$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: il9Juum/uwR2fBBfw1+nkx7HHLjzjzOviN16Fj3VYL0= Subject key identifier: 92:87:11:D2:D0:18:57:BD:CC:8A:41:E4:02:87:34:12:86:94:3D:0D Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 58F91ED2827FBCF163D3181FA6087DE2371851D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 8D Signing time: Fri 17 Apr 2026 14:52:02 +0000 Manifest this update: Fri 17 Apr 2026 14:47:02 +0000 Manifest next update: Mon 20 Apr 2026 19:45:02 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: YoggvS4hwjM5s986zVgt/5ttKcMehzV82U6I3BuOciY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f9:1e:d2:82:7f:bc:f1:63:d3:18:1f:a6:08:7d:e2:37:18:51:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Apr 17 14:47:02 2026 GMT Not After : Apr 20 19:45:02 2026 GMT Subject: CN=928711D2D01857BDCC8A41E40287341286943D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:20:7b:09:62:ae:f8:5c:d8:a5:ba:4a:d5: 08:60:53:d4:64:42:37:65:0c:4c:3c:3d:50:16:51: cd:bd:40:34:8e:05:24:f4:32:4c:10:21:15:cf:90: 1b:06:16:2c:31:07:f7:e3:9b:ff:9a:98:26:f8:7a: 46:ff:16:aa:60:93:10:65:ff:5d:6b:b1:f0:b2:ac: b9:6b:5c:2b:a6:b5:95:68:ad:9d:a5:26:e8:10:bb: 66:89:c3:bf:02:db:a8:2e:a3:f5:cb:a2:e2:97:6f: 3b:54:e7:b5:70:29:22:49:89:5a:9b:08:89:dd:6e: f3:f5:05:70:33:19:85:b6:87:eb:ac:dd:b1:1a:6e: 02:5f:1b:0d:8b:6b:dc:68:1b:01:67:e0:70:ff:31: 6c:3d:82:09:34:0d:73:b7:ea:ed:53:82:88:9e:eb: 12:77:d9:b0:f5:66:9a:85:77:c7:27:be:b9:5b:eb: 03:e7:36:18:74:84:dc:a9:db:3f:3c:32:50:8d:87: ce:cd:00:08:f4:ee:62:bd:d9:99:29:90:39:eb:d9: e1:da:87:66:53:cd:c3:b5:ac:a5:b5:32:bd:71:f8: a0:4e:4a:78:7c:5e:f4:dd:f5:7c:68:15:d4:68:fc: d6:15:ce:66:e1:6a:c4:1c:2b:56:cd:fc:4b:70:d4: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:87:11:D2:D0:18:57:BD:CC:8A:41:E4:02:87:34:12:86:94:3D:0D X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c6:67:44:19:ab:20:83:1c:80:43:8d:10:5a:eb:57:49:43: ca:78:cf:dc:c0:26:bf:6b:f9:76:f3:a6:97:d5:e6:89:81:7b: f6:af:d8:68:7e:7b:f6:d7:3d:ae:bd:cb:fb:31:cf:42:82:13: ff:72:4f:a8:2f:1e:f1:7e:0f:39:ad:f2:e6:d1:a8:9c:3d:8a: 2e:d5:9e:35:da:80:72:54:87:64:77:c5:8e:58:50:40:dc:c9: 32:40:18:75:44:57:aa:ac:f0:fd:93:ce:bc:14:08:d7:bf:02: fe:ce:b9:02:38:4c:c5:ed:63:d2:ba:ec:ab:b6:46:eb:10:ab: 33:51:9c:2a:3e:88:14:b2:05:d4:c4:93:a6:6c:c3:f0:6b:2d: 12:54:fb:db:eb:78:bd:b5:a1:9b:b8:62:78:b5:25:8f:f1:cc: 5e:94:87:87:1f:a5:82:96:16:c4:6d:ba:58:54:52:cd:2e:65: 0c:52:12:ca:63:bd:86:07:ab:38:5a:f4:7c:9c:a5:4c:27:d0: 3b:56:6d:59:17:c1:ca:b9:75:bd:d4:6f:28:4c:35:95:fa:3d: d4:b1:9b:56:f2:4e:97:45:4a:39:0f:e5:9c:b1:6b:77:c2:24: 7f:b6:74:75:43:b9:79:95:4e:42:20:d1:81:a1:17:d9:69:ea: 59:db:68:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPke0oJ/vPFj0xgfpgh94jcYUdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNjA0MTcxNDQ3MDJaFw0yNjA0MjAxOTQ1MDJaMDMxMTAvBgNV BAMTKDkyODcxMUQyRDAxODU3QkRDQzhBNDFFNDAyODczNDEyODY5NDNEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFiB7CWKu+FzYpbpK1QhgU9Rk QjdlDEw8PVAWUc29QDSOBST0MkwQIRXPkBsGFiwxB/fjm/+amCb4ekb/FqpgkxBl /11rsfCyrLlrXCumtZVorZ2lJugQu2aJw78C26guo/XLouKXbztU57VwKSJJiVqb CIndbvP1BXAzGYW2h+us3bEabgJfGw2La9xoGwFn4HD/MWw9ggk0DXO36u1Tgoie 6xJ32bD1ZpqFd8cnvrlb6wPnNhh0hNyp2z88MlCNh87NAAj07mK92ZkpkDnr2eHa h2ZTzcO1rKW1Mr1x+KBOSnh8XvTd9XxoFdRo/NYVzmbhasQcK1bN/Etw1FJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkocR0tAYV73MikHkAoc0EoaUPQ0wHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjGZ0QZqyCDHIBDjRBa61dJQ8p4z9zAJr9r +XbzppfV5omBe/av2Gh+e/bXPa69y/sxz0KCE/9yT6gvHvF+Dzmt8ubRqJw9ii7V njXagHJUh2R3xY5YUEDcyTJAGHVEV6qs8P2TzrwUCNe/Av7OuQI4TMXtY9K67Ku2 RusQqzNRnCo+iBSyBdTEk6Zsw/BrLRJU+9vreL21oZu4Yni1JY/xzF6Uh4cfpYKW FsRtulhUUs0uZQxSEspjvYYHqzha9HycpUwn0DtWbVkXwcq5db3UbyhMNZX6PdSx m1byTpdFSjkP5Zyxa3fCJH+2dHVDuXmVTkIg0YGhF9lp6lnbaIA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:01 2026 by rpki-client