$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: oH4GrbdIIk0AD7r/zCq3VIlRlH9gqjbsai57cNcxO6o= Subject key identifier: 38:5C:7E:73:37:3D:FF:BC:87:E6:1A:9E:72:32:E4:F8:4B:47:44:28 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 6505329E8EA4C9B8FC17B30B205E2C868BD4E8BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: E0 Signing time: Fri 17 Apr 2026 06:51:24 +0000 Manifest this update: Fri 17 Apr 2026 06:46:24 +0000 Manifest next update: Mon 20 Apr 2026 11:11:24 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: QVMumU7W1ZafP2vx84RE1cq7BMgMSZTIN2D2NFyUgoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:05:32:9e:8e:a4:c9:b8:fc:17:b3:0b:20:5e:2c:86:8b:d4:e8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Apr 17 06:46:24 2026 GMT Not After : Apr 20 11:11:24 2026 GMT Subject: CN=385C7E73373DFFBC87E61A9E7232E4F84B474428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:7b:4e:91:0e:8d:71:32:5d:ae:7b:7a:87: b0:47:9a:02:ce:39:3d:92:61:ca:f4:ff:5d:24:37: b5:62:62:48:fd:c6:f9:d9:d2:09:13:c4:00:f4:eb: 30:65:85:ce:73:b5:1b:7b:85:71:99:bb:e6:1d:6b: ed:2f:74:52:21:c0:f3:11:af:85:74:b2:61:53:b0: 73:0a:e7:78:80:3f:8c:ca:e8:04:39:98:ff:ad:ed: cc:34:a0:61:73:12:9e:0e:c2:33:0f:38:e8:ce:a7: c0:da:dd:02:02:74:b6:f1:dc:76:c0:91:17:96:44: 0d:83:74:6b:b1:ad:b5:2a:7c:bd:ea:dd:d7:b4:53: 8b:2c:3c:33:c6:af:8d:95:50:b2:cf:d0:6a:e4:db: be:46:4f:0f:fa:aa:57:b7:9c:ee:4a:0e:b6:d0:4c: a5:16:c8:b5:f8:d5:27:cc:c1:a6:6d:9c:1b:83:12: 6d:39:44:94:9d:1b:a9:06:90:5d:84:cb:21:ba:14: c2:0f:08:d1:a8:80:c3:75:67:3b:4c:bd:c0:14:b5: 78:30:fc:7a:7c:d6:45:72:69:7b:47:dc:6c:21:ad: 1f:a1:86:d0:72:29:9f:ce:cf:98:9b:10:d1:fa:25: 30:26:15:ac:2b:35:07:14:ef:ac:3f:fd:00:32:29: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5C:7E:73:37:3D:FF:BC:87:E6:1A:9E:72:32:E4:F8:4B:47:44:28 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:5a:52:f2:aa:f5:5a:89:2b:b3:f0:25:73:a6:33:ae:e4:f0: b3:7a:5e:dd:86:a1:c4:30:e5:a4:08:87:19:fc:56:d7:08:8c: 55:c6:0e:ff:52:66:56:86:85:dc:de:e9:79:ed:82:fb:02:b9: 7c:31:57:1b:78:11:09:6f:15:b1:a5:db:5f:a2:7f:6c:2c:74: bf:da:48:a6:66:f3:89:db:32:e4:68:58:45:37:d2:63:bf:ed: a5:f2:fc:5d:9e:b7:aa:61:60:64:90:d5:cb:0b:af:d9:dd:24: 77:ef:1c:70:b4:8c:5c:e0:7f:33:11:f8:82:6d:e2:9b:54:c5: 7f:66:5b:f8:ab:a4:40:fa:2e:37:0e:39:bb:6d:3e:d6:41:17: c7:ca:3d:70:a4:f6:28:68:1c:ae:ea:8c:19:b9:c9:3a:00:c7: 5f:66:ac:3e:ef:1b:58:15:6c:6c:e2:f8:4a:26:a3:a3:1d:5a: 98:33:4a:81:7f:21:cb:48:b9:ad:ab:0b:bd:6b:60:02:6b:4e: 3b:e0:dd:cd:1b:6b:53:c1:6c:85:d6:f1:7d:d9:08:52:2f:cc: 88:9a:d3:72:9a:73:c7:8e:fc:fd:62:89:70:6f:6a:e4:29:c5: 22:3c:49:14:e9:8d:95:4e:38:d4:b6:39:18:fc:82:fb:14:06: df:5b:24:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQUyno6kybj8F7MLIF4shovU6LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNjA0MTcwNjQ2MjRaFw0yNjA0MjAxMTExMjRaMDMxMTAvBgNV BAMTKDM4NUM3RTczMzczREZGQkM4N0U2MUE5RTcyMzJFNEY4NEI0NzQ0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpXtOkQ6NcTJdrnt6h7BHmgLO OT2SYcr0/10kN7ViYkj9xvnZ0gkTxAD06zBlhc5ztRt7hXGZu+Yda+0vdFIhwPMR r4V0smFTsHMK53iAP4zK6AQ5mP+t7cw0oGFzEp4OwjMPOOjOp8Da3QICdLbx3HbA kReWRA2DdGuxrbUqfL3q3de0U4ssPDPGr42VULLP0Grk275GTw/6qle3nO5KDrbQ TKUWyLX41SfMwaZtnBuDEm05RJSdG6kGkF2EyyG6FMIPCNGogMN1ZztMvcAUtXgw /Hp81kVyaXtH3GwhrR+hhtByKZ/Oz5ibENH6JTAmFawrNQcU76w//QAyKV5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFx+czc9/7yH5hqecjLk+EtHRCgwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxaUvKq9VqJK7PwJXOmM67k8LN6Xt2GocQw 5aQIhxn8VtcIjFXGDv9SZlaGhdze6XntgvsCuXwxVxt4EQlvFbGl21+if2wsdL/a SKZm84nbMuRoWEU30mO/7aXy/F2et6phYGSQ1csLr9ndJHfvHHC0jFzgfzMR+IJt 4ptUxX9mW/irpED6LjcOObttPtZBF8fKPXCk9ihoHK7qjBm5yToAx19mrD7vG1gV bGzi+Eomo6MdWpgzSoF/IctIua2rC71rYAJrTjvg3c0ba1PBbIXW8X3ZCFIvzIia 03Kac8eO/P1iiXBvauQpxSI8SRTpjZVOONS2ORj8gvsUBt9bJOs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:03 2026 by rpki-client