$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: ulhpubK/QYiLHsGWEwMbHFFN7wej/VqFT6dJiNp5Jkg= Subject key identifier: F7:1C:A8:B0:82:88:D3:94:E7:52:89:9E:2A:0C:28:2C:F1:DA:06:FD Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 317EFC8344335CCB59C190EDFFE8518EB8A7D4F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: 0129 Signing time: Wed 15 Apr 2026 10:23:10 +0000 Manifest this update: Wed 15 Apr 2026 10:18:10 +0000 Manifest next update: Sat 18 Apr 2026 22:06:10 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: DV1qcop5l1Cid2ay489ZtUUIAL7S0lsF5rC4KtpeYUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7e:fc:83:44:33:5c:cb:59:c1:90:ed:ff:e8:51:8e:b8:a7:d4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Apr 15 10:18:10 2026 GMT Not After : Apr 18 22:06:10 2026 GMT Subject: CN=F71CA8B08288D394E752899E2A0C282CF1DA06FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:23:5c:9a:15:d1:5c:a5:05:2f:b3:9a:f0: 1c:9b:df:09:48:b7:ef:84:75:87:81:6b:30:3d:28: 62:bb:d2:a9:1b:0d:13:b9:bc:8c:3d:01:4c:1f:1e: d9:36:a5:46:15:27:23:6a:08:61:d0:74:c4:3c:0e: f8:d4:a3:af:97:c9:0b:ed:01:32:16:0c:d8:ca:b6: a9:ff:9c:6d:1d:e2:e4:43:a0:1c:09:a2:be:ef:8f: 9e:65:8b:4e:c3:e3:c9:a0:4f:e5:ab:7e:c7:4d:06: 0e:cb:f0:10:34:d2:c7:69:b8:19:08:1a:6d:fa:c1: 41:70:a2:fc:47:7f:be:13:bc:cb:9b:44:9b:84:a4: 4d:74:06:85:5e:19:2d:a7:6c:8d:4a:86:ae:0b:2c: 59:d2:60:bc:17:db:07:f3:b5:e1:2f:4a:b0:12:77: 4c:99:bc:11:14:ca:1f:70:a0:3d:60:56:73:af:d8: 24:16:b5:e0:b4:c6:a8:7d:99:8c:55:ef:25:54:f5: c5:9c:74:03:33:e5:b7:3a:43:84:8a:f5:76:09:45: 3f:ed:91:35:bb:c7:dc:a6:b9:ba:c8:2e:a2:81:9b: 04:17:3f:e6:22:83:8f:4d:c1:11:14:28:04:da:44: 89:80:00:35:d9:1e:b0:c2:05:ac:8d:9c:fb:b1:43: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1C:A8:B0:82:88:D3:94:E7:52:89:9E:2A:0C:28:2C:F1:DA:06:FD X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:63:7e:b3:24:c0:2e:e7:a9:af:36:8c:6a:ea:fe:29:31:92: 4c:e3:50:4e:e9:ff:56:f0:cc:a1:fd:f0:c1:d7:73:89:9e:05: 03:2f:51:fe:4b:78:1e:1c:fb:1b:56:95:08:3d:36:fc:a6:3c: 1b:e1:43:dc:1d:a7:cd:5d:af:f7:81:4b:f1:47:72:95:5c:8d: 41:dc:af:c1:89:ce:2c:6b:fa:d8:17:19:eb:1f:a4:c7:de:73: 20:26:fb:df:a5:90:e1:7b:0b:3a:eb:ec:2a:0a:8a:a1:1c:d4: cd:6a:43:a4:7c:e4:c1:b1:57:3f:21:b2:ea:d5:32:09:62:70: e3:c4:83:d4:22:ef:fa:59:1c:9b:6f:69:b1:cc:95:25:c2:cb: 15:ca:71:66:f0:fc:35:5c:ff:2b:aa:65:1a:31:77:05:b4:75: 10:92:5f:83:0e:b2:fb:98:04:46:fb:37:49:33:db:8a:75:2b: 62:6c:4b:a0:5f:c0:58:c3:88:a4:0b:3b:54:4d:19:26:4a:41: e8:86:78:a8:8b:b9:c2:3f:68:ec:52:db:c6:40:5f:d2:60:8c: fa:41:f3:72:82:8c:1a:66:9a:bb:fc:61:06:5e:5f:01:ee:74: 73:59:05:ad:57:f8:4e:9a:1c:45:c3:89:a2:54:d5:fc:c4:4e: a8:9f:44:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMX78g0QzXMtZwZDt/+hRjrin1PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNjA0MTUxMDE4MTBaFw0yNjA0MTgyMjA2MTBaMDMxMTAvBgNV BAMTKEY3MUNBOEIwODI4OEQzOTRFNzUyODk5RTJBMEMyODJDRjFEQTA2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JCNcmhXRXKUFL7Oa8Byb3wlI t++EdYeBazA9KGK70qkbDRO5vIw9AUwfHtk2pUYVJyNqCGHQdMQ8DvjUo6+XyQvt ATIWDNjKtqn/nG0d4uRDoBwJor7vj55li07D48mgT+WrfsdNBg7L8BA00sdpuBkI Gm36wUFwovxHf74TvMubRJuEpE10BoVeGS2nbI1Khq4LLFnSYLwX2wfzteEvSrAS d0yZvBEUyh9woD1gVnOv2CQWteC0xqh9mYxV7yVU9cWcdAMz5bc6Q4SK9XYJRT/t kTW7x9ymubrILqKBmwQXP+Yig49NwREUKATaRImAADXZHrDCBayNnPuxQ+KTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xyosIKI05TnUomeKgwoLPHaBv0wHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1jfrMkwC7nqa82jGrq/ikxkkzjUE7p/1bw zKH98MHXc4meBQMvUf5LeB4c+xtWlQg9NvymPBvhQ9wdp81dr/eBS/FHcpVcjUHc r8GJzixr+tgXGesfpMfecyAm+9+lkOF7Czrr7CoKiqEc1M1qQ6R85MGxVz8hsurV MglicOPEg9Qi7/pZHJtvabHMlSXCyxXKcWbw/DVc/yuqZRoxdwW0dRCSX4MOsvuY BEb7N0kz24p1K2JsS6BfwFjDiKQLO1RNGSZKQeiGeKiLucI/aOxS28ZAX9JgjPpB 83KCjBpmmrv8YQZeXwHudHNZBa1X+E6aHEXDiaJU1fzETqifRK8= -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:46 2026 by rpki-client