$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: 9jITmy0w0z+p0fRLh994d9q2vPJmsuDU37Xhye+lDYk= Subject key identifier: FA:82:A2:DD:2E:98:52:58:D2:5F:AB:32:2B:BD:76:FF:E2:A0:34:99 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 3C20D856CCC8A017FFA119D954B67CF3DC7D9A6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 0121 Signing time: Fri 17 Apr 2026 01:11:30 +0000 Manifest this update: Fri 17 Apr 2026 01:06:30 +0000 Manifest next update: Mon 20 Apr 2026 11:37:30 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: QyVR7wWmBEmQpp7GjnP03Mimh8f2mjmk9EOenP5MtVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:20:d8:56:cc:c8:a0:17:ff:a1:19:d9:54:b6:7c:f3:dc:7d:9a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Apr 17 01:06:30 2026 GMT Not After : Apr 20 11:37:30 2026 GMT Subject: CN=FA82A2DD2E985258D25FAB322BBD76FFE2A03499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:30:33:d2:f2:96:dc:2c:73:df:1b:fd:8c: e2:c0:4a:eb:2c:c3:22:d1:ab:3c:cc:01:3a:6b:70: 0a:dc:7c:d1:6b:7c:76:7b:78:4b:55:83:be:98:29: d6:72:21:a0:6f:76:59:0d:c3:1f:17:59:ca:6c:b0: 7c:b2:41:a8:75:24:28:b9:95:d9:8d:69:fc:8e:c3: 41:e1:3b:e4:1a:50:f1:68:22:44:9d:35:6d:5e:24: f2:e8:ed:5b:76:36:1c:f0:13:33:a1:ed:aa:9c:4a: 8c:75:8c:30:4c:dd:37:6b:b1:78:ae:3f:6f:c1:1d: 86:11:f1:8f:60:17:3e:47:13:26:2b:83:60:65:89: 7b:0b:4b:a5:90:93:87:a2:73:b5:ee:88:d9:ec:a3: 10:93:9d:a5:0b:1d:f7:f7:32:13:b8:f8:25:35:ee: 40:7d:b2:41:cf:18:e7:73:56:14:07:7c:2f:8d:86: 09:9c:47:5b:64:bc:ed:ef:93:2c:eb:cb:9a:ca:0e: 07:c9:38:95:96:0c:72:1e:3e:53:12:7d:6a:ad:ca: 7c:ca:26:21:b0:98:5f:6c:88:d6:e0:79:c7:06:fb: c5:6e:b2:6e:fd:0d:7c:74:1a:71:98:9a:3d:a3:06: 77:2c:a6:17:45:f2:24:30:a5:62:dc:65:79:df:9e: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:82:A2:DD:2E:98:52:58:D2:5F:AB:32:2B:BD:76:FF:E2:A0:34:99 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5c:b9:93:7e:c5:07:bd:a8:e6:38:55:bb:1d:cb:f4:da:13: ff:ca:4a:a6:48:e0:a6:10:69:e3:d3:1e:d6:e4:be:1b:45:0e: e2:17:54:4e:29:12:af:be:39:08:b5:3a:1c:c3:ac:df:2e:02: 11:46:2b:d4:b9:e8:fa:6d:fe:bb:d2:97:bb:f6:8b:ba:49:9f: be:5c:da:5f:37:44:64:77:25:09:d6:04:63:7b:53:5e:09:a4: 28:be:24:ea:df:6d:11:dc:08:34:9e:58:aa:72:0e:92:17:d5: 25:8a:7f:3e:67:c1:e6:8d:ef:0c:79:a8:25:6a:e9:0d:82:58: 96:d4:9a:a4:68:cb:f3:91:8c:4b:ec:7a:12:92:e5:9b:e9:23: c6:1e:df:ae:9f:ad:d9:d4:a1:3f:44:a6:a0:df:20:c2:5b:cb: 52:9b:3c:23:13:82:8b:92:aa:31:d6:8c:66:9d:17:ab:8a:42: 74:f0:e2:ac:8b:88:ba:1d:4e:1e:2a:da:4b:59:52:78:36:51: c8:21:47:52:05:31:50:20:89:85:f6:6a:12:09:6f:09:b3:60: 8c:19:28:d3:5f:35:85:6f:bc:ee:50:4d:79:ce:9f:00:b1:1c: 28:9e:bd:16:27:66:fc:39:2a:1a:3b:bd:92:5c:ef:bf:9e:a7: 6a:bf:a0:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCDYVszIoBf/oRnZVLZ889x9mm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNjA0MTcwMTA2MzBaFw0yNjA0MjAxMTM3MzBaMDMxMTAvBgNV BAMTKEZBODJBMkREMkU5ODUyNThEMjVGQUIzMjJCQkQ3NkZGRTJBMDM0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EzAz0vKW3Cxz3xv9jOLASuss wyLRqzzMATprcArcfNFrfHZ7eEtVg76YKdZyIaBvdlkNwx8XWcpssHyyQah1JCi5 ldmNafyOw0HhO+QaUPFoIkSdNW1eJPLo7Vt2NhzwEzOh7aqcSox1jDBM3TdrsXiu P2/BHYYR8Y9gFz5HEyYrg2BliXsLS6WQk4eic7XuiNnsoxCTnaULHff3MhO4+CU1 7kB9skHPGOdzVhQHfC+NhgmcR1tkvO3vkyzry5rKDgfJOJWWDHIePlMSfWqtynzK JiGwmF9siNbgeccG+8Vusm79DXx0GnGYmj2jBncsphdF8iQwpWLcZXnfnh+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oKi3S6YUljSX6syK712/+KgNJkwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpcuZN+xQe9qOY4Vbsdy/TaE//KSqZI4KYQ aePTHtbkvhtFDuIXVE4pEq++OQi1OhzDrN8uAhFGK9S56Ppt/rvSl7v2i7pJn75c 2l83RGR3JQnWBGN7U14JpCi+JOrfbRHcCDSeWKpyDpIX1SWKfz5nweaN7wx5qCVq 6Q2CWJbUmqRoy/ORjEvsehKS5ZvpI8Ye366frdnUoT9EpqDfIMJby1KbPCMTgouS qjHWjGadF6uKQnTw4qyLiLodTh4q2ktZUng2UcghR1IFMVAgiYX2ahIJbwmzYIwZ KNNfNYVvvO5QTXnOnwCxHCievRYnZvw5Kho7vZJc77+ep2q/oDA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:23 2026 by rpki-client