67:8c:89: 59:48:e0:ea:fe:09:37:ed:8a:79:67:a6:37:82:51:19:eb:c8: 83:56:30:73:d8:18:ed:68:d1:7e:e8:d6:34:90:a1:63:4a:4e: 78:80:1a:d2:18:52:57:61:ee:78:bb:8a:e2:e7:98:41:fe:c1: b9:31:81:28:e1:a2:c3:24:cf:ce:12:7c:9a:79:45:17:60:d9: bb:7c:48:54:f0:f2:09:9d:1a:6e:59:94:8c:45:bb:d3:52:3f: e6:ef:a5:3e:f2:34:b4:1b:b5:ad:a8:17:38:a9:67:2c:3e:a0: b4:13:2d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+220yac5lDkdy+qwSAf9PN8LfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNjA0MjAxMjA2MDVaFw0yNjA0MjMxMzIxMDVaMDMxMTAvBgNV BAMTKDY2QzJFMUY2QTVENUEwMTM3OTFGNDNDN0MzQjVFRTg4QTU4QThFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasX8c7kMWyQR3Lb7+GcbvRt9R qXuNEeg8EpGMC8MvhHboqQvgpxJAZdtxDadfpFZHvpbgzYmzAnn6cqa5LfunFvCc rsTPgzpHa5qDGbL7pzF5EqBM5vItcTPLUMccN/bPzNhK+DFCYv/shXjd86cGGl9R l00IQhodxVQUs1Ry5MAsFQkBjBf+z7PL7axXyT0eEN3xwuCJc7NtnjxT6En2vWjo bJ9INHsunfNXVgugDmUa6PwRsNZJyVtHKvkQ1XW2WLEji3EikAuLE4mDwU1uV9mZ I8xVYkLmqySSXg8/IcN7+7A1lJmrD4xSMiZ7WoKnFi6AQMCo0rXQmqDUPBGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsLh9qXVoBN5H0PHw7XuiKWKjp4wHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCTR0C6a9DjJJ5yM2beEQClds+l/HLXocoK ivviylLBy/S8GdPj5DLYn5T8nv8/IeGhf/pfobUj4BYHvdjEx34ZqG/LsUBqSTls 8kv/RGvbRVb0BqktmegtIyTc9PT/GBUz8YtmuHbg3M3qK0iaAGfLxYuQu+fvAzJd 6A0HVhcJL4bs5smEyJdnB4LAkWeMiVlI4Or+CTftinlnpjeCURnryINWMHPYGO1o 0X7o1jSQoWNKTniAGtIYUldh7ni7iuLnmEH+wbkxgSjhosMkz84SfJp5RRdg2bt8 SFTw8gmdGm5ZlIxFu9NSP+bvpT7yNLQbta2oFzipZyw+oLQTLa0= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:28 2026 by rpki-client