$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: ezd9L92ha3XNAm3OhXu20aM35vGUvmZzzEjn6nrJoRA= Subject key identifier: 24:C8:2F:B7:59:86:4B:2C:DF:AD:A8:40:8A:12:72:C4:69:3A:87:7B Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 7E7632F654FF085C33E86E952399ADF7F5476E07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 99 Signing time: Wed 15 Apr 2026 22:22:36 +0000 Manifest this update: Wed 15 Apr 2026 22:17:36 +0000 Manifest next update: Sun 19 Apr 2026 01:04:36 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: XDZZDhNd1t4Yo1aYjiBj9nxZ3hMrMhXwlLqvRADxOE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:76:32:f6:54:ff:08:5c:33:e8:6e:95:23:99:ad:f7:f5:47:6e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Apr 15 22:17:36 2026 GMT Not After : Apr 19 01:04:36 2026 GMT Subject: CN=24C82FB759864B2CDFADA8408A1272C4693A877B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:2e:f2:e3:11:3c:a3:bf:69:79:fb:03:61: 19:56:67:84:16:e4:87:7e:8b:8f:2f:05:83:58:4d: 94:56:f8:27:3a:42:f0:b4:22:f3:40:0c:81:96:19: 48:12:ea:34:3e:bf:6f:53:d5:1c:03:53:05:1c:a9: 60:e4:53:79:2f:ff:01:28:76:e0:9c:08:d4:a6:48: ad:30:7a:f6:87:60:37:f9:88:04:ed:94:53:80:2c: 9f:c9:17:88:c3:86:71:c0:30:33:a6:27:96:7e:aa: a3:7f:07:a5:80:40:79:50:4e:b7:a9:40:4e:8c:f2: a7:8d:3f:92:44:94:11:89:13:7d:df:32:c8:dc:c5: 02:32:a9:d3:38:89:ef:62:62:d7:af:eb:f7:a0:35: 79:a0:88:b3:85:04:82:99:e4:52:b9:53:1a:68:0f: cb:a0:bf:0e:97:32:69:59:51:cf:73:a5:e8:1a:04: 4c:af:29:ce:c1:f8:58:39:46:c3:bd:3b:35:70:b2: c2:b6:d9:44:6c:fd:aa:01:53:18:d2:22:ee:5e:43: 48:f8:b0:fc:6f:52:75:33:67:90:97:f7:0b:bc:cc: d5:88:e1:94:0a:93:e8:a9:f7:2e:ce:aa:6b:6e:56: d6:53:c1:4d:ce:13:fe:14:f5:39:09:01:44:c6:77: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:2F:B7:59:86:4B:2C:DF:AD:A8:40:8A:12:72:C4:69:3A:87:7B X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a0:bf:7e:59:d0:84:ba:e8:70:f8:96:ca:40:89:52:9b:00: a2:20:28:54:39:fd:e3:1a:e6:6f:d1:22:6e:de:9b:08:7c:51: ab:e2:ff:6f:5f:d0:99:53:2e:00:1e:fb:4a:cf:41:72:33:a3: dd:a7:c0:f0:c7:41:4c:d3:ba:e8:ca:ca:21:d2:90:0b:b5:5a: 9d:68:d6:07:90:db:32:bc:40:35:f8:77:65:d9:e3:47:57:05: 11:58:f2:5e:10:6c:00:b1:2a:d0:8e:ae:ee:2d:56:bc:f5:7e: 63:89:ca:b0:02:a5:0a:4b:cd:07:c5:6f:3a:1b:a8:e2:b7:0c: 68:7b:d4:00:a8:c2:41:a6:95:7f:18:20:c7:9a:79:07:0f:71: aa:c5:03:1a:9b:11:57:83:e4:2c:33:8e:ac:6f:8a:e1:76:21: 15:a5:e1:a0:1c:ff:0a:6c:e8:2b:49:24:43:64:51:4a:fb:f6: c5:61:7b:9d:7b:79:ce:d4:a4:5c:28:20:aa:48:94:d9:9e:76: 49:c2:30:eb:e7:a3:92:e0:2d:4e:a3:28:84:27:ef:89:d1:2c: 78:7c:af:a4:21:87:3f:8b:98:57:af:4a:0e:96:01:07:2e:69: c3:9a:dd:0a:8f:57:ef:b8:5c:19:c4:82:db:9d:3e:1a:24:a6: 49:64:71:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnYy9lT/CFwz6G6VI5mt9/VHbgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNjA0MTUyMjE3MzZaFw0yNjA0MTkwMTA0MzZaMDMxMTAvBgNV BAMTKDI0QzgyRkI3NTk4NjRCMkNERkFEQTg0MDhBMTI3MkM0NjkzQTg3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOy7y4xE8o79pefsDYRlWZ4QW 5Id+i48vBYNYTZRW+Cc6QvC0IvNADIGWGUgS6jQ+v29T1RwDUwUcqWDkU3kv/wEo duCcCNSmSK0wevaHYDf5iATtlFOALJ/JF4jDhnHAMDOmJ5Z+qqN/B6WAQHlQTrep QE6M8qeNP5JElBGJE33fMsjcxQIyqdM4ie9iYtev6/egNXmgiLOFBIKZ5FK5Uxpo D8ugvw6XMmlZUc9zpegaBEyvKc7B+Fg5RsO9OzVwssK22URs/aoBUxjSIu5eQ0j4 sPxvUnUzZ5CX9wu8zNWI4ZQKk+ip9y7OqmtuVtZTwU3OE/4U9TkJAUTGdxKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMgvt1mGSyzfrahAihJyxGk6h3swHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMegv35Z0IS66HD4lspAiVKbAKIgKFQ5/eMa 5m/RIm7emwh8Uavi/29f0JlTLgAe+0rPQXIzo92nwPDHQUzTuujKyiHSkAu1Wp1o 1geQ2zK8QDX4d2XZ40dXBRFY8l4QbACxKtCOru4tVrz1fmOJyrACpQpLzQfFbzob qOK3DGh71ACowkGmlX8YIMeaeQcPcarFAxqbEVeD5CwzjqxviuF2IRWl4aAc/wps 6CtJJENkUUr79sVhe517ec7UpFwoIKpIlNmedknCMOvno5LgLU6jKIQn74nRLHh8 r6Qhhz+LmFevSg6WAQcuacOa3QqPV++4XBnEgtudPhokpklkcbY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:19 2026 by rpki-client