$ rpki-client -vvf repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft File: F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft (raw, json) Hash identifier: 4Ax4s662MUNZe3iIFH91qqmvhhIHiksNzkkFIQicuXc= Subject key identifier: 44:14:74:E2:FA:C3:23:F2:55:64:52:E5:A9:D1:D8:9A:FA:11:65:A7 Authority key identifier: F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA Certificate issuer: /CN=F8EA79769F4F98F7D5A723816314CD216D8F01AA Certificate serial: 7A909F86F5578AD5C0D4C8F024EC0CF10CC3FB5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft Manifest number: 05 Signing time: Thu 16 Apr 2026 13:52:12 +0000 Manifest this update: Thu 16 Apr 2026 13:47:12 +0000 Manifest next update: Sun 19 Apr 2026 15:37:12 +0000 Files and hashes: 1: F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl (hash: +U440TJ73fdW5rDkf5aLm659Oy6QJu8eTSAykqPkZv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:90:9f:86:f5:57:8a:d5:c0:d4:c8:f0:24:ec:0c:f1:0c:c3:fb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EA79769F4F98F7D5A723816314CD216D8F01AA Validity Not Before: Apr 16 13:47:12 2026 GMT Not After : Apr 19 15:37:12 2026 GMT Subject: CN=441474E2FAC323F2556452E5A9D1D89AFA1165A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:34:18:58:04:91:26:c9:66:c0:11:49:57: ce:67:f2:dd:dd:5e:27:e2:af:80:42:9a:81:ec:45: 82:6e:21:6c:2b:27:a6:7e:af:d4:de:74:d8:74:df: c5:a9:6e:98:59:01:a9:a2:70:10:21:45:ba:08:bb: 10:e7:a5:64:5d:0c:47:e5:f1:61:c3:1e:d7:9f:ea: ce:eb:75:66:74:48:24:1a:b6:df:85:1c:3b:2f:64: 67:10:5a:f0:be:c5:61:e8:c4:52:2b:f9:d2:9e:57: d2:e0:2b:bd:49:92:27:e8:24:35:94:b6:70:1d:b0: b3:29:87:15:ab:1a:b1:42:36:54:67:e6:6c:eb:77: 7c:f4:2a:fc:61:68:3a:eb:ff:b0:6c:d7:83:d7:db: e3:c3:49:d1:08:30:7f:d7:4d:f8:10:86:ec:41:a2: 16:cd:48:73:b2:25:d4:ad:31:2d:b5:9d:3e:04:e8: 83:21:7b:41:a9:29:14:a7:82:54:e3:7a:f7:96:60: fd:8d:81:8c:b7:b3:7a:30:9a:e6:c4:c2:21:27:d0: 6e:ed:0a:ad:2d:dc:72:8d:57:91:f7:0a:74:31:f2: 30:b0:b1:4f:47:77:54:0f:36:93:f4:d7:15:b6:65: 71:35:81:16:52:ed:9c:41:b7:c5:9a:ae:9e:68:35: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:74:E2:FA:C3:23:F2:55:64:52:E5:A9:D1:D8:9A:FA:11:65:A7 X509v3 Authority Key Identifier: keyid:F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c6:35:f2:ed:9c:60:3c:b9:d8:1d:19:8c:28:f2:fc:5b:f6: cf:1d:2b:58:33:06:3e:1d:53:cc:8c:21:fd:ff:4b:d1:25:86: c7:5f:dd:5f:df:76:d8:bf:7d:0c:1f:3a:d8:0e:1f:cf:84:49: 68:0b:62:78:2c:92:de:3e:eb:76:92:cb:ae:63:e0:b3:a8:d3: 07:3d:6d:65:31:f0:4c:28:93:6f:7b:a6:17:ac:63:69:ab:6c: c6:56:44:77:52:fb:10:dd:12:f2:74:77:58:ec:1a:3a:8a:22: 8f:09:13:58:9c:d0:a6:68:9d:02:74:dc:8d:12:2e:b3:d2:0b: 55:ea:c4:76:f5:e1:62:71:c9:11:19:58:eb:b3:83:f6:82:85: 42:c4:53:38:3a:a0:21:66:90:7f:72:1b:d2:ff:c2:12:1c:df: e4:4b:a9:64:80:ff:ae:b8:c7:ef:0e:38:35:d5:37:6b:fb:d0: bf:12:6c:91:c0:1c:96:c7:89:65:4b:e1:c9:b1:9d:08:66:f3: f1:47:1f:60:ea:1d:5d:3a:00:c3:aa:36:05:07:45:e3:cc:ec: 46:92:c9:28:17:0c:d7:a8:d1:0f:72:be:80:d5:27:b2:26:4f: 6d:11:ec:67:21:c3:c1:6b:28:b3:c4:3b:f9:ae:1f:67:f9:53: b3:4a:9a:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepCfhvVXitXA1MjwJOwM8QzD+10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENEMjE2 RDhGMDFBQTAeFw0yNjA0MTYxMzQ3MTJaFw0yNjA0MTkxNTM3MTJaMDMxMTAvBgNV BAMTKDQ0MTQ3NEUyRkFDMzIzRjI1NTY0NTJFNUE5RDFEODlBRkExMTY1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0zQYWASRJslmwBFJV85n8t3d Xifir4BCmoHsRYJuIWwrJ6Z+r9TedNh038WpbphZAamicBAhRboIuxDnpWRdDEfl 8WHDHtef6s7rdWZ0SCQatt+FHDsvZGcQWvC+xWHoxFIr+dKeV9LgK71JkifoJDWU tnAdsLMphxWrGrFCNlRn5mzrd3z0KvxhaDrr/7Bs14PX2+PDSdEIMH/XTfgQhuxB ohbNSHOyJdStMS21nT4E6IMhe0GpKRSnglTjeveWYP2NgYy3s3owmubEwiEn0G7t Cq0t3HKNV5H3CnQx8jCwsU9Hd1QPNpP01xW2ZXE1gRZS7ZxBt8Warp5oNdnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURBR04vrDI/JVZFLlqdHYmvoRZacwHwYDVR0j BBgwFoAU+Op5dp9PmPfVpyOBYxTNIW2PAaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDVhMDNlYi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMS9GOEVBNzk3NjlG NEY5OEY3RDVBNzIzODE2MzE0Q0QyMTZEOEYwMUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENEMjE2RDhG MDFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENE MjE2RDhGMDFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXGNfLtnGA8udgdGYwo8vxb9s8dK1gzBj4d U8yMIf3/S9Elhsdf3V/fdti/fQwfOtgOH8+ESWgLYngskt4+63aSy65j4LOo0wc9 bWUx8Ewok297phesY2mrbMZWRHdS+xDdEvJ0d1jsGjqKIo8JE1ic0KZonQJ03I0S LrPSC1XqxHb14WJxyREZWOuzg/aChULEUzg6oCFmkH9yG9L/whIc3+RLqWSA/664 x+8OODXVN2v70L8SbJHAHJbHiWVL4cmxnQhm8/FHH2DqHV06AMOqNgUHRePM7EaS ySgXDNeo0Q9yvoDVJ7ImT20R7Gchw8FrKLPEO/muH2f5U7NKmpI= -----END CERTIFICATE-----Generated at Fri Apr 17 08:14:45 2026 by rpki-client