$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: +wkhP7XFebaPcVDpCaJ0OUeRuTuKRhfC/dtzYHEr7f8= Subject key identifier: 62:AB:20:AA:13:E3:5C:E4:A4:A2:37:AA:BA:8E:23:94:5B:4C:2B:7A Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 5FA383AC629071945D541F4A423D3C0ECF575978 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: BC Signing time: Fri 17 Apr 2026 05:23:32 +0000 Manifest this update: Fri 17 Apr 2026 05:18:32 +0000 Manifest next update: Mon 20 Apr 2026 08:55:32 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: q+udSLo/Gu75X3flVZILcgew42SRCG1gAixFFw9kFzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a3:83:ac:62:90:71:94:5d:54:1f:4a:42:3d:3c:0e:cf:57:59:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Apr 17 05:18:32 2026 GMT Not After : Apr 20 08:55:32 2026 GMT Subject: CN=62AB20AA13E35CE4A4A237AABA8E23945B4C2B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:66:4c:f7:7d:25:94:1e:59:a4:b4:64:b8: 07:cb:c8:46:13:2a:63:58:3d:49:ee:36:23:b2:ac: b6:3b:6a:65:dc:4d:76:70:67:9b:5a:48:ba:79:a3: fd:8e:2e:5c:57:59:67:73:b7:76:78:43:d1:30:af: 3d:bf:ba:9b:33:8d:8f:9d:7c:b8:74:3b:55:3c:1c: 99:64:57:64:6a:a4:a0:44:14:99:3f:48:a3:a0:a1: f0:38:d0:af:e7:38:0f:42:a7:89:78:71:72:87:31: ac:53:93:a4:cb:27:ef:7b:cf:25:9f:42:38:d0:71: ad:a9:12:94:4b:43:e0:1f:46:ca:a4:68:3f:14:24: 01:b9:3b:71:b9:b2:f6:7e:57:d4:ea:c7:46:f5:a6: 9b:e5:c2:67:4c:9c:8b:ff:54:88:59:ca:46:41:a1: ff:81:07:fe:19:f3:95:50:37:e3:d0:1d:eb:b7:63: 83:9a:04:ec:e9:9f:76:90:34:3c:d9:06:f9:c3:a6: ed:18:6e:a3:5f:94:8d:af:1b:50:75:29:a3:fd:6c: af:de:5e:02:1b:3c:3c:6b:88:e3:19:2a:c4:b0:c2: 25:e0:2d:ce:29:b5:7d:5d:19:5f:25:97:19:33:c7: 68:fd:35:50:3b:de:de:67:c7:e2:6a:c7:cf:78:3f: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AB:20:AA:13:E3:5C:E4:A4:A2:37:AA:BA:8E:23:94:5B:4C:2B:7A X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3e:47:e4:58:28:4f:21:80:c8:46:76:46:96:35:51:40:88: 2d:69:7f:5a:50:85:34:18:e9:4e:ea:7b:3c:c4:89:a1:db:39: 8d:4c:0d:21:fc:80:33:aa:d0:05:c2:f2:3a:3d:9f:ab:04:d8: 81:b6:08:3f:91:78:71:cc:a7:b3:a6:8b:1b:34:80:1c:88:a8: 80:41:b9:d4:8c:5b:5c:2f:a2:b0:31:61:f7:86:26:d7:ec:ad: e4:a0:8e:07:a5:4d:77:f4:12:c5:c7:5c:0d:b7:4a:9c:20:fd: 76:79:13:72:69:a8:dd:f4:8f:6d:bb:41:a3:14:04:ef:32:15: d6:ed:be:b9:a4:f6:aa:45:02:13:8c:b8:02:88:4f:1d:8f:9d: ab:de:d0:c4:03:fa:a4:54:7b:9e:34:f7:7a:c9:0d:e6:98:e5: 2b:d3:ff:7c:12:c0:34:e1:7f:1a:98:ca:fc:a5:19:01:af:5a: c2:66:48:24:3c:0e:25:9b:32:89:3f:1a:36:b2:98:65:7c:db: b4:70:d5:ac:6a:e7:53:96:82:05:e7:fc:65:a7:b6:eb:81:81: 2b:81:25:e3:45:be:f5:7a:3e:cc:4c:f5:80:8f:cf:a4:01:98: d4:5f:3d:1d:cd:0f:4c:b7:99:31:04:42:f5:00:f4:f2:36:04: 7c:a7:03:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6ODrGKQcZRdVB9KQj08Ds9XWXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNjA0MTcwNTE4MzJaFw0yNjA0MjAwODU1MzJaMDMxMTAvBgNV BAMTKDYyQUIyMEFBMTNFMzVDRTRBNEEyMzdBQUJBOEUyMzk0NUI0QzJCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+mZM930llB5ZpLRkuAfLyEYT KmNYPUnuNiOyrLY7amXcTXZwZ5taSLp5o/2OLlxXWWdzt3Z4Q9Ewrz2/upszjY+d fLh0O1U8HJlkV2RqpKBEFJk/SKOgofA40K/nOA9Cp4l4cXKHMaxTk6TLJ+97zyWf QjjQca2pEpRLQ+AfRsqkaD8UJAG5O3G5svZ+V9Tqx0b1ppvlwmdMnIv/VIhZykZB of+BB/4Z85VQN+PQHeu3Y4OaBOzpn3aQNDzZBvnDpu0YbqNflI2vG1B1KaP9bK/e XgIbPDxriOMZKsSwwiXgLc4ptX1dGV8llxkzx2j9NVA73t5nx+Jqx894P3MFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYqsgqhPjXOSkojequo4jlFtMK3owHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0+R+RYKE8hgMhGdkaWNVFAiC1pf1pQhTQY 6U7qezzEiaHbOY1MDSH8gDOq0AXC8jo9n6sE2IG2CD+ReHHMp7Omixs0gByIqIBB udSMW1wvorAxYfeGJtfsreSgjgelTXf0EsXHXA23Spwg/XZ5E3JpqN30j227QaMU BO8yFdbtvrmk9qpFAhOMuAKITx2Pnave0MQD+qRUe54093rJDeaY5SvT/3wSwDTh fxqYyvylGQGvWsJmSCQ8DiWbMok/GjaymGV827Rw1axq51OWggXn/GWntuuBgSuB JeNFvvV6PsxM9YCPz6QBmNRfPR3ND0y3mTEEQvUA9PI2BHynA3k= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:59 2026 by rpki-client