$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: chueOBZ+jlP+N1VwXEE3+K6ih9H/QSolFLHNVtggloE= Subject key identifier: 70:C6:B1:CE:CF:B7:08:49:DD:C6:FA:AE:5B:38:D9:6E:72:E5:AC:8E Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 151E85C50E340E9BDAAA885703DAF5AC19FF9478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 0268 Signing time: Fri 17 Apr 2026 11:31:59 +0000 Manifest this update: Fri 17 Apr 2026 11:26:59 +0000 Manifest next update: Mon 20 Apr 2026 17:38:59 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: TYrl3LtQ4rEnmq3ys+G5FNB72/5XsKHMEUhuUuHscR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1e:85:c5:0e:34:0e:9b:da:aa:88:57:03:da:f5:ac:19:ff:94:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Apr 17 11:26:59 2026 GMT Not After : Apr 20 17:38:59 2026 GMT Subject: CN=70C6B1CECFB70849DDC6FAAE5B38D96E72E5AC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:9a:ab:9d:6a:68:08:38:54:c1:8a:49:b1: 66:09:0f:51:07:10:0e:6b:64:61:78:1a:2c:d3:30: 15:13:dc:ad:5c:56:d8:2e:6a:71:4b:3c:e4:f3:cf: f5:55:94:d6:bd:95:af:2a:09:f1:fe:5b:34:54:e2: be:be:08:ed:4c:43:c6:a8:ea:9d:42:10:bf:2b:48: 39:da:3f:c5:62:de:6b:55:ae:3f:1e:7a:69:ee:bf: c9:11:7a:9e:33:42:85:5e:6c:50:8f:73:63:91:a8: 73:64:d9:f2:cb:86:cf:1f:6a:98:d8:1c:86:7b:e3: 64:72:55:a6:61:ef:fa:73:a2:50:97:79:63:8e:99: 13:55:03:b7:31:05:0d:96:f2:18:95:9a:4c:b3:b6: 00:ba:5a:1e:39:16:99:28:11:e2:0a:9d:44:03:40: 2f:54:72:01:d6:fc:fe:a8:f5:bb:df:8c:2b:dc:cc: 9a:f0:c0:51:68:d8:de:68:7d:31:89:bc:60:05:6a: ef:9e:b9:32:1b:f0:3f:96:48:b6:49:8c:cb:07:2c: ae:98:0a:ed:fc:77:0e:50:75:24:fb:e8:cf:15:a3: f3:42:c2:99:c7:7e:5e:dc:47:82:7b:b4:43:ae:c1: cf:f2:bd:bc:49:1d:9b:a7:18:94:56:67:de:e4:3c: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:B1:CE:CF:B7:08:49:DD:C6:FA:AE:5B:38:D9:6E:72:E5:AC:8E X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:83:4a:59:45:52:61:4c:b2:ce:de:a8:8d:c5:36:69:76:bb: ec:53:4b:0e:f3:cf:b3:89:d2:b3:5b:eb:b9:ff:63:cd:d5:c5: 83:1e:bf:90:d5:40:cf:fe:0f:c6:04:1f:40:a4:9e:cb:0a:03: 8f:8a:01:98:f2:70:48:00:a1:a4:ad:bd:81:23:c3:61:fd:94: e1:72:a1:5e:aa:6d:8b:ce:3c:0a:ac:07:59:00:7b:a1:35:0d: 4c:dc:57:0e:a9:1f:e9:09:66:a6:e3:30:da:00:c9:c5:3c:8b: b3:f1:53:8c:6e:9e:cd:cf:b4:74:a2:45:5c:f6:e7:7f:fa:c7: 8e:c3:3d:9c:c2:9a:fc:f3:cd:5f:9a:9a:fe:48:23:25:4e:b0: 54:1e:13:b4:46:0e:38:fa:dd:2b:93:be:3b:46:88:55:14:41: d2:d1:c4:d9:9c:20:64:70:3b:39:63:da:36:5c:05:0f:f2:14: 39:aa:ad:20:59:3d:0e:d9:05:3c:d8:1c:c4:77:06:ea:b3:1f: 54:cf:e1:cb:3f:3d:92:4b:e2:75:77:6c:08:86:15:4f:a0:f8: d1:51:a9:c3:f8:36:8e:30:0d:41:f9:ce:93:75:eb:69:c7:90: 6f:1f:a1:d4:14:76:2a:81:db:6c:f2:a5:ee:49:a7:88:6c:e6: 36:4d:b1:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFR6FxQ40DpvaqohXA9r1rBn/lHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNjA0MTcxMTI2NTlaFw0yNjA0MjAxNzM4NTlaMDMxMTAvBgNV BAMTKDcwQzZCMUNFQ0ZCNzA4NDlEREM2RkFBRTVCMzhEOTZFNzJFNUFDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxupqrnWpoCDhUwYpJsWYJD1EH EA5rZGF4GizTMBUT3K1cVtguanFLPOTzz/VVlNa9la8qCfH+WzRU4r6+CO1MQ8ao 6p1CEL8rSDnaP8Vi3mtVrj8eemnuv8kRep4zQoVebFCPc2ORqHNk2fLLhs8fapjY HIZ742RyVaZh7/pzolCXeWOOmRNVA7cxBQ2W8hiVmkyztgC6Wh45FpkoEeIKnUQD QC9UcgHW/P6o9bvfjCvczJrwwFFo2N5ofTGJvGAFau+euTIb8D+WSLZJjMsHLK6Y Cu38dw5QdST76M8Vo/NCwpnHfl7cR4J7tEOuwc/yvbxJHZunGJRWZ97kPDVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMaxzs+3CEndxvquWzjZbnLlrI4wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSDSllFUmFMss7eqI3FNml2u+xTSw7zz7OJ 0rNb67n/Y83VxYMev5DVQM/+D8YEH0CknssKA4+KAZjycEgAoaStvYEjw2H9lOFy oV6qbYvOPAqsB1kAe6E1DUzcVw6pH+kJZqbjMNoAycU8i7PxU4xuns3PtHSiRVz2 53/6x47DPZzCmvzzzV+amv5IIyVOsFQeE7RGDjj63SuTvjtGiFUUQdLRxNmcIGRw Ozlj2jZcBQ/yFDmqrSBZPQ7ZBTzYHMR3BuqzH1TP4cs/PZJL4nV3bAiGFU+g+NFR qcP4No4wDUH5zpN162nHkG8fodQUdiqB22zype5Jp4hs5jZNsQs= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:25 2026 by rpki-client