$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: Q8OR9xkN8jItlN1MFzQObiWt0PpT4rZHTQ71QdLvHs0= Subject key identifier: 17:BD:28:C5:3A:FD:F7:E1:9C:E4:9F:71:24:23:6F:73:63:57:B4:A7 Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 1F0453762042FADF281352E9A1D9AA2172645A4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 01DB Signing time: Sat 18 Apr 2026 18:41:21 +0000 Manifest this update: Sat 18 Apr 2026 18:36:21 +0000 Manifest next update: Tue 21 Apr 2026 19:57:21 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: ZJfVWgPPasR0PrR54WmRM7XWRnbuFJ657/Kcz/zWpkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:04:53:76:20:42:fa:df:28:13:52:e9:a1:d9:aa:21:72:64:5a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Apr 18 18:36:21 2026 GMT Not After : Apr 21 19:57:21 2026 GMT Subject: CN=17BD28C53AFDF7E19CE49F7124236F736357B4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:d7:d9:28:39:0e:e1:d8:d2:3d:a3:71:ad: 39:f5:a0:e1:f7:0c:8b:e5:4d:1e:0d:ec:4e:9f:0c: 7a:8e:9f:24:09:2c:ac:c4:f5:e9:da:f2:a0:cc:7a: ba:3b:1d:a0:03:03:13:20:78:76:0d:43:d3:0f:9f: be:04:48:be:92:4f:70:cc:41:51:45:bf:af:1e:21: 3c:97:33:90:2e:0b:ed:18:1a:d5:b8:8c:37:52:2a: 6d:26:aa:51:e5:a2:ec:cd:5a:c1:5e:b6:2c:e4:98: 43:81:bd:3e:31:b2:0c:a6:e0:c7:eb:b2:99:ba:24: 0b:1e:96:d0:f2:c1:ad:dc:0e:70:cb:37:30:2d:7e: b4:74:d7:8f:62:7b:8e:26:14:59:c3:8e:af:f4:fc: d7:84:f3:91:83:96:69:4f:ff:a3:9f:02:a1:e5:cf: a7:b2:31:bf:9e:42:86:3a:49:ff:24:ba:48:70:bf: 70:29:f9:fc:6b:80:4a:64:e4:c1:0c:b9:88:57:7a: 01:6d:a3:4f:0c:cd:68:49:92:71:d3:a6:56:6e:49: fe:b7:a4:f1:83:62:04:20:a2:70:4e:f4:38:da:c0: 3f:f1:ab:a1:c1:20:a5:08:3e:9e:97:03:9a:46:4d: 43:4e:2b:36:79:2b:6a:32:45:a5:d1:2e:a1:fa:02: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:28:C5:3A:FD:F7:E1:9C:E4:9F:71:24:23:6F:73:63:57:B4:A7 X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:56:c6:ea:36:0d:10:4c:bd:a2:67:28:d0:38:3b:5d:7a:f7: a1:85:f0:f4:21:d7:17:29:d5:73:39:50:2a:08:e6:28:9f:e1: e5:a4:05:99:58:49:fe:7d:9f:76:cc:96:7f:23:5b:ab:1a:3b: 47:a3:21:35:9c:c3:f5:4e:d2:8d:a0:de:36:2c:3d:3a:8f:58: 47:98:1d:f1:c5:e7:8a:db:28:8b:86:be:76:2e:b3:34:d5:5a: b7:65:e0:7f:47:04:11:45:26:d0:7e:00:ea:69:25:f4:9a:eb: af:eb:b1:e4:f8:27:39:bc:41:60:ca:7b:a3:7e:61:19:be:04: 23:ef:09:86:e7:27:c7:22:9d:09:d5:60:c7:50:aa:ea:f7:d3: c3:a5:4d:f2:c1:00:2b:e2:4f:3c:4d:19:30:5e:7d:9b:24:bd: e9:07:b9:cc:63:7d:ae:2e:43:e8:8a:e9:28:25:92:33:89:f9: 52:63:67:2b:18:06:04:a6:68:49:af:c7:a1:27:59:ec:85:74: 62:ab:79:98:eb:d3:b3:44:18:e0:a8:bc:9b:81:4b:1f:f0:25: 9a:d9:95:23:34:35:2d:41:0a:8c:31:68:80:ec:fa:13:e6:d8: 1e:8e:4b:6f:a2:1d:f0:59:bb:ec:bb:17:87:3f:52:16:19:57: 0e:6e:da:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwRTdiBC+t8oE1LpodmqIXJkWkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNjA0MTgxODM2MjFaFw0yNjA0MjExOTU3MjFaMDMxMTAvBgNV BAMTKDE3QkQyOEM1M0FGREY3RTE5Q0U0OUY3MTI0MjM2RjczNjM1N0I0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKNfZKDkO4djSPaNxrTn1oOH3 DIvlTR4N7E6fDHqOnyQJLKzE9ena8qDMero7HaADAxMgeHYNQ9MPn74ESL6ST3DM QVFFv68eITyXM5AuC+0YGtW4jDdSKm0mqlHlouzNWsFetizkmEOBvT4xsgym4Mfr spm6JAseltDywa3cDnDLNzAtfrR0149ie44mFFnDjq/0/NeE85GDlmlP/6OfAqHl z6eyMb+eQoY6Sf8kukhwv3Ap+fxrgEpk5MEMuYhXegFto08MzWhJknHTplZuSf63 pPGDYgQgonBO9DjawD/xq6HBIKUIPp6XA5pGTUNOKzZ5K2oyRaXRLqH6AscbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF70oxTr99+Gc5J9xJCNvc2NXtKcwHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdWxuo2DRBMvaJnKNA4O11696GF8PQh1xcp 1XM5UCoI5iif4eWkBZlYSf59n3bMln8jW6saO0ejITWcw/VO0o2g3jYsPTqPWEeY HfHF54rbKIuGvnYuszTVWrdl4H9HBBFFJtB+AOppJfSa66/rseT4Jzm8QWDKe6N+ YRm+BCPvCYbnJ8cinQnVYMdQqur308OlTfLBACviTzxNGTBefZskvekHucxjfa4u Q+iK6SglkjOJ+VJjZysYBgSmaEmvx6EnWeyFdGKreZjr07NEGOCovJuBSx/wJZrZ lSM0NS1BCowxaIDs+hPm2B6OS2+iHfBZu+y7F4c/UhYZVw5u2g0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:43 2026 by rpki-client