$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft File: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft (raw, json) Hash identifier: n0RYayZKQJIyT28lNbgBF4DdroUa6V5AF2rfUjr4g+U= Subject key identifier: 99:7D:91:41:5C:EE:39:3A:A5:87:81:F7:4C:78:B3:C4:35:38:C6:15 Authority key identifier: F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E Certificate issuer: /CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Certificate serial: 0D82BF4AF5200D1A97FC9E25262A5F58C04C9776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft Manifest number: 1B Signing time: Sat 18 Apr 2026 18:41:46 +0000 Manifest this update: Sat 18 Apr 2026 18:36:46 +0000 Manifest next update: Tue 21 Apr 2026 20:22:46 +0000 Files and hashes: 1: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl (hash: 9YLXc/Q61Uwc4tIKtq4DI1vcRcS7llYHMfAhB4kYZcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:bf:4a:f5:20:0d:1a:97:fc:9e:25:26:2a:5f:58:c0:4c:97:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Validity Not Before: Apr 18 18:36:46 2026 GMT Not After : Apr 21 20:22:46 2026 GMT Subject: CN=997D91415CEE393AA58781F74C78B3C43538C615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:29:ed:e4:df:a4:07:9b:c2:a3:64:10:3a: 67:30:4e:5d:03:4f:d0:d3:50:55:37:dc:4f:6b:4a: 95:a9:ee:93:19:d4:fb:0e:cb:bd:e6:07:a3:d3:38: 71:ac:26:75:ca:0b:f0:02:71:a3:33:0f:a4:36:bc: 70:85:4c:f7:c7:80:a3:e1:6a:0b:27:0f:90:a5:6b: 93:98:fe:01:8f:50:d2:0a:72:b3:08:90:6f:20:da: 9c:b9:e2:3a:48:69:47:49:7e:ca:40:f8:7b:5c:d8: 1c:7c:7f:21:9d:fb:45:16:e6:1c:f0:bc:a5:c2:f3: b5:3f:90:a6:67:11:5c:ea:3c:60:8d:03:94:2c:9b: 07:82:3a:73:ea:29:16:6f:c6:c6:62:ff:b7:c4:a4: ed:b0:1c:0c:e5:36:1b:f5:03:c5:6f:41:53:0d:33: 75:2c:29:19:3a:ba:64:e5:6f:32:40:ea:93:60:77: 7f:85:e5:36:f5:eb:84:72:0f:bb:a9:fb:0a:24:5a: ab:a6:21:d0:0d:03:06:9a:1c:41:6d:68:c7:58:ed: 8d:bb:e7:23:48:5e:a6:aa:de:2f:bc:44:75:60:3a: 77:17:18:3d:97:45:df:25:d3:dd:2d:30:90:9b:f1: 3d:56:5d:ee:6c:65:57:f5:52:46:32:00:0b:64:95: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:91:41:5C:EE:39:3A:A5:87:81:F7:4C:78:B3:C4:35:38:C6:15 X509v3 Authority Key Identifier: keyid:F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e2:3f:56:70:52:8e:3e:c7:56:0e:e0:b5:5a:3c:9a:dc:b0: 5d:6c:5c:dd:10:8f:f3:7c:45:7f:3e:03:0e:38:79:fd:82:cc: c4:e5:54:cb:0b:cb:db:b9:50:14:6a:ba:1e:a5:aa:bc:9c:2b: 8f:66:19:0d:84:61:fb:63:5f:31:d8:55:8d:a7:69:3e:4f:e4: 07:c1:25:14:d0:40:a6:82:3c:6b:76:72:1f:a5:15:08:f0:cd: e6:61:09:28:9e:5a:eb:28:19:5c:c7:35:ce:0a:76:38:05:13: 79:a6:5f:1a:de:79:43:af:6d:cf:70:90:53:8c:4e:61:79:80: f6:48:bd:98:6d:44:fb:26:62:50:5c:45:16:0d:8e:c6:71:30: 17:c4:39:a9:8f:f9:fe:05:97:2b:c3:95:5a:08:b6:c0:c7:0c: 58:2a:0b:a2:f2:fb:e9:64:41:b6:5f:0c:f9:01:0a:2e:7b:0f: 19:8e:79:d9:40:35:9f:1c:8a:f3:93:78:75:83:94:52:fc:25: 3d:c8:06:8d:0e:82:ee:a5:a0:33:57:f2:22:db:be:66:d3:a5: 5f:1e:b0:87:61:65:93:b6:f7:58:9f:ac:71:1d:6a:d2:33:61: 0d:ca:7a:c6:aa:2a:aa:03:dd:21:f2:2f:89:19:5f:09:20:65: e7:23:02:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYK/SvUgDRqX/J4lJipfWMBMl3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERB QjNFNEQ0RTAeFw0yNjA0MTgxODM2NDZaFw0yNjA0MjEyMDIyNDZaMDMxMTAvBgNV BAMTKDk5N0Q5MTQxNUNFRTM5M0FBNTg3ODFGNzRDNzhCM0M0MzUzOEM2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggint5N+kB5vCo2QQOmcwTl0D T9DTUFU33E9rSpWp7pMZ1PsOy73mB6PTOHGsJnXKC/ACcaMzD6Q2vHCFTPfHgKPh agsnD5Cla5OY/gGPUNIKcrMIkG8g2py54jpIaUdJfspA+Htc2Bx8fyGd+0UW5hzw vKXC87U/kKZnEVzqPGCNA5QsmweCOnPqKRZvxsZi/7fEpO2wHAzlNhv1A8VvQVMN M3UsKRk6umTlbzJA6pNgd3+F5Tb164RyD7up+wokWqumIdANAwaaHEFtaMdY7Y27 5yNIXqaq3i+8RHVgOncXGD2XRd8l090tMJCb8T1WXe5sZVf1UkYyAAtklRZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmX2RQVzuOTqlh4H3THizxDU4xhUwHwYDVR0j BBgwFoAU8O0yWmnY/9u4+kX0ErsjTas+TU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMS9GMEVEMzI1QTY5 RDhGRkRCQjhGQTQ1RjQxMkJCMjM0REFCM0U0RDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERBQjNF NEQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIz NERBQjNFNEQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATiP1ZwUo4+x1YO4LVaPJrcsF1sXN0Qj/N8 RX8+Aw44ef2CzMTlVMsLy9u5UBRquh6lqrycK49mGQ2EYftjXzHYVY2naT5P5AfB JRTQQKaCPGt2ch+lFQjwzeZhCSieWusoGVzHNc4KdjgFE3mmXxreeUOvbc9wkFOM TmF5gPZIvZhtRPsmYlBcRRYNjsZxMBfEOamP+f4FlyvDlVoItsDHDFgqC6Ly++lk QbZfDPkBCi57DxmOedlANZ8civOTeHWDlFL8JT3IBo0Ogu6loDNX8iLbvmbTpV8e sIdhZZO291ifrHEdatIzYQ3KesaqKqoD3SHyL4kZXwkgZecjAv0= -----END CERTIFICATE-----Generated at Sun Apr 19 12:57:31 2026 by rpki-client