$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: q9V7iI3t39sIA5MZHVT0JX92hH099X8sO8uMPUkAxjo= Subject key identifier: 6B:8B:13:B2:D4:85:26:52:28:37:97:95:1F:DB:CD:64:9B:57:B3:0A Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 0B2F6B9838023D0047998425E4DF8FBCC7BF5298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0556 Signing time: Sat 18 Apr 2026 17:12:27 +0000 Manifest this update: Sat 18 Apr 2026 17:07:27 +0000 Manifest next update: Wed 22 Apr 2026 01:39:27 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: sjXKUHxjxeQWstypXJq6c6uzOiP7YLBuApz1TfNPtHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2f:6b:98:38:02:3d:00:47:99:84:25:e4:df:8f:bc:c7:bf:52:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Apr 18 17:07:27 2026 GMT Not After : Apr 22 01:39:27 2026 GMT Subject: CN=6B8B13B2D4852652283797951FDBCD649B57B30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:56:09:60:dd:fc:fb:f3:24:e9:f9:8d:8a: 27:c9:c7:8c:5a:db:a5:af:4b:dc:6d:d0:c6:2b:72: 80:4e:ce:84:f7:2c:ae:91:d2:37:c8:18:5a:20:c4: fb:9d:d4:2d:e6:24:e7:08:cd:4d:d8:65:29:66:ba: 9a:24:6c:df:b5:22:7a:8f:bd:e7:37:e3:8c:ed:a7: 3a:b0:44:21:d1:8d:da:5e:6b:a2:dd:c5:da:5f:27: b8:2b:46:ef:c0:eb:ef:32:d8:b8:35:4b:9e:63:71: c9:13:ed:79:e6:5f:1b:a0:24:d4:ae:ea:fd:ec:75: 0c:17:28:1e:5c:45:4b:15:57:3c:0b:af:ac:da:16: dd:4d:99:29:4d:91:ab:29:bf:3b:13:c2:96:10:b5: f8:9a:2a:2c:a2:b5:ac:fe:b6:85:b6:a3:ef:2a:58: 8e:c1:78:a9:82:b2:32:88:02:a5:2c:bf:e4:6e:f6: 9d:28:ec:25:1b:0a:c3:63:97:ac:5c:67:cc:37:73: b3:2c:65:b1:c6:21:4f:30:c7:ee:b7:76:5b:a5:35: b8:03:07:59:2d:62:3b:7c:57:08:44:6a:19:d4:91: 4f:10:07:d2:f2:6e:cd:93:5d:12:24:43:b8:20:b4: cb:63:44:f4:8d:64:5f:f5:33:da:47:b5:25:37:42: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8B:13:B2:D4:85:26:52:28:37:97:95:1F:DB:CD:64:9B:57:B3:0A X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:24:fc:76:c1:5e:e1:69:dd:67:38:e0:89:42:48:35:fd: db:5a:be:bf:38:96:25:68:30:3f:58:47:70:dd:5d:cf:3e:4a: d9:b5:14:7c:62:13:24:54:48:b7:ca:f2:33:96:86:39:98:98: 75:71:02:50:91:44:f6:96:e4:a5:c6:6b:94:21:38:d8:ed:b2: fa:bd:2b:f1:b2:fb:c8:3b:9a:b0:85:f8:b1:c0:3e:9e:e5:22: 04:f0:9b:98:75:18:e3:16:cd:ae:45:23:44:23:13:15:a0:89: e0:01:f9:30:6f:3c:c7:82:52:7a:d9:ae:9d:f8:43:8c:f8:29: 8a:d1:7c:43:ac:c5:19:8e:97:cd:58:31:17:56:d1:13:45:09: 1c:64:84:ac:2a:18:ed:ed:49:05:fb:70:72:e1:72:a1:13:05: 86:40:d8:a8:70:fe:f6:56:0b:41:2e:00:8d:8c:c0:cf:c6:f1: 29:4b:32:f0:a6:e3:42:02:d6:7e:6e:62:0e:26:1f:e7:08:7a: e1:5c:b5:6b:c1:ec:31:b4:cc:c3:5b:b7:87:34:ec:03:84:fa: ce:5e:3f:6c:e9:60:c8:cc:01:9a:0c:f4:fd:b4:85:2e:20:de: 1c:53:8b:bb:ef:6e:9b:53:a2:90:e4:af:56:f0:7a:2d:a3:94: cf:6c:73:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCy9rmDgCPQBHmYQl5N+PvMe/UpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNjA0MTgxNzA3MjdaFw0yNjA0MjIwMTM5MjdaMDMxMTAvBgNV BAMTKDZCOEIxM0IyRDQ4NTI2NTIyODM3OTc5NTFGREJDRDY0OUI1N0IzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiVYJYN38+/Mk6fmNiifJx4xa 26WvS9xt0MYrcoBOzoT3LK6R0jfIGFogxPud1C3mJOcIzU3YZSlmupokbN+1InqP vec344ztpzqwRCHRjdpea6LdxdpfJ7grRu/A6+8y2Lg1S55jcckT7XnmXxugJNSu 6v3sdQwXKB5cRUsVVzwLr6zaFt1NmSlNkaspvzsTwpYQtfiaKiyitaz+toW2o+8q WI7BeKmCsjKIAqUsv+Ru9p0o7CUbCsNjl6xcZ8w3c7MsZbHGIU8wx+63dlulNbgD B1ktYjt8VwhEahnUkU8QB9Lybs2TXRIkQ7ggtMtjRPSNZF/1M9pHtSU3QripAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa4sTstSFJlIoN5eVH9vNZJtXswowHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw6JPx2wV7had1nOOCJQkg1/dtavr84liVo MD9YR3DdXc8+Stm1FHxiEyRUSLfK8jOWhjmYmHVxAlCRRPaW5KXGa5QhONjtsvq9 K/Gy+8g7mrCF+LHAPp7lIgTwm5h1GOMWza5FI0QjExWgieAB+TBvPMeCUnrZrp34 Q4z4KYrRfEOsxRmOl81YMRdW0RNFCRxkhKwqGO3tSQX7cHLhcqETBYZA2Khw/vZW C0EuAI2MwM/G8SlLMvCm40IC1n5uYg4mH+cIeuFctWvB7DG0zMNbt4c07AOE+s5e P2zpYMjMAZoM9P20hS4g3hxTi7vvbptTopDkr1bwei2jlM9sc+c= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:16 2026 by rpki-client