$ rpki-client -vvf repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft File: F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft (raw, json) Hash identifier: /mpXwR96SfCcfEFtOZnLvhfbbnpIYT29yUt9fk/ipdc= Subject key identifier: 56:DB:AA:B4:E3:BD:DB:79:5D:18:DB:AA:97:91:B5:19:A1:FC:5C:9B Authority key identifier: F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA Certificate issuer: /CN=F8EA79769F4F98F7D5A723816314CD216D8F01AA Certificate serial: 652EBE0A09C2089FC572DAC460089859DC83DEA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft Manifest number: 07 Signing time: Mon 20 Apr 2026 22:22:12 +0000 Manifest this update: Mon 20 Apr 2026 22:17:12 +0000 Manifest next update: Fri 24 Apr 2026 05:51:12 +0000 Files and hashes: 1: F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl (hash: HxOVI2ZS5dTEVoU/uLTrdO22BJizpqt1F0KxalcK6Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:be:0a:09:c2:08:9f:c5:72:da:c4:60:08:98:59:dc:83:de:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EA79769F4F98F7D5A723816314CD216D8F01AA Validity Not Before: Apr 20 22:17:12 2026 GMT Not After : Apr 24 05:51:12 2026 GMT Subject: CN=56DBAAB4E3BDDB795D18DBAA9791B519A1FC5C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:3f:d0:7b:85:c3:81:9e:d1:04:2d:57:b4: 02:f5:8d:dd:44:04:5b:b2:80:3f:a9:7a:ff:62:9e: e4:de:5e:da:b9:ce:3c:83:23:63:f9:a4:74:2b:ca: b1:a1:40:58:46:55:7b:46:b6:98:60:89:33:5f:89: ee:af:bd:ff:3e:dc:d7:64:3f:66:b9:11:60:50:12: 6d:d0:36:f4:dd:c4:0e:cf:34:d3:10:8b:e1:fa:72: 3d:24:ca:91:da:93:59:d1:2a:0b:c4:fa:d3:54:a6: e9:f3:a2:47:66:91:d6:88:58:ae:32:ee:0c:b9:e6: 00:02:06:3e:45:89:5a:38:33:98:70:5e:a4:28:46: 97:a9:55:57:85:81:12:61:d8:f3:e3:66:69:fa:9e: 8c:ed:7d:bb:13:6e:30:d5:47:7b:06:4b:65:bf:4a: 1b:39:3b:3a:2b:2e:d3:0c:86:ea:81:d9:67:a1:6f: ec:3b:31:ec:15:38:7f:f5:0d:c6:9d:72:4e:92:1e: db:66:9c:4e:c0:1b:86:c6:83:e7:68:42:58:8b:b2: c1:b3:6e:c7:41:aa:dc:97:53:f2:28:b1:67:52:86: 2b:48:a2:7b:ab:15:ea:8a:5d:3f:b0:1e:1f:66:51: cd:d1:02:a4:25:e1:63:c1:5c:85:bd:b3:4a:3c:2f: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:AA:B4:E3:BD:DB:79:5D:18:DB:AA:97:91:B5:19:A1:FC:5C:9B X509v3 Authority Key Identifier: keyid:F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0f:dc:06:7a:49:0e:8c:1e:e0:69:c6:33:2d:df:80:89:94: 00:a0:32:2a:13:e1:e8:d1:61:d4:a5:35:c3:f1:c4:4e:68:31: 46:4f:ad:7c:b0:58:c8:99:25:df:0a:b2:c7:8c:9c:d9:59:6e: 55:b9:6f:02:4b:9d:77:07:cc:6b:ac:f7:4e:ac:80:3f:2d:04: 0f:45:d3:e7:31:ff:03:7c:0e:58:f8:e1:68:23:fd:88:50:fa: b0:0f:5b:3c:df:90:69:9d:4e:43:27:2f:6f:53:25:36:7d:bc: 68:4a:43:2c:bd:c2:3f:be:ec:ac:1c:58:e2:00:58:93:64:47: c9:47:fc:77:79:5a:ba:fc:23:9b:c7:f6:21:0f:83:bb:c0:23: 03:f1:df:17:17:1e:7c:35:05:83:50:52:c8:45:3c:4d:c8:42: 15:d4:f6:dc:63:62:6c:fa:66:33:b0:7f:9c:28:72:cb:02:bb: 62:11:05:94:84:41:8c:52:dd:02:b8:78:b6:63:e5:32:f8:46: 6c:7f:54:dd:a4:fb:6d:d4:cc:ab:75:c8:10:16:4a:15:bf:91: 53:b0:04:51:cc:d9:99:0c:aa:b0:4a:4f:ca:63:42:4b:af:d1: 4a:26:59:46:c4:90:22:4a:84:b0:65:82:7a:37:09:50:3a:db: 4a:68:c1:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS6+CgnCCJ/FctrEYAiYWdyD3qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENEMjE2 RDhGMDFBQTAeFw0yNjA0MjAyMjE3MTJaFw0yNjA0MjQwNTUxMTJaMDMxMTAvBgNV BAMTKDU2REJBQUI0RTNCRERCNzk1RDE4REJBQTk3OTFCNTE5QTFGQzVDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNz/Qe4XDgZ7RBC1XtAL1jd1E BFuygD+pev9inuTeXtq5zjyDI2P5pHQryrGhQFhGVXtGtphgiTNfie6vvf8+3Ndk P2a5EWBQEm3QNvTdxA7PNNMQi+H6cj0kypHak1nRKgvE+tNUpunzokdmkdaIWK4y 7gy55gACBj5FiVo4M5hwXqQoRpepVVeFgRJh2PPjZmn6noztfbsTbjDVR3sGS2W/ Shs5OzorLtMMhuqB2Wehb+w7MewVOH/1Dcadck6SHttmnE7AG4bGg+doQliLssGz bsdBqtyXU/IosWdShitIonurFeqKXT+wHh9mUc3RAqQl4WPBXIW9s0o8L723AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtuqtOO923ldGNuql5G1GaH8XJswHwYDVR0j BBgwFoAU+Op5dp9PmPfVpyOBYxTNIW2PAaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDVhMDNlYi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMS9GOEVBNzk3NjlG NEY5OEY3RDVBNzIzODE2MzE0Q0QyMTZEOEYwMUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENEMjE2RDhG MDFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvRjhFQTc5NzY5RjRGOThGN0Q1QTcyMzgxNjMxNENE MjE2RDhGMDFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkP3AZ6SQ6MHuBpxjMt34CJlACgMioT4ejR YdSlNcPxxE5oMUZPrXywWMiZJd8KsseMnNlZblW5bwJLnXcHzGus906sgD8tBA9F 0+cx/wN8Dlj44Wgj/YhQ+rAPWzzfkGmdTkMnL29TJTZ9vGhKQyy9wj++7KwcWOIA WJNkR8lH/Hd5Wrr8I5vH9iEPg7vAIwPx3xcXHnw1BYNQUshFPE3IQhXU9txjYmz6 ZjOwf5wocssCu2IRBZSEQYxS3QK4eLZj5TL4Rmx/VN2k+23UzKt1yBAWShW/kVOw BFHM2ZkMqrBKT8pjQkuv0UomWUbEkCJKhLBlgno3CVA620powfU= -----END CERTIFICATE-----Generated at Wed Apr 22 01:38:57 2026 by rpki-client