$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: YlOf4vFOIdxpL1kMEtt7P87gg/juTqYnZVCajNnfTV4= Subject key identifier: 61:97:BE:45:FC:B6:4A:2A:23:2D:AA:7D:F9:E5:64:14:E5:82:2C:D4 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 15FB43BEC7891660DC230CA2706D7364892C292B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 03D0 Signing time: Thu 16 Apr 2026 15:13:03 +0000 Manifest this update: Thu 16 Apr 2026 15:08:03 +0000 Manifest next update: Mon 20 Apr 2026 01:28:03 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: 3/CrHcSOslIPxLraXt2Hy7wUTHz76frEx2pB+oH/MPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fb:43:be:c7:89:16:60:dc:23:0c:a2:70:6d:73:64:89:2c:29:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Apr 16 15:08:03 2026 GMT Not After : Apr 20 01:28:03 2026 GMT Subject: CN=6197BE45FCB64A2A232DAA7DF9E56414E5822CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:ea:67:b1:42:76:65:bf:bb:ae:0e:33:21: fd:bf:17:c0:01:cc:c6:98:9d:bf:8b:ef:aa:b2:ac: 6f:1e:15:97:0c:28:31:54:97:6c:71:14:42:b4:44: 4d:88:51:ac:e6:de:02:82:06:92:b2:f7:63:89:55: 2d:5e:38:8c:95:36:5d:65:d4:e5:51:72:c3:05:c9: 73:79:77:f4:ac:57:0d:ab:8b:19:50:37:d8:9f:48: cf:98:7d:0c:78:c7:92:a7:93:6c:e1:2b:c2:cf:a9: b1:33:4a:79:75:a9:25:b4:dd:23:c9:cd:10:52:89: f8:f2:90:fd:43:a7:40:ac:e2:3e:ff:d5:48:4a:bc: 89:7f:0a:e3:14:cb:6b:a9:cc:f4:f4:1e:11:90:5a: 6f:f0:0a:2b:f8:a6:52:c0:01:6f:9f:f8:12:3b:88: b2:bb:d5:5c:30:d1:46:3b:22:9b:53:58:f4:31:d4: 3c:e8:27:9f:b3:0f:5e:c1:d0:c9:33:8e:76:41:ab: 00:74:90:b8:6c:96:99:42:d2:e6:82:9b:62:3c:9f: 85:a2:6e:b6:0d:08:e0:b2:b6:59:1a:53:83:ec:73: d5:c9:f2:9c:db:44:4d:bb:61:7f:0b:fd:c7:07:45: 3e:20:1a:72:52:24:0b:0d:19:50:5b:ee:07:de:32: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:97:BE:45:FC:B6:4A:2A:23:2D:AA:7D:F9:E5:64:14:E5:82:2C:D4 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0d:f4:31:73:f1:ec:30:b9:41:fb:2d:56:2c:7d:58:ad:0b: 1b:0a:bd:99:2f:63:44:72:5e:33:aa:86:95:e0:fc:f9:56:41: 96:45:83:92:78:58:1b:e7:10:e9:ee:ac:fc:b8:2d:01:c5:58: 08:a1:5f:20:aa:8a:16:42:b2:d0:6f:bd:c5:2c:27:45:bb:1c: 39:80:0b:05:15:96:bb:6b:51:77:32:88:fc:ca:91:a5:9b:ac: 93:f4:30:d2:0d:39:32:e0:a4:ea:53:a1:4b:4d:7a:7d:82:85: 30:58:12:26:cf:2b:e3:68:6e:ce:bb:a5:7c:a1:60:15:e0:87: 45:42:e6:16:80:e5:ce:16:33:1d:62:97:7e:2a:06:07:12:2f: d4:c3:e5:66:a7:da:7c:c9:1b:cd:be:ea:35:a8:01:29:d1:a6: e1:68:ed:a8:af:16:97:d3:44:7a:18:b9:d6:97:88:07:1a:7a: 6e:0c:1a:6d:d9:5c:7f:dc:62:4f:13:c7:69:22:38:fd:01:13: 0a:79:7b:a9:9c:df:71:fa:25:e4:ba:06:cf:41:f6:9b:67:84: ec:5c:22:2f:16:b3:da:03:ef:b5:1d:eb:cc:94:88:11:70:ef: 76:1f:7b:13:23:27:3f:c7:b8:87:1f:2e:be:0b:b9:20:57:66: 58:50:40:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFftDvseJFmDcIwyicG1zZIksKSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNjA0MTYxNTA4MDNaFw0yNjA0MjAwMTI4MDNaMDMxMTAvBgNV BAMTKDYxOTdCRTQ1RkNCNjRBMkEyMzJEQUE3REY5RTU2NDE0RTU4MjJDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4epnsUJ2Zb+7rg4zIf2/F8AB zMaYnb+L76qyrG8eFZcMKDFUl2xxFEK0RE2IUazm3gKCBpKy92OJVS1eOIyVNl1l 1OVRcsMFyXN5d/SsVw2rixlQN9ifSM+YfQx4x5Knk2zhK8LPqbEzSnl1qSW03SPJ zRBSifjykP1Dp0Cs4j7/1UhKvIl/CuMUy2upzPT0HhGQWm/wCiv4plLAAW+f+BI7 iLK71Vww0UY7IptTWPQx1DzoJ5+zD17B0MkzjnZBqwB0kLhslplC0uaCm2I8n4Wi brYNCOCytlkaU4Psc9XJ8pzbRE27YX8L/ccHRT4gGnJSJAsNGVBb7gfeMqxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZe+Rfy2SiojLap9+eVkFOWCLNQwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4N9DFz8ewwuUH7LVYsfVitCxsKvZkvY0Ry XjOqhpXg/PlWQZZFg5J4WBvnEOnurPy4LQHFWAihXyCqihZCstBvvcUsJ0W7HDmA CwUVlrtrUXcyiPzKkaWbrJP0MNINOTLgpOpToUtNen2ChTBYEibPK+Nobs67pXyh YBXgh0VC5haA5c4WMx1il34qBgcSL9TD5Wan2nzJG82+6jWoASnRpuFo7aivFpfT RHoYudaXiAcaem4MGm3ZXH/cYk8Tx2kiOP0BEwp5e6mc33H6JeS6Bs9B9ptnhOxc Ii8Ws9oD77Ud68yUiBFw73YfexMjJz/HuIcfLr4LuSBXZlhQQH8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:35:34 2026 by rpki-client