$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: gItyJxZ6m3tfDjGyasuEz4Mw6He3GY/T6j01QdB5T+Q= Subject key identifier: 2F:1F:1D:73:C7:F2:BD:80:E5:3A:BC:38:31:07:A8:8E:E9:0E:3F:CF Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 28B27CDA8A1B0A692BC7FB44AAE73DAF81C5E994 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 0260 Signing time: Fri 17 Apr 2026 14:13:23 +0000 Manifest this update: Fri 17 Apr 2026 14:08:23 +0000 Manifest next update: Tue 21 Apr 2026 01:26:23 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: eHtxiHsk+whZT/PdBkAbd8FFsfk8y91Y1KPhboqOZHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b2:7c:da:8a:1b:0a:69:2b:c7:fb:44:aa:e7:3d:af:81:c5:e9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Apr 17 14:08:23 2026 GMT Not After : Apr 21 01:26:23 2026 GMT Subject: CN=2F1F1D73C7F2BD80E53ABC383107A88EE90E3FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:3d:d9:c9:11:17:c5:20:6b:04:30:95:a6: 0a:d6:bb:04:7d:25:cb:98:b8:05:70:96:6e:5c:39: b5:fa:b9:18:ec:0c:00:05:df:be:53:41:14:a6:75: 74:50:b2:dd:63:ba:63:9e:b9:7c:29:38:34:da:96: fe:dc:29:79:c3:63:9c:ff:1c:9f:26:29:48:ca:62: be:55:13:a7:af:16:26:16:b8:50:e2:2c:4e:fc:ad: 65:51:10:b0:d3:e4:10:09:ae:09:08:09:63:8e:56: d9:1b:95:84:90:70:51:dd:1c:80:05:ac:6e:84:63: 47:5f:ba:5c:4a:db:0f:ff:37:f6:85:de:74:b7:e5: 2c:9c:c5:a6:00:44:1c:8e:91:c0:7c:0a:0a:3d:73: 92:ca:c1:59:ee:e0:6f:1f:0b:e1:ef:28:c7:1d:c8: 93:cc:cf:03:54:e3:94:d3:d9:0f:24:33:7c:3e:e6: f7:82:3f:14:48:ee:cb:f1:b1:3e:a5:36:3d:02:ff: 4a:fc:2a:df:a5:be:7f:35:ba:6d:2e:1a:31:20:2e: f2:db:83:50:48:2d:d9:11:38:50:4d:73:c4:41:ea: dc:c5:ed:d6:c5:67:79:57:fb:c9:ea:aa:82:f6:b7: d1:f4:6a:88:dc:c1:be:73:56:ef:9a:94:1c:82:c3: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1F:1D:73:C7:F2:BD:80:E5:3A:BC:38:31:07:A8:8E:E9:0E:3F:CF X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:09:ad:6a:9c:eb:04:5b:6e:d3:63:f5:3c:05:84:f4:e8: 47:e1:2b:c1:92:ae:c2:5a:fb:68:bd:de:3d:ef:22:b4:21:4e: 7d:d4:fa:db:dd:9a:17:fe:c5:c1:c9:07:b3:27:6b:7e:75:2e: 23:aa:0e:78:04:7b:19:9e:a8:32:60:4b:8c:80:08:b2:57:04: c7:20:54:67:cd:31:ea:ee:64:ff:6c:48:3c:8d:69:50:dc:7b: 35:ea:89:56:14:95:f2:41:e8:97:44:47:db:a9:0b:08:ab:97: e3:29:f5:46:23:02:5e:ad:9c:53:8a:5f:53:98:57:e7:99:05: 2f:31:7c:c1:62:ea:09:72:e5:94:75:52:d2:a1:3b:c8:21:f1: f0:ee:f2:66:bd:f0:4b:5f:99:59:0b:3d:06:7c:1b:93:c1:89: 5f:61:30:00:cf:98:2a:92:01:ed:df:40:44:f4:4a:61:d0:82: 67:28:b6:b4:92:16:37:6f:49:4f:d3:84:f6:ed:31:5e:cc:a4: e0:e7:ad:db:73:a4:ed:1e:cf:09:09:d0:e9:6c:e6:1a:da:f8: 45:d4:79:e8:75:ae:4a:5f:ca:3f:a8:23:58:2d:a2:b7:ff:e1: 7c:1a:0c:19:b0:b1:58:41:cc:dc:2a:46:0e:31:60:1d:ce:d6: df:5a:8f:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLJ82oobCmkrx/tEquc9r4HF6ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNjA0MTcxNDA4MjNaFw0yNjA0MjEwMTI2MjNaMDMxMTAvBgNV BAMTKDJGMUYxRDczQzdGMkJEODBFNTNBQkMzODMxMDdBODhFRTkwRTNGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGz3ZyREXxSBrBDCVpgrWuwR9 JcuYuAVwlm5cObX6uRjsDAAF375TQRSmdXRQst1jumOeuXwpODTalv7cKXnDY5z/ HJ8mKUjKYr5VE6evFiYWuFDiLE78rWVRELDT5BAJrgkICWOOVtkblYSQcFHdHIAF rG6EY0dfulxK2w//N/aF3nS35SycxaYARByOkcB8Cgo9c5LKwVnu4G8fC+HvKMcd yJPMzwNU45TT2Q8kM3w+5veCPxRI7svxsT6lNj0C/0r8Kt+lvn81um0uGjEgLvLb g1BILdkROFBNc8RB6tzF7dbFZ3lX+8nqqoL2t9H0aojcwb5zVu+alByCw7c/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULx8dc8fyvYDlOrw4MQeojukOP88wHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH1Ca1qnOsEW27TY/U8BYT06EfhK8GSrsJa +2i93j3vIrQhTn3U+tvdmhf+xcHJB7Mna351LiOqDngEexmeqDJgS4yACLJXBMcg VGfNMeruZP9sSDyNaVDcezXqiVYUlfJB6JdER9upCwirl+Mp9UYjAl6tnFOKX1OY V+eZBS8xfMFi6gly5ZR1UtKhO8gh8fDu8ma98EtfmVkLPQZ8G5PBiV9hMADPmCqS Ae3fQET0SmHQgmcotrSSFjdvSU/ThPbtMV7MpODnrdtzpO0ezwkJ0Ols5hra+EXU eeh1rkpfyj+oI1gtorf/4XwaDBmwsVhBzNwqRg4xYB3O1t9aj2Q= -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:53 2026 by rpki-client