$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: uk5erT5tY9niCuyqpCsbxzNYrfh6Vw+rzFlgImxyNYg= Subject key identifier: EB:68:92:6A:36:DE:D3:7A:43:84:51:AA:70:0B:25:E8:90:4E:FF:8F Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 6F9EB96C9079760EB310890DDB2FEF4F76721494 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 16:50:45 +0000 Manifest this update: Fri 17 Apr 2026 16:45:45 +0000 Manifest next update: Tue 21 Apr 2026 03:42:45 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 3yX5SHpRX8CGCvPZkt1BsZtAaZeSepDi8DKmOCQGpQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9e:b9:6c:90:79:76:0e:b3:10:89:0d:db:2f:ef:4f:76:72:14:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Apr 17 16:45:45 2026 GMT Not After : Apr 21 03:42:45 2026 GMT Subject: CN=EB68926A36DED37A438451AA700B25E8904EFF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:c9:e4:f3:37:7e:eb:89:4e:63:53:e6:95: 09:ce:f7:ac:64:45:d3:f0:38:71:61:52:3b:eb:3e: 6f:76:97:03:e7:ed:f5:79:f6:12:9c:c2:22:71:6f: b6:e6:e6:a2:3f:6f:0a:ae:fa:9d:a5:05:69:95:e6: 32:93:76:f0:0d:69:0b:74:e4:58:53:66:1d:75:a1: c6:e5:ef:a3:42:20:ac:a6:c2:57:67:71:66:68:81: b8:65:b6:79:31:1a:df:12:b3:97:d0:54:32:ed:72: b1:78:fc:ef:33:c9:f8:d4:1d:55:fe:e6:bd:61:8a: 55:fa:33:e0:34:73:8a:75:c3:26:f9:0e:0a:3f:c5: 7f:5d:f4:b4:c8:7b:ba:01:4f:02:81:66:0c:c2:ec: d1:e0:16:91:69:21:55:ae:7c:b6:45:3e:6c:c1:a8: bd:41:a1:e8:54:6f:97:97:55:9a:83:04:9d:fe:6f: 71:cb:4e:d4:30:1a:d4:c4:65:54:bf:8a:c2:0d:f6: 15:95:a4:79:21:f1:e3:c4:55:8b:8e:c5:2f:85:f7: a2:6a:2e:55:dc:e4:6f:22:7f:cc:3e:fb:a7:35:c9: d1:3d:dc:1e:bf:2e:c0:79:3a:e5:c4:c0:10:f7:3b: fc:69:96:b4:92:2c:ad:0b:79:8d:78:9d:54:01:91: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:68:92:6A:36:DE:D3:7A:43:84:51:AA:70:0B:25:E8:90:4E:FF:8F X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:37:f3:da:08:07:85:44:d0:d3:d0:d0:ad:5c:9e:69:f3: 9f:43:33:76:64:b7:60:4d:07:91:56:4e:f5:7e:dc:cc:b4:b1: 94:7a:99:03:71:bb:0a:ed:84:4f:b1:01:67:a2:f4:7a:4f:64: 73:5f:7f:95:8a:21:06:e6:05:cd:3c:d5:57:18:eb:5d:0b:13: 0e:41:6a:e2:c1:53:71:d7:d3:53:93:55:80:09:7c:ad:91:0b: 85:e9:19:4a:2e:ca:fa:35:67:bd:f5:f6:97:fd:77:f6:84:e0: fd:06:40:46:1f:70:38:e2:2e:95:50:4e:14:ea:23:15:2c:ae: ce:e4:0f:c7:ae:88:ba:f2:94:c4:f4:96:ae:00:33:c6:b2:85: c8:aa:0f:dc:60:ff:95:10:ed:82:e7:3d:ca:2d:46:f8:aa:18: e8:41:0e:39:b7:2f:6d:f9:38:fa:66:d3:86:e8:36:fe:ca:22: 7d:ea:e2:9b:78:65:f9:81:90:63:70:bd:21:da:77:15:f2:d0: 9a:0e:00:c7:67:37:9b:eb:4a:ff:ad:28:7a:25:30:c1:9f:48: 02:9d:0d:49:c4:d8:99:b4:f7:42:24:55:1a:ba:7a:91:99:51: 10:33:ab:46:43:ea:f8:67:e9:f9:fd:ba:2a:94:f7:f0:27:ba: ef:c9:79:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb565bJB5dg6zEIkN2y/vT3ZyFJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNjA0MTcxNjQ1NDVaFw0yNjA0MjEwMzQyNDVaMDMxMTAvBgNV BAMTKEVCNjg5MjZBMzZERUQzN0E0Mzg0NTFBQTcwMEIyNUU4OTA0RUZGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dcnk8zd+64lOY1PmlQnO96xk RdPwOHFhUjvrPm92lwPn7fV59hKcwiJxb7bm5qI/bwqu+p2lBWmV5jKTdvANaQt0 5FhTZh11ocbl76NCIKymwldncWZogbhltnkxGt8Ss5fQVDLtcrF4/O8zyfjUHVX+ 5r1hilX6M+A0c4p1wyb5Dgo/xX9d9LTIe7oBTwKBZgzC7NHgFpFpIVWufLZFPmzB qL1BoehUb5eXVZqDBJ3+b3HLTtQwGtTEZVS/isIN9hWVpHkh8ePEVYuOxS+F96Jq LlXc5G8if8w++6c1ydE93B6/LsB5OuXEwBD3O/xplrSSLK0LeY14nVQBkXDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU62iSajbe03pDhFGqcAsl6JBO/48wHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9fN/PaCAeFRNDT0NCtXJ5p859DM3Zkt2BN B5FWTvV+3My0sZR6mQNxuwrthE+xAWei9HpPZHNff5WKIQbmBc081VcY610LEw5B auLBU3HX01OTVYAJfK2RC4XpGUouyvo1Z7319pf9d/aE4P0GQEYfcDjiLpVQThTq IxUsrs7kD8euiLrylMT0lq4AM8ayhciqD9xg/5UQ7YLnPcotRviqGOhBDjm3L235 OPpm04boNv7KIn3q4pt4ZfmBkGNwvSHadxXy0JoOAMdnN5vrSv+tKHolMMGfSAKd DUnE2Jm090IkVRq6epGZURAzq0ZD6vhn6fn9uiqU9/Anuu/JeTQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:46 2026 by rpki-client