$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: qFCFB0HpkbLB69V19CX8zLb8tsKYZlqNiDE9e4UaA2o= Subject key identifier: 06:7E:E9:69:6B:81:33:40:E2:62:64:DD:57:21:25:B4:EB:00:7A:03 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 7E56B7D1D800C567BCC63C303BF4FEC30380AB15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 018A Signing time: Sun 19 Apr 2026 04:32:39 +0000 Manifest this update: Sun 19 Apr 2026 04:27:39 +0000 Manifest next update: Wed 22 Apr 2026 14:09:39 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: r6yfOGHNaA3Mwcm9w/UshOTHstZTWGlu8VYuc8PS8Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:56:b7:d1:d8:00:c5:67:bc:c6:3c:30:3b:f4:fe:c3:03:80:ab:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Apr 19 04:27:39 2026 GMT Not After : Apr 22 14:09:39 2026 GMT Subject: CN=067EE9696B813340E26264DD572125B4EB007A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:ea:50:79:23:8e:73:ee:8c:8b:c4:8c:02: ff:ab:69:60:02:f5:35:c5:2e:8a:a1:66:d5:99:12: cf:e3:d9:9f:f8:35:34:d4:ca:b3:28:fc:01:17:16: 65:5e:cd:30:ff:cf:df:62:f6:07:8d:91:bd:39:2d: b8:0b:4b:64:2f:63:ff:14:da:45:10:19:91:71:c2: 9b:67:63:d0:a4:49:42:70:c3:6d:72:c9:25:23:4e: c8:ca:8a:4a:9d:63:7b:9b:2f:8c:21:ea:c2:59:c9: 11:e8:68:18:90:a8:89:8d:8a:6f:2d:fd:5b:e3:ed: e7:73:31:03:1d:2e:de:6f:8c:43:47:b6:9b:d6:3c: 13:ff:9d:55:e0:a8:68:e0:05:f4:a4:72:b5:2d:07: eb:99:f1:23:f8:8b:14:91:b0:44:3a:0a:cf:29:16: 8d:91:bd:05:84:1f:40:d0:40:94:8d:b4:8a:e7:95: 93:d5:a5:d7:83:97:0e:2c:ce:76:7a:7a:3d:25:c4: 72:6d:b0:7a:16:89:4e:00:d7:0a:a8:3e:51:49:fe: 1c:a5:86:ec:d4:cc:67:43:44:85:a4:15:ab:37:6d: 36:d6:be:fc:04:5f:13:07:5d:04:dc:ca:77:2b:5a: e0:d1:b5:3f:66:ef:17:8d:b6:9b:92:0a:4e:53:01: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7E:E9:69:6B:81:33:40:E2:62:64:DD:57:21:25:B4:EB:00:7A:03 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:26:aa:8f:48:62:0c:a1:71:9b:d9:04:08:57:f8:81:61: a3:eb:f8:1e:ed:50:f5:2f:32:bf:24:48:b9:68:90:97:47:36: cb:0c:f0:cc:fb:f5:15:9a:66:a9:d6:f2:7c:d6:d6:c1:e8:81: c0:9c:4e:a9:02:df:ba:d9:b3:d2:5a:53:15:50:9a:06:dd:33: c6:94:4e:a3:00:66:d9:18:f5:c4:00:b7:01:ec:b0:c5:04:69: a3:2e:bc:6b:eb:ce:b1:58:13:4a:06:aa:11:28:2c:6d:ba:a7: fd:e3:b5:37:94:b8:e2:87:af:25:6d:c9:c6:1b:b4:2b:bc:24: a1:a8:c4:ad:12:ad:f0:82:b8:9d:1f:68:cd:86:c9:a2:74:12: b2:14:d0:0d:ce:b0:ac:69:bc:00:f6:43:3c:59:bb:5c:ac:32: b8:45:0b:db:a9:56:26:30:06:46:11:74:a6:e9:5b:79:3f:73: c7:5f:58:1c:b2:cb:2d:a8:c3:37:5e:01:d8:c6:48:87:51:f2: dc:ea:62:46:57:d1:ff:86:da:fb:6c:09:54:74:14:c6:2d:1f: d4:eb:f7:f7:22:53:fe:4d:42:7f:53:f3:4c:19:13:4a:dd:d7: 30:72:b9:82:48:e2:8d:e4:21:b2:66:48:e8:f4:40:44:84:08: 3d:c3:d5:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfla30dgAxWe8xjwwO/T+wwOAqxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNjA0MTkwNDI3MzlaFw0yNjA0MjIxNDA5MzlaMDMxMTAvBgNV BAMTKDA2N0VFOTY5NkI4MTMzNDBFMjYyNjRERDU3MjEyNUI0RUIwMDdBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFupQeSOOc+6Mi8SMAv+raWAC 9TXFLoqhZtWZEs/j2Z/4NTTUyrMo/AEXFmVezTD/z99i9geNkb05LbgLS2QvY/8U 2kUQGZFxwptnY9CkSUJww21yySUjTsjKikqdY3ubL4wh6sJZyRHoaBiQqImNim8t /Vvj7edzMQMdLt5vjENHtpvWPBP/nVXgqGjgBfSkcrUtB+uZ8SP4ixSRsEQ6Cs8p Fo2RvQWEH0DQQJSNtIrnlZPVpdeDlw4sznZ6ej0lxHJtsHoWiU4A1wqoPlFJ/hyl huzUzGdDRIWkFas3bTbWvvwEXxMHXQTcyncrWuDRtT9m7xeNtpuSCk5TAb2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBn7paWuBM0DiYmTdVyEltOsAegMwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWIJqqPSGIMoXGb2QQIV/iBYaPr+B7tUPUv Mr8kSLlokJdHNssM8Mz79RWaZqnW8nzW1sHogcCcTqkC37rZs9JaUxVQmgbdM8aU TqMAZtkY9cQAtwHssMUEaaMuvGvrzrFYE0oGqhEoLG26p/3jtTeUuOKHryVtycYb tCu8JKGoxK0SrfCCuJ0faM2GyaJ0ErIU0A3OsKxpvAD2QzxZu1ysMrhFC9upViYw BkYRdKbpW3k/c8dfWByyyy2owzdeAdjGSIdR8tzqYkZX0f+G2vtsCVR0FMYtH9Tr 9/ciU/5NQn9T80wZE0rd1zByuYJI4o3kIbJmSOj0QESECD3D1SQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:41 2026 by rpki-client