$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft File: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft (raw, json) Hash identifier: 6mxi0fUk3vmZRCKDzn4BHHIXXMsHL+d2hAoYKxdasCU= Subject key identifier: FC:8F:92:D6:03:EA:BB:FF:FE:13:20:4F:88:BD:8B:C2:1F:9E:B1:C7 Authority key identifier: 07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F Certificate issuer: /CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Certificate serial: 552A239CDFD8B7BC6FB06B41D19C5590231A38E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft Manifest number: 10 Signing time: Thu 16 Apr 2026 22:51:01 +0000 Manifest this update: Thu 16 Apr 2026 22:46:01 +0000 Manifest next update: Mon 20 Apr 2026 01:19:01 +0000 Files and hashes: 1: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl (hash: sInNS72IdnDeHLhYzloY+nPmFjDr7QRpgrPuKS0+EDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2a:23:9c:df:d8:b7:bc:6f:b0:6b:41:d1:9c:55:90:23:1a:38:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Validity Not Before: Apr 16 22:46:01 2026 GMT Not After : Apr 20 01:19:01 2026 GMT Subject: CN=FC8F92D603EABBFFFE13204F88BD8BC21F9EB1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:51:df:d5:88:10:65:0f:d9:14:63:a0:80: 55:5b:5a:cb:d0:fc:dd:a2:1a:e6:5b:97:e9:39:e6: ed:20:c0:a3:39:b8:00:dd:40:f2:aa:3d:c4:2a:47: 62:b7:21:db:d6:52:99:4d:e6:a8:78:51:b3:b7:36: 27:d1:dc:f6:1b:28:96:6d:f4:d0:98:eb:1d:66:79: 19:f2:55:fc:a6:85:ff:6c:64:11:4e:d8:30:a0:1d: c0:96:62:9e:0f:16:f2:7c:73:4b:3c:fa:af:59:e5: 89:4c:34:f6:d5:14:9a:f8:1c:ac:5c:0d:06:92:a9: 8e:6a:07:fb:8a:c1:38:41:b6:0b:2a:a3:67:77:96: 2e:8f:71:4b:96:7a:8e:9c:c0:1d:99:10:4d:02:1a: d0:c4:4e:5b:51:7c:66:41:e7:90:57:2b:b9:99:b8: e2:65:0a:76:1c:b0:44:68:6a:db:05:06:0f:f1:51: a5:a6:e7:99:f7:0d:e9:14:ba:4d:17:05:5a:0b:1d: 48:5e:00:27:fc:31:f5:45:2c:6f:be:81:c1:7b:5e: 3a:88:0d:0c:93:c5:d7:35:2d:3b:df:14:e7:37:4b: 25:1e:28:5d:e3:53:28:0e:16:01:ca:be:6c:d7:a4: dd:c3:4e:46:64:f3:00:df:4d:47:73:4c:6b:1f:17: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:92:D6:03:EA:BB:FF:FE:13:20:4F:88:BD:8B:C2:1F:9E:B1:C7 X509v3 Authority Key Identifier: keyid:07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:6e:7e:8f:35:7f:b4:84:06:44:eb:e7:8c:7a:9a:fa:6b:77: 7f:c0:43:b1:40:3f:2d:bc:c1:b1:e1:21:21:06:c8:ce:61:93: 52:cb:09:6f:71:2d:4b:82:3c:e6:a1:64:ab:ea:86:22:cb:f0: aa:1e:be:bc:23:48:7d:0c:ed:5b:0d:bf:59:ae:36:2d:d8:ce: dd:e0:1f:fd:c6:9c:1b:0e:73:44:3c:93:ce:2a:cb:53:5e:db: 54:33:ca:bb:e0:b0:18:2b:b9:a9:16:43:63:9b:fb:c1:18:78: e7:28:6c:04:42:e1:40:81:5b:97:6e:cb:8e:dd:29:c8:7b:d9: 26:2b:52:f7:4c:80:f1:bf:78:6a:12:80:8b:86:42:45:03:74: 85:87:bb:1d:2c:14:89:f6:17:7a:9f:d0:06:07:38:09:66:19: 5b:cc:28:00:87:5c:84:30:cc:83:ab:f2:89:12:ba:e7:d7:f6: 91:7b:e3:5f:76:a6:1b:02:ba:cb:5c:5d:4a:eb:0f:4b:2b:29: ef:a3:61:d8:4f:53:d2:8f:e0:e9:e5:7e:cf:bd:78:97:eb:e3: 8d:2d:84:f9:c6:44:17:45:c2:b8:8f:49:36:5d:56:02:39:d2: 49:94:6d:08:f0:7f:54:24:9d:30:cb:bd:8f:e9:25:17:ee:4b: 2d:5b:4d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSojnN/Yt7xvsGtB0ZxVkCMaOOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4 NDVGRDA0RjAeFw0yNjA0MTYyMjQ2MDFaFw0yNjA0MjAwMTE5MDFaMDMxMTAvBgNV BAMTKEZDOEY5MkQ2MDNFQUJCRkZGRTEzMjA0Rjg4QkQ4QkMyMUY5RUIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhy1Hf1YgQZQ/ZFGOggFVbWsvQ /N2iGuZbl+k55u0gwKM5uADdQPKqPcQqR2K3IdvWUplN5qh4UbO3NifR3PYbKJZt 9NCY6x1meRnyVfymhf9sZBFO2DCgHcCWYp4PFvJ8c0s8+q9Z5YlMNPbVFJr4HKxc DQaSqY5qB/uKwThBtgsqo2d3li6PcUuWeo6cwB2ZEE0CGtDETltRfGZB55BXK7mZ uOJlCnYcsERoatsFBg/xUaWm55n3DekUuk0XBVoLHUheACf8MfVFLG++gcF7XjqI DQyTxdc1LTvfFOc3SyUeKF3jUygOFgHKvmzXpN3DTkZk8wDfTUdzTGsfF0d3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/I+S1gPqu//+EyBPiL2Lwh+esccwHwYDVR0j BBgwFoAUB+mkIgzx1P8NXJmvtQASxoRf0E8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMS8wN0U5QTQyMjBD RjFENEZGMEQ1Qzk5QUZCNTAwMTJDNjg0NUZEMDRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4NDVG RDA0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEy QzY4NDVGRDA0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpufo81f7SEBkTr54x6mvprd3/AQ7FAPy28 wbHhISEGyM5hk1LLCW9xLUuCPOahZKvqhiLL8KoevrwjSH0M7VsNv1muNi3Yzt3g H/3GnBsOc0Q8k84qy1Ne21QzyrvgsBgruakWQ2Ob+8EYeOcobARC4UCBW5duy47d Kch72SYrUvdMgPG/eGoSgIuGQkUDdIWHux0sFIn2F3qf0AYHOAlmGVvMKACHXIQw zIOr8okSuufX9pF74192phsCustcXUrrD0srKe+jYdhPU9KP4Onlfs+9eJfr440t hPnGRBdFwriPSTZdVgI50kmUbQjwf1QknTDLvY/pJRfuSy1bTRM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:46 2026 by rpki-client