$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: 8+LC2nWnRUAQjeZJkK13oHHVmRxEj6HFJ4AOcj4pTns= Subject key identifier: D2:BA:2F:A4:8E:70:A6:27:CC:FF:3B:65:0F:82:14:E1:FE:7C:38:18 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 3305E1F096E42D696C1D6468D8AD1D036C984DE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 018C Signing time: Thu 16 Apr 2026 13:40:55 +0000 Manifest this update: Thu 16 Apr 2026 13:35:55 +0000 Manifest next update: Sun 19 Apr 2026 19:36:55 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: STgKCboSeTjdnQYID4B4Kp7AubCxnaFL3ad/gmEXCg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:05:e1:f0:96:e4:2d:69:6c:1d:64:68:d8:ad:1d:03:6c:98:4d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Apr 16 13:35:55 2026 GMT Not After : Apr 19 19:36:55 2026 GMT Subject: CN=D2BA2FA48E70A627CCFF3B650F8214E1FE7C3818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:1a:66:a0:6c:29:14:d7:b8:e5:ba:88:bd: dd:98:6d:1b:dd:19:72:a5:ba:cd:36:00:54:47:2f: 03:52:69:eb:14:4b:a5:0f:ab:09:43:64:59:ee:09: ab:17:ee:92:13:41:a4:36:bb:59:cb:a6:d3:95:79: f9:ac:57:1a:52:2b:5f:a7:10:a1:6f:bd:2f:2a:62: ba:e9:2a:61:86:21:7a:4b:bf:52:c6:28:4e:7d:21: 5e:2a:a6:9b:e2:f2:a4:44:af:46:c2:a0:c0:1f:36: 58:8b:f1:db:d1:5e:cc:5e:7d:af:2a:45:40:7e:cd: e2:5c:58:77:0d:6c:41:a8:dd:36:9d:63:ce:95:43: 79:4f:38:3b:15:4c:b8:0c:e0:92:41:49:a7:eb:d7: a2:79:90:3c:39:b5:1d:2f:40:61:4b:ec:e7:65:e0: 45:76:79:45:cb:02:34:02:fa:f9:71:e8:3a:2c:1f: 85:d2:20:23:18:2c:07:08:fc:4d:82:4e:6b:56:71: 63:62:2d:78:ca:b5:5c:4a:59:eb:3e:be:57:a8:05: 27:58:73:28:7b:f7:a1:55:6b:fb:8a:70:a3:2e:49: eb:5a:12:c6:ba:c9:b0:33:0d:20:fb:b2:a5:0e:29: 99:67:a5:4b:12:e1:3a:f2:5d:ba:14:95:ea:db:b7: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:2F:A4:8E:70:A6:27:CC:FF:3B:65:0F:82:14:E1:FE:7C:38:18 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:02:97:61:1f:f8:b6:fe:94:67:72:09:c4:07:1f:70:98:47: 8b:1d:d2:55:77:8c:dc:02:d3:26:d1:f4:a7:98:f4:2a:71:04: 7b:51:b6:31:d1:52:e3:e1:09:a3:27:cc:23:1b:ed:f8:87:56: 3b:34:59:7d:ba:6b:8e:58:43:0f:1b:ee:0a:68:6c:09:fa:7d: f9:5b:44:df:7b:58:81:b8:1d:eb:2e:2f:9b:28:d3:5c:2d:46: be:00:a0:f5:87:c7:08:3a:8a:db:07:3f:41:a7:13:ee:7f:26: 29:aa:f2:df:96:c2:0d:50:7b:c4:ea:47:4b:29:02:cd:95:d5: d5:a3:37:23:36:98:7c:8e:ee:bd:07:e2:e3:34:45:84:5b:4f: 17:fa:9d:64:ca:8f:b6:81:34:5d:5c:80:ca:8a:6e:fb:7b:4a: b8:ae:26:a6:5c:92:fa:1f:22:b7:3b:74:a9:09:12:fb:49:5d: bd:5b:f1:25:f8:8a:f0:77:ae:54:33:bd:00:14:1d:5e:f6:ec: 77:23:a9:1a:ed:7f:a1:fe:18:e2:82:f8:2e:04:ad:65:e8:01: 23:9d:b6:3d:7a:e9:c8:8c:84:6d:f8:87:49:c3:be:ae:05:02: 08:19:b9:7d:92:e4:05:07:56:ab:8a:4e:7c:a5:f3:53:f6:7d: 0f:9e:36:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwXh8JbkLWlsHWRo2K0dA2yYTeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNjA0MTYxMzM1NTVaFw0yNjA0MTkxOTM2NTVaMDMxMTAvBgNV BAMTKEQyQkEyRkE0OEU3MEE2MjdDQ0ZGM0I2NTBGODIxNEUxRkU3QzM4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMihpmoGwpFNe45bqIvd2YbRvd GXKlus02AFRHLwNSaesUS6UPqwlDZFnuCasX7pITQaQ2u1nLptOVefmsVxpSK1+n EKFvvS8qYrrpKmGGIXpLv1LGKE59IV4qppvi8qREr0bCoMAfNliL8dvRXsxefa8q RUB+zeJcWHcNbEGo3TadY86VQ3lPODsVTLgM4JJBSafr16J5kDw5tR0vQGFL7Odl 4EV2eUXLAjQC+vlx6DosH4XSICMYLAcI/E2CTmtWcWNiLXjKtVxKWes+vleoBSdY cyh796FVa/uKcKMuSetaEsa6ybAzDSD7sqUOKZlnpUsS4TryXboUlerbt75DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rovpI5wpifM/ztlD4IU4f58OBgwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgCl2Ef+Lb+lGdyCcQHH3CYR4sd0lV3jNwC 0ybR9KeY9CpxBHtRtjHRUuPhCaMnzCMb7fiHVjs0WX26a45YQw8b7gpobAn6fflb RN97WIG4HesuL5so01wtRr4AoPWHxwg6itsHP0GnE+5/Jimq8t+Wwg1Qe8TqR0sp As2V1dWjNyM2mHyO7r0H4uM0RYRbTxf6nWTKj7aBNF1cgMqKbvt7SriuJqZckvof Irc7dKkJEvtJXb1b8SX4ivB3rlQzvQAUHV727HcjqRrtf6H+GOKC+C4ErWXoASOd tj166ciMhG34h0nDvq4FAggZuX2S5AUHVquKTnyl81P2fQ+eNl8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:01:36 2026 by rpki-client