$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json) Hash identifier: u/gsqFII+T+o82X/AkcwMsTxZ/ObayHnrZtpkl0C3aw= Subject key identifier: A9:E4:BC:AD:F7:5D:C2:C4:50:FB:02:CC:17:FC:EF:DC:F5:BF:43:1A Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66 Certificate serial: 7F65CF9E58EA6A8A500C6A9A635837A33F07F69E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft Manifest number: CE Signing time: Sun 19 Apr 2026 21:32:17 +0000 Manifest this update: Sun 19 Apr 2026 21:27:17 +0000 Manifest next update: Thu 23 Apr 2026 03:02:17 +0000 Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: h2rtm7YPVMBeCclsVFKoeR1K1krdn/2M3GGVqNhoJ80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 03:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:65:cf:9e:58:ea:6a:8a:50:0c:6a:9a:63:58:37:a3:3f:07:f6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66 Validity Not Before: Apr 19 21:27:17 2026 GMT Not After : Apr 23 03:02:17 2026 GMT Subject: CN=A9E4BCADF75DC2C450FB02CC17FCEFDCF5BF431A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:18:79:e1:27:5b:fc:99:e6:1b:d8:eb:b4: f0:a9:34:fb:a6:23:7d:fb:f5:94:52:ef:d0:f0:f7: d2:98:79:f8:63:d6:2d:bd:8f:b3:6d:b8:37:ab:cf: c5:52:28:00:1d:01:7c:35:91:c9:5a:2f:37:d7:f3: db:51:99:1d:79:99:9b:e8:c7:6e:5b:ed:3f:a0:90: 85:11:d3:ad:af:7d:6f:9b:f1:d6:3d:78:f8:1b:d0: 40:f0:56:80:2d:f5:34:7d:f8:1e:84:fe:3e:b9:43: 95:60:e6:e5:b5:3c:9d:f5:82:d4:20:f6:2f:da:81: 2c:45:7d:3d:8d:e2:2e:67:fd:d6:cc:fb:cf:aa:f2: 0c:e9:8a:1d:cc:d2:42:c9:ee:3e:f3:e0:27:cb:3b: 05:1e:91:3a:44:23:89:5e:dc:6b:29:a1:0e:67:8d: 00:ab:f2:b6:b0:dd:20:f4:51:7a:f0:57:78:4b:6f: 03:6d:42:0d:78:e7:45:c7:97:8a:a2:20:9c:6a:b7: 37:b5:86:16:0d:00:00:d0:58:e7:6f:45:09:24:c4: fd:95:87:7f:a4:ba:a8:51:35:5f:c3:d2:af:90:8b: b2:30:a6:18:84:43:4e:da:22:0a:89:a5:32:b8:cf: 78:d0:01:84:49:7f:ae:7b:aa:03:b7:71:30:df:24: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:BC:AD:F7:5D:C2:C4:50:FB:02:CC:17:FC:EF:DC:F5:BF:43:1A X509v3 Authority Key Identifier: keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:da:6d:fe:16:1c:13:13:6b:3f:a3:1d:79:d6:63:0d:80:93: 31:de:48:38:0b:48:b5:bf:70:b0:81:aa:6e:03:3e:a9:72:7b: 9a:45:c0:d0:64:04:18:d2:d3:6d:34:d8:28:2f:28:5d:18:00: c1:53:31:35:cf:93:b4:dc:98:2a:7b:a5:52:de:5d:58:15:46: 96:1a:59:7d:83:4b:57:7e:83:b2:3a:23:e2:8a:c7:46:d3:7a: 21:16:ea:ae:1b:0a:d3:35:60:af:a8:aa:d9:48:3e:a3:09:7a: f7:97:67:0e:48:ac:47:1a:45:f0:df:82:29:05:3d:59:9f:e4: e6:74:31:fa:00:ac:bc:22:bb:4f:29:29:db:6c:b7:c6:4b:33: b9:eb:44:85:22:26:5b:73:1c:2c:47:35:0e:35:6e:99:44:14: 5b:5c:86:4c:b3:64:84:75:17:66:b8:30:33:d6:a8:ed:ca:d5: a5:2e:eb:51:8d:e7:0d:09:34:47:4a:aa:10:b9:13:e0:bf:df: 01:2e:49:1a:53:f5:8c:2a:34:5d:dc:9a:53:9d:6e:81:4f:c0: 5c:d4:dd:8b:2e:31:ea:46:97:45:99:2c:71:db:69:0e:5d:4a: 44:af:e5:49:cb:3d:9a:63:6c:b2:65:5d:0e:be:c6:58:d6:62: 9e:30:d6:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2XPnljqaopQDGqaY1g3oz8H9p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhF NDEwNEI2NjAeFw0yNjA0MTkyMTI3MTdaFw0yNjA0MjMwMzAyMTdaMDMxMTAvBgNV BAMTKEE5RTRCQ0FERjc1REMyQzQ1MEZCMDJDQzE3RkNFRkRDRjVCRjQzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIBh54Sdb/JnmG9jrtPCpNPum I3379ZRS79Dw99KYefhj1i29j7NtuDerz8VSKAAdAXw1kclaLzfX89tRmR15mZvo x25b7T+gkIUR062vfW+b8dY9ePgb0EDwVoAt9TR9+B6E/j65Q5Vg5uW1PJ31gtQg 9i/agSxFfT2N4i5n/dbM+8+q8gzpih3M0kLJ7j7z4CfLOwUekTpEI4le3GspoQ5n jQCr8raw3SD0UXrwV3hLbwNtQg1450XHl4qiIJxqtze1hhYNAADQWOdvRQkkxP2V h3+kuqhRNV/D0q+Qi7IwphiEQ07aIgqJpTK4z3jQAYRJf657qgO3cTDfJGvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeS8rfddwsRQ+wLMF/zv3PW/QxowHwYDVR0j BBgwFoAUd2k0i0PDF0ChFvf57qCReOQQS2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWNkNDVjYi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC83NzY5MzQ4QjQz QzMxNzQwQTExNkY3RjlFRUEwOTE3OEU0MTA0QjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhFNDEw NEI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkx NzhFNDEwNEI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnabf4WHBMTaz+jHXnWYw2AkzHeSDgLSLW/ cLCBqm4DPqlye5pFwNBkBBjS02002CgvKF0YAMFTMTXPk7TcmCp7pVLeXVgVRpYa WX2DS1d+g7I6I+KKx0bTeiEW6q4bCtM1YK+oqtlIPqMJeveXZw5IrEcaRfDfgikF PVmf5OZ0MfoArLwiu08pKdtst8ZLM7nrRIUiJltzHCxHNQ41bplEFFtchkyzZIR1 F2a4MDPWqO3K1aUu61GN5w0JNEdKqhC5E+C/3wEuSRpT9YwqNF3cmlOdboFPwFzU 3YsuMepGl0WZLHHbaQ5dSkSv5UnLPZpjbLJlXQ6+xljWYp4w1vg= -----END CERTIFICATE-----Generated at Wed Apr 22 05:02:23 2026 by rpki-client