$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: 87G4e+Tlu2vc6ZE5JPqbN+z4Kmw/sV7oMl2aHOFPeBI= Subject key identifier: C4:6B:61:FF:FE:BD:7E:4E:54:30:FD:B9:BA:83:55:CD:CB:E4:B3:DF Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 706699B58065C0151CA91B1B1258F85A4218CA28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 0204 Signing time: Fri 17 Apr 2026 09:21:20 +0000 Manifest this update: Fri 17 Apr 2026 09:16:20 +0000 Manifest next update: Mon 20 Apr 2026 14:00:20 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: hB2Llq8JbmTusAv+oloS6HDGe4gPVnSfMCKfRPxl+0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:66:99:b5:80:65:c0:15:1c:a9:1b:1b:12:58:f8:5a:42:18:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Apr 17 09:16:20 2026 GMT Not After : Apr 20 14:00:20 2026 GMT Subject: CN=C46B61FFFEBD7E4E5430FDB9BA8355CDCBE4B3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:dd:60:4d:4c:c3:62:21:56:ad:15:a9:b4: 6d:35:c8:64:20:57:92:9f:d8:74:9b:8e:a7:de:66: 74:c9:bf:44:f7:a8:2a:f7:f4:61:71:8d:01:f4:68: 95:d1:01:e9:49:c6:d7:d5:2d:dd:e9:8b:a6:b1:bd: b3:47:c3:93:19:ad:d9:c6:80:0a:d6:dc:ce:a1:5e: 2f:c7:d3:ef:7a:67:5d:1f:99:4b:4f:f2:2f:5a:f6: 77:38:05:dc:b2:11:2e:55:c1:a7:80:64:fa:dc:be: 39:4d:ec:59:62:ee:18:25:92:94:79:a6:cf:4e:12: 74:e3:3a:fe:e5:a8:48:58:ba:92:f6:0d:7e:45:15: c9:1d:f7:71:6c:ee:12:25:80:b2:c6:b9:26:7f:2c: a1:85:88:29:b3:f0:84:7e:40:7c:08:ba:d3:ec:51: 94:ac:00:6f:c7:c5:d9:cf:05:94:d2:64:82:b9:72: 18:a5:77:05:8a:df:79:ea:43:11:4f:df:5c:7f:85: 45:2e:19:c5:e7:63:42:a7:a3:cc:2c:0a:47:af:73: da:db:00:fe:ba:94:6c:6a:54:47:60:45:a9:03:8f: dc:fa:ee:57:af:14:d9:8b:c2:8e:e9:82:7d:ae:58: c3:96:f2:d4:bf:76:43:ef:4b:8e:8c:78:d9:9b:05: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6B:61:FF:FE:BD:7E:4E:54:30:FD:B9:BA:83:55:CD:CB:E4:B3:DF X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6d:b5:26:9f:eb:24:44:10:4c:16:f1:46:f8:64:27:ec:cd: 82:e3:f5:26:c7:99:c4:0b:dd:46:35:0c:47:95:72:2d:ff:40: eb:cd:d3:a9:ab:c7:b7:44:1b:61:c0:04:6e:69:bf:54:be:db: 4e:5a:c3:7b:0f:05:e7:4e:69:a3:84:7a:e0:2f:9f:32:68:68: 41:f1:10:32:ec:a7:c8:2a:07:85:60:8f:e7:f6:89:97:33:3f: 9f:1c:a9:76:34:83:12:f9:3d:92:b0:2f:30:04:56:7d:05:28: e4:83:c4:a8:ae:bf:de:09:10:e5:25:08:4b:8c:76:e8:bb:50: 63:40:e0:ba:15:52:9b:ed:46:0c:02:a7:61:dd:f1:9e:0b:10: 6a:f0:4a:ee:ec:18:7f:6d:81:87:75:ae:c7:ed:e6:b3:56:9b: c6:98:d4:bf:48:e3:40:dd:48:b5:30:74:4a:04:62:62:bc:68: 90:d3:09:ac:14:5b:19:63:f7:4c:ab:4f:ff:82:b6:b7:52:38: eb:a4:38:96:df:90:e2:75:b4:60:a0:78:ff:15:56:fd:72:0d: a8:8d:46:97:6d:16:4d:4f:84:7a:06:42:a9:75:34:8f:73:ee: 96:25:fa:ec:f5:39:a7:88:77:17:11:f6:fc:df:b4:1e:1f:0d: 21:d7:82:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGaZtYBlwBUcqRsbElj4WkIYyigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNjA0MTcwOTE2MjBaFw0yNjA0MjAxNDAwMjBaMDMxMTAvBgNV BAMTKEM0NkI2MUZGRkVCRDdFNEU1NDMwRkRCOUJBODM1NUNEQ0JFNEIzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6t1gTUzDYiFWrRWptG01yGQg V5Kf2HSbjqfeZnTJv0T3qCr39GFxjQH0aJXRAelJxtfVLd3pi6axvbNHw5MZrdnG gArW3M6hXi/H0+96Z10fmUtP8i9a9nc4BdyyES5VwaeAZPrcvjlN7Fli7hglkpR5 ps9OEnTjOv7lqEhYupL2DX5FFckd93Fs7hIlgLLGuSZ/LKGFiCmz8IR+QHwIutPs UZSsAG/HxdnPBZTSZIK5childwWK33nqQxFP31x/hUUuGcXnY0Kno8wsCkevc9rb AP66lGxqVEdgRakDj9z67levFNmLwo7pgn2uWMOW8tS/dkPvS46MeNmbBY7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGth//69fk5UMP25uoNVzcvks98wHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5ttSaf6yREEEwW8Ub4ZCfszYLj9SbHmcQL 3UY1DEeVci3/QOvN06mrx7dEG2HABG5pv1S+205aw3sPBedOaaOEeuAvnzJoaEHx EDLsp8gqB4Vgj+f2iZczP58cqXY0gxL5PZKwLzAEVn0FKOSDxKiuv94JEOUlCEuM dui7UGNA4LoVUpvtRgwCp2Hd8Z4LEGrwSu7sGH9tgYd1rsft5rNWm8aY1L9I40Dd SLUwdEoEYmK8aJDTCawUWxlj90yrT/+CtrdSOOukOJbfkOJ1tGCgeP8VVv1yDaiN RpdtFk1PhHoGQql1NI9z7pYl+uz1OaeIdxcR9vzftB4fDSHXgj0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:43 2026 by rpki-client