$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: b0FTg0LK6YIY7wgujWTmKXpTkPewLTNmcskgpcS7uEU= Subject key identifier: BA:E7:D3:42:74:10:90:BC:38:5F:A3:3D:9D:D5:C0:48:31:4F:57:07 Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 04B4C888167EC16D5F648032A211794EBFC5C5BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 0254 Signing time: Sat 18 Apr 2026 15:20:00 +0000 Manifest this update: Sat 18 Apr 2026 15:15:00 +0000 Manifest next update: Tue 21 Apr 2026 19:57:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: rmUXsSZKH3FmhSz8qs05E/l6XfpKBn7yjBgEUlL9XJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b4:c8:88:16:7e:c1:6d:5f:64:80:32:a2:11:79:4e:bf:c5:c5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Apr 18 15:15:00 2026 GMT Not After : Apr 21 19:57:00 2026 GMT Subject: CN=BAE7D342741090BC385FA33D9DD5C048314F5707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:8d:a9:f9:5e:e0:3c:4b:ae:b8:50:c1:fb: 5a:dc:97:36:ad:be:98:8d:c8:f9:20:c2:4c:fb:50: dc:d9:c5:d3:ef:7c:75:fb:6b:45:29:7e:bd:2a:8b: df:59:b4:39:d8:ec:af:6c:29:3c:f2:9f:fc:db:88: 2c:4b:aa:e2:50:36:42:49:c8:ee:84:29:41:38:88: a8:41:c1:ea:09:43:d8:05:40:d5:c2:1e:2f:b7:c4: db:c6:7d:c9:e4:66:2d:de:dc:30:08:1f:03:aa:19: 35:7a:29:70:dd:76:c5:70:22:6c:1a:11:d7:52:4f: 62:62:1a:b0:63:60:b2:28:87:b6:ad:23:e2:42:88: 4b:41:18:e9:8c:a0:ca:e5:1e:f3:a3:9a:76:44:ff: 50:29:ed:ec:b1:08:1e:03:0d:c6:1b:4f:0d:c2:d7: 88:bc:4f:89:75:a6:fb:99:73:09:3d:6d:8c:93:88: 77:00:72:3a:87:a2:69:b1:36:01:50:76:76:a7:59: 45:15:a9:fb:87:81:8d:48:af:72:81:8c:1e:8e:44: 08:d5:f3:67:e0:83:d4:d1:5c:b7:63:bb:e6:bb:7a: fc:ba:16:ac:42:40:38:85:79:0a:b9:63:f1:bb:d3: 50:1b:21:28:d3:0a:72:6a:94:a9:f9:e2:d5:59:af: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E7:D3:42:74:10:90:BC:38:5F:A3:3D:9D:D5:C0:48:31:4F:57:07 X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:96:f7:83:cb:6a:71:13:3e:f2:3d:be:67:5c:9f:60:f9:08: 89:ec:8b:d6:2c:2a:e9:6b:28:a8:be:c3:b5:19:a9:b5:9e:fb: 57:2b:60:d2:bd:bc:9b:cb:c6:ea:00:48:a7:c9:0e:3f:6b:46: 5b:1d:8b:86:00:7a:85:26:b1:26:7e:5d:96:0a:57:1f:2b:94: f9:91:7f:41:e8:72:5d:c4:ff:8e:53:ae:5d:c6:91:e9:c4:6e: f9:c5:91:bb:bc:53:71:09:a1:d6:eb:75:6d:4d:13:ea:69:cd: 75:9a:50:d0:6d:39:28:39:cd:e3:ab:c9:e5:55:73:3b:89:34: d4:10:6a:11:6a:69:3c:e3:13:92:e8:5b:0f:ac:4d:f4:b7:d2: f7:2c:bf:8a:a9:92:8b:54:89:1f:44:b3:29:0b:48:a0:ef:68: 7e:db:8b:04:9d:1a:53:1b:47:89:e6:d9:46:e4:a7:2b:47:3c: b1:5d:2e:c0:f7:90:a2:4e:bf:0a:36:0b:27:69:69:bc:fb:0d: ae:c0:88:8d:1d:ed:1b:95:bd:2d:ae:2b:e1:a5:fa:16:ce:fc: 0d:45:b1:36:ce:d7:20:04:ec:54:0b:99:5c:f8:28:7c:6a:eb: c1:4b:71:81:a2:fc:1c:b9:6a:f0:4f:08:f6:d9:9a:79:ea:fd: 9f:47:93:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLTIiBZ+wW1fZIAyohF5Tr/FxbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNjA0MTgxNTE1MDBaFw0yNjA0MjExOTU3MDBaMDMxMTAvBgNV BAMTKEJBRTdEMzQyNzQxMDkwQkMzODVGQTMzRDlERDVDMDQ4MzE0RjU3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPI42p+V7gPEuuuFDB+1rclzat vpiNyPkgwkz7UNzZxdPvfHX7a0Upfr0qi99ZtDnY7K9sKTzyn/zbiCxLquJQNkJJ yO6EKUE4iKhBweoJQ9gFQNXCHi+3xNvGfcnkZi3e3DAIHwOqGTV6KXDddsVwImwa EddST2JiGrBjYLIoh7atI+JCiEtBGOmMoMrlHvOjmnZE/1Ap7eyxCB4DDcYbTw3C 14i8T4l1pvuZcwk9bYyTiHcAcjqHommxNgFQdnanWUUVqfuHgY1Ir3KBjB6ORAjV 82fgg9TRXLdju+a7evy6FqxCQDiFeQq5Y/G701AbISjTCnJqlKn54tVZr3WZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuufTQnQQkLw4X6M9ndXASDFPVwcwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWW94PLanETPvI9vmdcn2D5CInsi9YsKulr KKi+w7UZqbWe+1crYNK9vJvLxuoASKfJDj9rRlsdi4YAeoUmsSZ+XZYKVx8rlPmR f0Hocl3E/45Trl3GkenEbvnFkbu8U3EJodbrdW1NE+ppzXWaUNBtOSg5zeOryeVV czuJNNQQahFqaTzjE5LoWw+sTfS30vcsv4qpkotUiR9EsykLSKDvaH7biwSdGlMb R4nm2UbkpytHPLFdLsD3kKJOvwo2Cydpabz7Da7AiI0d7RuVvS2uK+Gl+hbO/A1F sTbO1yAE7FQLmVz4KHxq68FLcYGi/By5avBPCPbZmnnq/Z9Hk40= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:53 2026 by rpki-client