$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: gnzRaoLhNfsdtCVbE8ZL+nvpGJDX8eLNlx5S+Mabklk= Subject key identifier: C1:7A:A1:FB:90:49:BE:34:D1:BC:C9:1F:2E:AC:A5:76:B6:91:F5:68 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 3E3D122D57E16753629D81E99C1E73F76B8C52DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 0131 Signing time: Fri 17 Apr 2026 20:11:34 +0000 Manifest this update: Fri 17 Apr 2026 20:06:33 +0000 Manifest next update: Tue 21 Apr 2026 01:09:33 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: B8fSQw3bAJ3mmeFPYOnQ4Mi+q0gOjHk+BHkAUBEGzT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3d:12:2d:57:e1:67:53:62:9d:81:e9:9c:1e:73:f7:6b:8c:52:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Apr 17 20:06:33 2026 GMT Not After : Apr 21 01:09:33 2026 GMT Subject: CN=C17AA1FB9049BE34D1BCC91F2EACA576B691F568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:07:a7:01:8f:84:39:2e:35:6f:ea:61:c2: b5:ca:40:e4:4d:f6:ca:84:e3:51:07:6b:02:63:0a: 60:de:fe:69:da:e2:10:b2:c9:27:c1:0b:25:4f:e3: 7f:bc:66:b3:24:aa:dc:3c:0a:d1:bb:bd:61:5a:41: 1c:22:40:53:7d:8a:09:7b:11:15:98:98:f8:a1:6c: bb:2d:35:e5:ec:26:84:9d:77:3a:ee:e0:54:2a:10: 56:2b:9e:dc:eb:00:89:f3:1f:2b:31:a5:a0:8c:2e: 66:80:2f:07:9d:a3:e8:2c:9c:f1:b3:38:7d:5f:65: 60:50:2f:b0:3f:74:0a:1f:09:43:d1:af:28:fd:f6: 75:4b:50:9d:e8:31:e5:7e:8f:39:66:2c:c9:45:5a: cd:6e:ef:c1:0a:3f:3d:b7:f6:ac:aa:45:1d:d1:7e: e4:a7:9b:16:e0:c2:fb:d8:eb:a5:7c:fa:03:32:9d: bb:a7:71:6c:19:67:b7:23:06:6b:a1:7c:9e:8a:47: 1f:f5:72:b4:71:32:cd:61:28:92:13:89:9b:4b:68: 30:70:f7:a4:ea:70:58:4d:0b:83:d2:2a:64:26:dd: e5:f4:07:59:e6:5a:27:5c:27:31:af:94:a7:b9:0b: 81:50:c6:29:35:fc:60:b1:1a:c6:e4:39:de:0a:82: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:A1:FB:90:49:BE:34:D1:BC:C9:1F:2E:AC:A5:76:B6:91:F5:68 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3c:d3:de:55:63:9f:24:60:ff:bc:49:d3:98:70:6a:59:9e: ef:69:4e:64:03:e1:9c:b1:8b:12:85:be:b0:56:60:78:04:07: 64:32:7e:7e:20:43:e2:0a:94:0e:a5:84:84:2d:c9:ff:52:df: 58:ac:31:ad:35:95:f8:55:03:94:92:61:d5:e6:aa:50:cd:04: 37:27:56:65:31:48:3a:63:0c:d2:8d:12:08:a5:cc:da:17:55: 2e:5b:b8:9c:cc:2d:06:47:bf:35:dc:7f:4b:40:45:98:89:a6: 66:0c:28:10:ab:20:93:73:9f:30:01:41:72:6e:b8:48:5c:d3: ed:f8:f1:08:f6:56:8c:de:3a:c1:26:6a:e9:76:45:eb:16:ce: d7:4c:0e:7d:65:fa:a3:82:ce:d5:39:cc:c4:80:e5:2f:1a:58: 60:83:c9:17:3f:f1:9e:f5:e4:82:23:08:60:34:dc:e9:fc:80: 8e:90:ea:64:32:f0:18:9d:e4:d3:26:91:37:c1:af:3a:92:15: cc:46:d0:68:53:c1:09:bb:04:b6:55:e4:50:ff:f0:97:65:85: 78:28:d5:c8:24:ce:5b:b9:f0:c2:cc:c1:8c:e5:c2:c6:d5:f4: b9:b8:72:44:10:a8:45:32:57:51:aa:fb:83:a1:16:71:1c:b6: a6:0b:01:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPj0SLVfhZ1NinYHpnB5z92uMUtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNjA0MTcyMDA2MzNaFw0yNjA0MjEwMTA5MzNaMDMxMTAvBgNV BAMTKEMxN0FBMUZCOTA0OUJFMzREMUJDQzkxRjJFQUNBNTc2QjY5MUY1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vAenAY+EOS41b+phwrXKQORN 9sqE41EHawJjCmDe/mna4hCyySfBCyVP43+8ZrMkqtw8CtG7vWFaQRwiQFN9igl7 ERWYmPihbLstNeXsJoSddzru4FQqEFYrntzrAInzHysxpaCMLmaALwedo+gsnPGz OH1fZWBQL7A/dAofCUPRryj99nVLUJ3oMeV+jzlmLMlFWs1u78EKPz239qyqRR3R fuSnmxbgwvvY66V8+gMynbuncWwZZ7cjBmuhfJ6KRx/1crRxMs1hKJITiZtLaDBw 96TqcFhNC4PSKmQm3eX0B1nmWidcJzGvlKe5C4FQxik1/GCxGsbkOd4KgnBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXqh+5BJvjTRvMkfLqyldraR9WgwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU8095VY58kYP+8SdOYcGpZnu9pTmQD4Zyx ixKFvrBWYHgEB2Qyfn4gQ+IKlA6lhIQtyf9S31isMa01lfhVA5SSYdXmqlDNBDcn VmUxSDpjDNKNEgilzNoXVS5buJzMLQZHvzXcf0tARZiJpmYMKBCrIJNznzABQXJu uEhc0+348Qj2VozeOsEmaul2ResWztdMDn1l+qOCztU5zMSA5S8aWGCDyRc/8Z71 5IIjCGA03On8gI6Q6mQy8Bid5NMmkTfBrzqSFcxG0GhTwQm7BLZV5FD/8JdlhXgo 1cgkzlu58MLMwYzlwsbV9Lm4ckQQqEUyV1Gq+4OhFnEctqYLARk= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:56 2026 by rpki-client