$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: YOKwJKtve4RBrR9dg3OZDXbw9FQQxOdES0/k+8gAoG4= Subject key identifier: 95:C3:D7:36:34:92:80:7E:63:85:DA:BB:53:24:BA:B1:2E:7C:14:AB Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 27AC8B41DA1DA764AFDA3D7268F8DC43FB158EFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: 0168 Signing time: Mon 20 Apr 2026 01:32:03 +0000 Manifest this update: Mon 20 Apr 2026 01:27:03 +0000 Manifest next update: Thu 23 Apr 2026 07:28:03 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: VHpWx/ELEtp63dh9v37pcf0dfq0fnpuWymrPIJ3Qc9I=) 2: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: YFpweuIqMDbAe4H2s4hQrCSh15hfSduUoml1DAw7wV0=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: 1Y22heZzLW1uLBI2dj0FhbkrNAtQ677tG4XL0MCWVic=) 4: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: JJoDtolcZE+KR7sFSmDxYz3v23eUKolYl+DqisOigZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 07:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ac:8b:41:da:1d:a7:64:af:da:3d:72:68:f8:dc:43:fb:15:8e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Apr 20 01:27:03 2026 GMT Not After : Apr 23 07:28:03 2026 GMT Subject: CN=95C3D7363492807E6385DABB5324BAB12E7C14AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:4a:d0:9a:71:9a:14:f1:7e:68:b4:9b:40: e9:47:d3:3a:24:2a:ae:8c:45:83:a5:31:3f:81:cb: 47:8f:38:4e:87:8b:ee:d7:42:41:b7:4d:12:d4:7a: 71:9b:39:5d:6b:83:18:ef:14:c4:12:dd:65:32:dd: 2d:40:9f:ec:bf:f2:50:7c:9a:3e:ad:3d:8b:9f:00: 97:bb:08:03:96:fd:63:a1:bc:09:7f:37:9e:3a:f6: 27:64:20:3e:7b:d0:aa:50:7e:0e:54:08:8b:81:99: 74:a7:7c:8c:7d:f8:e8:ac:50:11:35:56:65:c6:4a: b2:a7:06:73:62:75:ea:a9:99:be:87:9e:2c:19:11: de:43:40:12:6c:23:d7:45:ed:74:2b:c9:93:4b:9b: 4c:ef:98:12:6e:d0:b9:f5:72:8b:7e:f7:72:e9:d0: 21:d6:4f:be:20:0d:ca:c6:d1:61:0c:a9:1f:52:17: cd:e1:a3:32:a2:42:cc:72:cd:63:0f:1d:b5:b1:77: a5:57:8c:4e:1d:c8:2d:d8:07:37:19:89:f4:b8:3a: c7:e4:2f:b0:c2:1a:98:25:80:c1:ba:ba:8f:de:04: 78:32:21:d9:29:2a:46:1f:5a:3c:c4:b7:14:94:33: 50:06:75:d9:b4:19:c8:cf:90:a6:f9:30:63:2b:87: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:D7:36:34:92:80:7E:63:85:DA:BB:53:24:BA:B1:2E:7C:14:AB X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d8:76:30:f7:e6:7d:0c:c2:1e:a6:02:91:4e:d8:e0:d2:5e: 4b:2d:1e:7f:92:7a:c5:ce:f4:cd:9a:56:7e:90:2d:3d:90:32: 03:9d:4d:f3:6e:b9:26:96:85:31:97:c9:7f:be:5f:6a:62:c8: 92:61:71:0b:60:73:24:d5:68:e6:86:6a:ed:51:2c:5d:4c:4b: 58:b2:93:e8:50:af:3e:09:11:63:be:cc:b3:9b:9b:b4:b9:6e: eb:11:2e:98:57:a8:27:5b:94:5a:a6:a9:43:5c:6d:31:4d:0f: 6f:21:f1:f7:75:39:02:25:b2:5f:29:67:9e:6a:88:4c:b1:44: c6:17:69:77:5e:5c:6a:65:31:04:c2:99:00:f3:99:04:ca:f6: 53:40:8c:5c:c7:38:ea:81:3d:32:73:e1:d3:fd:7e:67:72:1c: 82:cd:02:1b:70:49:05:c2:b8:8f:3b:78:18:99:99:df:b9:81: c7:9a:3e:d0:2b:66:5d:b9:56:82:43:be:09:28:6c:cc:d5:6e: c2:c4:33:6a:b1:60:ed:28:ac:9a:57:b5:a3:a8:da:59:53:b7: a7:7c:d2:77:7e:29:6e:c4:e7:6b:31:99:64:90:c2:9f:33:8a: 00:9b:2a:a4:12:7c:3c:8f:41:c0:5a:97:7f:0c:c4:ef:13:f4: f5:d4:b2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6yLQdodp2Sv2j1yaPjcQ/sVjvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNjA0MjAwMTI3MDNaFw0yNjA0MjMwNzI4MDNaMDMxMTAvBgNV BAMTKDk1QzNENzM2MzQ5MjgwN0U2Mzg1REFCQjUzMjRCQUIxMkU3QzE0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG0rQmnGaFPF+aLSbQOlH0zok Kq6MRYOlMT+By0ePOE6Hi+7XQkG3TRLUenGbOV1rgxjvFMQS3WUy3S1An+y/8lB8 mj6tPYufAJe7CAOW/WOhvAl/N5469idkID570KpQfg5UCIuBmXSnfIx9+OisUBE1 VmXGSrKnBnNideqpmb6HniwZEd5DQBJsI9dF7XQryZNLm0zvmBJu0Ln1cot+93Lp 0CHWT74gDcrG0WEMqR9SF83hozKiQsxyzWMPHbWxd6VXjE4dyC3YBzcZifS4Osfk L7DCGpglgMG6uo/eBHgyIdkpKkYfWjzEtxSUM1AGddm0GcjPkKb5MGMrhwMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcPXNjSSgH5jhdq7UyS6sS58FKswHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7YdjD35n0Mwh6mApFO2ODSXkstHn+SesXO 9M2aVn6QLT2QMgOdTfNuuSaWhTGXyX++X2piyJJhcQtgcyTVaOaGau1RLF1MS1iy k+hQrz4JEWO+zLObm7S5busRLphXqCdblFqmqUNcbTFND28h8fd1OQIlsl8pZ55q iEyxRMYXaXdeXGplMQTCmQDzmQTK9lNAjFzHOOqBPTJz4dP9fmdyHILNAhtwSQXC uI87eBiZmd+5gceaPtArZl25VoJDvgkobMzVbsLEM2qxYO0orJpXtaOo2llTt6d8 0nd+KW7E52sxmWSQwp8zigCbKqQSfDyPQcBal38MxO8T9PXUsnk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:35 2026 by rpki-client