$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: xqQLf2kDEiF4PPM95970Z7U3/ttdu0mH4xUzdiG6Q9Y= Subject key identifier: 37:6A:F9:A6:9B:34:09:6E:51:A3:F0:19:3C:7E:19:61:45:76:52:9B Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 026C60D55BFC7B4E07319E4F2BBBDE6044B3038A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 010A Signing time: Wed 15 Apr 2026 21:01:08 +0000 Manifest this update: Wed 15 Apr 2026 20:56:08 +0000 Manifest next update: Sat 18 Apr 2026 22:41:08 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: MRmBfwILWypIXrZU1+0oAdSLsMiMwRKsuIPX03bY+qQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6c:60:d5:5b:fc:7b:4e:07:31:9e:4f:2b:bb:de:60:44:b3:03:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Apr 15 20:56:08 2026 GMT Not After : Apr 18 22:41:08 2026 GMT Subject: CN=376AF9A69B34096E51A3F0193C7E19614576529B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:71:51:50:a6:b8:f0:c1:d9:32:22:8a:3d: 71:af:62:9d:1e:a7:ad:a5:0b:bb:ea:3c:9b:35:24: 54:35:18:54:9e:69:6d:c7:c0:86:f5:e7:2f:9c:b7: 20:8b:cb:9c:b3:e1:ff:51:08:5c:b0:0b:1e:9c:c6: a6:9a:9b:23:fa:53:16:4f:a9:79:a0:59:b8:66:a0: c9:03:2c:38:72:de:0d:66:25:4a:1f:03:a9:a4:dc: 5e:74:5d:7b:f6:fb:7d:19:1e:e0:b2:f5:26:d5:94: 41:14:8e:24:54:d3:a2:40:25:ed:2a:6f:97:06:76: 8a:60:a7:a7:e6:e2:fb:eb:25:d3:75:57:ca:26:59: 72:23:2b:13:1f:81:fb:97:4a:94:60:cd:b3:5a:33: 2d:ce:f7:36:32:65:56:1e:05:c1:f3:a6:91:97:20: e6:b0:d9:46:0a:00:d0:34:88:56:50:e3:ae:91:ee: d2:66:37:ca:b6:eb:4a:95:31:b8:25:27:9f:45:02: cb:86:cf:53:46:12:39:72:ea:21:3e:bd:db:c4:61: 8b:48:0c:ba:1b:9c:0d:76:bf:42:e0:f0:bf:39:a9: 8b:00:2b:df:23:8d:53:8a:57:f6:48:79:34:c9:8d: a1:67:88:79:1b:a5:ce:8c:15:60:9d:3b:f6:d4:a6: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:F9:A6:9B:34:09:6E:51:A3:F0:19:3C:7E:19:61:45:76:52:9B X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bf:3b:c8:5c:97:8e:f5:3b:62:a7:b1:06:78:f2:66:70:ba: 86:8a:36:16:91:3a:34:2f:d3:16:f5:ca:9b:bf:00:58:f3:a8: 36:37:74:1c:b4:04:b2:c5:a4:c3:fd:f0:c1:98:7b:e1:08:1a: 65:03:ab:64:92:2b:e7:ca:c9:f1:06:62:7a:93:1f:5d:37:fa: 6c:53:43:06:1f:35:5c:ed:2a:be:19:80:2f:35:3f:a5:0b:38: 96:18:88:2c:2f:b7:81:5b:69:d3:20:5f:bb:8b:88:ac:d3:31: ac:25:d8:22:f4:9f:c0:1e:17:64:7e:80:7b:68:e5:3d:a4:50: 9d:73:3b:cf:15:05:b0:16:d2:4d:d8:cc:3d:b0:0f:e2:72:5d: e9:3e:8a:1e:0a:77:f6:3b:60:b0:c0:b3:2f:0d:08:60:1b:18: 8f:6c:c6:60:2d:c0:4d:68:d1:9f:ff:8c:b8:a0:9f:db:e4:81: 34:af:9e:68:57:76:fa:0e:b7:b8:90:04:5b:9c:e9:28:41:4f: f5:00:1c:30:d8:87:ef:f0:51:c6:bb:63:6c:95:c6:3d:d9:e1: 64:30:eb:7e:97:74:60:2f:f1:d4:20:15:62:6d:22:d2:0b:b8: 7d:71:cf:c8:fb:17:39:93:b1:38:76:02:f1:97:8c:95:d6:dc: 73:e6:40:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmxg1Vv8e04HMZ5PK7veYESzA4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNjA0MTUyMDU2MDhaFw0yNjA0MTgyMjQxMDhaMDMxMTAvBgNV BAMTKDM3NkFGOUE2OUIzNDA5NkU1MUEzRjAxOTNDN0UxOTYxNDU3NjUyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM3FRUKa48MHZMiKKPXGvYp0e p62lC7vqPJs1JFQ1GFSeaW3HwIb15y+ctyCLy5yz4f9RCFywCx6cxqaamyP6UxZP qXmgWbhmoMkDLDhy3g1mJUofA6mk3F50XXv2+30ZHuCy9SbVlEEUjiRU06JAJe0q b5cGdopgp6fm4vvrJdN1V8omWXIjKxMfgfuXSpRgzbNaMy3O9zYyZVYeBcHzppGX IOaw2UYKANA0iFZQ466R7tJmN8q260qVMbglJ59FAsuGz1NGEjly6iE+vdvEYYtI DLobnA12v0Lg8L85qYsAK98jjVOKV/ZIeTTJjaFniHkbpc6MFWCdO/bUpoPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2r5pps0CW5Ro/AZPH4ZYUV2UpswHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy/O8hcl471O2KnsQZ48mZwuoaKNhaROjQv 0xb1ypu/AFjzqDY3dBy0BLLFpMP98MGYe+EIGmUDq2SSK+fKyfEGYnqTH103+mxT QwYfNVztKr4ZgC81P6ULOJYYiCwvt4FbadMgX7uLiKzTMawl2CL0n8AeF2R+gHto 5T2kUJ1zO88VBbAW0k3YzD2wD+JyXek+ih4Kd/Y7YLDAsy8NCGAbGI9sxmAtwE1o 0Z//jLign9vkgTSvnmhXdvoOt7iQBFuc6ShBT/UAHDDYh+/wUca7Y2yVxj3Z4WQw 636XdGAv8dQgFWJtItILuH1xz8j7FzmTsTh2AvGXjJXW3HPmQIE= -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:20 2026 by rpki-client