$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: De6oFDGpg2Px4H1zIp/glu2yuhmJyLKWiG7KmsNZnM4= Subject key identifier: F9:C8:70:58:6E:AE:3F:5F:71:6D:B1:C1:22:0E:47:79:CA:ED:DC:EF Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 67FC511AEE6AE7209CA8E688D06AD95BED8A8D06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 051C Signing time: Sat 18 Apr 2026 23:51:12 +0000 Manifest this update: Sat 18 Apr 2026 23:46:12 +0000 Manifest next update: Wed 22 Apr 2026 03:34:12 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: agxnhuPtIrodrIUvjNL0pp3nMIoy+OlKVVLdv5Eg3RY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fc:51:1a:ee:6a:e7:20:9c:a8:e6:88:d0:6a:d9:5b:ed:8a:8d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Apr 18 23:46:12 2026 GMT Not After : Apr 22 03:34:12 2026 GMT Subject: CN=F9C870586EAE3F5F716DB1C1220E4779CAEDDCEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:ea:1b:87:13:cd:b0:82:3f:d3:d5:d3:fd: f4:0f:58:87:f7:f6:f1:18:f5:47:18:a6:7c:6b:bd: 9c:9e:02:cc:35:50:73:38:03:8e:d7:b0:1b:9c:be: 75:e7:a9:9b:94:41:11:3a:97:a7:4f:cf:22:ff:0d: fd:58:a1:e5:8a:b2:07:b5:89:63:8d:52:3c:b5:35: 96:e1:b7:38:c3:b0:37:fd:c6:94:77:76:fb:01:3f: 23:ed:db:d6:03:7d:36:98:a1:80:59:13:ba:29:7a: 63:9f:0b:e6:af:c3:00:95:ee:b5:96:9b:a6:07:dc: 1b:30:db:7f:5b:7e:43:14:bd:01:1c:6f:8f:40:df: 11:62:cc:91:0c:e2:ef:4c:6d:25:55:68:bb:6a:c0: 13:81:ac:53:5a:40:64:60:bc:0b:25:39:58:f6:aa: 24:2f:8c:d0:de:82:de:25:5c:e9:20:27:9b:d6:ed: 6f:06:73:28:36:ce:c0:82:a7:1c:b3:52:06:94:a3: bb:a0:3c:c9:22:ac:92:96:ea:cd:20:2c:34:17:ad: c8:be:24:ac:35:09:66:27:d6:6c:d8:bc:9e:54:67: 3c:f9:46:82:a2:2a:95:4e:e7:ec:22:18:dc:63:30: 31:43:fa:08:20:af:40:84:a9:c1:65:71:de:4b:87: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:70:58:6E:AE:3F:5F:71:6D:B1:C1:22:0E:47:79:CA:ED:DC:EF X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:36:5e:86:f3:34:1e:9c:2a:05:62:e5:57:46:46:da:be:70: 2a:81:25:7c:6b:29:93:2e:c8:a8:1d:e1:66:37:f3:86:ce:35: 6d:53:0f:40:17:18:77:73:b7:09:28:cc:7c:66:c2:36:56:49: 65:15:4b:6b:b8:5d:02:a7:5c:b0:99:e0:82:bb:ed:4a:0e:df: d4:15:d0:e6:be:46:7a:84:af:59:73:5f:68:5b:3d:ad:22:ce: 66:ce:8f:d6:a5:c9:a7:04:55:8f:62:19:11:42:d1:08:ff:da: 73:8c:50:fd:7b:65:45:0c:46:83:db:be:18:b6:2e:3b:3e:af: 9b:45:d8:21:3d:ab:9b:22:b7:64:21:e3:84:82:f7:a9:9c:a8: 3c:b5:90:8a:a5:1a:8a:a2:35:be:78:b2:03:01:95:65:27:43: a0:60:3e:ad:8b:8e:1c:0e:18:d8:bd:c3:2b:67:77:5e:6a:00: 5d:e7:c6:45:22:b1:87:cb:c0:37:bc:30:67:fb:a6:b7:1e:f1: e4:68:a2:0b:54:c6:f1:c8:a8:7d:52:95:6a:74:7d:cc:e7:27: ce:86:11:13:07:7a:e7:07:f1:a5:a6:6a:47:ec:97:fb:2b:59: 17:49:ae:dd:77:fa:a2:f4:ee:7d:5a:50:50:64:01:dc:dc:e6: 80:1e:be:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/xRGu5q5yCcqOaI0GrZW+2KjQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNjA0MTgyMzQ2MTJaFw0yNjA0MjIwMzM0MTJaMDMxMTAvBgNV BAMTKEY5Qzg3MDU4NkVBRTNGNUY3MTZEQjFDMTIyMEU0Nzc5Q0FFRERDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKOobhxPNsII/09XT/fQPWIf3 9vEY9UcYpnxrvZyeAsw1UHM4A47XsBucvnXnqZuUQRE6l6dPzyL/Df1YoeWKsge1 iWONUjy1NZbhtzjDsDf9xpR3dvsBPyPt29YDfTaYoYBZE7opemOfC+avwwCV7rWW m6YH3Bsw239bfkMUvQEcb49A3xFizJEM4u9MbSVVaLtqwBOBrFNaQGRgvAslOVj2 qiQvjNDegt4lXOkgJ5vW7W8Gcyg2zsCCpxyzUgaUo7ugPMkirJKW6s0gLDQXrci+ JKw1CWYn1mzYvJ5UZzz5RoKiKpVO5+wiGNxjMDFD+gggr0CEqcFlcd5LhxclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+chwWG6uP19xbbHBIg5Hecrt3O8wHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI42XobzNB6cKgVi5VdGRtq+cCqBJXxrKZMu yKgd4WY384bONW1TD0AXGHdztwkozHxmwjZWSWUVS2u4XQKnXLCZ4IK77UoO39QV 0Oa+RnqEr1lzX2hbPa0izmbOj9alyacEVY9iGRFC0Qj/2nOMUP17ZUUMRoPbvhi2 Ljs+r5tF2CE9q5sit2Qh44SC96mcqDy1kIqlGoqiNb54sgMBlWUnQ6BgPq2LjhwO GNi9wytnd15qAF3nxkUisYfLwDe8MGf7prce8eRoogtUxvHIqH1SlWp0fcznJ86G ERMHeucH8aWmakfsl/srWRdJrt13+qL07n1aUFBkAdzc5oAevuw= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:30 2026 by rpki-client