$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: uEqq2Y3IXxsu/VZbRscweL1OjFr2EzrFsLNYLbF70wo= Subject key identifier: A3:3C:60:BA:13:D8:50:5C:89:76:12:27:8D:A4:6B:75:AD:E1:B6:8F Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 61FAB2A9EEF1A700E98A550E40DAA47BC97274DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 0149 Signing time: Thu 16 Apr 2026 06:42:18 +0000 Manifest this update: Thu 16 Apr 2026 06:37:18 +0000 Manifest next update: Sun 19 Apr 2026 07:52:18 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: JY873DxjGKqJ90CUWYzkpJGevTtT1LmdK/rbqQoC050=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fa:b2:a9:ee:f1:a7:00:e9:8a:55:0e:40:da:a4:7b:c9:72:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Apr 16 06:37:18 2026 GMT Not After : Apr 19 07:52:18 2026 GMT Subject: CN=A33C60BA13D8505C897612278DA46B75ADE1B68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:3f:f2:85:e4:d1:5c:33:2b:7d:d2:13:f1: bc:fa:da:ea:19:7f:50:32:1a:3a:02:f5:9b:e8:43: e9:40:10:99:ff:88:5e:d7:84:61:1f:36:1d:c3:27: 6e:3b:6b:dc:e8:17:bd:e1:cf:42:0e:e8:0e:49:00: c4:8e:9b:ed:80:0e:29:eb:c8:88:85:63:85:12:46: 48:5f:57:b2:b8:77:1c:07:b8:5b:1e:42:f2:bf:b9: c3:dd:d5:19:8b:37:fd:21:ba:51:63:64:1f:c2:97: 35:8d:0e:0d:83:0c:b1:36:df:d8:9d:fc:a4:4d:a0: 75:43:10:f9:c6:25:88:92:3a:e2:2c:2f:37:ea:7e: 29:5a:7b:fc:be:94:05:8d:6e:ef:f8:e9:0a:bb:aa: 2e:2b:fd:de:e2:2f:0f:40:61:48:fc:73:8d:aa:33: 06:cf:d1:29:dd:b7:32:7c:81:c7:de:10:57:a8:4b: 10:56:5d:72:06:65:3f:7a:20:70:b0:75:23:a7:e1: ca:eb:bc:d0:e1:8f:ea:26:ce:91:58:92:6b:12:d1: 8a:0f:07:72:44:82:14:ea:89:7d:5b:52:57:8b:3f: 63:34:fa:de:fe:ea:f3:f2:4d:79:22:3f:9f:36:71: 7a:03:1e:0a:c9:98:21:92:12:24:28:40:31:44:87: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:60:BA:13:D8:50:5C:89:76:12:27:8D:A4:6B:75:AD:E1:B6:8F X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2c:e5:8e:ce:2d:97:16:4c:2a:0c:b5:61:72:01:f8:db:fa: f5:9e:9b:28:69:56:8c:2d:72:34:09:2d:b5:17:7e:2d:17:c9: b5:1c:e1:6d:21:e0:1f:6f:f5:02:ce:2f:07:ff:9b:4f:2c:29: c4:56:5f:20:af:0b:53:a6:74:59:48:e9:95:ff:cb:a8:5d:99: 8a:81:26:a2:9f:ca:ce:fd:80:be:d3:18:54:00:db:04:8a:22: 96:4b:53:9d:61:7c:b4:0d:a5:0e:76:c4:66:a2:50:2c:a1:6d: 56:e8:36:56:9e:c2:ac:b5:ad:a4:ee:0a:b9:7b:35:69:73:d2: 08:69:56:1a:e6:a2:27:89:af:41:fc:e0:55:e1:ac:8e:b1:2d: 26:95:65:75:95:b6:8a:2d:62:db:c7:63:e0:60:57:78:12:f4: c6:2f:d8:03:61:80:56:09:8b:d3:f9:04:8c:16:25:92:7b:1d: ce:fc:04:f5:7d:8e:54:68:45:88:e8:57:2e:e5:34:6b:5e:79: 38:5e:8b:c7:9d:bb:a8:f5:69:59:58:80:c1:de:48:c0:b7:23: f7:e3:fd:c6:04:ae:78:1c:c5:09:ea:57:8e:9a:ba:df:d2:e9: a6:87:22:d3:57:be:d5:3d:91:ff:30:a8:3d:e1:37:e0:a8:58: 46:0b:f2:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfqyqe7xpwDpilUOQNqke8lydNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNjA0MTYwNjM3MThaFw0yNjA0MTkwNzUyMThaMDMxMTAvBgNV BAMTKEEzM0M2MEJBMTNEODUwNUM4OTc2MTIyNzhEQTQ2Qjc1QURFMUI2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaD/yheTRXDMrfdIT8bz62uoZ f1AyGjoC9ZvoQ+lAEJn/iF7XhGEfNh3DJ247a9zoF73hz0IO6A5JAMSOm+2ADinr yIiFY4USRkhfV7K4dxwHuFseQvK/ucPd1RmLN/0hulFjZB/ClzWNDg2DDLE239id /KRNoHVDEPnGJYiSOuIsLzfqfilae/y+lAWNbu/46Qq7qi4r/d7iLw9AYUj8c42q MwbP0SndtzJ8gcfeEFeoSxBWXXIGZT96IHCwdSOn4crrvNDhj+omzpFYkmsS0YoP B3JEghTqiX1bUleLP2M0+t7+6vPyTXkiP582cXoDHgrJmCGSEiQoQDFEhwsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUozxguhPYUFyJdhInjaRrda3hto8wHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMs5Y7OLZcWTCoMtWFyAfjb+vWemyhpVowt cjQJLbUXfi0XybUc4W0h4B9v9QLOLwf/m08sKcRWXyCvC1OmdFlI6ZX/y6hdmYqB JqKfys79gL7TGFQA2wSKIpZLU51hfLQNpQ52xGaiUCyhbVboNlaewqy1raTuCrl7 NWlz0ghpVhrmoieJr0H84FXhrI6xLSaVZXWVtootYtvHY+BgV3gS9MYv2ANhgFYJ i9P5BIwWJZJ7Hc78BPV9jlRoRYjoVy7lNGteeThei8edu6j1aVlYgMHeSMC3I/fj /cYErngcxQnqV46aut/S6aaHItNXvtU9kf8wqD3hN+CoWEYL8hE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:57 2026 by rpki-client