$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: hxKyEtTxNZfJS5wMG41nHDgJje7MMX2R6NQIhX6qz6c= Subject key identifier: BC:D2:81:34:67:1B:98:C5:3E:5F:AE:7E:24:A3:60:7B:F7:DD:9D:A5 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 0626FA6E3AEAE601A0CD03ECD4EF998A996284F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: ED Signing time: Tue 21 Apr 2026 20:11:18 +0000 Manifest this update: Tue 21 Apr 2026 20:06:18 +0000 Manifest next update: Sat 25 Apr 2026 01:01:18 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: wybtloNZFz96ndmqFNUO7+vrH/x0bjLnZvGidi+Clus=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:26:fa:6e:3a:ea:e6:01:a0:cd:03:ec:d4:ef:99:8a:99:62:84:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Apr 21 20:06:18 2026 GMT Not After : Apr 25 01:01:18 2026 GMT Subject: CN=BCD28134671B98C53E5FAE7E24A3607BF7DD9DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:33:0e:4d:e4:55:db:da:e8:04:05:a9:00: f9:46:a7:3f:bb:09:22:44:9f:f2:71:75:9a:fd:f6: 56:9d:3a:83:c9:13:80:1f:6c:bd:f7:32:13:ab:20: 3a:09:d9:37:36:5e:98:71:15:03:23:e9:c2:d8:1d: 2d:9e:1a:90:04:9a:f5:c2:72:b6:bc:2a:46:56:b8: b4:22:96:f2:56:fa:c6:08:f7:f9:89:66:a6:b3:e9: 53:7e:ae:23:0d:f9:3c:b8:bb:51:02:f9:ef:b8:6d: 62:84:97:8a:97:f3:fc:42:da:0d:dc:95:08:ed:44: 5f:dc:45:98:cf:aa:e8:fd:da:9e:28:9b:b6:35:e6: 81:7c:70:5d:27:f8:14:36:77:af:2d:14:5a:de:5a: 08:8e:6e:cd:e3:62:19:1f:60:d8:9f:6e:10:90:50: b9:06:33:45:84:7e:40:2f:59:b0:71:64:92:c4:d0: a3:66:56:cc:db:76:d9:cb:97:f4:d7:31:f4:d6:37: 5a:57:68:dd:f5:77:6d:c5:07:51:1d:64:b1:f5:a9: 1a:a7:7b:92:c1:2e:91:cb:0b:ae:80:76:04:e9:bd: 0e:58:10:7a:3f:2a:b9:da:19:ec:52:08:53:ac:8d: 17:24:04:c1:17:24:04:83:17:88:70:f5:00:14:e4: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:81:34:67:1B:98:C5:3E:5F:AE:7E:24:A3:60:7B:F7:DD:9D:A5 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ce:86:93:25:e5:22:63:73:2c:c8:20:39:5e:e5:b4:36:ac: 11:23:36:28:22:17:29:db:fe:d9:04:91:f2:ee:15:32:03:87: 8c:d6:a9:78:c6:e5:b6:d7:ac:59:ba:a1:8a:8d:53:da:7f:da: c9:da:ab:c3:30:6a:df:e1:10:ff:4d:17:38:3c:1b:a8:b4:49: f6:3f:29:2c:1e:36:93:16:4b:7e:6a:c7:71:82:6d:ba:4f:15: 32:d4:91:1b:82:fb:2c:8d:8d:f6:e6:11:e7:df:fc:71:2b:15: fb:87:01:1c:70:a4:64:cf:3b:c6:31:bb:51:59:68:b0:59:a2: 17:ef:3e:f3:e5:a6:f5:6c:36:81:dd:bd:e3:56:55:a7:d4:1c: cd:8a:9c:5e:58:d9:9f:6d:48:e8:bb:e8:8e:f8:19:49:21:73: db:ba:27:76:2a:ed:f3:28:44:ee:c2:d7:51:ee:aa:d2:d8:54: 1d:ae:81:b1:11:89:1e:aa:1f:c3:ea:a5:b2:74:54:63:b1:76: 10:08:03:dd:ca:1a:85:da:82:fd:56:fe:fb:01:e8:7a:b6:cb: 71:3f:a3:98:9b:5c:4b:f0:5f:0b:2e:5b:5d:0b:ce:41:7a:c6: 00:a1:c7:c3:fb:8f:49:05:30:8d:a0:6a:9f:bb:92:96:7c:b0: ba:25:0f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBib6bjrq5gGgzQPs1O+ZiplihPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjA0MjEyMDA2MThaFw0yNjA0MjUwMTAxMThaMDMxMTAvBgNV BAMTKEJDRDI4MTM0NjcxQjk4QzUzRTVGQUU3RTI0QTM2MDdCRjdERDlEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5TMOTeRV29roBAWpAPlGpz+7 CSJEn/JxdZr99ladOoPJE4AfbL33MhOrIDoJ2Tc2XphxFQMj6cLYHS2eGpAEmvXC cra8KkZWuLQilvJW+sYI9/mJZqaz6VN+riMN+Ty4u1EC+e+4bWKEl4qX8/xC2g3c lQjtRF/cRZjPquj92p4om7Y15oF8cF0n+BQ2d68tFFreWgiObs3jYhkfYNifbhCQ ULkGM0WEfkAvWbBxZJLE0KNmVszbdtnLl/TXMfTWN1pXaN31d23FB1EdZLH1qRqn e5LBLpHLC66AdgTpvQ5YEHo/KrnaGexSCFOsjRckBMEXJASDF4hw9QAU5BD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNKBNGcbmMU+X65+JKNge/fdnaUwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbOhpMl5SJjcyzIIDle5bQ2rBEjNigiFynb /tkEkfLuFTIDh4zWqXjG5bbXrFm6oYqNU9p/2snaq8Mwat/hEP9NFzg8G6i0SfY/ KSweNpMWS35qx3GCbbpPFTLUkRuC+yyNjfbmEeff/HErFfuHARxwpGTPO8Yxu1FZ aLBZohfvPvPlpvVsNoHdveNWVafUHM2KnF5Y2Z9tSOi76I74GUkhc9u6J3Yq7fMo RO7C11HuqtLYVB2ugbERiR6qH8PqpbJ0VGOxdhAIA93KGoXagv1W/vsB6Hq2y3E/ o5ibXEvwXwsuW10LzkF6xgChx8P7j0kFMI2gap+7kpZ8sLolD0w= -----END CERTIFICATE-----Generated at Wed Apr 22 10:26:31 2026 by rpki-client