$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: 1f3SK85R5D0/Nfzf0Z76jgLRXQm0RkZGT41+EfMloKA= Subject key identifier: 9C:80:A3:A5:7A:17:8E:A7:BE:64:EA:0F:44:05:ED:F4:4A:CB:43:5D Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 105008DD332BDEC20DCFA2617B0AE4107EB575A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 0162 Signing time: Thu 16 Apr 2026 16:01:31 +0000 Manifest this update: Thu 16 Apr 2026 15:56:31 +0000 Manifest next update: Mon 20 Apr 2026 03:05:31 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: qTSLFZrTtDTHjvELiFM3kqcMewVLTzODAEybaf/TZMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:50:08:dd:33:2b:de:c2:0d:cf:a2:61:7b:0a:e4:10:7e:b5:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Apr 16 15:56:31 2026 GMT Not After : Apr 20 03:05:31 2026 GMT Subject: CN=9C80A3A57A178EA7BE64EA0F4405EDF44ACB435D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:35:49:be:d9:03:d7:58:12:89:55:db:59: 00:9d:d6:fd:1b:e2:12:c3:a7:ed:e7:b3:08:2d:29: a3:65:ed:80:de:ed:65:dc:f5:59:6f:c2:22:7c:20: d8:91:2c:be:5c:0a:bd:86:fa:63:72:94:0d:64:25: 3f:3f:3a:72:52:33:00:83:7d:15:42:79:25:b2:55: 7f:f8:5c:fd:fa:bf:a2:d2:f6:14:9c:63:72:58:a2: 4a:41:6c:64:48:ef:a0:98:47:e3:b9:b2:2c:2d:e4: 95:c7:95:05:f6:83:90:25:99:72:99:d6:91:f5:1f: 69:9b:bf:53:11:cb:f6:13:79:cb:74:15:76:53:75: 14:1d:86:9c:fc:a4:26:c3:dd:aa:a6:c1:f1:1b:c9: ab:71:91:99:cd:a3:36:0a:1a:85:81:ee:22:60:80: 1a:32:f3:8f:23:db:8e:4f:0b:22:3b:45:d9:73:1d: 8b:22:04:92:a8:d6:03:d3:c3:fa:59:0c:52:21:e3: 08:6f:46:f9:75:5e:5a:b0:3d:ca:82:84:83:1a:e1: c7:29:65:93:88:98:70:f9:cf:8f:54:b2:0d:de:a0: 1a:da:39:4d:9c:b5:a3:36:ce:0d:3a:09:6d:cf:7c: 80:97:dd:2f:c5:0c:80:66:14:9f:48:6e:bd:b7:16: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:A3:A5:7A:17:8E:A7:BE:64:EA:0F:44:05:ED:F4:4A:CB:43:5D X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d8:97:e0:25:ce:8e:8e:22:d0:bf:18:31:e7:e2:9f:7c:45: c4:3d:09:1f:af:26:c7:06:69:3b:96:9d:c8:ad:b7:f8:0c:46: e1:23:01:0d:be:6c:1d:19:91:0d:ed:90:a8:64:95:68:a9:9e: 3f:5b:2c:36:96:71:ac:22:ca:2a:83:b3:97:03:a0:9f:cd:e4: 4c:c8:3e:58:3d:6f:fd:78:cc:de:4f:e2:c6:d2:14:dc:36:ff: f3:04:14:45:71:9a:0d:dc:25:c6:55:db:bc:f4:24:e2:23:93: c8:21:12:29:45:bd:45:ea:5a:aa:ac:7f:6a:25:f7:1b:47:75: 12:51:b4:10:ac:4b:89:69:87:1e:40:8e:9a:74:98:4d:cc:e9: 7d:b0:59:19:da:2c:01:f0:b7:34:0e:82:50:a2:aa:42:ec:60: f8:98:df:8f:5c:d6:b3:62:5a:9d:9c:36:25:d4:6d:2d:d2:de: d4:e3:a2:b5:1d:74:9a:14:4b:a9:6b:bb:b9:f2:8c:47:d0:9d: 68:4f:96:cf:ea:8c:c4:ae:b2:27:4d:b7:a6:43:e2:6a:78:60: 70:b5:f1:8d:35:50:c3:0a:81:76:6c:09:e1:46:6a:19:cb:45: da:3f:c3:e1:2b:a0:21:ca:d0:2b:91:5f:ff:29:c1:e7:2b:4d: 3f:42:b4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFAI3TMr3sINz6JhewrkEH61dagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNjA0MTYxNTU2MzFaFw0yNjA0MjAwMzA1MzFaMDMxMTAvBgNV BAMTKDlDODBBM0E1N0ExNzhFQTdCRTY0RUEwRjQ0MDVFREY0NEFDQjQzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJTVJvtkD11gSiVXbWQCd1v0b 4hLDp+3nswgtKaNl7YDe7WXc9VlvwiJ8INiRLL5cCr2G+mNylA1kJT8/OnJSMwCD fRVCeSWyVX/4XP36v6LS9hScY3JYokpBbGRI76CYR+O5siwt5JXHlQX2g5AlmXKZ 1pH1H2mbv1MRy/YTect0FXZTdRQdhpz8pCbD3aqmwfEbyatxkZnNozYKGoWB7iJg gBoy848j245PCyI7RdlzHYsiBJKo1gPTw/pZDFIh4whvRvl1XlqwPcqChIMa4ccp ZZOImHD5z49Usg3eoBraOU2ctaM2zg06CW3PfICX3S/FDIBmFJ9Ibr23FlBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnICjpXoXjqe+ZOoPRAXt9ErLQ10wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrYl+Alzo6OItC/GDHn4p98RcQ9CR+vJscG aTuWncitt/gMRuEjAQ2+bB0ZkQ3tkKhklWipnj9bLDaWcawiyiqDs5cDoJ/N5EzI Plg9b/14zN5P4sbSFNw2//MEFEVxmg3cJcZV27z0JOIjk8ghEilFvUXqWqqsf2ol 9xtHdRJRtBCsS4lphx5Ajpp0mE3M6X2wWRnaLAHwtzQOglCiqkLsYPiY349c1rNi Wp2cNiXUbS3S3tTjorUddJoUS6lru7nyjEfQnWhPls/qjMSusidNt6ZD4mp4YHC1 8Y01UMMKgXZsCeFGahnLRdo/w+EroCHK0CuRX/8pwecrTT9CtOc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:10 2026 by rpki-client