$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: NYuZrz2D/8vvPzlDiM1nB5jgONs70e829+604Eik76A= Subject key identifier: 1E:C3:8F:33:0F:93:9F:E3:A0:1C:05:2E:78:D4:1D:F8:60:A4:E9:0E Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 1CE18C893C6F113EDF8AA8A15EBE67DDC68606D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 0516 Signing time: Wed 15 Apr 2026 18:00:44 +0000 Manifest this update: Wed 15 Apr 2026 17:55:44 +0000 Manifest next update: Sat 18 Apr 2026 20:32:44 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: OxMjj2WQyI0ppM2rKXeagVHa1AOuAyaXqXKYToto7bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e1:8c:89:3c:6f:11:3e:df:8a:a8:a1:5e:be:67:dd:c6:86:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Apr 15 17:55:44 2026 GMT Not After : Apr 18 20:32:44 2026 GMT Subject: CN=1EC38F330F939FE3A01C052E78D41DF860A4E90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:8a:c5:0f:4c:9c:4b:aa:d0:9b:c1:c5:af: ca:08:2e:f4:5a:72:0c:aa:df:e0:3f:48:42:89:ee: 74:88:6a:48:16:44:10:90:dc:04:35:46:9b:d1:a0: 8a:a1:7b:1d:6d:b8:61:7e:1c:4d:1c:8f:fb:09:01: c1:23:10:b8:2c:13:4a:ea:db:ff:ef:06:a2:29:ef: 99:7b:7f:98:5c:12:f6:cf:1f:29:75:df:04:68:ba: da:fd:53:43:88:53:ee:0e:dc:61:af:f7:b0:b4:7d: cf:62:4c:0e:94:80:04:bc:03:52:da:59:b8:8d:d9: b8:70:e0:f1:47:4c:4e:c1:2c:1b:2d:b1:f5:f7:32: 82:7c:d3:06:11:0b:8f:aa:48:bc:ca:ce:6c:32:d8: b6:75:c2:2d:d2:0e:a9:a8:cb:b3:4e:bb:0c:1f:39: 1c:34:5f:10:73:6a:f3:03:d8:5e:44:91:54:22:54: 6d:b9:e6:cb:e6:19:5b:6b:9b:34:66:f1:90:54:3a: d3:d0:ad:1a:6d:55:86:2f:70:fa:f4:af:40:37:ff: ac:d7:cb:62:4b:87:0c:62:e6:97:6b:88:d0:7f:a1: cc:cb:0b:c3:d9:b3:cf:ec:03:a8:b7:d4:85:5b:09: 23:57:62:5d:70:a0:36:69:63:65:47:82:a6:36:73: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:8F:33:0F:93:9F:E3:A0:1C:05:2E:78:D4:1D:F8:60:A4:E9:0E X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9c:4e:b3:52:49:b7:f2:76:c6:cf:9b:aa:3f:82:3b:83:30: 01:bb:e7:b2:a7:c8:fa:58:1a:4b:bb:f9:19:43:5f:21:1b:2b: 47:3d:a9:8b:ec:6b:df:db:1a:e1:ca:f9:d3:d6:73:f1:80:21: 0a:60:35:a7:76:fa:fe:eb:aa:41:e5:1b:87:81:8b:33:e1:6e: 11:63:18:f3:e5:da:61:ff:42:1c:98:be:87:87:65:ee:cd:2c: 31:2f:08:1e:d4:34:76:6d:36:2e:65:d5:2d:89:45:c2:4a:2b: 2c:9a:7d:05:62:34:a8:27:03:bf:43:bb:70:0d:e4:0e:cc:a9: b1:88:4c:28:60:27:94:17:04:44:93:4c:9e:46:8c:16:6a:1e: 4e:29:1b:aa:e1:22:c7:30:d7:78:8f:27:93:8a:9e:35:db:09: 26:05:41:f2:34:cc:47:99:2e:77:b9:85:a6:66:27:66:58:5f: 52:da:9d:3f:f9:68:a6:b4:15:a2:91:8d:b1:14:ad:97:d0:8e: 5d:4f:c1:83:62:ac:3c:f4:4a:a0:2a:77:86:ff:92:ae:03:59: 52:4b:92:dc:19:4c:fc:00:30:ba:f5:34:db:3b:56:4f:28:fb: ae:f0:51:53:d2:f6:bb:d3:03:1c:f3:19:e5:b9:12:55:a3:b3: 8b:1f:0a:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOGMiTxvET7fiqihXr5n3caGBtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNjA0MTUxNzU1NDRaFw0yNjA0MTgyMDMyNDRaMDMxMTAvBgNV BAMTKDFFQzM4RjMzMEY5MzlGRTNBMDFDMDUyRTc4RDQxREY4NjBBNEU5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVYrFD0ycS6rQm8HFr8oILvRa cgyq3+A/SEKJ7nSIakgWRBCQ3AQ1RpvRoIqhex1tuGF+HE0cj/sJAcEjELgsE0rq 2//vBqIp75l7f5hcEvbPHyl13wRoutr9U0OIU+4O3GGv97C0fc9iTA6UgAS8A1La WbiN2bhw4PFHTE7BLBstsfX3MoJ80wYRC4+qSLzKzmwy2LZ1wi3SDqmoy7NOuwwf ORw0XxBzavMD2F5EkVQiVG255svmGVtrmzRm8ZBUOtPQrRptVYYvcPr0r0A3/6zX y2JLhwxi5pdriNB/oczLC8PZs8/sA6i31IVbCSNXYl1woDZpY2VHgqY2c8qHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsOPMw+Tn+OgHAUueNQd+GCk6Q4wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACacTrNSSbfydsbPm6o/gjuDMAG757KnyPpY Gku7+RlDXyEbK0c9qYvsa9/bGuHK+dPWc/GAIQpgNad2+v7rqkHlG4eBizPhbhFj GPPl2mH/QhyYvoeHZe7NLDEvCB7UNHZtNi5l1S2JRcJKKyyafQViNKgnA79Du3AN 5A7MqbGITChgJ5QXBESTTJ5GjBZqHk4pG6rhIscw13iPJ5OKnjXbCSYFQfI0zEeZ Lne5haZmJ2ZYX1LanT/5aKa0FaKRjbEUrZfQjl1PwYNirDz0SqAqd4b/kq4DWVJL ktwZTPwAMLr1NNs7Vk8o+67wUVPS9rvTAxzzGeW5ElWjs4sfCvg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:36 2026 by rpki-client