$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft File: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft (raw, json) Hash identifier: rFW9hF54nckRT2E9rjiIx9l4o/GPoWSxEq+xetvKN4Q= Subject key identifier: 47:07:85:E8:C7:B7:E1:48:F4:41:65:93:A0:06:BA:ED:D7:CC:CE:95 Authority key identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 Certificate issuer: /CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Certificate serial: 489504A2865D8AC47AC34CF60E71492671A1837E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft Manifest number: 1D Signing time: Sat 18 Apr 2026 03:42:14 +0000 Manifest this update: Sat 18 Apr 2026 03:37:14 +0000 Manifest next update: Tue 21 Apr 2026 06:25:14 +0000 Files and hashes: 1: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl (hash: Pqn/mKG4rGZ3jpNAVBr6/xmxt+BQ2YjVdzO7Y/I1ERw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:95:04:a2:86:5d:8a:c4:7a:c3:4c:f6:0e:71:49:26:71:a1:83:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Validity Not Before: Apr 18 03:37:14 2026 GMT Not After : Apr 21 06:25:14 2026 GMT Subject: CN=470785E8C7B7E148F4416593A006BAEDD7CCCE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:5b:58:d0:9b:26:d1:71:ba:9b:c9:4e:26: 26:34:ad:b6:1e:58:f8:fc:2b:7b:58:6f:3a:68:d9: 94:bb:3d:53:e3:65:55:31:d8:03:ca:60:ce:85:a5: 66:7e:bd:e6:ca:54:b2:57:ec:8e:4b:00:87:8a:f8: e9:0c:20:fe:3a:30:5c:bd:60:4c:1d:48:2a:7a:96: 23:95:57:b1:ae:94:dd:41:2b:2d:9b:b5:ea:b4:fe: 86:e6:8d:be:cf:f7:fb:22:a4:6a:c4:3d:de:34:cd: a8:a2:e9:d7:57:75:3b:e8:be:89:45:9d:1b:be:d5: 14:1e:77:d8:23:9f:1c:7b:e7:33:8b:76:79:66:56: 96:fa:b8:7c:aa:7d:ff:f7:2d:07:59:e5:70:73:24: 79:c9:66:79:53:da:4e:f7:8b:05:bc:57:12:52:8b: 88:36:4f:26:d0:0f:b3:6e:a5:d3:1d:b6:6c:aa:71: f1:35:55:54:04:48:41:10:e4:3a:08:f7:9f:41:9c: 56:d7:6f:0c:64:ea:3f:95:f0:01:4b:bb:31:7e:b9: 81:1b:17:71:e2:6c:61:64:8d:6f:89:6b:e6:52:85: d6:04:13:81:89:35:bf:93:57:c6:e3:dc:1b:d2:74: 17:f5:77:5e:60:23:98:a8:f6:d4:f6:62:31:5d:f0: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:85:E8:C7:B7:E1:48:F4:41:65:93:A0:06:BA:ED:D7:CC:CE:95 X509v3 Authority Key Identifier: keyid:D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b0:93:bb:66:f5:5d:84:bf:4c:4b:e0:a7:e9:52:5f:75:0b: d7:b3:07:18:34:30:b8:09:44:dc:df:4a:fd:f3:b2:10:91:22: c2:6f:2d:35:99:2c:e0:f3:0e:35:17:d3:93:7c:8e:0f:75:53: 08:2c:7d:d2:fc:32:51:1a:8a:9e:2f:ce:13:7a:f0:5d:1e:06: c9:33:d5:f4:b4:d2:00:48:a6:19:bf:e5:d0:12:ab:14:53:41: 56:a3:61:d4:f5:62:9b:81:36:d5:a2:3f:6e:8f:49:62:2c:58: e2:93:4e:56:30:ef:94:23:99:6a:fb:ea:26:d1:35:14:43:9d: c1:a1:70:b8:78:5d:40:04:7c:ed:4f:6c:d3:47:76:d7:04:04: a0:d3:13:81:39:c6:e1:af:68:71:70:41:90:e9:9e:19:e0:9b: 59:6f:6f:a8:9d:38:7c:de:a1:4e:61:8c:d6:fd:62:16:6f:6a: d6:7d:a3:c4:4d:39:b6:01:4a:2b:59:2e:f3:93:4c:b1:e0:37: 3e:2a:79:d9:28:10:5f:27:bc:18:6e:d3:8c:b0:b0:59:9d:21: 8c:73:dd:77:05:15:0a:d7:00:c0:61:b7:ea:a6:5f:ea:f6:4e: 00:25:87:55:0d:0d:f2:55:f3:c1:68:22:e7:b7:d4:76:19:cb: da:ae:ad:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJUEooZdisR6w0z2DnFJJnGhg34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIy NUFGQzlFNzAeFw0yNjA0MTgwMzM3MTRaFw0yNjA0MjEwNjI1MTRaMDMxMTAvBgNV BAMTKDQ3MDc4NUU4QzdCN0UxNDhGNDQxNjU5M0EwMDZCQUVERDdDQ0NFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvFtY0Jsm0XG6m8lOJiY0rbYe WPj8K3tYbzpo2ZS7PVPjZVUx2APKYM6FpWZ+vebKVLJX7I5LAIeK+OkMIP46MFy9 YEwdSCp6liOVV7GulN1BKy2bteq0/obmjb7P9/sipGrEPd40zaii6ddXdTvovolF nRu+1RQed9gjnxx75zOLdnlmVpb6uHyqff/3LQdZ5XBzJHnJZnlT2k73iwW8VxJS i4g2TybQD7NupdMdtmyqcfE1VVQESEEQ5DoI959BnFbXbwxk6j+V8AFLuzF+uYEb F3HibGFkjW+Ja+ZShdYEE4GJNb+TV8bj3BvSdBf1d15gI5io9tT2YjFd8HjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURweF6Me34Uj0QWWToAa67dfMzpUwHwYDVR0j BBgwFoAU0ecjZoYek/02vVjwXPCAmyWvyecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMS9EMUU3MjM2Njg2 MUU5M0ZEMzZCRDU4RjA1Q0YwODA5QjI1QUZDOUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIyNUFG QzlFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzEvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgw OUIyNUFGQzlFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOwk7tm9V2Ev0xL4KfpUl91C9ezBxg0MLgJ RNzfSv3zshCRIsJvLTWZLODzDjUX05N8jg91UwgsfdL8MlEaip4vzhN68F0eBskz 1fS00gBIphm/5dASqxRTQVajYdT1YpuBNtWiP26PSWIsWOKTTlYw75QjmWr76ibR NRRDncGhcLh4XUAEfO1PbNNHdtcEBKDTE4E5xuGvaHFwQZDpnhngm1lvb6idOHze oU5hjNb9YhZvatZ9o8RNObYBSitZLvOTTLHgNz4qedkoEF8nvBhu04ywsFmdIYxz 3XcFFQrXAMBht+qmX+r2TgAlh1UNDfJV88FoIue31HYZy9qurYc= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:06 2026 by rpki-client