$ rpki-client -vvf repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft File: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft (raw, json) Hash identifier: F6hXLAehSMk+vYco87Idl5NcpPx++u0ogsSxYbLRNIQ= Subject key identifier: E9:4F:31:00:A7:F7:60:19:DB:37:F9:FA:E4:76:56:C5:F4:94:90:81 Authority key identifier: 1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE Certificate issuer: /CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Certificate serial: 1221B16651CBF56A381EA04879A46600CD67016C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft Manifest number: 4C Signing time: Fri 17 Apr 2026 13:32:30 +0000 Manifest this update: Fri 17 Apr 2026 13:27:30 +0000 Manifest next update: Tue 21 Apr 2026 00:28:30 +0000 Files and hashes: 1: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl (hash: GINEWFdVhJFjhaDA/7VlETrz+RYDxRCZ/wm2rI6RgIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:21:b1:66:51:cb:f5:6a:38:1e:a0:48:79:a4:66:00:cd:67:01:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Validity Not Before: Apr 17 13:27:30 2026 GMT Not After : Apr 21 00:28:30 2026 GMT Subject: CN=E94F3100A7F76019DB37F9FAE47656C5F4949081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:97:0e:7b:bc:41:ed:74:bb:19:ab:c1:15:d0: 01:a1:87:f3:44:39:88:0d:c4:9d:82:c1:e4:21:39: b6:63:11:33:40:cd:bf:5c:1c:2b:1c:df:16:ec:9c: 8b:1a:a7:99:1e:5f:56:5e:c7:eb:89:4c:f0:c0:d4: 58:88:28:54:b2:84:0e:a3:d9:c7:37:2d:8c:58:17: 92:e9:78:d2:97:d1:25:f6:c5:7e:0a:5c:f0:56:86: d7:d8:4b:7d:84:a8:bc:0d:7b:61:5c:c0:41:5b:50: 9e:3c:be:fd:13:71:72:d3:9e:68:8a:14:03:e6:fe: 5d:b2:9d:f3:2b:fa:2e:9c:47:07:b6:78:8c:9d:75: e5:f9:4d:48:7f:e6:13:3b:66:0f:27:3f:d2:2f:97: 16:ef:94:99:bc:5c:55:0d:8e:65:7a:d1:cb:eb:f6: e9:56:dc:9b:01:ac:c9:4f:1b:11:7e:d0:4a:28:30: ea:c5:39:1a:7c:e5:6d:9f:2a:3a:a7:3e:26:ef:a5: 75:af:df:e4:96:7d:28:70:8b:13:bb:91:1a:03:53: 8b:cf:05:ae:65:d7:a6:94:cd:c6:aa:af:08:37:0d: ce:85:0d:2c:69:04:e0:7c:bd:00:c4:36:35:dd:a4: 66:b8:53:60:9c:92:8f:aa:c0:88:f9:79:05:bb:fb: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:31:00:A7:F7:60:19:DB:37:F9:FA:E4:76:56:C5:F4:94:90:81 X509v3 Authority Key Identifier: keyid:1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:80:07:0b:7f:76:73:c0:cb:46:32:7b:ed:2c:39:b3:cc:6d: 5a:5b:93:f0:32:63:95:78:f0:08:dc:db:08:b8:85:c1:12:03: f4:fe:3e:e8:70:29:bc:78:6f:76:6b:2e:fd:5a:57:74:72:a6: 1c:73:b0:12:55:bf:70:fc:46:d1:ea:fa:43:8f:78:2c:9a:5c: c5:22:a3:27:8f:4c:f6:b1:dd:cb:07:90:02:83:92:30:a0:1c: 66:9e:b5:a7:85:b2:1f:a9:6a:85:8e:f4:d3:06:36:f9:b2:7c: 7c:9f:9b:ff:6b:72:f0:86:a7:39:a5:ef:ba:e8:32:0e:69:2e: d6:51:5e:f3:a3:76:78:7b:dd:ad:b1:d7:3b:ae:8a:9a:41:69: 45:80:66:f9:48:66:9e:68:60:ad:03:01:cd:15:dd:da:fc:7d: 3f:b5:a8:ae:ba:32:eb:41:fb:2a:1d:ea:11:2f:87:c9:df:2e: 65:91:c8:5a:01:33:cc:61:e9:cb:b2:d3:03:9a:38:31:ec:40: ec:50:9a:05:24:2c:84:e8:01:41:80:31:30:49:59:40:be:07: bf:56:3d:8e:fa:11:66:3f:31:5a:a0:53:83:ea:84:ff:8e:9b: 47:d6:8a:db:71:5b:74:b0:dc:42:4c:3a:63:f6:81:ea:1c:7a: cb:09:04:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiGxZlHL9Wo4HqBIeaRmAM1nAWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNF NkZDM0FBRTAeFw0yNjA0MTcxMzI3MzBaFw0yNjA0MjEwMDI4MzBaMDMxMTAvBgNV BAMTKEU5NEYzMTAwQTdGNzYwMTlEQjM3RjlGQUU0NzY1NkM1RjQ5NDkwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlw57vEHtdLsZq8EV0AGhh/NE OYgNxJ2CweQhObZjETNAzb9cHCsc3xbsnIsap5keX1Zex+uJTPDA1FiIKFSyhA6j 2cc3LYxYF5LpeNKX0SX2xX4KXPBWhtfYS32EqLwNe2FcwEFbUJ48vv0TcXLTnmiK FAPm/l2ynfMr+i6cRwe2eIyddeX5TUh/5hM7Zg8nP9IvlxbvlJm8XFUNjmV60cvr 9ulW3JsBrMlPGxF+0EooMOrFORp85W2fKjqnPibvpXWv3+SWfShwixO7kRoDU4vP Ba5l16aUzcaqrwg3Dc6FDSxpBOB8vQDENjXdpGa4U2Ccko+qwIj5eQW7+wKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6U8xAKf3YBnbN/n65HZWxfSUkIEwHwYDVR0j BBgwFoAUHAXHnHdUSi4/VCkOYAfKA+b8Oq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjYyNWJmMi1mM2I2LTRlOWMtODViMC01NWUzYzU0NjdmOWMvMC8xQzA1Qzc5Qzc3 NTQ0QTJFM0Y1NDI5MEU2MDA3Q0EwM0U2RkMzQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNFNkZD M0FBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NB MDNFNkZDM0FBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmABwt/dnPAy0Yye+0sObPMbVpbk/AyY5V4 8Ajc2wi4hcESA/T+PuhwKbx4b3ZrLv1aV3RyphxzsBJVv3D8RtHq+kOPeCyaXMUi oyePTPax3csHkAKDkjCgHGaetaeFsh+paoWO9NMGNvmyfHyfm/9rcvCGpzml77ro Mg5pLtZRXvOjdnh73a2x1zuuippBaUWAZvlIZp5oYK0DAc0V3dr8fT+1qK66MutB +yod6hEvh8nfLmWRyFoBM8xh6cuy0wOaODHsQOxQmgUkLIToAUGAMTBJWUC+B79W PY76EWY/MVqgU4PqhP+Om0fWittxW3Sw3EJMOmP2geocessJBKU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:14:52 2026 by rpki-client