$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: orSfhU6WC7pjAyhYNzcWnk+GXW/cHOV1/b+H0R1KA6I= Subject key identifier: 0A:0C:8B:86:86:12:C7:F6:AA:D7:A6:EC:2E:80:20:CA:81:DC:AD:35 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 094D30EA576C18E1B68096B0C83FAFA48F449A48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: EB Signing time: Mon 20 Apr 2026 13:20:02 +0000 Manifest this update: Mon 20 Apr 2026 13:15:02 +0000 Manifest next update: Thu 23 Apr 2026 17:47:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: PH+v7gWDt5LBN0BsAD/TnUBAYP8K8I93GCnntV0bN3Q=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4d:30:ea:57:6c:18:e1:b6:80:96:b0:c8:3f:af:a4:8f:44:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Apr 20 13:15:02 2026 GMT Not After : Apr 23 17:47:02 2026 GMT Subject: CN=0A0C8B868612C7F6AAD7A6EC2E8020CA81DCAD35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:db:39:6b:27:bf:1c:8f:45:03:8d:10:13: da:52:6f:2f:0b:33:16:ab:cb:cd:c3:1b:6b:f5:f3: 8a:50:d3:e9:2d:89:b6:8a:ae:4f:ed:84:0e:04:43: 29:fb:3e:f3:b2:6c:9a:df:25:0d:d2:db:94:66:32: e3:23:fe:db:1e:79:d1:32:88:10:fc:49:94:5f:fc: 6b:58:af:c4:ae:38:af:c5:68:65:23:0f:3d:10:c4: 7c:4a:91:cd:b6:c1:ad:19:47:54:56:f0:54:cf:af: 6b:da:87:63:e2:43:3b:24:84:5e:dc:e2:b9:8a:9c: a2:78:9a:3b:8b:db:a8:27:b5:97:49:e5:3d:ec:e1: 56:7a:61:d8:64:0c:d2:4e:1f:35:f1:37:c5:4b:c4: bf:00:7d:64:f9:7d:79:b3:98:f1:65:c5:0a:1b:78: 11:98:72:a2:d0:f9:1c:75:10:b9:e3:c4:45:5f:9b: e9:b9:6d:49:52:ca:82:36:0b:ef:eb:e2:93:3a:18: 84:16:c3:b7:c1:a1:c3:ab:2a:86:6d:e5:99:bb:12: 50:d4:f5:57:d5:83:99:92:6e:74:d7:24:a6:ff:53: 21:43:a2:7d:5f:fb:4e:06:61:b8:ca:8c:77:85:63: 3a:a4:d7:b4:37:80:e0:2b:90:26:11:63:5e:3f:d1: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:8B:86:86:12:C7:F6:AA:D7:A6:EC:2E:80:20:CA:81:DC:AD:35 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:50:3f:27:8e:82:a1:3c:5b:86:d4:5c:d9:8b:91:3a:22:f0: a5:7c:42:df:e0:00:4c:e0:96:70:e2:f1:69:d4:a4:a6:e5:54: d7:d6:ab:2a:92:4e:91:a8:9b:5f:78:c2:de:26:69:ac:0d:0c: 66:a8:2e:05:fa:3d:4c:f4:bf:30:bd:b7:a6:8d:bc:4f:e9:7b: 02:dd:e7:33:ff:b3:fa:9f:9b:96:54:52:94:cc:f9:0c:cb:6e: e0:19:fd:52:1b:3c:52:df:46:fe:ad:d9:8b:37:27:78:d2:26: cf:6a:be:26:e9:db:be:8e:87:ac:b0:c7:8c:3b:db:3e:89:49: 71:77:9f:f2:69:92:d5:64:e7:98:df:6f:0d:20:b4:bf:56:69: 48:98:71:ce:46:bc:54:39:e8:e6:99:f5:17:68:3c:d5:e7:5b: 9a:10:79:a2:8a:70:e6:a7:e1:ee:2f:3f:7c:8c:bf:6b:a2:23: af:86:3f:88:f2:d9:bf:28:b1:c1:7b:13:f2:90:28:ba:52:28: 48:cf:15:51:b2:bf:fc:8b:71:3c:8b:d9:8e:be:8d:4b:b7:e2: 2f:7e:a5:e1:47:39:13:0d:14:64:24:30:c0:c0:67:b1:17:00: 76:0d:de:7f:8e:7b:49:44:12:f6:ea:18:97:ec:45:4a:16:03: f9:05:df:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCU0w6ldsGOG2gJawyD+vpI9EmkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNjA0MjAxMzE1MDJaFw0yNjA0MjMxNzQ3MDJaMDMxMTAvBgNV BAMTKDBBMEM4Qjg2ODYxMkM3RjZBQUQ3QTZFQzJFODAyMENBODFEQ0FEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfts5aye/HI9FA40QE9pSby8L Mxary83DG2v184pQ0+ktibaKrk/thA4EQyn7PvOybJrfJQ3S25RmMuMj/tseedEy iBD8SZRf/GtYr8SuOK/FaGUjDz0QxHxKkc22wa0ZR1RW8FTPr2vah2PiQzskhF7c 4rmKnKJ4mjuL26gntZdJ5T3s4VZ6YdhkDNJOHzXxN8VLxL8AfWT5fXmzmPFlxQob eBGYcqLQ+Rx1ELnjxEVfm+m5bUlSyoI2C+/r4pM6GIQWw7fBocOrKoZt5Zm7ElDU 9VfVg5mSbnTXJKb/UyFDon1f+04GYbjKjHeFYzqk17Q3gOArkCYRY14/0RudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCgyLhoYSx/aq16bsLoAgyoHcrTUwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5QPyeOgqE8W4bUXNmLkToi8KV8Qt/gAEzg lnDi8WnUpKblVNfWqyqSTpGom194wt4maawNDGaoLgX6PUz0vzC9t6aNvE/pewLd 5zP/s/qfm5ZUUpTM+QzLbuAZ/VIbPFLfRv6t2Ys3J3jSJs9qvibp276Oh6ywx4w7 2z6JSXF3n/JpktVk55jfbw0gtL9WaUiYcc5GvFQ56OaZ9RdoPNXnW5oQeaKKcOan 4e4vP3yMv2uiI6+GP4jy2b8oscF7E/KQKLpSKEjPFVGyv/yLcTyL2Y6+jUu34i9+ peFHORMNFGQkMMDAZ7EXAHYN3n+Oe0lEEvbqGJfsRUoWA/kF334= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:15 2026 by rpki-client