$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: CZuG8XtiKSRpv8E66fGCb+cuvvoBSVju4VxxYj4J96E= Subject key identifier: F8:58:87:E3:07:38:51:E2:93:7F:53:8E:12:8A:A3:2C:F2:BB:F4:BD Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 1CCE6C4D53266DDECF438BDBA908E5877248CFE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 0420 Signing time: Sat 18 Apr 2026 20:01:18 +0000 Manifest this update: Sat 18 Apr 2026 19:56:18 +0000 Manifest next update: Tue 21 Apr 2026 21:09:18 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: OprkGvxeF+BwLF/PsuLjhz4tPb8U9Ga15Glde/2BUEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ce:6c:4d:53:26:6d:de:cf:43:8b:db:a9:08:e5:87:72:48:cf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Apr 18 19:56:18 2026 GMT Not After : Apr 21 21:09:18 2026 GMT Subject: CN=F85887E3073851E2937F538E128AA32CF2BBF4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:9e:08:23:99:35:50:2b:01:d6:94:b5:ae: ab:14:f3:56:19:3e:77:bd:f7:3c:89:7c:fc:72:a2: ab:22:f8:9e:e1:76:3d:5b:76:b0:80:c8:63:48:6c: 3e:55:cf:a5:bc:34:76:03:1d:05:fa:9b:f2:c9:8e: 0a:09:93:a7:c2:8a:a2:af:97:4c:14:8c:dd:9c:9b: 3d:eb:e5:bc:f1:fe:9e:0a:c1:36:11:99:12:d8:c3: 4e:86:2e:34:72:8b:3c:a1:4a:08:fa:96:d7:17:2e: 9b:ea:5a:2b:fa:23:4b:bd:55:7e:be:98:c6:7b:0d: 03:00:67:4a:e4:04:80:e8:3d:df:18:a6:14:c1:8c: e6:08:c8:64:52:aa:25:a5:9e:1b:48:89:72:c3:6e: b1:6a:4c:15:24:12:03:4b:95:4d:07:84:34:55:bc: 50:01:e8:b1:d1:65:9f:f8:40:64:d3:3e:16:1f:26: 05:05:00:b1:11:ec:6d:f8:0b:9d:98:09:0d:3b:b3: 39:13:45:92:e2:b3:c3:1f:5f:c0:70:28:be:64:ca: af:76:d0:4b:27:4a:24:f8:76:c0:12:9a:8d:21:ef: c0:ee:32:1b:9a:78:0d:17:2e:ca:a8:c3:96:d9:03: 2e:02:f9:6e:09:9c:75:66:b7:cb:71:78:ae:1c:90: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:87:E3:07:38:51:E2:93:7F:53:8E:12:8A:A3:2C:F2:BB:F4:BD X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:82:08:0b:66:62:57:4c:d6:80:59:25:20:4f:46:7e:12:81: 4f:b7:81:e2:ce:25:44:52:2c:1e:54:3a:7c:f6:9f:a0:83:71: e9:7f:4a:e9:29:56:59:1e:0a:79:7c:04:d9:38:9e:68:41:36: 52:a3:81:63:17:0b:85:02:36:06:36:75:43:c5:25:c1:75:15: c3:ab:ab:c2:d0:c6:48:3e:dd:a1:c9:ea:c8:cc:a6:f1:42:c5: 1a:d9:7c:43:f7:bd:d4:52:b0:7b:fe:b4:54:1a:b9:64:ba:40: 53:d2:9b:79:ec:e4:e9:d7:d5:4b:64:ac:53:ad:67:e3:2b:e0: 87:c9:79:a3:fb:9b:1c:ef:78:09:a1:10:2a:40:88:0b:fc:c9: 64:f5:f7:5a:c7:c2:78:a7:bb:c8:78:76:79:ab:fe:a5:62:13: bc:2d:05:93:9a:20:22:9e:27:1e:ae:ab:d6:23:56:b4:bd:2f: 18:d0:73:bb:0d:e2:7c:5a:cd:4e:5e:61:31:66:3a:40:ee:88: ec:7d:80:0a:27:1e:2a:25:5b:7e:db:51:31:e2:af:5d:ce:e3: 0f:0d:ae:ed:57:c4:55:13:e6:0d:f7:58:9b:13:d4:8b:a4:16: 34:ac:8b:46:5d:c9:55:51:56:a4:77:11:0a:6f:70:8e:d8:0a: bd:d8:77:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM5sTVMmbd7PQ4vbqQjlh3JIz+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNjA0MTgxOTU2MThaFw0yNjA0MjEyMTA5MThaMDMxMTAvBgNV BAMTKEY4NTg4N0UzMDczODUxRTI5MzdGNTM4RTEyOEFBMzJDRjJCQkY0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36Z4II5k1UCsB1pS1rqsU81YZ Pne99zyJfPxyoqsi+J7hdj1bdrCAyGNIbD5Vz6W8NHYDHQX6m/LJjgoJk6fCiqKv l0wUjN2cmz3r5bzx/p4KwTYRmRLYw06GLjRyizyhSgj6ltcXLpvqWiv6I0u9VX6+ mMZ7DQMAZ0rkBIDoPd8YphTBjOYIyGRSqiWlnhtIiXLDbrFqTBUkEgNLlU0HhDRV vFAB6LHRZZ/4QGTTPhYfJgUFALER7G34C52YCQ07szkTRZLis8MfX8BwKL5kyq92 0EsnSiT4dsASmo0h78DuMhuaeA0XLsqow5bZAy4C+W4JnHVmt8txeK4ckNgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FiH4wc4UeKTf1OOEoqjLPK79L0wHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmCCAtmYldM1oBZJSBPRn4SgU+3geLOJURS LB5UOnz2n6CDcel/SukpVlkeCnl8BNk4nmhBNlKjgWMXC4UCNgY2dUPFJcF1FcOr q8LQxkg+3aHJ6sjMpvFCxRrZfEP3vdRSsHv+tFQauWS6QFPSm3ns5OnX1UtkrFOt Z+Mr4IfJeaP7mxzveAmhECpAiAv8yWT191rHwninu8h4dnmr/qViE7wtBZOaICKe Jx6uq9YjVrS9LxjQc7sN4nxazU5eYTFmOkDuiOx9gAonHiolW37bUTHir13O4w8N ru1XxFUT5g33WJsT1IukFjSsi0ZdyVVRVqR3EQpvcI7YCr3Yd6o= -----END CERTIFICATE-----Generated at Sun Apr 19 11:17:41 2026 by rpki-client