$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: GFvbFKbd3u1bPMdRcC+ffjvRWdZPx8rpy/6iEFrc/cU= Subject key identifier: B0:E7:8C:BC:60:AC:3C:99:2E:7D:87:B2:0F:5C:31:B5:CE:3B:A5:A2 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 3BC44B83F99D7BC1EF15C26750D2ACEEC1EBAC65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: CF Signing time: Fri 17 Apr 2026 17:52:14 +0000 Manifest this update: Fri 17 Apr 2026 17:47:14 +0000 Manifest next update: Mon 20 Apr 2026 19:13:14 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: JUUMPwehx55fBEWrrwC8Qkp8VgkshxGzMqNuZEj8kkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c4:4b:83:f9:9d:7b:c1:ef:15:c2:67:50:d2:ac:ee:c1:eb:ac:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Apr 17 17:47:14 2026 GMT Not After : Apr 20 19:13:14 2026 GMT Subject: CN=B0E78CBC60AC3C992E7D87B20F5C31B5CE3BA5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:5e:0e:db:06:2b:4c:b1:dd:f8:cf:ff:e9: b1:9d:ee:09:06:4e:00:57:95:ca:c5:77:b3:10:1a: b8:fe:ad:7a:67:95:4b:bd:e2:04:a3:c8:6d:1f:61: cd:b4:23:e6:d3:52:cb:d4:85:73:4e:d0:ce:8c:c4: 77:f1:97:f2:76:2d:fa:70:7d:db:95:e5:75:8d:cf: a5:07:14:ab:77:76:bc:cb:a2:3b:04:00:f2:3a:be: 53:fc:dd:2f:2d:54:c3:a3:b9:f6:40:5f:96:dd:db: a6:1d:a5:ba:44:0a:c7:4b:5b:af:1a:7a:1c:88:dd: 9e:43:41:80:99:a3:73:19:20:6d:80:98:d4:14:55: 37:69:aa:32:2a:df:55:20:7b:1d:a7:6b:7d:76:8f: 80:52:a7:04:03:5f:b3:31:91:85:f7:6b:4f:d2:d6: a6:40:d4:e4:e2:1e:80:c5:c0:9f:bf:fb:60:a2:4a: 34:84:69:ec:29:55:5d:4f:9b:30:cc:80:a2:6d:c7: 9c:73:3a:75:9f:fa:c3:99:5c:16:3c:48:c3:81:d7: 83:29:1f:b0:11:bc:49:d7:58:29:7d:e7:f3:8a:a5: 71:be:24:14:8c:b9:e6:12:f7:0b:cc:a5:b0:2c:21: 6e:d8:2c:26:2f:8b:84:d6:8f:30:43:6a:b7:cc:07: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:8C:BC:60:AC:3C:99:2E:7D:87:B2:0F:5C:31:B5:CE:3B:A5:A2 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f3:5b:48:5a:ad:fb:14:48:85:bc:6a:de:ea:c1:7e:a3:73: 12:0d:72:9d:d0:50:ac:fe:43:27:24:cd:77:a1:ba:cb:7d:94: 62:d4:87:e9:22:df:2c:aa:c0:71:77:0d:6b:0c:32:f4:a7:b9: f3:af:9a:1d:44:a7:08:35:d1:cc:b3:29:69:cd:9f:6e:da:f8: d3:fb:02:6a:52:87:bc:19:65:49:59:3b:55:76:c2:26:dd:16: a0:07:5e:0d:87:2f:53:47:bd:ca:78:1f:d2:92:3a:da:10:d1: a6:fb:1d:21:d4:29:21:74:ea:41:84:8d:0e:d6:6c:fa:c5:85: 6f:33:26:dc:fa:c4:5f:fd:88:aa:3b:a2:06:d0:44:3f:80:39: 09:e2:1a:91:7a:6e:0b:7d:69:c3:f7:47:af:37:14:dd:7c:1d: 51:ec:ca:e5:35:44:6c:1a:28:d1:20:45:c1:8d:bc:92:1e:19: a3:bd:ed:72:12:38:d4:9f:a9:24:0c:ac:e7:03:20:36:4c:3e: 7b:cd:7c:26:4c:e1:d5:9f:0f:25:8f:4b:24:80:3d:44:a7:32: bf:01:80:65:be:0b:3f:ce:3e:2f:9a:d2:22:d9:3d:9d:1c:d6: 8a:fc:aa:8c:6b:fe:01:9b:de:25:c9:b1:58:16:3e:39:27:9a: 93:3e:d0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8RLg/mde8HvFcJnUNKs7sHrrGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNjA0MTcxNzQ3MTRaFw0yNjA0MjAxOTEzMTRaMDMxMTAvBgNV BAMTKEIwRTc4Q0JDNjBBQzNDOTkyRTdEODdCMjBGNUMzMUI1Q0UzQkE1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQX14O2wYrTLHd+M//6bGd7gkG TgBXlcrFd7MQGrj+rXpnlUu94gSjyG0fYc20I+bTUsvUhXNO0M6MxHfxl/J2Lfpw fduV5XWNz6UHFKt3drzLojsEAPI6vlP83S8tVMOjufZAX5bd26YdpbpECsdLW68a ehyI3Z5DQYCZo3MZIG2AmNQUVTdpqjIq31Ugex2na312j4BSpwQDX7MxkYX3a0/S 1qZA1OTiHoDFwJ+/+2CiSjSEaewpVV1PmzDMgKJtx5xzOnWf+sOZXBY8SMOB14Mp H7ARvEnXWCl95/OKpXG+JBSMueYS9wvMpbAsIW7YLCYvi4TWjzBDarfMBynVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOeMvGCsPJkufYeyD1wxtc47paIwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjzW0harfsUSIW8at7qwX6jcxINcp3QUKz+ QyckzXehust9lGLUh+ki3yyqwHF3DWsMMvSnufOvmh1Epwg10cyzKWnNn27a+NP7 AmpSh7wZZUlZO1V2wibdFqAHXg2HL1NHvcp4H9KSOtoQ0ab7HSHUKSF06kGEjQ7W bPrFhW8zJtz6xF/9iKo7ogbQRD+AOQniGpF6bgt9acP3R683FN18HVHsyuU1RGwa KNEgRcGNvJIeGaO97XISONSfqSQMrOcDIDZMPnvNfCZM4dWfDyWPSySAPUSnMr8B gGW+Cz/OPi+a0iLZPZ0c1or8qoxr/gGb3iXJsVgWPjknmpM+0B4= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:15 2026 by rpki-client