$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft File: C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json) Hash identifier: SFvWaRDLrD96BT0MXPbHAAMcslJ5Q5+Z8lZDzuf/uLs= Subject key identifier: 3B:BA:C1:87:F4:6A:0A:35:F8:31:89:06:C1:7A:BF:2A:BB:C4:B0:4B Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 Certificate issuer: /CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Certificate serial: 282EEFAC6F34D380D0D976120A89D9C919D9C002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft Manifest number: 0122 Signing time: Fri 17 Apr 2026 05:42:23 +0000 Manifest this update: Fri 17 Apr 2026 05:37:23 +0000 Manifest next update: Mon 20 Apr 2026 10:16:23 +0000 Files and hashes: 1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: GIPI2s9tMoTMNZwWIN74NR0M7tPwQ2QYJXs/wUFiwP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2e:ef:ac:6f:34:d3:80:d0:d9:76:12:0a:89:d9:c9:19:d9:c0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Validity Not Before: Apr 17 05:37:23 2026 GMT Not After : Apr 20 10:16:23 2026 GMT Subject: CN=3BBAC187F46A0A35F8318906C17ABF2ABBC4B04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:1b:84:a3:82:a0:e9:6a:1a:ff:1f:2f:79: a9:8a:a8:5d:c6:ab:eb:7b:1e:b0:9b:e0:8b:2d:a3: c3:65:84:23:59:7b:85:60:67:b5:50:cf:ee:1c:b9: 13:85:19:02:f2:bc:16:fc:78:28:52:23:8f:92:00: 54:26:7d:a1:15:38:40:e6:ed:f5:66:4e:fa:30:c6: 3e:b8:2a:86:9d:bb:01:16:9d:af:78:1a:10:90:3a: 60:7b:2c:f2:fd:28:8e:dc:ff:ee:ce:36:9a:bd:03: da:e8:84:56:4b:c6:e1:36:f3:ef:7c:e9:ee:b8:63: 3a:dc:e6:d6:8e:79:1c:a9:4a:73:ad:30:c2:2f:01: b7:96:3e:3d:35:f6:90:db:68:b8:59:ab:78:a9:5d: 04:cc:63:34:32:c8:3f:41:6d:6d:c0:b4:61:0a:4b: 54:86:54:24:67:19:18:32:2b:94:01:a6:9f:98:80: 68:c1:1c:97:5f:ab:cd:d1:7d:dc:84:90:bf:50:04: 3d:12:92:d4:70:56:ff:09:72:9b:14:4f:10:b0:93: c7:24:26:93:a6:f3:a7:21:99:68:31:8f:6a:8d:83: d4:cb:db:84:59:3e:a4:71:58:6b:e8:7a:4f:78:9d: 35:26:6e:5a:4b:c7:43:d0:d2:0f:f2:0d:cf:f1:c0: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:C1:87:F4:6A:0A:35:F8:31:89:06:C1:7A:BF:2A:BB:C4:B0:4B X509v3 Authority Key Identifier: keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:97:5e:8e:5c:bb:11:a3:aa:d8:98:0e:2c:f8:a1:f4:42:70: 4f:10:13:70:4c:05:b2:e2:67:05:03:8e:1f:e4:81:89:09:00: 8f:d4:a3:5d:9c:5a:43:1a:f6:6c:cd:21:4d:0a:01:e6:cc:6f: fe:56:62:b2:c8:b7:e6:5a:cd:2e:b7:38:1c:31:e2:56:6a:d5: 2b:9a:60:5d:e7:62:25:74:a8:6f:14:9a:81:43:7e:46:2e:9c: eb:94:c2:0f:3e:89:c9:09:0a:f0:c9:a9:d4:ec:d1:04:fe:0b: 6b:0a:6a:43:bc:63:e9:17:87:31:0e:1b:f6:9e:24:ac:b5:95: 33:c5:97:6e:d5:87:c8:6b:ce:b7:6d:24:ec:e8:b0:6b:01:83: 0f:5b:56:5b:88:47:14:7a:c6:b1:eb:17:1c:75:87:2e:d7:f5: 31:1d:ae:e6:63:ac:a1:31:fd:af:79:4a:bb:90:1b:75:9a:c9: ba:73:48:39:30:6b:26:42:d4:9c:eb:9a:bc:cd:ae:b1:47:95: 97:20:5e:7a:15:e0:13:4b:e6:48:e1:2e:33:2a:79:f6:90:68: 2f:ef:dd:51:cf:fb:90:da:8a:f0:46:66:70:e5:1f:ea:9e:83: e3:ec:00:88:35:fc:3e:0a:6c:48:34:00:45:d6:ea:31:e9:00: 83:84:f7:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKC7vrG8004DQ2XYSConZyRnZwAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD QzI3Rjk5MTAeFw0yNjA0MTcwNTM3MjNaFw0yNjA0MjAxMDE2MjNaMDMxMTAvBgNV BAMTKDNCQkFDMTg3RjQ2QTBBMzVGODMxODkwNkMxN0FCRjJBQkJDNEIwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwxuEo4Kg6Woa/x8veamKqF3G q+t7HrCb4Isto8NlhCNZe4VgZ7VQz+4cuROFGQLyvBb8eChSI4+SAFQmfaEVOEDm 7fVmTvowxj64KoaduwEWna94GhCQOmB7LPL9KI7c/+7ONpq9A9rohFZLxuE28+98 6e64Yzrc5taOeRypSnOtMMIvAbeWPj019pDbaLhZq3ipXQTMYzQyyD9BbW3AtGEK S1SGVCRnGRgyK5QBpp+YgGjBHJdfq83RfdyEkL9QBD0SktRwVv8JcpsUTxCwk8ck JpOm86chmWgxj2qNg9TL24RZPqRxWGvoek94nTUmblpLx0PQ0g/yDc/xwI4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7rBh/RqCjX4MYkGwXq/KrvEsEswHwYDVR0j BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3 Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmXXo5cuxGjqtiYDiz4ofRCcE8QE3BMBbLi ZwUDjh/kgYkJAI/Uo12cWkMa9mzNIU0KAebMb/5WYrLIt+ZazS63OBwx4lZq1Sua YF3nYiV0qG8UmoFDfkYunOuUwg8+ickJCvDJqdTs0QT+C2sKakO8Y+kXhzEOG/ae JKy1lTPFl27Vh8hrzrdtJOzosGsBgw9bVluIRxR6xrHrFxx1hy7X9TEdruZjrKEx /a95SruQG3WaybpzSDkwayZC1JzrmrzNrrFHlZcgXnoV4BNL5kjhLjMqefaQaC/v 3VHP+5DaivBGZnDlH+qeg+PsAIg1/D4KbEg0AEXW6jHpAIOE990= -----END CERTIFICATE-----Generated at Sun Apr 19 11:52:51 2026 by rpki-client