$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: Gp03d8XClkL+bPdlfnHJUBSYo/kNy8H91P0lk6o/oHk= Subject key identifier: AB:BA:3F:15:6C:FD:87:DE:AF:81:04:ED:8A:79:41:12:D6:C4:44:E3 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 2ECB4DBC21E8ECA75E7CDC46F956F3B0487D8C43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 01EC Signing time: Mon 20 Apr 2026 02:41:58 +0000 Manifest this update: Mon 20 Apr 2026 02:36:58 +0000 Manifest next update: Thu 23 Apr 2026 14:13:58 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: MmM/AmJ5iBEGomeELARot8UaIBt4udal5VcH4vgwZsk=) 2: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: qSQhIvtzt2iYYPIDzRU6buyh3/pU0MlhuvfIcpAkQhs=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: hOjIzzaF41h+bbc91vBslhua7MJ7/Ep9kVdxucTN/i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cb:4d:bc:21:e8:ec:a7:5e:7c:dc:46:f9:56:f3:b0:48:7d:8c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Apr 20 02:36:58 2026 GMT Not After : Apr 23 14:13:58 2026 GMT Subject: CN=ABBA3F156CFD87DEAF8104ED8A794112D6C444E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:eb:13:3b:ad:5f:41:68:30:3d:5f:d1:e9: 2d:dc:7f:24:85:62:19:13:d9:03:2a:dc:c2:b7:d2: b0:e1:40:ae:ad:d3:6e:8d:fd:a9:2c:fd:53:9f:f4: d0:9e:b6:54:31:7f:2c:5a:5d:ca:ed:f3:4e:a2:55: b4:b4:16:ff:c3:3b:ea:ee:22:4d:c4:f6:61:54:dd: c1:ec:ed:3b:3f:84:d3:59:44:f0:04:59:1d:cf:00: 64:d9:f3:a8:bc:a0:3e:93:7b:b6:9c:d3:bf:a3:46: 90:24:c1:b3:ac:16:3d:fc:42:cf:c8:74:e2:5d:e8: 85:ca:bc:d5:c7:df:45:2b:ba:86:a6:7d:61:77:8f: e6:ce:e3:3d:0c:15:b7:74:4f:2c:64:cb:44:ad:bd: ed:0d:9d:fd:c1:f8:b2:6c:64:b5:69:5f:c6:69:2f: 8a:b3:fb:b6:da:ec:53:a5:9e:19:2e:ca:29:d5:26: 62:8d:59:9a:ff:e7:80:10:12:dc:c0:19:fd:da:a4: 88:d6:b4:dc:91:8a:ea:dc:c4:e4:93:72:61:68:ba: dd:3c:21:b3:85:03:6c:9d:64:4f:a0:94:c0:d6:9b: 72:a6:c5:22:52:42:6b:bb:b2:e0:97:a8:e5:c2:01: 5a:80:0a:c9:e7:38:36:2b:2d:e3:5f:ff:af:9d:ab: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BA:3F:15:6C:FD:87:DE:AF:81:04:ED:8A:79:41:12:D6:C4:44:E3 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:e5:cc:1e:c8:02:cb:69:37:a9:58:f3:f7:46:04:64:06: 78:43:09:38:b3:c8:97:a5:1d:4f:c6:7f:4c:a7:0a:f0:27:99: 3d:78:38:2e:4c:83:6c:29:fd:a0:b5:60:69:0c:23:44:75:d8: 9d:3b:32:a6:4c:32:1d:e0:37:63:f5:c7:aa:de:9d:85:30:4f: bc:8c:ee:ba:6d:aa:6d:42:46:9c:78:40:c7:33:58:3b:b2:25: 8c:64:96:c6:32:92:d8:cd:0f:21:62:41:4f:96:7c:3d:b4:de: 49:77:c4:b3:63:db:d7:ba:51:62:83:83:7e:1c:aa:21:6c:8f: cf:a6:d8:58:1e:11:ad:67:07:c9:0f:c8:74:b2:4b:5b:83:45: a0:a0:7d:c1:6b:6d:61:23:5b:f4:35:0b:18:1e:ae:d7:52:7e: 36:56:a1:50:3f:02:31:73:43:e5:d8:ac:da:18:90:c2:00:78: 45:f6:a7:e9:47:2c:bc:00:6a:1e:12:3d:36:5c:36:28:09:9f: 50:3c:5c:4e:09:f8:62:4f:66:ec:6f:f7:43:9d:92:8c:0c:99: fb:05:63:8c:dd:d9:08:40:79:fa:11:36:e1:cb:9b:7f:fa:1d: 38:7f:3b:1f:36:81:d9:69:74:e8:07:59:87:69:46:3f:78:c0: 19:14:f3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULstNvCHo7KdefNxG+VbzsEh9jEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNjA0MjAwMjM2NThaFw0yNjA0MjMxNDEzNThaMDMxMTAvBgNV BAMTKEFCQkEzRjE1NkNGRDg3REVBRjgxMDRFRDhBNzk0MTEyRDZDNDQ0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiusTO61fQWgwPV/R6S3cfySF YhkT2QMq3MK30rDhQK6t026N/aks/VOf9NCetlQxfyxaXcrt806iVbS0Fv/DO+ru Ik3E9mFU3cHs7Ts/hNNZRPAEWR3PAGTZ86i8oD6Te7ac07+jRpAkwbOsFj38Qs/I dOJd6IXKvNXH30UruoamfWF3j+bO4z0MFbd0Tyxky0Stve0Nnf3B+LJsZLVpX8Zp L4qz+7ba7FOlnhkuyinVJmKNWZr/54AQEtzAGf3apIjWtNyRiurcxOSTcmFout08 IbOFA2ydZE+glMDWm3KmxSJSQmu7suCXqOXCAVqACsnnODYrLeNf/6+dq3qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7o/FWz9h96vgQTtinlBEtbEROMwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5S5cweyALLaTepWPP3RgRkBnhDCTizyJel HU/Gf0ynCvAnmT14OC5Mg2wp/aC1YGkMI0R12J07MqZMMh3gN2P1x6renYUwT7yM 7rptqm1CRpx4QMczWDuyJYxklsYyktjNDyFiQU+WfD203kl3xLNj29e6UWKDg34c qiFsj8+m2FgeEa1nB8kPyHSyS1uDRaCgfcFrbWEjW/Q1CxgertdSfjZWoVA/AjFz Q+XYrNoYkMIAeEX2p+lHLLwAah4SPTZcNigJn1A8XE4J+GJPZuxv90OdkowMmfsF Y4zd2QhAefoRNuHLm3/6HTh/Ox82gdlpdOgHWYdpRj94wBkU80Q= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:47 2026 by rpki-client