$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: pzGC27Dyx+i+fylcTy6KkVLHvgrfTgMzGM8NSPsUhXA= Subject key identifier: 87:D3:B0:02:90:11:B0:A7:7E:45:57:D5:4D:BF:C6:73:EC:67:BD:DE Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 69FB753D602F188F3C5BDB38B374D359E59DD627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 0251 Signing time: Thu 16 Apr 2026 11:42:21 +0000 Manifest this update: Thu 16 Apr 2026 11:37:21 +0000 Manifest next update: Sun 19 Apr 2026 20:35:21 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: EM4x5uK5js6Nro09w9l6NIZn0h2+GI1KqBUgjuv2gNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fb:75:3d:60:2f:18:8f:3c:5b:db:38:b3:74:d3:59:e5:9d:d6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Apr 16 11:37:21 2026 GMT Not After : Apr 19 20:35:21 2026 GMT Subject: CN=87D3B0029011B0A77E4557D54DBFC673EC67BDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:c0:a3:4e:e4:13:18:50:8b:d6:cd:70:72: f5:e3:d9:5d:61:89:f8:27:a2:43:7d:58:d0:5d:25: ab:12:96:41:c0:3a:a8:aa:19:0d:09:a1:1c:09:4a: 37:11:0f:a7:93:82:a8:17:1f:5d:e7:be:4d:e0:78: 25:9b:c5:81:c8:c6:02:55:79:89:90:3a:b5:0b:17: 39:e2:53:6b:2e:ca:a9:0f:6d:11:7f:7f:d9:57:6c: dc:69:f9:d1:b5:9f:ce:db:d0:96:85:0b:2b:a7:09: 76:8d:fd:50:5c:eb:19:b8:5b:59:d3:78:09:7d:d5: 2c:a8:4b:59:8f:2a:da:c3:0d:6b:3e:d4:9d:f3:95: 84:79:d3:0a:69:df:a3:00:9e:e7:c0:8e:18:fb:c8: f4:15:50:32:9f:89:45:13:54:91:63:83:7c:6d:ee: a7:26:dd:dd:17:27:6b:08:23:ef:08:e2:74:1d:4f: 88:26:34:f1:6e:7f:c1:c3:2b:8f:0f:eb:8e:a6:fe: 8b:ee:52:a3:d2:61:63:4a:37:d2:7b:ad:f3:60:e6: 04:39:f6:ad:2b:6e:ff:aa:59:73:34:09:54:14:f0: 01:18:9c:7c:ff:91:dc:08:f0:25:2f:23:45:05:f2: b2:c5:3c:b7:83:35:c2:d3:59:a7:89:4e:ac:fa:66: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:B0:02:90:11:B0:A7:7E:45:57:D5:4D:BF:C6:73:EC:67:BD:DE X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:ac:ee:27:13:73:a8:19:07:77:8d:a0:32:07:d6:7d:f5: 37:1b:4a:d6:43:12:6f:ad:2a:33:9e:ef:b2:77:e6:62:66:c2: 90:23:66:f3:81:c8:ad:2b:0d:a0:b8:a1:28:f0:8d:b0:00:95: 11:cb:2c:44:85:ab:94:ad:e0:34:4f:16:06:c7:74:a8:68:b2: 7c:94:50:30:1c:b9:7a:bd:e9:fe:19:d4:50:e6:57:6a:1c:b7: 9f:7a:43:8e:37:b2:42:79:07:34:d5:b0:b6:9d:c0:33:e5:36: 61:71:81:66:aa:37:49:64:0e:5d:04:f6:c3:e5:86:8b:cb:21: 58:10:64:91:a3:d5:08:a2:98:c9:60:f9:15:64:9e:d3:4b:cd: 2e:be:33:dd:3e:ad:50:8a:5d:80:6b:2d:0c:0e:25:c0:ba:f7: a9:63:11:b0:e5:89:43:62:d5:36:eb:40:e5:de:82:04:22:3f: 80:99:0a:3c:4b:27:ff:29:b3:ee:00:ca:9e:63:3a:4d:04:ee: 44:3e:fa:68:97:9c:56:d9:73:09:54:b8:21:57:8a:c3:ec:87: b4:bc:31:8c:d7:6b:53:af:59:19:68:85:6a:a9:0a:26:e5:b1: 77:1e:bc:80:9d:f9:fa:2d:ec:04:75:2c:5c:45:80:d1:68:c7: 25:e7:c4:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaft1PWAvGI88W9s4s3TTWeWd1icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNjA0MTYxMTM3MjFaFw0yNjA0MTkyMDM1MjFaMDMxMTAvBgNV BAMTKDg3RDNCMDAyOTAxMUIwQTc3RTQ1NTdENTREQkZDNjczRUM2N0JEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kMCjTuQTGFCL1s1wcvXj2V1h ifgnokN9WNBdJasSlkHAOqiqGQ0JoRwJSjcRD6eTgqgXH13nvk3geCWbxYHIxgJV eYmQOrULFzniU2suyqkPbRF/f9lXbNxp+dG1n87b0JaFCyunCXaN/VBc6xm4W1nT eAl91SyoS1mPKtrDDWs+1J3zlYR50wpp36MAnufAjhj7yPQVUDKfiUUTVJFjg3xt 7qcm3d0XJ2sII+8I4nQdT4gmNPFuf8HDK48P646m/ovuUqPSYWNKN9J7rfNg5gQ5 9q0rbv+qWXM0CVQU8AEYnHz/kdwI8CUvI0UF8rLFPLeDNcLTWaeJTqz6ZulVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9OwApARsKd+RVfVTb/Gc+xnvd4wHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI84rO4nE3OoGQd3jaAyB9Z99TcbStZDEm+t KjOe77J35mJmwpAjZvOByK0rDaC4oSjwjbAAlRHLLESFq5St4DRPFgbHdKhosnyU UDAcuXq96f4Z1FDmV2oct596Q443skJ5BzTVsLadwDPlNmFxgWaqN0lkDl0E9sPl hovLIVgQZJGj1QiimMlg+RVkntNLzS6+M90+rVCKXYBrLQwOJcC696ljEbDliUNi 1TbrQOXeggQiP4CZCjxLJ/8ps+4Ayp5jOk0E7kQ++miXnFbZcwlUuCFXisPsh7S8 MYzXa1OvWRlohWqpCiblsXcevICd+fot7AR1LFxFgNFoxyXnxMA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:52:36 2026 by rpki-client