$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: z73oWYqj3bbTiOfRaZwZ5GLsLhGm9zlFw61gKSgtoek= Subject key identifier: 41:FC:C9:93:2D:FE:09:AF:EA:8D:6B:4F:2D:22:AD:BB:78:F8:7F:99 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 28F0A807858F93487C5439E1D821D9C18B4FC229 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 0278 Signing time: Fri 17 Apr 2026 08:04:05 +0000 Manifest this update: Fri 17 Apr 2026 07:59:05 +0000 Manifest next update: Mon 20 Apr 2026 16:22:05 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: pDkJhrLGrBH3Dw+W/rZdudnRPtwTygAZ5X6bta7kvK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f0:a8:07:85:8f:93:48:7c:54:39:e1:d8:21:d9:c1:8b:4f:c2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Apr 17 07:59:05 2026 GMT Not After : Apr 20 16:22:05 2026 GMT Subject: CN=41FCC9932DFE09AFEA8D6B4F2D22ADBB78F87F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:49:1f:fe:65:e3:fb:3a:f4:01:d0:41:a6: 92:3b:b3:d5:56:2c:1e:99:c2:a7:d7:08:47:80:ee: 1a:86:a8:31:4e:11:73:98:28:5c:e6:24:c9:95:35: 19:e1:8a:c0:72:0c:11:6d:2d:a4:ac:68:ee:24:c5: 6c:91:63:30:ca:5b:68:79:44:02:f2:2d:25:04:26: 25:9e:8c:1e:5a:72:7e:1b:57:2c:4c:33:9e:59:52: ab:74:77:d1:c5:7a:aa:db:8e:b6:01:dc:49:7d:76: 2b:8d:45:f1:03:4d:7a:03:af:10:09:09:d5:38:8b: ee:de:94:8e:e6:ec:47:86:7f:2f:a7:26:71:9d:41: e0:27:ae:f6:85:3c:c1:ea:77:28:23:f7:e2:62:2c: f2:74:1c:dd:b7:9d:dc:48:90:5e:da:0c:2f:ec:73: e3:af:54:0f:c7:9d:42:f4:bc:b0:55:6d:4d:1f:94: 8e:b7:a6:f9:76:af:af:a1:4e:c9:5e:70:0a:64:8c: fb:21:9f:8b:aa:f6:b2:d0:39:73:4f:e7:cb:f7:96: 9f:42:90:dc:0c:df:43:68:a2:bb:f4:cb:90:38:93: 93:fc:9e:7b:72:32:48:f0:f2:b3:fe:af:3d:f6:d3: 6c:4e:3c:74:db:f0:2d:d1:8a:5d:ab:bb:53:62:b0: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:C9:93:2D:FE:09:AF:EA:8D:6B:4F:2D:22:AD:BB:78:F8:7F:99 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:26:69:b3:0d:24:6d:80:75:11:08:f8:3b:e7:af:d9:27:96: f5:0e:8f:0f:e5:cf:04:56:94:bb:7d:ba:81:88:cf:a7:0d:c7: bc:19:08:5e:5f:d0:16:9f:0a:b3:6f:c8:16:3f:8c:7e:9f:48: 34:ed:9d:97:64:9b:f4:7f:5e:4c:78:e7:73:bc:91:8d:18:be: 31:62:4d:15:55:94:b4:8c:26:ec:e5:be:1a:9e:21:15:ab:6d: 55:30:58:09:05:12:01:66:d6:0d:fc:1e:13:a5:66:a5:72:e2: 5f:8b:c3:f1:61:81:c0:cb:7b:13:fd:e6:55:8b:17:28:30:9f: 5e:3c:5a:ac:d9:bd:13:8d:32:c6:69:37:11:99:e7:bd:a6:cf: 49:5f:31:20:72:e6:6f:a7:86:ea:12:31:8d:01:6c:ee:eb:38: ec:bb:c6:7b:39:7f:ac:7c:6c:6c:c2:3a:80:99:8a:35:6f:9c: d5:13:29:6b:8f:f5:93:d1:36:b5:7a:02:dc:73:62:ed:47:d0: f4:72:34:63:f1:fa:72:9b:a5:ec:d0:00:45:9f:26:b2:e5:a3: 37:b3:00:8b:1d:ac:51:56:6d:c0:21:1a:90:b3:e6:23:e2:8a: d4:d0:e4:80:43:59:71:7b:4c:88:e3:90:b2:67:d0:c3:b8:88: eb:9b:cb:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPCoB4WPk0h8VDnh2CHZwYtPwikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNjA0MTcwNzU5MDVaFw0yNjA0MjAxNjIyMDVaMDMxMTAvBgNV BAMTKDQxRkNDOTkzMkRGRTA5QUZFQThENkI0RjJEMjJBREJCNzhGODdGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgoUkf/mXj+zr0AdBBppI7s9VW LB6ZwqfXCEeA7hqGqDFOEXOYKFzmJMmVNRnhisByDBFtLaSsaO4kxWyRYzDKW2h5 RALyLSUEJiWejB5acn4bVyxMM55ZUqt0d9HFeqrbjrYB3El9diuNRfEDTXoDrxAJ CdU4i+7elI7m7EeGfy+nJnGdQeAnrvaFPMHqdygj9+JiLPJ0HN23ndxIkF7aDC/s c+OvVA/HnUL0vLBVbU0flI63pvl2r6+hTslecApkjPshn4uq9rLQOXNP58v3lp9C kNwM30Noorv0y5A4k5P8nntyMkjw8rP+rz3202xOPHTb8C3Ril2ru1NisChPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfzJky3+Ca/qjWtPLSKtu3j4f5kwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEmabMNJG2AdREI+Dvnr9knlvUOjw/lzwRW lLt9uoGIz6cNx7wZCF5f0BafCrNvyBY/jH6fSDTtnZdkm/R/Xkx453O8kY0YvjFi TRVVlLSMJuzlvhqeIRWrbVUwWAkFEgFm1g38HhOlZqVy4l+Lw/FhgcDLexP95lWL Fygwn148WqzZvRONMsZpNxGZ572mz0lfMSBy5m+nhuoSMY0BbO7rOOy7xns5f6x8 bGzCOoCZijVvnNUTKWuP9ZPRNrV6AtxzYu1H0PRyNGPx+nKbpezQAEWfJrLlozez AIsdrFFWbcAhGpCz5iPiitTQ5IBDWXF7TIjjkLJn0MO4iOubyyI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:59 2026 by rpki-client