$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft File: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft (raw, json) Hash identifier: f+pDDnSvobVuujZnfGCd+RRpSbd4fekxBwgulXP6zQI= Subject key identifier: 79:4B:3B:BB:8A:C1:A9:D7:05:39:99:FD:CF:A9:2F:95:49:70:2F:EA Authority key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB Certificate issuer: /CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Certificate serial: 07178A45DF9A231AC6B8501CFB171E6A75AE3153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft Manifest number: 19 Signing time: Mon 20 Apr 2026 18:42:00 +0000 Manifest this update: Mon 20 Apr 2026 18:37:00 +0000 Manifest next update: Fri 24 Apr 2026 04:45:00 +0000 Files and hashes: 1: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl (hash: vqpuTxHvIZtcQ85TtVhT+OtI3Wdg37AbicI0jOOp/yQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:17:8a:45:df:9a:23:1a:c6:b8:50:1c:fb:17:1e:6a:75:ae:31:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Validity Not Before: Apr 20 18:37:00 2026 GMT Not After : Apr 24 04:45:00 2026 GMT Subject: CN=794B3BBB8AC1A9D7053999FDCFA92F9549702FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:86:d8:93:58:6b:bd:0e:aa:27:40:5a:64: b0:42:d7:7a:90:eb:86:08:86:16:52:da:d9:49:f8: 3a:a8:36:10:cd:96:a4:3f:43:95:d2:15:b2:fd:d9: 04:ff:f5:28:f3:fb:62:4e:f6:6b:d3:c5:d0:8c:39: 3f:e5:39:09:ab:14:58:28:01:08:fa:e7:7d:c1:7e: 6d:b3:28:e7:b2:44:50:7b:ab:09:0a:aa:e9:ee:73: 20:5e:c5:23:15:fc:7a:22:98:e4:75:e1:39:27:b1: 72:ba:83:b7:af:75:a5:fa:5e:79:fa:94:de:ca:fb: bb:02:62:8f:0d:a7:67:29:b8:22:dd:6f:61:c2:1d: 26:1e:fc:c1:c6:6a:7e:d2:6b:86:49:f1:54:99:a6: 7e:14:e0:40:5f:ed:69:7e:e3:a4:9b:81:b6:be:26: b1:c5:d0:71:8c:47:ee:79:08:37:00:0b:6f:b6:2d: 6f:1a:70:5b:dc:6b:de:80:d3:2d:a5:b8:34:21:5c: 52:b8:5f:68:ac:6d:5a:94:7f:08:c8:ff:b7:71:81: 73:7e:0d:59:d9:b8:4c:9e:01:92:40:44:e3:51:17: 17:1c:6d:9d:4d:0d:59:1e:0d:c7:17:18:cf:5d:16: de:6c:58:d4:c2:62:14:a2:00:4c:20:35:8f:09:8c: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4B:3B:BB:8A:C1:A9:D7:05:39:99:FD:CF:A9:2F:95:49:70:2F:EA X509v3 Authority Key Identifier: keyid:1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b1:ea:ba:41:6e:a1:37:39:8a:53:0d:be:16:cb:10:16:3d: ca:f1:d4:51:d0:a5:0f:5c:56:49:6d:72:40:5b:68:75:cb:0c: 6d:78:e0:87:9c:03:62:4f:41:84:e9:d4:47:ff:c4:21:b8:bd: f0:15:b3:35:c0:8a:b3:90:65:ba:5d:89:b8:ce:82:f9:67:4c: f7:8f:92:34:39:52:bf:d3:de:0a:f4:63:12:ee:02:c3:31:2a: 5e:39:36:f8:9e:d2:c2:b0:b1:bb:cc:81:a1:cd:5b:7b:6d:6c: 74:e4:03:b7:a1:94:2b:f5:bc:56:10:f1:97:54:ac:19:ff:44: 6b:1b:4a:5b:e0:40:eb:ff:8f:64:72:84:fd:b8:6b:66:ba:29: d6:b5:1a:e2:f5:7e:3d:8a:95:31:e6:63:b2:b6:ed:ea:34:4d: cb:6f:5d:80:95:d8:10:73:a9:a2:04:40:d9:11:b7:64:e3:b3: 2c:58:e1:f2:a5:34:65:99:16:44:7b:08:69:43:79:8e:02:85: 67:8f:27:18:4f:5c:8b:28:c3:67:3c:a4:ea:0f:85:e1:46:d4: 9b:f3:41:33:eb:de:18:df:8b:90:ff:7f:6d:a7:69:3b:19:e1: 70:0b:b0:0d:46:59:08:f2:7d:be:78:87:da:22:ec:a6:be:cf: 36:9c:d6:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxeKRd+aIxrGuFAc+xceanWuMVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMz NENENUFGQjAeFw0yNjA0MjAxODM3MDBaFw0yNjA0MjQwNDQ1MDBaMDMxMTAvBgNV BAMTKDc5NEIzQkJCOEFDMUE5RDcwNTM5OTlGRENGQTkyRjk1NDk3MDJGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqe4bYk1hrvQ6qJ0BaZLBC13qQ 64YIhhZS2tlJ+DqoNhDNlqQ/Q5XSFbL92QT/9Sjz+2JO9mvTxdCMOT/lOQmrFFgo AQj6533Bfm2zKOeyRFB7qwkKqunucyBexSMV/HoimOR14TknsXK6g7evdaX6Xnn6 lN7K+7sCYo8Np2cpuCLdb2HCHSYe/MHGan7Sa4ZJ8VSZpn4U4EBf7Wl+46Sbgba+ JrHF0HGMR+55CDcAC2+2LW8acFvca96A0y2luDQhXFK4X2isbVqUfwjI/7dxgXN+ DVnZuEyeAZJARONRFxccbZ1NDVkeDccXGM9dFt5sWNTCYhSiAEwgNY8JjOInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUs7u4rBqdcFOZn9z6kvlUlwL+owHwYDVR0j BBgwFoAUHaaBgxuTtBgXFIfPZfqg7DTNWvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS8xREE2ODE4MzFC OTNCNDE4MTcxNDg3Q0Y2NUZBQTBFQzM0Q0Q1QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMzNENE NUFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEw RUMzNENENUFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOx6rpBbqE3OYpTDb4WyxAWPcrx1FHQpQ9c VkltckBbaHXLDG144IecA2JPQYTp1Ef/xCG4vfAVszXAirOQZbpdibjOgvlnTPeP kjQ5Ur/T3gr0YxLuAsMxKl45Nvie0sKwsbvMgaHNW3ttbHTkA7ehlCv1vFYQ8ZdU rBn/RGsbSlvgQOv/j2RyhP24a2a6Kda1GuL1fj2KlTHmY7K27eo0TctvXYCV2BBz qaIEQNkRt2TjsyxY4fKlNGWZFkR7CGlDeY4ChWePJxhPXIsow2c8pOoPheFG1Jvz QTPr3hjfi5D/f22naTsZ4XALsA1GWQjyfb54h9oi7Ka+zzac1tw= -----END CERTIFICATE-----Generated at Wed Apr 22 01:45:54 2026 by rpki-client