$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: 3aoR8intGGly1HIcnPLZEbxQaBxeSfzSb1ke2gVixfE= Subject key identifier: 01:86:4D:F0:07:4A:2A:A3:9A:B0:E2:9E:4D:66:79:45:5C:DF:2B:6D Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 2ACDD511A87A67DBEF2C0A35E7479C0C99C3B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 012E Signing time: Thu 16 Apr 2026 18:51:15 +0000 Manifest this update: Thu 16 Apr 2026 18:46:15 +0000 Manifest next update: Mon 20 Apr 2026 01:43:15 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: J+X4aISOOp6DMfUi0sJKYpzq1oRCxzvtn2ypTQYSQa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cd:d5:11:a8:7a:67:db:ef:2c:0a:35:e7:47:9c:0c:99:c3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Apr 16 18:46:15 2026 GMT Not After : Apr 20 01:43:15 2026 GMT Subject: CN=01864DF0074A2AA39AB0E29E4D6679455CDF2B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:3e:f1:9b:cc:74:c5:ae:d7:dd:a5:f4:5f: 3a:69:a5:dd:57:ac:d4:7c:fa:2f:c8:fc:3e:10:08: 40:cb:18:73:28:c0:f1:81:06:36:d6:9f:5f:bf:70: f2:70:55:a2:2b:c2:b5:35:ff:44:1f:f8:e8:34:50: b2:83:f7:86:3f:b2:41:3d:89:8a:f7:48:e3:28:e7: 03:0d:31:5b:e7:be:55:6b:f7:34:18:ce:a0:fe:92: 2e:3e:5d:5b:24:32:63:e2:1d:e6:37:ec:ea:5d:6b: 12:63:52:75:5d:ce:46:3c:36:d8:fc:47:4f:05:20: a6:42:13:6c:fe:64:a2:f9:2a:dc:6c:32:31:71:13: 08:d0:ce:89:7a:e3:1e:54:1b:73:68:6c:95:01:31: 51:ee:14:bd:d2:15:02:27:9b:d7:3b:98:80:4f:80: 54:3f:aa:10:7d:60:6a:78:6f:c7:cc:e7:2b:3f:82: ac:ce:cb:71:59:92:5b:a2:33:e9:14:63:16:c6:e3: cf:09:ed:aa:b6:3c:46:16:c0:f8:01:f3:e0:4b:ec: 09:a0:c5:ba:5c:ac:dc:6f:2e:f4:77:71:f4:e5:bf: 85:3c:e5:da:8a:3d:23:e0:1d:eb:2e:d7:1a:1c:0c: 6c:00:70:af:b8:34:10:95:40:16:b2:1c:a9:f5:1a: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:86:4D:F0:07:4A:2A:A3:9A:B0:E2:9E:4D:66:79:45:5C:DF:2B:6D X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:af:92:ef:9c:54:26:98:58:d0:96:f3:1b:03:b5:e1:1d:f8: 67:2a:75:b5:c3:1d:d2:7f:49:b8:7f:52:3c:ad:bd:44:8b:cc: dc:0c:42:3d:22:b5:3c:da:96:10:e3:9c:75:a9:2b:be:0a:b3: cf:6c:76:6b:2f:18:ad:a8:75:60:1d:2f:69:65:e2:ee:5a:d7: 21:b1:1d:03:ad:2b:e6:f9:68:2f:30:33:00:85:a2:ff:45:17: f5:10:07:88:f2:2f:08:b7:51:7e:c3:fe:02:3c:16:89:f3:15: f5:99:2a:c2:18:7e:d0:ac:7a:b7:41:1b:c3:cb:71:bb:5b:1b: c3:80:14:13:d6:40:2a:21:22:b4:83:15:5a:fd:e4:33:7d:58: 00:87:f0:e8:e4:1c:66:c8:92:fd:8d:a1:c5:d2:57:56:66:a0: ed:d6:16:45:4c:6f:27:9b:d5:76:10:d4:7f:7c:ec:50:3f:1c: 3c:eb:7c:2c:e9:45:7f:f3:44:2c:9f:0b:53:4d:d9:9f:57:ce: 8d:3b:56:fe:f3:8b:72:e5:f0:1f:8c:ff:b7:e5:d6:d7:67:01: 51:c3:90:30:cc:ae:de:0e:50:07:49:7f:76:f6:76:5d:e0:58: 5e:fd:34:7b:cf:f1:11:0e:99:fd:cd:a6:9c:05:fd:05:e0:bf: d3:80:eb:d9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITKs3VEah6Z9vvLAo150ecDJnDtTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxRTY0QkY2NTA1MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUz RkFCOUIyMB4XDTI2MDQxNjE4NDYxNVoXDTI2MDQyMDAxNDMxNVowMzExMC8GA1UE AxMoMDE4NjRERjAwNzRBMkFBMzlBQjBFMjlFNEQ2Njc5NDU1Q0RGMkI2RDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANtKPvGbzHTFrtfdpfRfOmml3Ves 1Hz6L8j8PhAIQMsYcyjA8YEGNtafX79w8nBVoivCtTX/RB/46DRQsoP3hj+yQT2J ivdI4yjnAw0xW+e+VWv3NBjOoP6SLj5dWyQyY+Id5jfs6l1rEmNSdV3ORjw22PxH TwUgpkITbP5kovkq3GwyMXETCNDOiXrjHlQbc2hslQExUe4UvdIVAieb1zuYgE+A VD+qEH1ganhvx8znKz+CrM7LcVmSW6Iz6RRjFsbjzwntqrY8RhbA+AHz4EvsCaDF ulys3G8u9Hdx9OW/hTzl2oo9I+Ad6y7XGhwMbABwr7g0EJVAFrIcqfUaoGUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQBhk3wB0oqo5qw4p5NZnlFXN8rbTAfBgNVHSME GDAWgBQeZL9lBRBS2RPX24xFEvYV4/q5sjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Fl MTk4ODE2LTVhZjktNDdlZi1iOTg5LTQyZjI3MzE4NDhiZS8xLzFFNjRCRjY1MDUx MDUyRDkxM0Q3REI4QzQ1MTJGNjE1RTNGQUI5QjIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8xRTY0QkY2NTA1MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFC OUIyLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9hZTE5ODgxNi01YWY5LTQ3ZWYtYjk4 OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1MTA1MkQ5MTNEN0RCOEM0NTEyRjYx NUUzRkFCOUIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAIa+S75xUJphY0JbzGwO14R34Zyp1tcMd0n9J uH9SPK29RIvM3AxCPSK1PNqWEOOcdakrvgqzz2x2ay8Yrah1YB0vaWXi7lrXIbEd A60r5vloLzAzAIWi/0UX9RAHiPIvCLdRfsP+AjwWifMV9Zkqwhh+0Kx6t0Ebw8tx u1sbw4AUE9ZAKiEitIMVWv3kM31YAIfw6OQcZsiS/Y2hxdJXVmag7dYWRUxvJ5vV dhDUf3zsUD8cPOt8LOlFf/NELJ8LU03Zn1fOjTtW/vOLcuXwH4z/t+XW12cBUcOQ MMyu3g5QB0l/dvZ2XeBYXv00e8/xEQ6Z/c2mnAX9BeC/04Dr2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:59 2026 by rpki-client