$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: pSCAEK/jx4CZxj8Nl0+MgKiN/DGy/iJUlPToGbVOMRE= Subject key identifier: 86:D9:37:23:04:A9:C5:AD:DF:F6:4A:FA:66:62:B6:1A:6A:44:82:8F Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 5598A0BE66C66E9A792014AEC5197FCAFFF5F6A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 0565 Signing time: Thu 16 Apr 2026 16:22:15 +0000 Manifest this update: Thu 16 Apr 2026 16:17:15 +0000 Manifest next update: Sun 19 Apr 2026 17:26:15 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: M0NHy4DVHAPumYoelcpeReN68kgGIBt05L64CbhWt5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:a0:be:66:c6:6e:9a:79:20:14:ae:c5:19:7f:ca:ff:f5:f6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Apr 16 16:17:15 2026 GMT Not After : Apr 19 17:26:15 2026 GMT Subject: CN=86D9372304A9C5ADDFF64AFA6662B61A6A44828F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:5f:9a:5c:8a:54:c4:9a:b7:7e:2e:d1:e7: a1:03:d8:85:f0:01:d8:7d:ce:0c:41:a6:89:01:75: 4b:d5:4a:a2:dd:f5:d2:d8:ff:ed:40:b4:cc:ac:70: d2:f0:e1:f6:42:28:45:0a:d4:91:a4:68:c7:6e:53: c2:ea:b7:5f:36:af:c5:fd:62:c4:5f:e8:f3:30:66: ec:3b:d8:93:d4:a3:fb:1d:a6:82:3f:5b:11:c8:e8: de:9e:eb:c7:a7:bc:b6:f8:c2:d7:69:a8:62:69:07: e7:51:4e:5b:e0:de:d9:4c:0a:e8:47:70:ad:5f:0d: 64:c2:f8:43:a6:a1:98:02:c1:ff:62:3d:2c:06:c8: 4f:5a:8c:b3:17:db:4a:96:33:58:e8:82:30:24:8c: 51:36:7d:8a:c3:2d:7d:48:98:ec:5b:a6:3d:5b:d7: 87:34:63:e4:bd:f0:9d:c4:68:5a:d4:cf:a0:c0:d8: 72:eb:29:17:0e:92:45:99:b6:4e:cc:09:74:24:01: cb:2a:fe:88:26:4b:3f:0d:2a:18:d7:45:b5:be:50: 9b:af:23:a3:34:8c:12:80:62:f2:b7:a0:76:e0:ba: fd:d7:de:9e:be:9a:85:44:20:57:19:86:dc:49:ab: 74:44:2e:bf:74:11:fa:64:19:aa:65:e6:61:06:ff: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:37:23:04:A9:C5:AD:DF:F6:4A:FA:66:62:B6:1A:6A:44:82:8F X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:13:0e:54:be:3f:60:ba:47:7a:fd:db:aa:7b:d0:69:52:42: e7:fa:e0:5b:b0:cb:83:0c:f9:bd:3b:fb:a7:e7:c5:b5:37:2e: d2:3b:33:23:8b:5d:8a:e5:ee:b4:0c:bb:4b:a4:3f:e4:be:3e: 3b:1e:e1:3c:6b:92:27:70:6a:63:ca:29:0a:51:e8:d4:a4:a1: 15:12:65:62:b9:cd:54:32:ec:81:22:71:06:93:7e:d1:df:63: a4:0b:b3:56:35:4a:89:e8:98:d7:6a:99:30:d1:74:18:99:41: 1f:0d:6a:4f:78:f5:d1:ec:79:28:41:f8:b3:9d:d2:2c:20:ed: d9:db:b9:99:c4:c8:64:8d:e0:92:35:7c:c6:42:34:07:1a:69: 93:93:48:16:c2:fd:e6:04:2e:bf:93:5c:4b:1f:6c:38:19:e9: 0c:c1:04:cf:cc:49:ef:74:cb:13:fe:b2:73:66:a6:42:9b:7c: 5e:eb:2f:4c:5a:a3:04:fa:4c:a7:cd:be:26:da:80:d1:43:d6: 93:49:26:4a:1b:5e:5a:54:59:52:e9:25:9e:f4:9d:f8:2f:a7: 87:55:32:50:36:91:59:66:4f:d0:f3:90:bf:3b:b6:f9:3f:20: 2c:ba:67:74:92:44:87:96:e3:6d:9f:05:6d:b2:af:21:b1:d4: de:4f:19:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZigvmbGbpp5IBSuxRl/yv/19qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNjA0MTYxNjE3MTVaFw0yNjA0MTkxNzI2MTVaMDMxMTAvBgNV BAMTKDg2RDkzNzIzMDRBOUM1QURERkY2NEFGQTY2NjJCNjFBNkE0NDgyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUF+aXIpUxJq3fi7R56ED2IXw Adh9zgxBpokBdUvVSqLd9dLY/+1AtMyscNLw4fZCKEUK1JGkaMduU8Lqt182r8X9 YsRf6PMwZuw72JPUo/sdpoI/WxHI6N6e68envLb4wtdpqGJpB+dRTlvg3tlMCuhH cK1fDWTC+EOmoZgCwf9iPSwGyE9ajLMX20qWM1jogjAkjFE2fYrDLX1ImOxbpj1b 14c0Y+S98J3EaFrUz6DA2HLrKRcOkkWZtk7MCXQkAcsq/ogmSz8NKhjXRbW+UJuv I6M0jBKAYvK3oHbguv3X3p6+moVEIFcZhtxJq3RELr90EfpkGapl5mEG//OlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtk3IwSpxa3f9kr6ZmK2GmpEgo8wHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMTDlS+P2C6R3r926p70GlSQuf64Fuwy4MM +b07+6fnxbU3LtI7MyOLXYrl7rQMu0ukP+S+Pjse4TxrkidwamPKKQpR6NSkoRUS ZWK5zVQy7IEicQaTftHfY6QLs1Y1SonomNdqmTDRdBiZQR8Nak949dHseShB+LOd 0iwg7dnbuZnEyGSN4JI1fMZCNAcaaZOTSBbC/eYELr+TXEsfbDgZ6QzBBM/MSe90 yxP+snNmpkKbfF7rL0xaowT6TKfNvibagNFD1pNJJkobXlpUWVLpJZ70nfgvp4dV MlA2kVlmT9DzkL87tvk/ICy6Z3SSRIeW422fBW2yryGx1N5PGVs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:53 2026 by rpki-client