$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: nTy7choFNfUDQaEeHdKz8iBdCgux4DF3ijlbsUZzeDY= Subject key identifier: B9:77:5E:8F:BA:7D:7F:C3:47:6D:1A:25:29:E0:63:C2:58:F3:DE:75 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 2EF4BBC65140772102A430C9FF3EB7D2F24BD848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 0258 Signing time: Fri 17 Apr 2026 08:41:45 +0000 Manifest this update: Fri 17 Apr 2026 08:36:45 +0000 Manifest next update: Mon 20 Apr 2026 18:17:45 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: iXIu8Ibpq8UbwSfLd6rCGjFDeig94TcWjkLYPsRwn00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f4:bb:c6:51:40:77:21:02:a4:30:c9:ff:3e:b7:d2:f2:4b:d8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Apr 17 08:36:45 2026 GMT Not After : Apr 20 18:17:45 2026 GMT Subject: CN=B9775E8FBA7D7FC3476D1A2529E063C258F3DE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:c3:f9:25:43:c5:83:d9:a8:3f:21:9a:30: aa:25:58:21:f8:28:c2:10:8e:08:84:c9:3d:24:9e: ba:05:f7:a5:cb:46:78:a4:4d:fa:00:6a:b5:f3:6d: db:58:84:9a:0d:99:99:a7:d9:d5:72:78:04:6b:ee: 6e:31:b2:9c:93:d1:f6:e9:50:1a:a1:af:90:98:c6: 4e:48:e8:86:e3:a2:3e:1a:6a:63:c7:9c:e0:91:18: 3c:12:7c:85:75:9d:d2:44:60:ba:72:d5:2c:44:cd: e1:fc:3d:0e:e1:04:27:54:11:d4:df:65:8c:c5:49: df:49:bd:0b:ad:63:62:b8:7c:cb:95:38:3f:d9:10: 52:6d:60:cd:fb:8e:91:26:03:dc:2d:6d:bc:15:fd: e5:80:91:85:ee:09:f6:15:c2:57:ec:16:3c:ec:60: dc:8a:54:c7:fe:3e:f1:7d:d4:8f:e0:5b:09:4b:7a: 12:7a:ee:2b:21:d9:06:03:c2:71:63:84:de:b7:ca: db:a4:5f:f3:f6:b6:5d:50:26:dd:78:b8:04:59:38: 29:92:05:77:62:6e:f6:98:89:9a:ee:b4:0d:08:a8: bf:3a:8f:5b:98:67:5d:9c:d0:d1:a9:b3:66:db:9c: 48:be:44:1e:66:11:ef:c2:15:94:ec:c6:bf:c9:14: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:5E:8F:BA:7D:7F:C3:47:6D:1A:25:29:E0:63:C2:58:F3:DE:75 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:d7:f7:61:90:93:98:65:e3:a7:1a:7c:32:e4:86:c9:75: 0c:ff:44:34:b3:98:88:bc:1d:bb:26:2a:8b:7d:8b:fc:42:20: b9:da:05:17:5c:99:4e:2a:20:f1:b4:74:ec:e5:85:e5:44:e2: 7d:44:b6:73:ef:76:17:67:e3:1d:cb:fe:34:f8:c9:e6:8c:20: 61:96:73:38:8d:c4:64:9b:68:51:cd:af:00:ae:42:b2:c0:79: b8:25:ef:f5:a1:57:72:8d:7a:b2:92:ca:45:8d:ef:e2:1e:f3: f1:c3:74:86:7b:57:6c:d6:41:02:5c:95:e8:f1:95:01:37:51: 12:42:38:6e:01:3c:0d:81:6a:89:51:1f:0a:c2:ee:0a:6a:8a: b2:a9:b9:f5:31:17:11:55:3e:22:86:3e:2b:85:0c:13:5b:d0: 1a:63:d0:fc:20:d5:66:5c:98:58:3c:37:7c:10:16:c1:64:8e: fe:2e:59:2c:a5:d2:2a:a9:54:33:08:a7:ba:62:b4:3d:8e:35: b7:34:d6:7d:08:51:c7:54:cb:e2:9e:bc:75:93:ab:f7:3a:a9: d1:61:9a:4d:89:fe:a8:00:61:ef:c6:ad:04:fa:80:83:bf:4a: 7f:18:17:21:eb:7a:79:fb:08:02:6d:3d:ae:3b:70:5d:5b:45: 7b:c1:e2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvS7xlFAdyECpDDJ/z630vJL2EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNjA0MTcwODM2NDVaFw0yNjA0MjAxODE3NDVaMDMxMTAvBgNV BAMTKEI5Nzc1RThGQkE3RDdGQzM0NzZEMUEyNTI5RTA2M0MyNThGM0RFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqsP5JUPFg9moPyGaMKolWCH4 KMIQjgiEyT0knroF96XLRnikTfoAarXzbdtYhJoNmZmn2dVyeARr7m4xspyT0fbp UBqhr5CYxk5I6Ibjoj4aamPHnOCRGDwSfIV1ndJEYLpy1SxEzeH8PQ7hBCdUEdTf ZYzFSd9JvQutY2K4fMuVOD/ZEFJtYM37jpEmA9wtbbwV/eWAkYXuCfYVwlfsFjzs YNyKVMf+PvF91I/gWwlLehJ67ish2QYDwnFjhN63ytukX/P2tl1QJt14uARZOCmS BXdibvaYiZrutA0IqL86j1uYZ12c0NGps2bbnEi+RB5mEe/CFZTsxr/JFEotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXdej7p9f8NHbRolKeBjwljz3nUwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZI1/dhkJOYZeOnGnwy5IbJdQz/RDSzmIi8 HbsmKot9i/xCILnaBRdcmU4qIPG0dOzlheVE4n1EtnPvdhdn4x3L/jT4yeaMIGGW cziNxGSbaFHNrwCuQrLAebgl7/WhV3KNerKSykWN7+Ie8/HDdIZ7V2zWQQJclejx lQE3URJCOG4BPA2BaolRHwrC7gpqirKpufUxFxFVPiKGPiuFDBNb0Bpj0Pwg1WZc mFg8N3wQFsFkjv4uWSyl0iqpVDMIp7pitD2ONbc01n0IUcdUy+KevHWTq/c6qdFh mk2J/qgAYe/GrQT6gIO/Sn8YFyHrenn7CAJtPa47cF1bRXvB4hM= -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:19 2026 by rpki-client