$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: RpM4cM/opNdAfEe8uCje9LB8wKn3kxWKAK+XzTCYrAc= Subject key identifier: 8F:7B:A5:02:B0:17:A7:DB:1E:A2:3F:43:8D:E1:C5:9B:A2:22:BD:78 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 14EC5186A790E9909A5E425FC5A8D8536840C022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 0128 Signing time: Tue 21 Apr 2026 21:00:45 +0000 Manifest this update: Tue 21 Apr 2026 20:55:45 +0000 Manifest next update: Fri 24 Apr 2026 22:43:45 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: 0X0BfL2sMbM0uRd9sM3pLnxqo/eJz7WF3JDoxKJxOTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 22:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ec:51:86:a7:90:e9:90:9a:5e:42:5f:c5:a8:d8:53:68:40:c0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Apr 21 20:55:45 2026 GMT Not After : Apr 24 22:43:45 2026 GMT Subject: CN=8F7BA502B017A7DB1EA23F438DE1C59BA222BD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:82:1b:b7:21:78:08:c6:63:2f:60:59:1a: 2f:fb:1d:49:d2:f7:82:34:3f:88:b1:b0:2f:18:e2: ab:0a:87:a2:28:b9:41:ba:50:f8:46:8c:c1:90:59: c2:27:63:fe:47:c0:7b:8b:fa:f7:8a:7c:08:9d:2c: 9d:6b:3c:2d:1a:dd:b1:36:63:83:de:87:6a:cc:ab: 36:b5:29:9f:53:d7:5c:73:47:1e:0e:1b:04:6f:65: bb:71:59:e0:b8:02:c1:c1:f4:39:d0:89:26:22:6f: 6e:00:12:6f:8f:d1:f3:e4:7c:fe:41:f1:98:8c:11: b5:8d:97:61:d8:4c:da:9e:81:ff:cd:48:e4:7c:c2: 72:b4:27:f4:6d:d0:1b:43:a8:3d:42:2f:3b:7b:cd: c5:26:44:68:c0:38:1c:03:6f:bc:2e:f5:e5:e2:2e: b5:2e:16:d4:7d:77:97:f4:39:b0:62:85:11:ee:9e: 4d:c7:ad:0e:48:f3:2a:69:87:66:ff:2b:a6:f9:de: 27:84:91:d9:e8:b9:7f:80:6e:5b:b9:20:ec:f2:eb: c6:56:cd:5e:d4:62:53:17:9b:24:43:2b:02:ca:4b: 2d:e2:6b:5b:97:50:9a:1d:d4:8d:df:bb:15:f8:47: 1f:35:f0:a5:38:56:6f:52:9b:ef:3e:74:58:01:6f: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:A5:02:B0:17:A7:DB:1E:A2:3F:43:8D:E1:C5:9B:A2:22:BD:78 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:81:96:d9:03:7b:2d:8b:f2:eb:65:f3:81:3d:ec:83:4b:e4: 72:a8:39:af:83:dd:e1:91:d8:15:5c:1c:3e:68:a9:b5:19:46: 22:69:5b:35:b3:e3:7f:8a:0c:d9:11:bf:f9:a7:51:87:66:31: bd:48:17:7f:0d:da:e2:fa:a6:55:27:4e:d7:19:f8:3e:32:0b: 32:11:06:77:03:f2:8a:45:64:f0:c8:2a:a8:a0:8e:ef:51:9d: 4f:2a:48:86:87:c5:86:4d:05:a2:4b:c1:5a:64:fd:ae:ee:83: d4:05:30:1f:94:bf:7a:f7:49:01:ad:88:91:24:7f:c7:bc:f9: 5d:f4:bb:7a:a7:48:0d:4a:44:0a:45:29:b1:d5:c2:21:e0:dc: ad:c6:16:91:a5:30:66:c8:a0:5f:8b:0e:05:80:0b:c9:f3:7d: 08:7e:43:d4:9a:44:bb:c2:01:5c:de:37:4b:0e:b7:d8:ff:08: 57:2f:33:f5:33:0f:ff:d8:aa:67:55:1a:e0:1e:9b:2b:00:ee: a7:bf:9f:03:68:95:dc:3c:7b:ac:49:b1:2f:a0:68:a8:d3:19: 12:cd:a4:25:14:24:d2:5b:01:df:f8:f5:85:9b:0e:ab:44:d2: 59:dc:7c:47:b2:b8:55:a3:48:33:b4:b7:aa:83:7f:89:8f:3e: df:27:39:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOxRhqeQ6ZCaXkJfxajYU2hAwCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNjA0MjEyMDU1NDVaFw0yNjA0MjQyMjQzNDVaMDMxMTAvBgNV BAMTKDhGN0JBNTAyQjAxN0E3REIxRUEyM0Y0MzhERTFDNTlCQTIyMkJENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K4IbtyF4CMZjL2BZGi/7HUnS 94I0P4ixsC8Y4qsKh6IouUG6UPhGjMGQWcInY/5HwHuL+veKfAidLJ1rPC0a3bE2 Y4Peh2rMqza1KZ9T11xzRx4OGwRvZbtxWeC4AsHB9DnQiSYib24AEm+P0fPkfP5B 8ZiMEbWNl2HYTNqegf/NSOR8wnK0J/Rt0BtDqD1CLzt7zcUmRGjAOBwDb7wu9eXi LrUuFtR9d5f0ObBihRHunk3HrQ5I8ypph2b/K6b53ieEkdnouX+Ablu5IOzy68ZW zV7UYlMXmyRDKwLKSy3ia1uXUJod1I3fuxX4Rx818KU4Vm9Sm+8+dFgBbzSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3ulArAXp9seoj9DjeHFm6IivXgwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyBltkDey2L8utl84E97INL5HKoOa+D3eGR 2BVcHD5oqbUZRiJpWzWz43+KDNkRv/mnUYdmMb1IF38N2uL6plUnTtcZ+D4yCzIR BncD8opFZPDIKqigju9RnU8qSIaHxYZNBaJLwVpk/a7ug9QFMB+Uv3r3SQGtiJEk f8e8+V30u3qnSA1KRApFKbHVwiHg3K3GFpGlMGbIoF+LDgWAC8nzfQh+Q9SaRLvC AVzeN0sOt9j/CFcvM/UzD//YqmdVGuAemysA7qe/nwNoldw8e6xJsS+gaKjTGRLN pCUUJNJbAd/49YWbDqtE0lncfEeyuFWjSDO0t6qDf4mPPt8nOTk= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:17 2026 by rpki-client