$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: Mz2OWOSxgl8lZyi7TXWa7u7/mgvRgGI8QzTXWPHD4Vs= Subject key identifier: 77:07:DA:05:F7:E0:9B:F8:89:81:09:31:6F:89:1C:62:E9:86:CE:39 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 7F9B2C1B00A0E61F3AD2E6023CCB69526BDCAF6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 016B Signing time: Sat 18 Apr 2026 07:22:18 +0000 Manifest this update: Sat 18 Apr 2026 07:17:18 +0000 Manifest next update: Tue 21 Apr 2026 09:23:18 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: V+LPKVJRUyoqS4M6SGqF+rXIsVDxKH1HaydocJhBJMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9b:2c:1b:00:a0:e6:1f:3a:d2:e6:02:3c:cb:69:52:6b:dc:af:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Apr 18 07:17:18 2026 GMT Not After : Apr 21 09:23:18 2026 GMT Subject: CN=7707DA05F7E09BF8898109316F891C62E986CE39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:a0:56:f5:8b:77:42:18:cd:27:6f:ae:cb: 5a:9c:e5:f4:be:dd:f5:ea:c4:02:21:c3:9c:b4:07: 60:86:26:d4:0b:db:3e:2b:18:71:0c:6c:54:8c:23: fe:4f:db:33:0f:be:35:f2:72:95:ec:d1:99:a2:3e: a4:b7:9f:1d:25:e8:45:a0:2e:ce:18:ea:d4:21:f2: 97:ac:8a:b9:3f:13:04:f5:e0:aa:20:55:c5:07:d0: 0f:a1:5b:68:fc:f1:42:52:0d:db:7f:c2:c6:83:b2: 27:f6:74:c4:df:79:b6:da:c2:7b:c4:25:57:1b:a8: 04:34:ea:8a:70:8c:21:38:7b:a8:e6:32:60:79:7a: c5:48:92:5d:0b:90:81:bb:fd:af:82:09:23:b4:65: 9b:aa:a5:4d:36:e7:9b:48:64:f2:7a:04:45:a4:36: 4c:9b:5e:7a:a8:70:a1:c5:62:b3:27:8d:f0:bf:ff: f9:4b:ee:2c:9c:cd:5b:0c:60:f6:b1:63:66:ab:be: f5:8e:1a:61:43:44:10:26:5e:76:e2:d8:5a:e5:80: 00:fe:5d:94:73:9a:88:05:77:4c:20:92:78:59:bc: ac:61:30:16:56:26:a8:d3:f8:18:b4:0b:59:e2:4e: 1c:dd:a4:42:7a:ef:03:33:ca:24:b5:8b:18:72:ab: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:DA:05:F7:E0:9B:F8:89:81:09:31:6F:89:1C:62:E9:86:CE:39 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7f:f2:58:cb:af:d9:54:44:8d:3d:b5:12:cc:2e:0d:44:c4: c8:b1:e3:0b:f9:1d:ee:b7:60:81:84:a1:fd:1e:99:21:8f:ae: 41:38:70:4a:81:d9:41:34:5a:46:81:65:3b:91:29:78:ee:e3: e3:63:46:7b:0d:2e:19:ab:64:f4:82:44:24:c0:fc:b5:c8:56: 0a:2d:f8:28:00:33:34:fa:28:c9:8e:ea:6d:c8:c6:fc:44:cc: ce:f1:80:a8:5f:0c:59:fd:2a:64:fb:f3:1b:15:ca:66:e4:df: f3:7b:d1:f8:56:cd:69:d0:c2:e4:71:ea:e0:47:b0:81:c6:d6: 2c:7f:ab:2c:b2:57:96:b8:4b:ee:dc:62:2a:d5:e8:80:4b:82: da:a9:40:f1:73:f5:fe:62:7d:16:ee:a1:89:f8:15:f7:e8:9a: d0:37:b6:e5:f3:e0:35:2c:38:f5:32:f0:dc:2e:18:71:8f:38: b4:e7:a8:b9:2c:7f:ca:a5:c5:64:39:7d:29:17:e2:2a:94:d6: 9c:ec:fa:ee:70:d2:a7:4b:7a:bd:05:3e:fa:9b:fa:e1:b9:e7: f1:56:b3:be:b6:82:0f:e1:fa:6d:2c:11:55:29:9f:c2:2c:c7: db:b5:d2:6c:3b:05:e3:9f:00:70:a3:c7:41:bd:de:f9:f9:56: e2:fb:30:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5ssGwCg5h860uYCPMtpUmvcr2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNjA0MTgwNzE3MThaFw0yNjA0MjEwOTIzMThaMDMxMTAvBgNV BAMTKDc3MDdEQTA1RjdFMDlCRjg4OTgxMDkzMTZGODkxQzYyRTk4NkNFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDqBW9Yt3QhjNJ2+uy1qc5fS+ 3fXqxAIhw5y0B2CGJtQL2z4rGHEMbFSMI/5P2zMPvjXycpXs0ZmiPqS3nx0l6EWg Ls4Y6tQh8pesirk/EwT14KogVcUH0A+hW2j88UJSDdt/wsaDsif2dMTfebbawnvE JVcbqAQ06opwjCE4e6jmMmB5esVIkl0LkIG7/a+CCSO0ZZuqpU0255tIZPJ6BEWk NkybXnqocKHFYrMnjfC///lL7iyczVsMYPaxY2arvvWOGmFDRBAmXnbi2FrlgAD+ XZRzmogFd0wgknhZvKxhMBZWJqjT+Bi0C1niThzdpEJ67wMzyiS1ixhyq/VPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwfaBffgm/iJgQkxb4kcYumGzjkwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp/8ljLr9lURI09tRLMLg1ExMix4wv5He63 YIGEof0emSGPrkE4cEqB2UE0WkaBZTuRKXju4+NjRnsNLhmrZPSCRCTA/LXIVgot +CgAMzT6KMmO6m3IxvxEzM7xgKhfDFn9KmT78xsVymbk3/N70fhWzWnQwuRx6uBH sIHG1ix/qyyyV5a4S+7cYirV6IBLgtqpQPFz9f5ifRbuoYn4FffomtA3tuXz4DUs OPUy8NwuGHGPOLTnqLksf8qlxWQ5fSkX4iqU1pzs+u5w0qdLer0FPvqb+uG55/FW s762gg/h+m0sEVUpn8Isx9u10mw7BeOfAHCjx0G93vn5VuL7MNk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:07 2026 by rpki-client