$ rpki-client -vvf repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft File: DFF6098A4921B357E69571FC3EB289143D85ADBD.mft (raw, json) Hash identifier: NiFbfr+lKodB5hLAgTucauAxJPie2wd/d3y/hRNFZqw= Subject key identifier: 94:F9:5F:1B:59:34:01:9D:D8:F4:1D:5A:D0:AB:D4:98:5D:F1:4F:BA Authority key identifier: DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD Certificate issuer: /CN=DFF6098A4921B357E69571FC3EB289143D85ADBD Certificate serial: 5660A468753E610F8CDFCB8E60E24F7564099BD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft Manifest number: 12 Signing time: Thu 16 Apr 2026 07:21:27 +0000 Manifest this update: Thu 16 Apr 2026 07:16:27 +0000 Manifest next update: Sun 19 Apr 2026 14:31:27 +0000 Files and hashes: 1: DFF6098A4921B357E69571FC3EB289143D85ADBD.crl (hash: VmLVe4ttwX3E2H88oOJm0Lwft4JEWXGQGtf5GmV8sYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.crl rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:60:a4:68:75:3e:61:0f:8c:df:cb:8e:60:e2:4f:75:64:09:9b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFF6098A4921B357E69571FC3EB289143D85ADBD Validity Not Before: Apr 16 07:16:27 2026 GMT Not After : Apr 19 14:31:27 2026 GMT Subject: CN=94F95F1B5934019DD8F41D5AD0ABD4985DF14FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:f0:06:2f:da:74:64:64:a1:a4:c2:a9:21: 41:69:03:8d:61:52:c1:5e:e2:50:92:db:9f:fc:d1: 59:2f:3d:02:42:a7:8e:35:7c:d7:f5:44:52:0b:1f: 36:37:2e:cc:b0:bd:3e:c6:0e:75:ed:a4:7e:c7:f2: 24:09:6d:58:3f:f7:b0:99:39:8a:a6:03:71:fb:e7: 98:34:87:43:05:e3:0f:4a:6d:73:38:bc:21:a3:92: 36:16:a7:de:4c:06:77:0c:bc:16:e5:81:99:5a:6e: f9:a7:19:d5:18:ab:1d:58:5e:e8:97:dc:22:10:ea: b0:39:aa:ad:c1:c7:d9:e8:52:ca:e5:7b:7e:90:71: cb:40:68:4f:9b:93:f4:3c:18:ef:8a:ac:ba:f8:e6: 5b:17:ce:c8:fa:29:b0:f1:60:70:94:03:dc:c2:7c: 17:38:d5:95:9f:b2:cc:a2:66:4a:59:46:61:f0:66: 94:97:d5:f7:7f:29:83:1f:8d:88:c6:23:9c:86:5e: f8:bf:d2:03:28:b1:d7:1f:e0:17:88:dc:8e:e3:44: 6e:a3:92:9d:c5:ea:5d:4b:c8:25:aa:27:df:22:99: e7:c1:48:30:c1:e3:b2:a7:ca:18:be:13:b5:0e:88: 45:63:0a:b4:73:63:00:dd:a5:22:3f:08:f6:18:7b: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F9:5F:1B:59:34:01:9D:D8:F4:1D:5A:D0:AB:D4:98:5D:F1:4F:BA X509v3 Authority Key Identifier: keyid:DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:9f:60:89:2e:0e:9d:79:03:6c:52:39:32:88:7b:a6:21: ef:c4:0c:7a:f1:1f:84:6d:ec:15:80:7d:aa:ff:ab:52:22:42: b4:fe:63:24:56:8c:1e:25:06:30:f5:b3:f7:09:d2:e1:68:f4: c9:0f:80:6d:41:a8:78:b8:0c:48:56:e6:d3:97:18:1f:4a:90: ca:fa:29:65:a3:62:cc:e1:85:f3:9a:1a:72:92:d7:64:07:be: a8:2d:de:96:e2:dd:58:c1:08:8c:5d:b3:7f:b4:28:4d:d3:87: 49:7e:38:6f:59:a7:43:b1:1b:bb:78:e1:0a:29:d0:86:92:18: d9:44:3e:55:4d:8a:1c:28:59:34:47:24:dc:4a:25:6f:30:a7: fa:f8:b6:af:57:ee:fb:4e:8a:54:44:79:75:38:9e:32:f4:7d: f0:65:fc:06:b9:d6:6c:a9:f8:63:fd:cd:b9:a7:5e:bb:38:01: ce:8e:e3:f3:3a:17:72:73:00:dd:b7:6b:bc:1a:33:be:bf:1e: 83:b6:9a:a9:53:df:ff:17:d9:4a:2c:42:ee:25:5b:34:8a:ee: 2b:36:15:77:b1:ff:bd:3a:48:fa:68:81:63:45:d0:10:c3:2c: 80:6d:9f:c6:1e:b1:8e:8a:85:7e:52:23:0c:2c:7b:72:32:e9: 1f:ce:7a:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmCkaHU+YQ+M38uOYOJPdWQJm9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5MTQz RDg1QURCRDAeFw0yNjA0MTYwNzE2MjdaFw0yNjA0MTkxNDMxMjdaMDMxMTAvBgNV BAMTKDk0Rjk1RjFCNTkzNDAxOUREOEY0MUQ1QUQwQUJENDk4NURGMTRGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45fAGL9p0ZGShpMKpIUFpA41h UsFe4lCS25/80VkvPQJCp441fNf1RFILHzY3LsywvT7GDnXtpH7H8iQJbVg/97CZ OYqmA3H755g0h0MF4w9KbXM4vCGjkjYWp95MBncMvBblgZlabvmnGdUYqx1YXuiX 3CIQ6rA5qq3Bx9noUsrle36QcctAaE+bk/Q8GO+KrLr45lsXzsj6KbDxYHCUA9zC fBc41ZWfssyiZkpZRmHwZpSX1fd/KYMfjYjGI5yGXvi/0gMosdcf4BeI3I7jRG6j kp3F6l1LyCWqJ98imefBSDDB47Knyhi+E7UOiEVjCrRzYwDdpSI/CPYYe34ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPlfG1k0AZ3Y9B1a0KvUmF3xT7owHwYDVR0j BBgwFoAU3/YJikkhs1fmlXH8PrKJFD2Frb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmUyOTkwMi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMS9ERkY2MDk4QTQ5 MjFCMzU3RTY5NTcxRkMzRUIyODkxNDNEODVBREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5MTQzRDg1 QURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5 MTQzRDg1QURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRPn2CJLg6deQNsUjkyiHumIe/EDHrxH4Rt 7BWAfar/q1IiQrT+YyRWjB4lBjD1s/cJ0uFo9MkPgG1BqHi4DEhW5tOXGB9KkMr6 KWWjYszhhfOaGnKS12QHvqgt3pbi3VjBCIxds3+0KE3Th0l+OG9Zp0OxG7t44Qop 0IaSGNlEPlVNihwoWTRHJNxKJW8wp/r4tq9X7vtOilREeXU4njL0ffBl/Aa51myp +GP9zbmnXrs4Ac6O4/M6F3JzAN23a7waM76/HoO2mqlT3/8X2UosQu4lWzSK7is2 FXex/706SPpogWNF0BDDLIBtn8YesY6KhX5SIwwse3Iy6R/OepY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:07:23 2026 by rpki-client