$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: 15zuqqJvscUpuvYMr3sS5dPDLmLdQmtqwOo5SCPSgfY= Subject key identifier: D5:52:77:D8:AF:8C:1B:9E:67:08:51:DD:21:FA:A7:FB:21:25:80:23 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 02DF7E49A9301ADA1DFA266186B5B71F2C55F7C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 02F9 Signing time: Fri 17 Apr 2026 03:11:10 +0000 Manifest this update: Fri 17 Apr 2026 03:06:10 +0000 Manifest next update: Mon 20 Apr 2026 12:59:10 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: qIhwFVI+zkQyX+LeBwU8mKdR08vAxlhPMRVXmzGYtiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:df:7e:49:a9:30:1a:da:1d:fa:26:61:86:b5:b7:1f:2c:55:f7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Apr 17 03:06:10 2026 GMT Not After : Apr 20 12:59:10 2026 GMT Subject: CN=D55277D8AF8C1B9E670851DD21FAA7FB21258023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:20:fe:7e:10:1d:7e:c2:a7:fc:46:25:4f: 0f:b7:0f:5c:c9:0f:cc:07:39:5c:02:46:f1:41:06: 20:62:4e:ff:41:71:1a:08:a1:48:5e:35:fd:ea:6b: 00:e8:e3:87:a4:f3:3a:52:42:d8:1d:bb:ca:1b:d0: 44:48:91:7e:47:8d:7c:af:0e:9f:24:e9:a6:20:f7: 88:c9:a7:2e:8f:88:74:dc:37:6b:32:68:6f:2d:5f: 76:6c:98:67:1e:72:f5:8d:c8:c0:c9:0c:a4:77:e3: 14:3b:c5:4b:9f:a9:54:03:36:06:80:b8:8f:d4:0b: e3:d1:6f:c1:31:7d:25:28:52:34:61:da:c2:10:aa: 1e:df:d0:ca:51:d3:1d:5e:23:b8:86:8c:84:e5:59: 60:ff:99:b6:94:9c:1a:f7:ae:aa:b0:69:12:94:02: 7e:58:64:da:c1:5d:42:a4:61:dd:bb:51:a9:2d:82: f8:5b:e3:16:8d:3b:12:ec:d1:ad:22:e7:8b:c4:e7: be:dc:d6:89:1f:92:1a:ed:15:d8:08:d4:a6:17:fb: 0a:b6:c3:4d:dc:3d:f3:20:bd:ba:06:93:58:7d:00: fb:a7:a7:1c:e0:22:03:34:8c:62:16:1c:35:9e:b8: 0a:ae:fe:ab:65:44:2a:b4:9d:a4:80:b8:f6:67:d2: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:77:D8:AF:8C:1B:9E:67:08:51:DD:21:FA:A7:FB:21:25:80:23 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:75:ee:9f:fa:b6:2f:44:6c:6d:fb:79:71:92:2d:9f:53:18: 18:a8:ca:a8:ad:0a:61:9a:7f:a9:a8:73:05:11:87:b6:b5:38: b0:53:28:fd:dd:d1:39:fa:15:96:5f:22:25:4c:71:56:53:31: 38:a4:ea:e7:1d:61:db:61:96:de:df:4c:9f:5b:a4:50:de:37: 91:e7:5c:c2:1d:de:32:46:e9:0f:4a:36:e9:ed:f1:88:0d:3b: c3:0b:d0:49:9f:ea:68:46:30:c5:a2:be:96:cc:9f:97:87:71: 02:05:eb:77:e8:24:6e:81:44:36:f5:31:c1:5d:90:15:66:4c: 16:b2:5f:09:8b:a4:12:f8:83:68:6d:0f:38:cb:b2:03:17:de: 01:70:68:3f:a5:44:cf:0a:c5:5a:ab:1f:30:b7:8b:0c:9d:53: 8a:62:eb:04:ff:89:a5:b1:0b:36:76:ca:87:36:d3:14:75:61: cb:14:fc:98:b5:c8:37:8b:10:f4:93:9c:c1:67:24:bf:94:56: 49:fc:dc:b5:fb:ab:36:d4:a1:e1:41:ea:b3:61:ef:50:a2:73: 0d:70:7c:69:76:11:66:09:47:fb:12:6b:81:2e:2c:49:cd:32: 49:01:44:fd:88:c3:c5:6d:2d:44:ed:f5:ec:af:f1:25:e3:58: 82:be:77:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt9+SakwGtod+iZhhrW3HyxV98EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNjA0MTcwMzA2MTBaFw0yNjA0MjAxMjU5MTBaMDMxMTAvBgNV BAMTKEQ1NTI3N0Q4QUY4QzFCOUU2NzA4NTFERDIxRkFBN0ZCMjEyNTgwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtSD+fhAdfsKn/EYlTw+3D1zJ D8wHOVwCRvFBBiBiTv9BcRoIoUheNf3qawDo44ek8zpSQtgdu8ob0ERIkX5HjXyv Dp8k6aYg94jJpy6PiHTcN2syaG8tX3ZsmGcecvWNyMDJDKR34xQ7xUufqVQDNgaA uI/UC+PRb8ExfSUoUjRh2sIQqh7f0MpR0x1eI7iGjITlWWD/mbaUnBr3rqqwaRKU An5YZNrBXUKkYd27Uaktgvhb4xaNOxLs0a0i54vE577c1okfkhrtFdgI1KYX+wq2 w03cPfMgvboGk1h9APunpxzgIgM0jGIWHDWeuAqu/qtlRCq0naSAuPZn0l7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VJ32K+MG55nCFHdIfqn+yElgCMwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx17p/6ti9EbG37eXGSLZ9TGBioyqitCmGa f6mocwURh7a1OLBTKP3d0Tn6FZZfIiVMcVZTMTik6ucdYdthlt7fTJ9bpFDeN5Hn XMId3jJG6Q9KNunt8YgNO8ML0Emf6mhGMMWivpbMn5eHcQIF63foJG6BRDb1McFd kBVmTBayXwmLpBL4g2htDzjLsgMX3gFwaD+lRM8KxVqrHzC3iwydU4pi6wT/iaWx CzZ2yoc20xR1YcsU/Ji1yDeLEPSTnMFnJL+UVkn83LX7qzbUoeFB6rNh71Cicw1w fGl2EWYJR/sSa4EuLEnNMkkBRP2Iw8VtLUTt9eyv8SXjWIK+d/I= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:43 2026 by rpki-client