$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: FSDZ+S6hoghKgYe9/4NR1oP13iCaLrJYDIXO6XjUocM= Subject key identifier: 86:D5:B2:B1:9E:24:27:BB:B6:67:76:36:7E:1A:27:68:61:1D:40:1C Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 6606EDA2F7E701969C9985047510A94747DB6287 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 01F3 Signing time: Fri 17 Apr 2026 17:11:51 +0000 Manifest this update: Fri 17 Apr 2026 17:06:51 +0000 Manifest next update: Mon 20 Apr 2026 17:48:51 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: +i0cl2F5H19QPgoGsl8gXYvFiOOQ87PxTccPbkeJR0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:06:ed:a2:f7:e7:01:96:9c:99:85:04:75:10:a9:47:47:db:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Apr 17 17:06:51 2026 GMT Not After : Apr 20 17:48:51 2026 GMT Subject: CN=86D5B2B19E2427BBB66776367E1A2768611D401C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:2f:5f:ec:22:aa:df:c0:0d:23:89:f5:06: ec:b9:f5:15:8c:ad:e9:ea:60:0f:76:2b:60:4a:8e: e8:20:71:05:43:fe:05:4e:97:db:82:9c:1d:54:88: c3:14:6a:a7:d0:f4:21:f6:16:1c:c0:ad:9f:df:c8: d8:ce:5d:fc:88:3e:06:ab:2c:ff:fb:9a:22:dc:ce: 48:63:0b:d4:fb:5a:9a:27:90:d8:89:fe:25:9a:11: 07:14:f1:36:bb:27:41:72:1b:9d:49:2e:22:0b:4e: ab:44:09:dd:cc:d5:1f:b8:f5:c2:02:c0:8d:5c:3e: 8c:b5:4f:e3:21:ce:18:5b:97:d2:06:d0:99:a2:e4: 28:98:cf:4d:22:49:41:83:39:88:cf:a2:b4:6a:87: eb:66:d8:3e:89:d1:b0:64:0e:b5:68:43:98:ce:54: a2:4b:cf:59:2d:fc:44:15:c7:03:92:fa:b3:2e:dc: 5c:32:3b:80:98:9e:6d:db:8d:88:46:81:36:80:ae: 1c:57:81:f2:56:dc:45:a7:8e:94:93:c7:98:f0:56: 67:d1:6a:e2:81:ed:88:f2:c8:b0:78:d1:2c:3b:38: c9:93:d5:40:c8:9f:40:75:01:41:fb:c9:be:91:a5: 33:eb:7a:9d:b7:3a:e1:81:3a:06:da:90:9f:84:d8: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:B2:B1:9E:24:27:BB:B6:67:76:36:7E:1A:27:68:61:1D:40:1C X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:44:07:a8:fc:3d:69:70:a1:cb:04:5f:6e:b2:7d:f5:20:25: 32:94:a8:a1:83:d3:7e:31:d4:a2:c4:d9:4a:bb:1d:ac:cc:9c: 35:ce:91:a8:2d:e2:e8:91:cb:58:63:f7:0c:5e:fe:f6:b2:d0: fe:0d:70:dc:dd:e9:66:a2:cd:a4:de:8f:fa:1f:7a:7b:a4:b6: 10:0c:91:e4:6b:60:0c:74:74:c8:db:e1:2b:53:83:93:e6:59: 5d:76:c8:7b:d0:cd:78:86:62:07:ee:9e:7f:c2:4e:95:09:c0: 6a:fc:c6:bc:14:b2:53:d3:f9:ab:94:b5:68:cd:09:6c:2e:c8: 82:a3:87:bb:6e:f1:86:47:7d:10:6b:b0:75:51:f5:b3:b2:cd: 57:d0:d2:3b:e2:8c:30:a2:35:78:91:3c:b6:06:ad:16:25:66: 2b:c6:96:79:16:fc:b0:b2:7d:e7:cd:ef:44:bb:34:34:32:24: de:51:d5:a6:2d:9c:cd:2a:c6:f0:a9:e2:47:00:59:2a:8b:fb: 95:16:13:34:08:e7:f8:f4:47:dd:95:10:40:f4:1a:d0:0e:35: e2:08:1c:32:af:d0:93:78:b1:77:e8:50:57:02:0d:42:58:dd: 5d:97:4d:7c:b8:70:64:3a:03:9d:2e:c8:38:1e:2a:e4:73:16: 88:88:b6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgbtovfnAZacmYUEdRCpR0fbYocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNjA0MTcxNzA2NTFaFw0yNjA0MjAxNzQ4NTFaMDMxMTAvBgNV BAMTKDg2RDVCMkIxOUUyNDI3QkJCNjY3NzYzNjdFMUEyNzY4NjExRDQwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7y9f7CKq38ANI4n1Buy59RWM renqYA92K2BKjuggcQVD/gVOl9uCnB1UiMMUaqfQ9CH2FhzArZ/fyNjOXfyIPgar LP/7miLczkhjC9T7WponkNiJ/iWaEQcU8Ta7J0FyG51JLiILTqtECd3M1R+49cIC wI1cPoy1T+Mhzhhbl9IG0Jmi5CiYz00iSUGDOYjPorRqh+tm2D6J0bBkDrVoQ5jO VKJLz1kt/EQVxwOS+rMu3FwyO4CYnm3bjYhGgTaArhxXgfJW3EWnjpSTx5jwVmfR auKB7YjyyLB40Sw7OMmT1UDIn0B1AUH7yb6RpTPrep23OuGBOgbakJ+E2D4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtWysZ4kJ7u2Z3Y2fhonaGEdQBwwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlEB6j8PWlwocsEX26yffUgJTKUqKGD034x 1KLE2Uq7HazMnDXOkagt4uiRy1hj9wxe/vay0P4NcNzd6WaizaTej/ofenukthAM keRrYAx0dMjb4StTg5PmWV12yHvQzXiGYgfunn/CTpUJwGr8xrwUslPT+auUtWjN CWwuyIKjh7tu8YZHfRBrsHVR9bOyzVfQ0jvijDCiNXiRPLYGrRYlZivGlnkW/LCy fefN70S7NDQyJN5R1aYtnM0qxvCp4kcAWSqL+5UWEzQI5/j0R92VEED0GtAONeII HDKv0JN4sXfoUFcCDUJY3V2XTXy4cGQ6A50uyDgeKuRzFoiItp0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:55 2026 by rpki-client