$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: +x41HFqvC1wKfcRAYnRBoPPRwX6kevxeNXCDDEpoeXY= Subject key identifier: 47:B6:0F:59:3A:4A:34:DC:35:C4:42:C9:78:8D:A0:6A:73:A8:15:C9 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 06DE62362B1B1BB8BCB004397708EC1E326429CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 018D Signing time: Sun 19 Apr 2026 05:51:05 +0000 Manifest this update: Sun 19 Apr 2026 05:46:05 +0000 Manifest next update: Wed 22 Apr 2026 13:37:05 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: e+dn/lE53j9LcEvaz3Y0VqoHS4GrRiOwPC+9n1Jlniw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:de:62:36:2b:1b:1b:b8:bc:b0:04:39:77:08:ec:1e:32:64:29:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Apr 19 05:46:05 2026 GMT Not After : Apr 22 13:37:05 2026 GMT Subject: CN=47B60F593A4A34DC35C442C9788DA06A73A815C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:54:6f:02:0a:2b:f0:fa:ff:22:f2:fd:5c: 7c:76:5b:87:4a:dc:e4:6a:7a:81:1d:62:e0:66:13: 74:72:f7:c9:03:1f:d5:02:06:e0:8e:de:25:1d:f0: 82:d0:07:64:db:52:9d:ee:19:ad:59:42:bd:aa:cd: c4:9c:68:64:a2:05:4f:6e:87:5c:89:3d:77:71:52: 34:17:90:1e:c4:84:cd:7f:69:b7:ba:b6:ff:1a:bf: 85:cf:20:6b:96:13:31:4b:0e:f8:f1:ff:2c:89:ac: c2:d3:38:95:09:c1:e5:ea:62:c9:db:82:be:de:2e: bd:81:14:1e:8f:cd:57:b8:43:86:1f:c1:50:a2:dd: 00:4e:9e:4f:13:04:de:ff:0e:a2:7a:96:64:97:71: 74:61:ed:29:16:37:60:65:a5:7d:29:2a:02:11:24: 1d:be:b9:7f:11:d2:b0:c3:8f:eb:a8:5a:ec:dd:42: 52:a0:13:c6:55:c0:1d:61:50:ec:86:86:19:13:58: 21:f5:fe:bb:ad:fc:28:42:56:aa:84:2e:cf:c8:0d: 5b:29:47:f4:24:6a:f6:53:8e:e0:0b:98:7f:b4:11: 7c:bb:2e:be:33:40:e0:89:05:99:d3:dd:0d:ce:29: af:7e:07:81:d7:cd:5b:55:76:23:95:95:fd:01:31: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:0F:59:3A:4A:34:DC:35:C4:42:C9:78:8D:A0:6A:73:A8:15:C9 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8a:2b:49:d4:31:bf:9a:af:39:dd:7a:07:97:f7:a9:e1:19: 23:4c:aa:83:7c:70:6a:ca:03:2c:70:6f:62:ea:a8:76:59:f6: f0:14:e9:b1:30:68:61:8e:80:16:6f:5a:15:77:03:fd:25:76: 88:c4:b4:14:6a:66:ea:9c:27:89:56:31:52:f9:8c:12:88:8c: 9b:de:90:e0:30:9a:0f:f8:7b:60:ae:3b:9c:3b:1d:f2:60:09: 77:72:a9:6a:f7:b1:c1:16:55:9b:f7:84:fc:de:ea:6f:e3:18: 0a:5c:e0:91:e8:fc:19:17:b4:57:a5:22:3b:7d:71:6c:ce:bd: 22:36:d4:a9:8a:c0:96:2d:5c:a5:78:63:19:bf:75:6a:f4:32: 83:75:83:9f:4b:2f:36:16:1c:68:d8:83:e8:e8:06:9e:b6:2d: 50:5c:64:0a:94:49:bd:bb:a0:95:7a:37:5e:22:2b:62:2a:11: 98:35:e0:76:70:3f:33:2b:d7:4a:06:6b:57:de:1d:82:1c:15: e4:a3:d3:88:71:22:b8:6f:7c:43:43:48:66:c1:60:8b:2c:d4: 85:63:ce:ac:4a:16:ce:b7:aa:4c:17:88:3e:99:67:e8:e6:8c: b4:68:da:c8:6e:a3:24:e7:9e:a6:65:9b:27:d3:94:a1:e1:db: e4:75:59:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt5iNisbG7i8sAQ5dwjsHjJkKcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNjA0MTkwNTQ2MDVaFw0yNjA0MjIxMzM3MDVaMDMxMTAvBgNV BAMTKDQ3QjYwRjU5M0E0QTM0REMzNUM0NDJDOTc4OERBMDZBNzNBODE1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEFRvAgor8Pr/IvL9XHx2W4dK 3ORqeoEdYuBmE3Ry98kDH9UCBuCO3iUd8ILQB2TbUp3uGa1ZQr2qzcScaGSiBU9u h1yJPXdxUjQXkB7EhM1/abe6tv8av4XPIGuWEzFLDvjx/yyJrMLTOJUJweXqYsnb gr7eLr2BFB6PzVe4Q4YfwVCi3QBOnk8TBN7/DqJ6lmSXcXRh7SkWN2BlpX0pKgIR JB2+uX8R0rDDj+uoWuzdQlKgE8ZVwB1hUOyGhhkTWCH1/rut/ChCVqqELs/IDVsp R/QkavZTjuALmH+0EXy7Lr4zQOCJBZnT3Q3OKa9+B4HXzVtVdiOVlf0BMfILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR7YPWTpKNNw1xELJeI2ganOoFckwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmKK0nUMb+arzndegeX96nhGSNMqoN8cGrK Ayxwb2LqqHZZ9vAU6bEwaGGOgBZvWhV3A/0ldojEtBRqZuqcJ4lWMVL5jBKIjJve kOAwmg/4e2CuO5w7HfJgCXdyqWr3scEWVZv3hPze6m/jGApc4JHo/BkXtFelIjt9 cWzOvSI21KmKwJYtXKV4Yxm/dWr0MoN1g59LLzYWHGjYg+joBp62LVBcZAqUSb27 oJV6N14iK2IqEZg14HZwPzMr10oGa1feHYIcFeSj04hxIrhvfENDSGbBYIss1IVj zqxKFs63qkwXiD6ZZ+jmjLRo2shuoyTnnqZlmyfTlKHh2+R1WRg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:48 2026 by rpki-client