$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: bTbounx3RPf+NH8hlKUEVpsOwg3/N4BfaPAfmpEmIZo= Subject key identifier: 8C:6A:CB:D4:DB:B1:36:96:C6:12:8D:FD:7B:8E:F5:83:39:3D:53:1A Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 5477B1186AFC67A662FD78AE0A728A1FD6A86E22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 6F Signing time: Sun 19 Apr 2026 05:41:38 +0000 Manifest this update: Sun 19 Apr 2026 05:36:38 +0000 Manifest next update: Wed 22 Apr 2026 16:31:38 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: Zp8ZNWVFPhW9KqmQlq6UpicLje50wZjoQGgd8TLnRWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:77:b1:18:6a:fc:67:a6:62:fd:78:ae:0a:72:8a:1f:d6:a8:6e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Apr 19 05:36:38 2026 GMT Not After : Apr 22 16:31:38 2026 GMT Subject: CN=8C6ACBD4DBB13696C6128DFD7B8EF583393D531A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:0b:a1:ea:b3:d8:2d:71:28:5a:aa:60:61: f1:3e:ab:b9:cb:96:80:09:60:51:86:f1:86:49:6e: 31:e0:95:3a:cd:33:69:bd:5f:d1:de:ab:7e:24:1b: 11:e7:17:51:49:b0:c7:f3:a1:fc:e3:61:15:95:0b: 3e:3b:05:36:8e:e7:b8:38:56:37:84:36:3c:5c:3a: 73:89:ea:19:66:02:25:c4:64:55:30:3e:0e:6c:33: 15:ef:1b:4b:3d:dd:ad:64:dd:9b:e0:5f:af:e8:03: da:e8:6f:11:3c:9b:a5:90:4a:fc:6b:65:ae:18:aa: f6:8c:0d:80:5f:bc:f6:a1:30:3d:16:7a:8d:1b:5b: 8b:14:e9:7d:69:cb:4e:8c:96:68:87:1a:33:4b:d6: 86:b2:f0:6f:5b:d9:ce:0a:8e:9a:0d:e5:f9:9e:e2: 42:a9:c2:3a:ef:ac:c9:67:b3:8e:f3:17:c5:b4:1b: 22:4c:0c:74:e1:44:36:21:67:d4:70:d7:74:37:56: b2:fc:27:b4:39:43:4d:9e:fc:f1:bc:74:ac:fd:41: a3:b3:ea:a0:d7:5b:74:03:ff:13:d2:ed:6e:79:8e: 3e:0c:99:7b:56:33:a1:1c:79:6b:d4:48:7f:1f:5f: bf:c0:2f:a8:57:40:44:1e:5d:cf:5d:a1:04:0e:44: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6A:CB:D4:DB:B1:36:96:C6:12:8D:FD:7B:8E:F5:83:39:3D:53:1A X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b6:00:ad:7b:d7:4d:ee:93:02:1a:1e:dc:34:cf:db:2b:12: ae:4b:2d:35:c1:eb:9d:d4:49:be:56:fc:81:59:37:79:76:7a: f9:96:a0:14:90:9d:47:c3:ad:e8:1c:cf:14:cd:cd:25:ed:2b: ce:4b:2b:0a:ed:66:99:52:c8:ae:53:19:55:43:20:1c:43:25: 63:cc:63:f6:21:14:15:19:a7:3f:e9:e7:00:3f:93:e8:fa:76: fa:c3:7f:a1:e5:67:61:b7:be:d5:ef:91:c9:7e:71:87:9a:99: 2b:45:f5:6d:c6:86:ae:5d:78:e1:f6:d9:3f:ea:cb:97:46:54: 63:9f:52:78:1e:b1:9c:e0:d8:72:a0:40:45:26:ad:70:78:f5: 52:08:86:1b:63:7a:42:fb:64:a4:8b:15:ce:67:80:bb:c3:f8: 4f:a2:14:ed:ac:a1:c1:2c:49:e4:04:d9:23:7a:13:b2:9d:5c: 3a:70:04:5c:cd:68:d5:95:41:f5:81:7c:47:c8:16:b8:b4:ee: f5:dc:d1:cf:66:6c:33:bc:cd:a9:70:6b:28:d2:04:9d:3b:3f: 91:45:56:e5:0a:db:c6:7b:6e:28:41:3d:3a:05:67:39:ad:09: 36:bb:3b:5b:c3:1c:21:ea:d3:fc:e5:4b:85:4c:2d:b4:a5:2c: 64:34:9b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHexGGr8Z6Zi/XiuCnKKH9aobiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNjA0MTkwNTM2MzhaFw0yNjA0MjIxNjMxMzhaMDMxMTAvBgNV BAMTKDhDNkFDQkQ0REJCMTM2OTZDNjEyOERGRDdCOEVGNTgzMzkzRDUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8Auh6rPYLXEoWqpgYfE+q7nL loAJYFGG8YZJbjHglTrNM2m9X9Heq34kGxHnF1FJsMfzofzjYRWVCz47BTaO57g4 VjeENjxcOnOJ6hlmAiXEZFUwPg5sMxXvG0s93a1k3ZvgX6/oA9robxE8m6WQSvxr Za4YqvaMDYBfvPahMD0Weo0bW4sU6X1py06MlmiHGjNL1oay8G9b2c4KjpoN5fme 4kKpwjrvrMlns47zF8W0GyJMDHThRDYhZ9Rw13Q3VrL8J7Q5Q02e/PG8dKz9QaOz 6qDXW3QD/xPS7W55jj4MmXtWM6EceWvUSH8fX7/AL6hXQEQeXc9doQQORFNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGrL1NuxNpbGEo39e471gzk9UxowHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+2AK17103ukwIaHtw0z9srEq5LLTXB653U Sb5W/IFZN3l2evmWoBSQnUfDregczxTNzSXtK85LKwrtZplSyK5TGVVDIBxDJWPM Y/YhFBUZpz/p5wA/k+j6dvrDf6HlZ2G3vtXvkcl+cYeamStF9W3Ghq5deOH22T/q y5dGVGOfUngesZzg2HKgQEUmrXB49VIIhhtjekL7ZKSLFc5ngLvD+E+iFO2socEs SeQE2SN6E7KdXDpwBFzNaNWVQfWBfEfIFri07vXc0c9mbDO8zalwayjSBJ07P5FF VuUK28Z7bihBPToFZzmtCTa7O1vDHCHq0/zlS4VMLbSlLGQ0m4Q= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:09 2026 by rpki-client