$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft File: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft (raw, json) Hash identifier: jVQc79IBdHBh/JngF06jiQRPn82xeOg0rBv8+J5w4g4= Subject key identifier: 6C:9E:05:74:4B:8B:F1:6A:69:2B:F5:E9:27:14:2E:07:BA:62:43:DD Authority key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB Certificate issuer: /CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Certificate serial: 2369FBCFC2F8C923799ED8088B9661AAE712163D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft Manifest number: 17 Signing time: Thu 16 Apr 2026 10:51:54 +0000 Manifest this update: Thu 16 Apr 2026 10:46:54 +0000 Manifest next update: Sun 19 Apr 2026 15:46:54 +0000 Files and hashes: 1: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl (hash: xZPxs87cgvxv3PQQG5ipGPoIjeXEmBawqy3rdHq0R9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:69:fb:cf:c2:f8:c9:23:79:9e:d8:08:8b:96:61:aa:e7:12:16:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Validity Not Before: Apr 16 10:46:54 2026 GMT Not After : Apr 19 15:46:54 2026 GMT Subject: CN=6C9E05744B8BF16A692BF5E927142E07BA6243DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:87:af:f4:d2:22:61:f3:d0:0a:cf:27:8a: 9f:f0:f4:40:92:a4:35:06:c0:85:2e:e8:27:68:23: 65:d7:19:25:57:f9:a0:28:a3:9f:af:8c:fc:74:04: d3:a3:a0:0b:8f:42:7f:30:ed:2b:e0:be:4f:23:43: 6d:60:94:4a:d5:e6:77:46:71:7e:7b:32:0b:51:13: 2a:f5:23:02:3e:3b:13:7b:e0:8f:ac:71:c7:7f:f6: f3:be:b2:c7:24:c4:ca:46:d4:ce:fe:5b:95:83:83: 7c:97:29:22:04:14:32:e8:7b:2d:88:78:86:af:18: 1d:94:5e:60:72:e7:0f:db:c8:db:71:80:54:03:c5: c8:5e:25:b6:1c:c2:ce:36:8f:1f:0f:f6:6e:9c:f9: 7e:36:01:23:68:f4:dc:1c:6f:40:78:9d:6f:10:ae: b7:18:43:16:62:bd:67:dd:bb:32:b9:35:dd:a7:45: b3:9f:71:9e:b3:9a:01:f7:82:8b:8f:8e:69:93:1a: dc:98:1d:14:a3:fc:e8:9a:f3:c6:95:e7:d8:27:e5: 2f:35:fc:32:c8:1b:f4:1e:11:08:36:aa:7b:27:48: c0:0e:16:78:29:42:ff:00:16:6e:2e:31:b3:3c:4c: b3:54:64:12:be:9b:19:f6:42:a6:11:af:c8:72:51: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9E:05:74:4B:8B:F1:6A:69:2B:F5:E9:27:14:2E:07:BA:62:43:DD X509v3 Authority Key Identifier: keyid:1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:ba:5a:24:6c:44:9b:6b:b6:4a:48:3d:29:21:e2:ec:14: c8:46:d2:b1:db:6d:50:d2:ad:f2:2a:db:53:24:21:0a:d0:a0: b0:b8:f2:48:39:1d:65:f7:04:bd:b6:0e:6d:61:cd:40:af:2b: 5d:d8:12:5e:76:74:72:f8:9f:2f:5e:3f:14:21:89:13:ea:f5: 76:11:e6:b5:91:8c:cc:22:9d:53:cd:b9:d1:fc:80:c5:ba:4b: fc:bb:b7:e1:76:24:84:9e:c2:cc:e3:42:c9:88:2f:b7:50:5c: 6a:17:06:7d:57:c3:09:25:39:61:03:92:08:10:bb:21:36:2c: 89:d0:2b:4d:61:64:9c:ab:ad:6f:4e:f9:c8:fa:22:66:99:0e: 13:43:f1:4a:65:02:f5:3a:0c:67:ea:41:02:95:e9:73:0e:e7: 87:4b:13:7e:aa:ae:1c:98:53:03:41:3e:bd:aa:57:14:c7:e3: f4:99:cf:f6:f4:38:85:3d:d5:d6:e3:1d:48:7f:86:71:1a:00: 17:98:b8:e9:07:1c:04:3a:3f:41:91:33:a8:4f:bc:3a:c6:75: 2c:d5:75:7d:ff:af:03:50:f7:8a:fd:cb:be:57:f2:43:5f:d2: 3e:1b:d2:ec:a5:66:15:dc:72:d0:13:e9:fe:2c:77:06:de:18: fd:5c:29:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2n7z8L4ySN5ntgIi5ZhqucSFj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMz NENENUFGQjAeFw0yNjA0MTYxMDQ2NTRaFw0yNjA0MTkxNTQ2NTRaMDMxMTAvBgNV BAMTKDZDOUUwNTc0NEI4QkYxNkE2OTJCRjVFOTI3MTQyRTA3QkE2MjQzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXYev9NIiYfPQCs8nip/w9ECS pDUGwIUu6CdoI2XXGSVX+aAoo5+vjPx0BNOjoAuPQn8w7Svgvk8jQ21glErV5ndG cX57MgtREyr1IwI+OxN74I+sccd/9vO+ssckxMpG1M7+W5WDg3yXKSIEFDLoey2I eIavGB2UXmBy5w/byNtxgFQDxcheJbYcws42jx8P9m6c+X42ASNo9Nwcb0B4nW8Q rrcYQxZivWfduzK5Nd2nRbOfcZ6zmgH3gouPjmmTGtyYHRSj/Oia88aV59gn5S81 /DLIG/QeEQg2qnsnSMAOFngpQv8AFm4uMbM8TLNUZBK+mxn2QqYRr8hyUaPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJ4FdEuL8WppK/XpJxQuB7piQ90wHwYDVR0j BBgwFoAUHaaBgxuTtBgXFIfPZfqg7DTNWvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS8xREE2ODE4MzFC OTNCNDE4MTcxNDg3Q0Y2NUZBQTBFQzM0Q0Q1QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMzNENE NUFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEw RUMzNENENUFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ9ulokbESba7ZKSD0pIeLsFMhG0rHbbVDS rfIq21MkIQrQoLC48kg5HWX3BL22Dm1hzUCvK13YEl52dHL4ny9ePxQhiRPq9XYR 5rWRjMwinVPNudH8gMW6S/y7t+F2JISewszjQsmIL7dQXGoXBn1XwwklOWEDkggQ uyE2LInQK01hZJyrrW9O+cj6ImaZDhND8UplAvU6DGfqQQKV6XMO54dLE36qrhyY UwNBPr2qVxTH4/SZz/b0OIU91dbjHUh/hnEaABeYuOkHHAQ6P0GRM6hPvDrGdSzV dX3/rwNQ94r9y75X8kNf0j4b0uylZhXcctAT6f4sdwbeGP1cKXY= -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:18 2026 by rpki-client