$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: Hh/w6dF9JYBGCt6oPEq826tPdOXg3JP68LwvGvHboNY= Subject key identifier: 16:28:43:A3:1F:77:0C:29:57:76:43:5D:3A:EB:6C:84:3C:51:F5:73 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 1AD30BA3819FA6D06D9C0BD32D3FDDAEE3B97849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 025D Signing time: Sat 04 Apr 2026 05:22:15 +0000 Manifest this update: Sat 04 Apr 2026 05:17:15 +0000 Manifest next update: Tue 07 Apr 2026 16:32:15 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: He2pvqymlhorfy3E1noreR4Vgu/pVhYTHXpdC1CZ7rE=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: KM1ESBIXGbFNSPLyYnNSMBK3OGLkTwlOBU29jEyxfKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 16:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d3:0b:a3:81:9f:a6:d0:6d:9c:0b:d3:2d:3f:dd:ae:e3:b9:78:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Apr 4 05:17:15 2026 GMT Not After : Apr 7 16:32:15 2026 GMT Subject: CN=162843A31F770C295776435D3AEB6C843C51F573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:5f:d4:bb:3f:76:de:75:c2:95:94:f8:ce: 39:c5:92:d3:36:00:bc:26:86:7a:a7:e2:d9:55:da: cd:d8:93:40:b0:a4:b8:a5:c8:e5:4a:be:f7:a9:52: 0e:37:e3:d6:79:ab:fb:86:a0:93:38:a9:57:9a:db: 11:73:c9:6e:c1:a9:f3:3e:97:4e:10:f8:bc:fd:9f: 47:35:4f:03:59:49:51:42:60:af:72:fd:bb:96:61: 96:34:b6:d0:00:4e:de:68:b3:8c:66:6e:fe:96:5a: 58:5e:97:65:41:34:83:d6:18:91:25:9d:b6:22:51: 22:49:65:01:63:d9:ce:87:16:5e:5d:eb:ea:ba:a2: d8:2c:58:45:b1:95:b7:22:30:de:eb:74:02:1a:69: 7f:ca:83:16:39:46:e7:69:57:06:98:72:c7:7e:68: 94:4f:89:04:17:8a:a2:b1:99:21:b6:3f:22:03:d1: 99:6d:c7:08:99:10:4e:f9:0d:56:9f:87:34:6c:b8: 7b:05:d9:48:d1:c4:06:80:c8:0e:03:57:95:33:7e: 68:95:5e:18:fd:65:ed:6c:a6:d6:82:44:6a:8a:c1: cf:45:54:48:05:27:b0:c3:b1:6d:14:6d:40:f5:af: 24:f0:01:ea:c5:8b:c5:ea:7a:7d:c1:67:2a:b2:f1: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:43:A3:1F:77:0C:29:57:76:43:5D:3A:EB:6C:84:3C:51:F5:73 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:48:0c:c5:d8:5f:6c:91:6b:81:b1:b5:94:4e:c9:26:f3:36: 8b:2d:a2:9e:e7:d5:b8:6d:f4:9b:20:ef:69:7f:3a:87:70:fe: b8:28:b3:7c:97:eb:4a:9c:c1:ed:40:a6:5f:64:54:03:b9:50: 73:23:89:b3:13:27:e6:56:ee:a2:54:6f:3b:7f:78:d0:4c:78: b6:6b:0b:3d:84:ba:ab:4c:d0:37:50:2e:e8:d5:1a:7f:7b:fb: e5:da:29:37:f2:c2:2f:74:ec:71:fe:08:11:23:8e:88:a5:eb: db:31:59:5f:52:d0:0c:94:2c:94:f6:f9:85:93:3b:57:03:4d: fd:83:6b:e4:40:3e:ed:61:ae:f4:d6:50:83:10:57:f0:8f:2c: 88:4c:0b:d5:39:0f:02:3e:54:dc:6d:91:e3:c6:f9:25:9b:35: 5b:37:03:4e:28:c9:df:d8:f7:19:7f:6a:f9:0c:dc:60:4b:bb: 47:49:f2:52:5f:4a:72:d9:28:54:e3:f6:dd:50:e3:95:0f:3c: ba:f3:1a:34:fc:f1:76:06:35:90:96:59:ad:da:d2:ee:40:14: 79:b8:3e:3c:fa:f1:2a:69:53:af:74:8c:22:56:07:4a:5e:7e: a4:d2:1d:d0:0f:f6:40:6e:1f:c5:eb:17:c9:09:f7:f4:d0:2b: 6c:92:ab:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtMLo4GfptBtnAvTLT/druO5eEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNjA0MDQwNTE3MTVaFw0yNjA0MDcxNjMyMTVaMDMxMTAvBgNV BAMTKDE2Mjg0M0EzMUY3NzBDMjk1Nzc2NDM1RDNBRUI2Qzg0M0M1MUY1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxF/Uuz923nXClZT4zjnFktM2 ALwmhnqn4tlV2s3Yk0CwpLilyOVKvvepUg4349Z5q/uGoJM4qVea2xFzyW7BqfM+ l04Q+Lz9n0c1TwNZSVFCYK9y/buWYZY0ttAATt5os4xmbv6WWlhel2VBNIPWGJEl nbYiUSJJZQFj2c6HFl5d6+q6otgsWEWxlbciMN7rdAIaaX/KgxY5RudpVwaYcsd+ aJRPiQQXiqKxmSG2PyID0ZltxwiZEE75DVafhzRsuHsF2UjRxAaAyA4DV5UzfmiV Xhj9Ze1sptaCRGqKwc9FVEgFJ7DDsW0UbUD1ryTwAerFi8Xqen3BZyqy8X3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFihDox93DClXdkNdOutshDxR9XMwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFIDMXYX2yRa4GxtZROySbzNostop7n1bht 9Jsg72l/Oodw/rgos3yX60qcwe1Apl9kVAO5UHMjibMTJ+ZW7qJUbzt/eNBMeLZr Cz2EuqtM0DdQLujVGn97++XaKTfywi907HH+CBEjjoil69sxWV9S0AyULJT2+YWT O1cDTf2Da+RAPu1hrvTWUIMQV/CPLIhMC9U5DwI+VNxtkePG+SWbNVs3A04oyd/Y 9xl/avkM3GBLu0dJ8lJfSnLZKFTj9t1Q45UPPLrzGjT88XYGNZCWWa3a0u5AFHm4 Pjz68SppU690jCJWB0pefqTSHdAP9kBuH8XrF8kJ9/TQK2ySq+A= -----END CERTIFICATE-----Generated at Mon Apr 6 14:56:12 2026 by rpki-client