$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: vGKK7HLnHnIlq9cX8U2wWeKqr1aN3EmzQ6OwxMtnA64= Subject key identifier: F5:5E:09:65:C6:81:DF:3B:F0:7F:D3:A0:51:91:0C:F7:37:71:A6:66 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 314FA1B3621C6769027A962F87F5C62530374227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 0254 Signing time: Sat 18 Apr 2026 09:12:14 +0000 Manifest this update: Sat 18 Apr 2026 09:07:14 +0000 Manifest next update: Tue 21 Apr 2026 10:46:14 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: b7FqB0xnLoy10uxDyqxfOeqQG7wfs10T7eLD3iI4JN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:a1:b3:62:1c:67:69:02:7a:96:2f:87:f5:c6:25:30:37:42:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Apr 18 09:07:14 2026 GMT Not After : Apr 21 10:46:14 2026 GMT Subject: CN=F55E0965C681DF3BF07FD3A051910CF73771A666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:78:61:7d:b5:5d:68:6c:85:7e:eb:a7:27: 2b:54:a0:29:44:19:40:40:e8:9c:4c:cf:dd:c2:d1: 9c:29:cc:b1:06:5c:2c:65:ec:0c:b0:26:fe:21:a9: 70:01:d0:80:9d:19:5e:6f:82:af:a7:a6:f0:65:b1: 1d:54:d1:7d:d0:bd:c9:e2:c4:d3:95:d8:9b:b3:4b: fa:92:9f:b0:b3:2c:a7:7e:66:6d:8d:9f:ea:a4:7e: a0:56:fc:b5:36:5e:f4:9d:0b:06:67:da:ee:23:5f: ec:42:b4:56:c8:f7:c0:8f:6a:f9:77:1a:fa:d3:17: 75:4e:fa:4f:9f:60:14:06:3f:47:a6:4f:57:97:6d: b1:74:8f:90:81:44:fc:26:9e:ca:44:ea:5d:2c:b9: 7c:2c:6e:79:bd:55:cf:12:e6:d4:24:50:94:78:62: d9:68:39:a9:82:cc:98:1c:9d:a2:34:54:e6:db:6c: 66:34:f0:fd:d9:ae:68:8e:32:c2:82:51:f8:ae:c5: 59:fd:72:7e:51:45:45:91:9d:43:6c:bc:02:8a:de: dd:12:40:7c:c5:ca:ca:ad:1c:84:8b:b3:8e:87:25: 3f:66:37:4a:87:58:42:93:be:77:d4:44:59:47:8d: e0:83:ee:84:e7:49:55:21:b0:38:2e:1d:5a:bb:88: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5E:09:65:C6:81:DF:3B:F0:7F:D3:A0:51:91:0C:F7:37:71:A6:66 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c0:86:8f:de:61:af:5b:ba:66:02:88:85:00:de:f0:e4:fb: 17:6f:60:a8:cf:2c:9d:0f:02:42:69:1c:ed:4a:cd:68:94:fe: 77:49:da:d7:b4:48:81:12:0e:61:da:b6:e3:9a:4e:21:39:82: b3:c6:9f:97:63:29:5e:84:ba:0a:3f:95:bf:0e:3f:1c:6c:f0: a1:4c:48:ba:00:31:51:bf:7f:b5:fb:25:05:fb:e8:83:52:e8: 1f:64:3d:bd:d5:eb:06:00:a7:10:04:67:e6:73:08:d0:4e:f0: f6:4e:26:ee:10:1f:fd:07:ad:99:85:f5:03:ec:2a:65:e5:82: 8c:3a:7e:b3:e6:35:29:d0:fc:57:26:68:0b:72:09:c3:f0:19: c4:3b:7e:03:a3:cb:ee:2d:1b:1a:41:0d:2d:9e:d5:7f:ef:2d: 0d:df:8c:11:1e:03:eb:ec:ba:23:94:ca:eb:7f:c1:79:53:64: b5:3c:8c:6f:07:13:69:5a:49:8e:b5:bd:af:ec:4b:1f:1c:cb: bd:e9:16:eb:f2:8d:55:7d:be:ba:d7:40:49:8e:d2:69:1f:24: 8e:89:47:3d:14:55:9d:f8:51:9d:1b:ee:1d:aa:6f:e0:b2:3d: 71:f2:14:09:4c:41:88:da:d5:49:87:e6:30:26:81:20:4d:c4: a8:bf:d8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMU+hs2IcZ2kCepYvh/XGJTA3QicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNjA0MTgwOTA3MTRaFw0yNjA0MjExMDQ2MTRaMDMxMTAvBgNV BAMTKEY1NUUwOTY1QzY4MURGM0JGMDdGRDNBMDUxOTEwQ0Y3Mzc3MUE2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1XhhfbVdaGyFfuunJytUoClE GUBA6JxMz93C0ZwpzLEGXCxl7AywJv4hqXAB0ICdGV5vgq+npvBlsR1U0X3Qvcni xNOV2JuzS/qSn7CzLKd+Zm2Nn+qkfqBW/LU2XvSdCwZn2u4jX+xCtFbI98CPavl3 GvrTF3VO+k+fYBQGP0emT1eXbbF0j5CBRPwmnspE6l0suXwsbnm9Vc8S5tQkUJR4 YtloOamCzJgcnaI0VObbbGY08P3ZrmiOMsKCUfiuxVn9cn5RRUWRnUNsvAKK3t0S QHzFysqtHISLs46HJT9mN0qHWEKTvnfURFlHjeCD7oTnSVUhsDguHVq7iNRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9V4JZcaB3zvwf9OgUZEM9zdxpmYwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzAho/eYa9bumYCiIUA3vDk+xdvYKjPLJ0P AkJpHO1KzWiU/ndJ2te0SIESDmHatuOaTiE5grPGn5djKV6Eugo/lb8OPxxs8KFM SLoAMVG/f7X7JQX76INS6B9kPb3V6wYApxAEZ+ZzCNBO8PZOJu4QH/0HrZmF9QPs KmXlgow6frPmNSnQ/FcmaAtyCcPwGcQ7fgOjy+4tGxpBDS2e1X/vLQ3fjBEeA+vs uiOUyut/wXlTZLU8jG8HE2laSY61va/sSx8cy73pFuvyjVV9vrrXQEmO0mkfJI6J Rz0UVZ34UZ0b7h2qb+CyPXHyFAlMQYja1UmH5jAmgSBNxKi/2PQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:36 2026 by rpki-client