$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: 0g4YGrnO+pS3mSUJHV5jrOdv+PhLemMa5Sz1VNp8xmw= Subject key identifier: 00:FC:51:DB:4E:E1:DF:25:41:A4:06:7B:CF:40:A4:7B:E7:5F:D9:42 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 6D6EE5E61FE0D75973D9C9F712FEE1A045A29481 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 021A Signing time: Wed 15 Apr 2026 20:21:09 +0000 Manifest this update: Wed 15 Apr 2026 20:16:09 +0000 Manifest next update: Sun 19 Apr 2026 03:20:09 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: uHIVslBFm4iJeLNa3mXDs1DUCKY6CksRLVmBbszAc+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6e:e5:e6:1f:e0:d7:59:73:d9:c9:f7:12:fe:e1:a0:45:a2:94:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Apr 15 20:16:09 2026 GMT Not After : Apr 19 03:20:09 2026 GMT Subject: CN=00FC51DB4EE1DF2541A4067BCF40A47BE75FD942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:c1:b4:b8:1c:ce:87:ff:e7:d0:3e:7e:82: 6e:4e:ff:bc:91:43:98:c3:2e:9a:7b:1d:26:33:af: 33:0b:5e:de:a6:ef:b0:ea:6c:a6:f8:81:2d:2e:1c: 6f:6d:eb:95:6e:f1:95:67:b4:bb:05:11:7b:49:3b: c3:ff:57:a1:6c:94:e0:d1:0a:01:fd:3c:00:77:e0: 77:3e:cb:e4:9a:52:d6:77:c9:37:28:2c:9c:be:df: 2c:fa:d0:3b:f8:fd:c4:75:35:4d:c0:a1:eb:f9:65: 14:99:5a:3f:d7:bd:d4:af:c8:4c:2b:c7:37:12:47: be:d4:5e:53:d5:72:05:3e:ee:df:3e:53:a3:c4:83: 10:12:82:d7:fa:d6:d7:6d:82:d4:3a:ef:d3:7e:51: b4:e8:15:6a:3b:68:89:96:bf:f8:df:e5:86:f7:6b: 4c:22:7a:f7:15:29:07:2d:c3:e5:23:3f:b5:69:7b: 36:ea:9c:49:a6:ac:a6:ed:68:d4:9f:7a:d9:3d:63: 3f:74:8e:21:72:aa:55:1c:a0:50:b3:38:ca:cf:e8: bc:48:a1:e1:86:3c:e4:c1:54:ec:32:08:eb:e8:0d: b9:ca:f7:0f:88:b5:ec:cb:ae:38:d3:cc:3e:27:d8: b7:1c:70:2e:1a:42:e8:3f:b3:7e:1a:3b:58:0a:19: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FC:51:DB:4E:E1:DF:25:41:A4:06:7B:CF:40:A4:7B:E7:5F:D9:42 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:54:69:11:4d:95:05:9b:c8:2b:ec:4f:17:95:13:6b:b9:e1: cd:74:97:05:86:3d:96:1a:c7:6b:50:16:20:46:5c:bc:e3:cd: cb:03:1e:9c:cd:da:a8:19:5a:5b:57:3c:5f:fd:c8:17:00:c8: 24:fa:f9:b8:36:45:84:87:65:fc:4a:87:47:93:03:a9:71:18: 94:e6:11:26:89:20:e2:64:b2:b6:d5:1f:3c:42:01:07:bf:f5: 45:96:b8:d3:67:9f:04:1d:eb:24:a5:47:ea:7e:18:b9:27:23: e9:14:a4:22:27:6a:4f:73:69:79:5d:c3:3a:fe:00:79:7c:6d: 84:f3:14:22:79:d7:6d:a4:ee:38:a9:9e:98:9c:3e:0d:02:99: e0:9e:f9:49:ba:a9:e7:58:8f:7d:23:97:72:46:a0:64:c6:2f: fe:88:58:9c:b2:4f:da:36:59:f6:da:56:5a:0c:2f:dc:ff:69: f2:1e:cc:f1:35:0f:cf:5f:9b:27:ff:b0:2b:70:11:6b:29:20: 66:9e:91:a8:5e:68:e6:7d:51:06:e5:0f:9c:76:2b:82:d7:c2: 6c:ea:3c:82:ce:98:bc:7c:1e:a2:a0:c2:8c:2d:b4:15:87:03: 1d:ae:2c:5f:e4:d5:8e:b4:b1:54:d2:f2:98:66:f2:f4:44:fb: d2:55:d8:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbW7l5h/g11lz2cn3Ev7hoEWilIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNjA0MTUyMDE2MDlaFw0yNjA0MTkwMzIwMDlaMDMxMTAvBgNV BAMTKDAwRkM1MURCNEVFMURGMjU0MUE0MDY3QkNGNDBBNDdCRTc1RkQ5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXMG0uBzOh//n0D5+gm5O/7yR Q5jDLpp7HSYzrzMLXt6m77DqbKb4gS0uHG9t65Vu8ZVntLsFEXtJO8P/V6FslODR CgH9PAB34Hc+y+SaUtZ3yTcoLJy+3yz60Dv4/cR1NU3Aoev5ZRSZWj/XvdSvyEwr xzcSR77UXlPVcgU+7t8+U6PEgxASgtf61tdtgtQ679N+UbToFWo7aImWv/jf5Yb3 a0wievcVKQctw+UjP7VpezbqnEmmrKbtaNSfetk9Yz90jiFyqlUcoFCzOMrP6LxI oeGGPOTBVOwyCOvoDbnK9w+ItezLrjjTzD4n2LcccC4aQug/s34aO1gKGTGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPxR207h3yVBpAZ7z0Cke+df2UIwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVUaRFNlQWbyCvsTxeVE2u54c10lwWGPZYa x2tQFiBGXLzjzcsDHpzN2qgZWltXPF/9yBcAyCT6+bg2RYSHZfxKh0eTA6lxGJTm ESaJIOJksrbVHzxCAQe/9UWWuNNnnwQd6ySlR+p+GLknI+kUpCInak9zaXldwzr+ AHl8bYTzFCJ5122k7jipnpicPg0CmeCe+Um6qedYj30jl3JGoGTGL/6IWJyyT9o2 WfbaVloML9z/afIezPE1D89fmyf/sCtwEWspIGaekaheaOZ9UQblD5x2K4LXwmzq PILOmLx8HqKgwowttBWHAx2uLF/k1Y60sVTS8phm8vRE+9JV2Mo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:17:28 2026 by rpki-client