$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: C2UYh8PHpXfT6hfBuhN6M75/TSHEsh4Lyacp7Gwfn5A= Subject key identifier: 84:D9:7A:FD:C9:57:EE:7A:C9:A2:26:A4:C6:A4:14:66:70:B4:A3:4D Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 2F3AE7E716F4DE43B90BBFB05170F117C9F1815D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: E3 Signing time: Wed 22 Apr 2026 01:21:36 +0000 Manifest this update: Wed 22 Apr 2026 01:16:36 +0000 Manifest next update: Sat 25 Apr 2026 08:05:36 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 2: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: qYRMXjzkKBgVTVYawOc6iyCg59TykKGWYMi+YJxDgBA=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3a:e7:e7:16:f4:de:43:b9:0b:bf:b0:51:70:f1:17:c9:f1:81:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Apr 22 01:16:36 2026 GMT Not After : Apr 25 08:05:36 2026 GMT Subject: CN=84D97AFDC957EE7AC9A226A4C6A4146670B4A34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:c3:03:7d:92:0f:3c:5e:ac:dd:68:55:5a: 8e:1d:24:b0:e7:9d:f7:41:13:a2:31:14:73:09:ac: 3d:1b:73:a1:c7:b9:c9:d9:5f:ac:31:aa:2b:ca:a7: 5a:d3:bf:3f:7f:24:d0:dc:00:e8:11:59:61:34:d2: a9:5c:c3:84:ba:e3:93:54:b4:83:2b:a7:f9:90:04: 81:2e:98:62:05:e5:25:fc:a6:04:7f:da:15:5c:fa: 01:8b:2e:ed:d3:fb:a3:0a:53:4b:5b:91:d5:b6:c4: 46:0b:41:00:45:6a:0d:dc:0c:49:0e:48:e4:f6:66: 05:9d:35:0a:b8:24:e9:c4:1b:82:8f:f5:06:11:06: e7:84:bb:92:5e:73:8d:70:69:a1:b5:43:5a:5f:52: 0d:69:a6:b7:ca:56:25:bb:38:15:e9:86:b8:8b:b3: e4:fa:e3:62:9d:a1:37:9f:fd:eb:53:62:67:b5:46: 4c:03:8f:bc:ef:af:07:d6:4a:71:91:41:5f:78:63: 6a:2f:5c:fe:a8:f6:00:fd:81:bc:94:58:71:9e:54: 6c:40:a6:45:1d:09:75:f3:86:ed:59:13:48:c9:cb: 79:0e:6d:c5:11:24:06:c4:17:78:bb:bb:98:76:ad: 21:53:1e:fa:bb:23:c7:cd:ce:68:e1:53:6a:e3:a3: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:7A:FD:C9:57:EE:7A:C9:A2:26:A4:C6:A4:14:66:70:B4:A3:4D X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:36:64:38:59:df:9e:9e:54:7d:3d:75:82:68:39:21:e0:c8: 05:24:4b:79:3b:87:19:9a:42:39:d5:55:f1:15:b1:61:01:a9: 03:94:99:8f:52:db:43:08:53:30:88:9e:ce:38:e0:f3:3c:4b: a1:14:73:31:63:17:26:2a:75:99:03:fb:ad:4f:6b:4a:5f:b1: d7:6a:8d:a3:71:b6:93:84:cf:8d:87:1b:43:bb:71:93:cf:f6: 9d:c5:c5:d4:61:a3:02:7e:9c:0f:0b:07:dc:d7:d2:ac:ab:0f: fc:db:8e:67:85:09:d3:1e:0f:17:89:c4:99:5c:e5:66:35:5a: c7:b9:be:e5:3b:1e:e2:fc:74:f2:65:96:e2:0f:6e:e9:d3:5a: 3e:1e:59:f3:02:b7:8c:60:84:b9:bf:ca:f0:80:2b:2e:c8:58: 77:78:a6:3b:eb:9d:15:0d:79:18:08:3b:12:d5:f6:1e:d7:bb: 94:53:96:c8:88:e0:d8:79:ac:4f:53:e3:1f:21:15:2a:0a:55: 88:81:bc:13:34:f1:1a:cd:65:33:57:d3:99:8b:4c:30:f2:5f: bf:cf:f3:03:56:95:23:fc:59:39:cd:ec:a0:d9:5b:f6:36:fd: 56:d2:d1:a3:ca:06:7e:be:1e:ac:e4:96:25:4e:0b:31:27:3c: fa:44:14:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzrn5xb03kO5C7+wUXDxF8nxgV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNjA0MjIwMTE2MzZaFw0yNjA0MjUwODA1MzZaMDMxMTAvBgNV BAMTKDg0RDk3QUZEQzk1N0VFN0FDOUEyMjZBNEM2QTQxNDY2NzBCNEEzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrMMDfZIPPF6s3WhVWo4dJLDn nfdBE6IxFHMJrD0bc6HHucnZX6wxqivKp1rTvz9/JNDcAOgRWWE00qlcw4S645NU tIMrp/mQBIEumGIF5SX8pgR/2hVc+gGLLu3T+6MKU0tbkdW2xEYLQQBFag3cDEkO SOT2ZgWdNQq4JOnEG4KP9QYRBueEu5Jec41waaG1Q1pfUg1pprfKViW7OBXphriL s+T642KdoTef/etTYme1RkwDj7zvrwfWSnGRQV94Y2ovXP6o9gD9gbyUWHGeVGxA pkUdCXXzhu1ZE0jJy3kObcURJAbEF3i7u5h2rSFTHvq7I8fNzmjhU2rjo2S9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNl6/clX7nrJoiakxqQUZnC0o00wHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs2ZDhZ356eVH09dYJoOSHgyAUkS3k7hxma QjnVVfEVsWEBqQOUmY9S20MIUzCIns444PM8S6EUczFjFyYqdZkD+61Pa0pfsddq jaNxtpOEz42HG0O7cZPP9p3FxdRhowJ+nA8LB9zX0qyrD/zbjmeFCdMeDxeJxJlc 5WY1Wse5vuU7HuL8dPJlluIPbunTWj4eWfMCt4xghLm/yvCAKy7IWHd4pjvrnRUN eRgIOxLV9h7Xu5RTlsiI4Nh5rE9T4x8hFSoKVYiBvBM08RrNZTNX05mLTDDyX7/P 8wNWlSP8WTnN7KDZW/Y2/VbS0aPKBn6+HqzkliVOCzEnPPpEFDE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client