$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: N9CqUJNnbWKR6BRf9EcWHPaBVHzZ/ix+cFOtOJ1Xq9U= Subject key identifier: 91:F1:2F:23:43:D9:61:DA:0A:09:B7:39:C0:3B:CA:7A:34:8B:6D:90 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 52274EBD534F920D4FE54EF742793E9E7DB0309C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 0419 Signing time: Sat 18 Apr 2026 18:02:32 +0000 Manifest this update: Sat 18 Apr 2026 17:57:32 +0000 Manifest next update: Tue 21 Apr 2026 22:57:32 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: OBRqmCbSFLjP+wQ6dZZGpi8/fa0QyIRKVjRXD9kIfg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:27:4e:bd:53:4f:92:0d:4f:e5:4e:f7:42:79:3e:9e:7d:b0:30:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Apr 18 17:57:32 2026 GMT Not After : Apr 21 22:57:32 2026 GMT Subject: CN=91F12F2343D961DA0A09B739C03BCA7A348B6D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:8b:fd:8d:0f:d7:3e:20:cf:8d:d2:73:6a: ec:e8:bd:da:d7:42:9c:21:53:e6:ef:39:4e:7f:06: af:a7:3c:bf:25:6a:65:f5:da:c4:a5:32:60:cf:c9: e8:c8:f2:f4:f6:03:35:35:a7:4f:09:c8:a5:14:5a: e0:5d:e3:e6:63:42:35:cd:5c:44:07:b9:aa:d6:e1: a4:cf:09:68:a6:ee:fc:7e:1f:3e:01:87:b0:92:0a: c3:1c:d6:1d:56:19:9f:ca:36:00:38:e5:9f:d0:cd: ba:fc:53:13:08:9d:13:a0:71:68:a1:84:34:af:be: e8:3e:eb:f0:fb:46:9b:95:5c:45:9b:bb:a4:45:fc: 6c:70:d3:5b:a4:38:8b:96:b4:29:8c:ab:3e:d0:75: 8d:ff:1a:8b:1c:30:4c:c3:a7:b0:73:35:cd:62:10: dc:f4:bc:52:6f:da:76:6c:09:42:2c:bb:e9:78:86: 41:38:c0:a6:5a:12:6d:e8:81:73:a8:a4:5a:80:ad: 84:33:51:80:f8:7e:99:c8:17:5f:50:f9:be:2e:c6: 0d:d8:41:5b:e2:aa:8a:b1:70:40:8b:56:df:0b:98: f4:94:bb:c3:da:d5:27:53:06:e9:4f:28:22:3f:35: 7c:b0:fd:69:d0:42:8c:d7:99:0f:9c:6e:30:49:38: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F1:2F:23:43:D9:61:DA:0A:09:B7:39:C0:3B:CA:7A:34:8B:6D:90 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a1:54:b7:ea:ac:92:f7:86:91:45:14:85:23:ee:d6:5b:d2: 7e:90:84:a1:08:a9:94:d1:98:06:d9:97:ad:4d:16:01:e6:6b: 53:68:51:21:3f:d3:a5:ea:ac:37:71:54:67:34:b1:f5:93:31: d8:fe:52:01:64:19:7c:a2:ce:65:f6:00:c2:fe:17:2d:4a:75: 42:49:59:8b:4c:ef:45:97:e1:73:89:93:d5:74:ec:36:ed:af: 73:a7:8e:ca:65:2d:5f:24:f1:34:3e:41:44:4b:b7:8a:0c:dc: 1c:05:0c:fb:78:9a:84:f0:a9:66:e3:b1:34:63:ca:49:f4:95: 12:d9:ae:34:95:e3:11:e6:f4:36:2f:fb:f5:e8:32:d4:52:db: 40:dd:75:31:36:67:a3:bd:03:84:e9:6f:fa:22:a9:30:5e:e6: bd:da:39:a3:1d:b9:81:e3:6c:e7:f5:14:f8:49:96:69:59:86: 8d:0d:4a:85:ac:aa:59:58:1b:d8:ee:57:6f:57:b8:46:26:79: 46:b0:f2:f0:9d:fa:89:99:18:23:c3:9f:d8:c7:50:8f:a9:5f: 36:e6:c4:42:c3:52:8c:53:5c:31:e2:c4:9a:a0:ed:0e:37:1d: ee:a5:35:3f:6d:46:d6:c6:0e:0d:7f:d5:c9:ac:51:e8:3d:5d: 8a:e0:52:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUidOvVNPkg1P5U73Qnk+nn2wMJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNjA0MTgxNzU3MzJaFw0yNjA0MjEyMjU3MzJaMDMxMTAvBgNV BAMTKDkxRjEyRjIzNDNEOTYxREEwQTA5QjczOUMwM0JDQTdBMzQ4QjZEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI4v9jQ/XPiDPjdJzauzovdrX QpwhU+bvOU5/Bq+nPL8lamX12sSlMmDPyejI8vT2AzU1p08JyKUUWuBd4+ZjQjXN XEQHuarW4aTPCWim7vx+Hz4Bh7CSCsMc1h1WGZ/KNgA45Z/Qzbr8UxMInROgcWih hDSvvug+6/D7RpuVXEWbu6RF/Gxw01ukOIuWtCmMqz7QdY3/GoscMEzDp7BzNc1i ENz0vFJv2nZsCUIsu+l4hkE4wKZaEm3ogXOopFqArYQzUYD4fpnIF19Q+b4uxg3Y QVviqoqxcECLVt8LmPSUu8Pa1SdTBulPKCI/NXyw/WnQQozXmQ+cbjBJOHcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkfEvI0PZYdoKCbc5wDvKejSLbZAwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKChVLfqrJL3hpFFFIUj7tZb0n6QhKEIqZTR mAbZl61NFgHma1NoUSE/06XqrDdxVGc0sfWTMdj+UgFkGXyizmX2AML+Fy1KdUJJ WYtM70WX4XOJk9V07Dbtr3OnjsplLV8k8TQ+QURLt4oM3BwFDPt4moTwqWbjsTRj ykn0lRLZrjSV4xHm9DYv+/XoMtRS20DddTE2Z6O9A4Tpb/oiqTBe5r3aOaMduYHj bOf1FPhJlmlZho0NSoWsqllYG9juV29XuEYmeUaw8vCd+omZGCPDn9jHUI+pXzbm xELDUoxTXDHixJqg7Q43He6lNT9tRtbGDg1/1cmsUeg9XYrgUiI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:16 2026 by rpki-client