$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: 2UWPiLSf/yVUl6LGRKq0xl7/gZyUp86wnYT4qsVblvM= Subject key identifier: B5:69:04:3F:1B:68:8A:08:1F:B5:DB:25:34:7F:EB:0C:8B:AF:27:42 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 7FE0C1A12DC99CA7BDEC478555F0DE0FEE8FC84E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0535 Signing time: Thu 16 Apr 2026 02:02:18 +0000 Manifest this update: Thu 16 Apr 2026 01:57:18 +0000 Manifest next update: Sun 19 Apr 2026 11:24:18 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: C/adgq7ZW1KISGN47OeBApsdy6bzKXXfd7enBqImQUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e0:c1:a1:2d:c9:9c:a7:bd:ec:47:85:55:f0:de:0f:ee:8f:c8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Apr 16 01:57:18 2026 GMT Not After : Apr 19 11:24:18 2026 GMT Subject: CN=B569043F1B688A081FB5DB25347FEB0C8BAF2742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:81:9a:02:53:4e:9a:cd:a5:89:e6:30:db:20: 4f:8a:89:97:c5:b2:ff:d7:3e:eb:dd:80:cf:8f:1f: 15:59:d1:6e:0c:05:e3:69:f2:93:b4:2a:cb:76:b0: fc:e6:0b:c2:cd:68:79:b4:3c:fd:26:13:9f:a7:37: 18:a1:43:68:7d:81:04:3a:23:6a:01:14:93:1b:58: ef:82:e8:4a:b8:57:4a:ff:82:a6:a5:0b:71:b8:4f: 52:e0:19:a8:54:a2:ee:16:97:9c:f0:95:fd:77:d9: d9:55:f1:75:70:4a:5f:68:cb:0d:4a:37:16:ee:36: 73:cb:97:84:79:c5:52:cf:ad:2d:f1:bf:95:1b:70: 78:0a:db:bd:56:56:b3:8b:c0:ca:96:32:81:6a:d4: a0:2e:7e:f1:96:69:6a:f0:5e:ee:2c:28:89:47:22: cc:32:7a:fb:d3:a4:a9:45:a7:f1:e9:9d:6c:43:c2: dd:a7:41:a0:2b:94:ee:46:2c:02:99:73:24:0f:d7: 96:2c:a9:ab:7f:f4:75:68:a5:f1:e3:49:4e:80:3f: d2:32:69:33:19:58:79:54:64:61:0f:23:38:8a:1d: d5:06:ab:97:3b:f2:6e:dc:04:31:b5:e5:26:92:b7: e0:46:30:e5:0b:be:0f:e6:5f:d6:b0:f2:5c:e5:95: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:69:04:3F:1B:68:8A:08:1F:B5:DB:25:34:7F:EB:0C:8B:AF:27:42 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c6:f2:bb:cc:8a:34:0c:e9:a8:1a:b8:27:53:10:62:2a:93: 41:89:57:77:76:35:d6:c5:4f:b4:29:5d:f3:e0:76:ad:72:3c: cf:08:a5:33:9a:4c:60:07:d7:71:33:d5:70:33:30:13:ab:d3: 80:6c:26:cc:22:61:3d:52:1b:13:d2:7f:df:e2:22:be:54:dc: c9:df:95:ab:19:d2:39:85:57:d9:24:4b:7e:a8:12:2a:40:15: 07:5f:63:a0:16:a6:ea:91:7a:29:91:a5:77:2b:18:0a:41:b2: e9:71:be:be:4a:73:3e:f9:da:c5:2c:47:2c:8e:c3:0e:0a:24: f4:ab:e6:de:bd:a4:62:a9:5c:00:8a:7a:09:e1:34:53:65:39: 09:ed:88:67:43:af:be:1f:9d:4b:29:ba:c4:14:42:22:a2:37: 17:b1:6f:80:4d:31:49:91:2d:0b:e3:85:45:ef:48:a4:39:0e: 05:3c:a0:24:00:96:a7:60:c4:b5:8a:ff:31:84:2b:1d:17:a8: 8c:44:6f:a1:09:e6:b1:96:08:37:45:f1:25:88:07:aa:a5:b4: 9a:a5:1b:2a:98:96:05:01:96:b6:a1:af:f7:f7:f6:69:7d:b7: 60:ac:30:36:db:18:61:fe:9f:b7:5e:8d:77:c8:e8:30:43:77: 4f:e0:74:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+DBoS3JnKe97EeFVfDeD+6PyE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNjA0MTYwMTU3MThaFw0yNjA0MTkxMTI0MThaMDMxMTAvBgNV BAMTKEI1NjkwNDNGMUI2ODhBMDgxRkI1REIyNTM0N0ZFQjBDOEJBRjI3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDogZoCU06azaWJ5jDbIE+KiZfF sv/XPuvdgM+PHxVZ0W4MBeNp8pO0Kst2sPzmC8LNaHm0PP0mE5+nNxihQ2h9gQQ6 I2oBFJMbWO+C6Eq4V0r/gqalC3G4T1LgGahUou4Wl5zwlf132dlV8XVwSl9oyw1K NxbuNnPLl4R5xVLPrS3xv5UbcHgK271WVrOLwMqWMoFq1KAufvGWaWrwXu4sKIlH IswyevvTpKlFp/HpnWxDwt2nQaArlO5GLAKZcyQP15Ysqat/9HVopfHjSU6AP9Iy aTMZWHlUZGEPIziKHdUGq5c78m7cBDG15SaSt+BGMOULvg/mX9aw8lzllWgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtWkEPxtoiggftdslNH/rDIuvJ0IwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3G8rvMijQM6agauCdTEGIqk0GJV3d2NdbF T7QpXfPgdq1yPM8IpTOaTGAH13Ez1XAzMBOr04BsJswiYT1SGxPSf9/iIr5U3Mnf lasZ0jmFV9kkS36oEipAFQdfY6AWpuqReimRpXcrGApBsulxvr5Kcz752sUsRyyO ww4KJPSr5t69pGKpXACKegnhNFNlOQntiGdDr74fnUspusQUQiKiNxexb4BNMUmR LQvjhUXvSKQ5DgU8oCQAlqdgxLWK/zGEKx0XqIxEb6EJ5rGWCDdF8SWIB6qltJql GyqYlgUBlrahr/f39ml9t2CsMDbbGGH+n7dejXfI6DBDd0/gdIo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:17 2026 by rpki-client