$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: vT2ifD9jZaABbNuxzk/f6lgeAOvPMf2EXVOIrggWPVY= Subject key identifier: 0E:92:EF:FD:44:00:3D:DF:40:F8:43:09:1D:4F:8E:83:A9:B5:FE:03 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 3F875880349FAD7B6948883BA97700F7D20B35AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0264 Signing time: Sun 05 Apr 2026 10:21:02 +0000 Manifest this update: Sun 05 Apr 2026 10:16:02 +0000 Manifest next update: Wed 08 Apr 2026 17:48:02 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: tg7oTYGEZ2y6EAZnzLfwX6fiXnxgi/X70lPZSwsCDsU=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: YgwvhFHSihevC6Or/zMWrLruegskTtpRyUGRN9h2D7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 17:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:87:58:80:34:9f:ad:7b:69:48:88:3b:a9:77:00:f7:d2:0b:35:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Apr 5 10:16:02 2026 GMT Not After : Apr 8 17:48:02 2026 GMT Subject: CN=0E92EFFD44003DDF40F843091D4F8E83A9B5FE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:13:d0:e4:bc:d6:21:b7:b5:51:89:89:2d: 76:84:a6:95:0e:94:27:80:58:12:09:4b:42:74:4a: 68:c3:83:a1:05:d1:b4:76:fb:14:a3:91:24:2f:f9: 4f:99:e7:52:ea:56:0d:8c:55:89:fb:e8:17:36:71: 18:cb:b1:8c:62:fc:51:5e:63:0c:51:2e:bc:bd:d0: 8e:8a:fd:5d:86:b5:33:b4:85:e1:ea:b8:df:78:51: 5a:de:99:54:6b:2e:bc:c4:55:62:30:4a:de:c6:74: 8e:0c:2f:ae:04:71:15:a7:02:b6:0d:b4:66:4d:62: 00:70:e5:02:3e:36:24:20:f5:a0:be:f8:21:dc:bd: 4e:c4:74:c1:cc:5d:f0:59:a0:12:a5:01:26:48:ca: 9b:4f:4f:85:51:b4:44:94:c6:0e:df:21:38:d0:7e: 4f:57:84:0b:84:4d:b3:b6:d7:30:5c:ee:ae:8f:7a: fe:41:f1:6c:b6:fe:e4:3b:37:1f:f5:7e:46:92:75: ae:6b:cb:9d:78:52:49:a9:f1:df:a1:02:dd:93:57: cf:75:fb:ec:61:94:b4:d0:fb:07:1e:d5:5c:14:20: fd:a6:df:b1:e9:b0:6f:b3:a5:bc:73:47:9d:5e:0d: 69:29:41:45:18:9e:29:8b:6c:9e:0f:b0:82:b4:ac: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:92:EF:FD:44:00:3D:DF:40:F8:43:09:1D:4F:8E:83:A9:B5:FE:03 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:da:3d:c0:ff:0e:83:c4:7c:2f:1b:00:62:a2:15:ac:93: 69:80:af:ce:e7:2f:ff:45:a8:6b:ac:32:30:5f:0a:2f:47:5c: dd:5d:6a:83:55:60:f3:c0:e4:f6:e7:91:42:57:cc:05:66:27: a1:b4:91:02:09:6c:6d:15:24:c8:c4:f9:2c:61:bf:e7:32:a8: 31:58:07:49:65:5c:3a:27:90:eb:5a:bd:69:0d:f3:23:25:cc: dc:72:a6:7f:f8:17:f5:e0:9a:09:53:61:65:71:b9:d0:52:3e: 4e:0a:1e:23:89:99:21:e2:4b:1b:7e:16:34:52:b1:ac:6d:cb: a5:af:16:1e:96:20:fd:5c:79:54:a3:0f:6c:51:83:a1:cc:c0: 10:c9:63:30:48:c7:9d:c8:37:d4:37:e6:7a:1e:14:b6:c7:b5: f3:27:e2:24:19:30:e5:bf:df:81:42:7f:27:a5:c2:f2:11:36: bc:99:02:e4:f0:14:9c:74:90:10:bd:c1:e2:62:e5:ae:b6:cc: 91:6f:5c:ae:ec:ee:45:97:c6:36:6b:03:fa:da:9f:d7:8a:54: fd:83:82:83:72:e9:94:bb:3c:32:f9:29:ed:db:7c:33:f4:05: ee:95:7c:dc:ba:26:04:40:d1:7a:61:31:a6:4a:09:30:71:af: dc:ae:9b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4dYgDSfrXtpSIg7qXcA99ILNawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNjA0MDUxMDE2MDJaFw0yNjA0MDgxNzQ4MDJaMDMxMTAvBgNV BAMTKDBFOTJFRkZENDQwMDNEREY0MEY4NDMwOTFENEY4RTgzQTlCNUZFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABBPQ5LzWIbe1UYmJLXaEppUO lCeAWBIJS0J0SmjDg6EF0bR2+xSjkSQv+U+Z51LqVg2MVYn76Bc2cRjLsYxi/FFe YwxRLry90I6K/V2GtTO0heHquN94UVremVRrLrzEVWIwSt7GdI4ML64EcRWnArYN tGZNYgBw5QI+NiQg9aC++CHcvU7EdMHMXfBZoBKlASZIyptPT4VRtESUxg7fITjQ fk9XhAuETbO21zBc7q6Pev5B8Wy2/uQ7Nx/1fkaSda5ry514Ukmp8d+hAt2TV891 ++xhlLTQ+wce1VwUIP2m37HpsG+zpbxzR51eDWkpQUUYnimLbJ4PsIK0rFfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpLv/UQAPd9A+EMJHU+Og6m1/gMwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAw2j3A/w6DxHwvGwBiohWsk2mAr87nL/9F qGusMjBfCi9HXN1daoNVYPPA5PbnkUJXzAVmJ6G0kQIJbG0VJMjE+Sxhv+cyqDFY B0llXDonkOtavWkN8yMlzNxypn/4F/XgmglTYWVxudBSPk4KHiOJmSHiSxt+FjRS saxty6WvFh6WIP1ceVSjD2xRg6HMwBDJYzBIx53IN9Q35noeFLbHtfMn4iQZMOW/ 34FCfyelwvIRNryZAuTwFJx0kBC9weJi5a62zJFvXK7s7kWXxjZrA/ran9eKVP2D goNy6ZS7PDL5Ke3bfDP0Be6VfNy6JgRA0XphMaZKCTBxr9yum4U= -----END CERTIFICATE-----Generated at Mon Apr 6 20:20:41 2026 by rpki-client