$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: 186tKyznvXHovKYUt0nixI+Tiz7hYq9MYyNXd2MF3Ds= Subject key identifier: 81:E1:38:BC:69:B5:6D:28:8F:C8:FE:AA:4C:82:BA:0F:A9:A4:D1:46 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 082EA559B147AC92C9D71F59FAEEC1057C58C1B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 028C Signing time: Sun 19 Apr 2026 04:51:39 +0000 Manifest this update: Sun 19 Apr 2026 04:46:39 +0000 Manifest next update: Wed 22 Apr 2026 08:13:39 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: ipRA0nBbNZIt4GqlIvJWYWpsIvvXXMqj7Vdue163EPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2e:a5:59:b1:47:ac:92:c9:d7:1f:59:fa:ee:c1:05:7c:58:c1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Apr 19 04:46:39 2026 GMT Not After : Apr 22 08:13:39 2026 GMT Subject: CN=81E138BC69B56D288FC8FEAA4C82BA0FA9A4D146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:2b:fb:39:b1:6b:c6:31:33:28:fb:90:4f: 92:d6:1b:bb:05:7c:ce:dc:2e:8c:95:08:be:8b:99: 19:53:36:b1:8a:36:17:cd:c9:54:82:43:34:4a:43: 1a:04:08:6b:c4:ad:aa:6d:04:af:51:44:a4:53:b6: bd:f4:36:1c:76:6a:55:de:5b:4f:bd:8e:a0:9f:79: 6b:a7:3e:74:5b:d7:41:2f:be:d4:15:01:07:a9:21: 33:87:61:ce:ec:28:bb:de:55:47:54:c0:e4:22:b6: d1:37:6f:63:46:ed:1c:1f:40:95:d4:c1:97:34:76: 8f:ab:10:9e:7f:03:d4:5b:85:0f:44:6c:18:53:df: 22:29:d5:1a:87:2f:04:92:d9:9f:81:d0:9d:2d:82: fd:44:4e:a3:e8:8f:58:c6:d0:7e:2d:a5:46:8f:9f: 0e:71:fd:15:c5:de:c3:a9:28:6b:63:7c:ed:fa:0c: f2:80:1d:29:0d:07:06:8c:2a:5c:ae:83:cc:9f:e3: 94:4a:68:3a:06:2f:ed:96:97:af:47:70:0f:5b:1b: 62:c4:c9:1f:a6:fe:3b:5e:6d:ca:2b:35:43:61:ca: 89:f1:de:44:54:ff:ba:ed:17:6d:36:d6:1c:28:ca: ae:96:95:9f:8d:1a:53:c4:f5:58:61:cb:3b:cc:88: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E1:38:BC:69:B5:6D:28:8F:C8:FE:AA:4C:82:BA:0F:A9:A4:D1:46 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b7:61:7b:c4:17:69:83:14:e5:70:ae:78:6d:87:5f:97:e0: ba:7e:f2:83:90:43:cf:ce:e1:88:39:01:cf:29:e8:83:97:0e: ac:55:ad:4b:ad:09:55:58:54:8b:b9:1e:fc:7d:23:b1:38:80: eb:c7:99:dc:2f:15:56:dd:3c:b0:9d:df:1a:9c:4d:cc:47:4a: e4:db:a2:ad:b1:98:68:d3:33:e5:39:2e:94:20:cf:74:aa:1a: 89:e2:a1:a5:30:ac:dc:85:41:ac:8e:b7:bb:aa:21:01:af:16: 9f:6c:c3:ef:f1:95:fd:b9:00:9b:7b:12:1c:4e:53:cb:38:b8: a1:3c:3d:05:8f:f8:9f:e8:93:5c:8b:27:f5:fc:79:96:4d:c9: ea:18:b8:52:48:e9:01:2e:7d:73:a8:2b:bb:3c:cc:ae:d2:c9: 26:06:ab:fc:4d:43:07:15:12:6a:fa:6f:12:20:fe:bf:80:06: c5:2d:8a:e4:83:d3:31:f6:26:c0:41:f3:6f:42:14:c2:bb:a0: e2:19:31:87:10:99:9d:f5:fa:93:1d:50:e0:6a:86:e7:cf:88: e9:f0:98:d5:b2:73:c0:10:1f:bd:80:c0:9c:f6:de:5e:8a:ae: 6b:a7:15:3f:99:06:ae:72:df:a1:77:2b:5c:f6:eb:f3:24:1a: ef:d7:d8:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCC6lWbFHrJLJ1x9Z+u7BBXxYwbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNjA0MTkwNDQ2MzlaFw0yNjA0MjIwODEzMzlaMDMxMTAvBgNV BAMTKDgxRTEzOEJDNjlCNTZEMjg4RkM4RkVBQTRDODJCQTBGQTlBNEQxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGCv7ObFrxjEzKPuQT5LWG7sF fM7cLoyVCL6LmRlTNrGKNhfNyVSCQzRKQxoECGvEraptBK9RRKRTtr30Nhx2alXe W0+9jqCfeWunPnRb10EvvtQVAQepITOHYc7sKLveVUdUwOQittE3b2NG7RwfQJXU wZc0do+rEJ5/A9RbhQ9EbBhT3yIp1RqHLwSS2Z+B0J0tgv1ETqPoj1jG0H4tpUaP nw5x/RXF3sOpKGtjfO36DPKAHSkNBwaMKlyug8yf45RKaDoGL+2Wl69HcA9bG2LE yR+m/jtebcorNUNhyonx3kRU/7rtF2021hwoyq6WlZ+NGlPE9VhhyzvMiIRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeE4vGm1bSiPyP6qTIK6D6mk0UYwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS3YXvEF2mDFOVwrnhth1+X4Lp+8oOQQ8/O 4Yg5Ac8p6IOXDqxVrUutCVVYVIu5Hvx9I7E4gOvHmdwvFVbdPLCd3xqcTcxHSuTb oq2xmGjTM+U5LpQgz3SqGonioaUwrNyFQayOt7uqIQGvFp9sw+/xlf25AJt7EhxO U8s4uKE8PQWP+J/ok1yLJ/X8eZZNyeoYuFJI6QEufXOoK7s8zK7SySYGq/xNQwcV Emr6bxIg/r+ABsUtiuSD0zH2JsBB829CFMK7oOIZMYcQmZ31+pMdUOBqhufPiOnw mNWyc8AQH72AwJz23l6KrmunFT+ZBq5y36F3K1z26/MkGu/X2M0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:16 2026 by rpki-client