$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: tOMh7GTwZP/NWmEvDBfucke5KlBO2lrp0XZX5lCmzL0= Subject key identifier: DB:48:81:16:20:5F:1B:81:BC:7F:BD:2F:AC:FB:EA:EF:1D:AE:29:F6 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 344715CC026065F92067986125D547750AAA4380 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: 011C Signing time: Fri 17 Apr 2026 18:22:14 +0000 Manifest this update: Fri 17 Apr 2026 18:17:14 +0000 Manifest next update: Mon 20 Apr 2026 22:44:14 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: 4a3rOmb+WJZVyL4nyJWey821mMhRDwuuGqaqVFp63gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:47:15:cc:02:60:65:f9:20:67:98:61:25:d5:47:75:0a:aa:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Apr 17 18:17:14 2026 GMT Not After : Apr 20 22:44:14 2026 GMT Subject: CN=DB488116205F1B81BC7FBD2FACFBEAEF1DAE29F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:1c:f6:06:af:09:c3:e8:30:e3:5c:0a:96: 33:23:df:10:a9:08:b1:d6:88:5f:39:fe:b7:4d:be: cd:95:91:ad:06:85:40:c8:a2:54:8f:7f:0a:29:e8: 0c:13:c8:c1:79:3f:fc:b5:13:9d:28:1a:fd:12:38: c7:f6:11:22:e3:cd:e3:f4:a6:90:10:7f:84:77:02: d0:db:b8:c8:7b:2a:e0:07:91:60:49:30:73:f4:e0: 8c:f3:ce:4d:e4:60:cc:89:96:d1:c5:8c:7e:65:81: a7:f9:39:6d:c5:d2:5d:48:34:0d:8c:c4:4f:84:42: 1f:75:e1:93:b6:68:45:0b:23:77:83:7c:4f:b7:64: 39:75:06:e1:2c:7c:df:d0:f7:03:00:b2:c9:fa:46: 06:31:c9:85:73:40:04:b9:8b:e8:5a:f4:bf:07:02: 04:99:4e:c7:33:88:9d:da:1f:f1:51:dd:41:70:5b: d7:0c:b7:4c:14:3d:27:04:ae:46:38:af:02:44:84: 34:ce:e8:c2:a3:c4:13:fc:4f:d6:84:93:af:cf:ec: 2d:8f:19:de:1e:cd:e5:d0:3d:2f:23:10:e0:93:0a: c9:1a:e8:76:57:ff:f7:47:4f:54:84:ae:fa:1d:05: 69:41:a4:65:29:27:3e:ad:3b:b6:2a:d1:68:10:53: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:81:16:20:5F:1B:81:BC:7F:BD:2F:AC:FB:EA:EF:1D:AE:29:F6 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:40:53:59:84:2f:27:c5:61:18:cf:19:31:e5:3b:00:a6:50: 68:bc:4d:b2:9c:20:12:f8:0d:31:f0:d6:30:6e:11:b8:98:31: 5f:c5:33:58:2e:0c:1b:c4:a2:c5:9a:63:6b:e5:da:9a:23:e8: c8:bb:fc:45:13:54:25:f8:5d:ef:c4:df:98:c8:5f:79:1c:3e: 99:05:29:0f:69:8a:dc:aa:2e:1b:8b:a1:3e:0d:f5:29:f0:8b: 5f:97:d6:6e:43:bc:45:ca:6c:61:8b:f0:ce:98:24:17:b3:ec: 53:eb:c8:36:04:01:5c:36:6f:b6:04:61:42:e5:77:52:d3:7b: 74:aa:c7:a9:8b:78:41:9b:f3:69:ad:d0:69:7d:5c:e6:2a:08: 99:0a:84:77:0e:a5:17:b3:e3:72:10:cd:b5:09:ae:f0:db:ad: a4:a5:4e:d6:2d:52:6c:27:8b:3f:21:d5:43:9c:fb:26:7e:5f: 5e:4c:81:87:1c:ba:62:d8:cf:35:88:a6:7f:49:a1:65:41:8c: 04:56:0a:65:e0:30:87:36:ba:e7:34:e1:49:b6:98:a2:6e:b4: 7e:b8:f8:08:d7:96:f1:bd:d1:58:da:e6:92:91:bf:fc:63:f7: 98:17:eb:89:6a:13:8f:61:e0:02:a1:99:f7:43:88:85:b3:22: 17:df:c4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEcVzAJgZfkgZ5hhJdVHdQqqQ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNjA0MTcxODE3MTRaFw0yNjA0MjAyMjQ0MTRaMDMxMTAvBgNV BAMTKERCNDg4MTE2MjA1RjFCODFCQzdGQkQyRkFDRkJFQUVGMURBRTI5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXRz2Bq8Jw+gw41wKljMj3xCp CLHWiF85/rdNvs2Vka0GhUDIolSPfwop6AwTyMF5P/y1E50oGv0SOMf2ESLjzeP0 ppAQf4R3AtDbuMh7KuAHkWBJMHP04Izzzk3kYMyJltHFjH5lgaf5OW3F0l1INA2M xE+EQh914ZO2aEULI3eDfE+3ZDl1BuEsfN/Q9wMAssn6RgYxyYVzQAS5i+ha9L8H AgSZTscziJ3aH/FR3UFwW9cMt0wUPScErkY4rwJEhDTO6MKjxBP8T9aEk6/P7C2P Gd4ezeXQPS8jEOCTCska6HZX//dHT1SErvodBWlBpGUpJz6tO7Yq0WgQU5dtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20iBFiBfG4G8f70vrPvq7x2uKfYwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFAU1mELyfFYRjPGTHlOwCmUGi8TbKcIBL4 DTHw1jBuEbiYMV/FM1guDBvEosWaY2vl2poj6Mi7/EUTVCX4Xe/E35jIX3kcPpkF KQ9pityqLhuLoT4N9Snwi1+X1m5DvEXKbGGL8M6YJBez7FPryDYEAVw2b7YEYULl d1LTe3Sqx6mLeEGb82mt0Gl9XOYqCJkKhHcOpRez43IQzbUJrvDbraSlTtYtUmwn iz8h1UOc+yZ+X15MgYccumLYzzWIpn9JoWVBjARWCmXgMIc2uuc04Um2mKJutH64 +AjXlvG90Vja5pKRv/xj95gX64lqE49h4AKhmfdDiIWzIhffxBU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:27 2026 by rpki-client