$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: Ve7scwCYuudekkQJ8+5a3Fm9+fqnwwVOu+2D20BVxF8= Subject key identifier: 66:4E:42:1F:AC:E3:24:95:60:1D:F9:31:B1:7D:B9:88:3A:B5:75:35 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 053AB0775E5386A56319B22565913C810877B2E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 014B Signing time: Mon 20 Apr 2026 13:12:21 +0000 Manifest this update: Mon 20 Apr 2026 13:07:21 +0000 Manifest next update: Thu 23 Apr 2026 14:06:21 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: d5xGAhpThyI+kfn2bT/6dQRCJ1zmyORT0m+vY8X3Exo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3a:b0:77:5e:53:86:a5:63:19:b2:25:65:91:3c:81:08:77:b2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Apr 20 13:07:21 2026 GMT Not After : Apr 23 14:06:21 2026 GMT Subject: CN=664E421FACE32495601DF931B17DB9883AB57535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:18:4b:d4:8f:6a:65:06:bd:1b:db:81:96: f1:9c:25:ba:00:4d:88:2d:02:74:3a:d5:f1:6d:e4: 8e:ba:f8:40:d0:98:1b:57:e8:ec:2e:da:37:89:24: b3:97:ba:59:14:fc:e3:2c:93:fc:dd:f5:5d:73:b5: 48:0d:ef:98:8c:1f:a3:9b:ca:28:6b:d5:e5:52:51: 84:b1:30:47:61:d7:58:cc:63:ec:0a:d8:b6:e9:7e: 8f:52:ec:26:5d:d7:ee:dd:55:1f:b9:d9:5e:05:ed: a7:00:04:db:2a:18:38:38:7a:40:20:ea:67:fe:ea: 89:31:bf:65:6f:23:d2:eb:e1:12:f5:7b:20:e5:6d: d0:4b:c3:f7:b7:79:c1:95:68:6c:65:0d:59:f5:a0: ae:2f:9e:c4:9f:e1:48:c2:67:da:da:b4:7c:17:9c: 0d:ed:ca:60:6f:51:63:c5:02:68:1d:14:ed:09:68: e5:0a:52:9d:aa:34:28:29:2c:c7:8b:17:fe:5d:6b: e9:db:61:4b:87:c2:a9:9c:60:17:ba:2a:d4:d4:f8: bc:98:96:31:d6:14:b8:f1:14:72:eb:82:33:60:ac: ce:af:99:ea:71:b3:51:95:1a:04:e0:2f:a8:cd:97: 69:3b:d8:f7:49:50:64:82:cb:c4:60:71:a3:1c:95: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:42:1F:AC:E3:24:95:60:1D:F9:31:B1:7D:B9:88:3A:B5:75:35 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:85:e4:87:39:bc:25:d6:14:8b:9e:40:5e:9e:04:e4:a4: d2:94:76:2e:59:88:2b:5c:a7:92:a0:c4:6c:88:76:46:3f:ed: f7:36:fd:e4:9a:46:0b:f5:e7:bb:1f:26:f8:29:d0:67:d7:d7: 5e:88:d0:0d:bf:f0:04:23:fa:ef:14:80:67:e5:56:7c:28:30: 87:13:dd:75:18:c4:f5:39:dd:70:f7:4b:a3:b8:7e:19:45:68: a1:71:f9:1c:52:4c:0c:9c:b1:ee:05:72:a9:d2:f0:50:c4:ac: 3c:89:e1:3d:b3:63:ca:4d:42:9d:16:83:a2:d0:e3:51:b0:c9: 4e:e0:3d:dd:8c:22:9e:9c:db:85:e4:6b:85:e9:9b:c0:df:94: 5f:6d:d7:f4:c8:75:be:35:98:ed:9f:d9:52:f8:54:d9:ca:8d: e0:fd:01:ba:27:da:dd:58:3d:3f:a2:e2:7e:ec:4c:f7:7f:3d: 18:2b:99:dc:03:3a:02:c1:b7:5b:1b:79:fd:1c:97:80:0c:9b: e4:02:85:44:f9:20:f3:45:9b:84:4c:5e:a5:60:5b:4a:55:e5: 24:34:ad:3f:1e:3d:1f:53:0e:58:6d:57:be:45:05:95:56:55: 71:20:46:e6:79:bd:e3:bf:4d:06:c8:ef:37:07:07:e4:fe:b3: 75:98:32:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTqwd15ThqVjGbIlZZE8gQh3sukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNjA0MjAxMzA3MjFaFw0yNjA0MjMxNDA2MjFaMDMxMTAvBgNV BAMTKDY2NEU0MjFGQUNFMzI0OTU2MDFERjkzMUIxN0RCOTg4M0FCNTc1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDskxhL1I9qZQa9G9uBlvGcJboA TYgtAnQ61fFt5I66+EDQmBtX6Owu2jeJJLOXulkU/OMsk/zd9V1ztUgN75iMH6Ob yihr1eVSUYSxMEdh11jMY+wK2Lbpfo9S7CZd1+7dVR+52V4F7acABNsqGDg4ekAg 6mf+6okxv2VvI9Lr4RL1eyDlbdBLw/e3ecGVaGxlDVn1oK4vnsSf4UjCZ9ratHwX nA3tymBvUWPFAmgdFO0JaOUKUp2qNCgpLMeLF/5da+nbYUuHwqmcYBe6KtTU+LyY ljHWFLjxFHLrgjNgrM6vmepxs1GVGgTgL6jNl2k72PdJUGSCy8RgcaMclUvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZk5CH6zjJJVgHfkxsX25iDq1dTUwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnBheSHObwl1hSLnkBengTkpNKUdi5ZiCtc p5KgxGyIdkY/7fc2/eSaRgv157sfJvgp0GfX116I0A2/8AQj+u8UgGflVnwoMIcT 3XUYxPU53XD3S6O4fhlFaKFx+RxSTAycse4FcqnS8FDErDyJ4T2zY8pNQp0Wg6LQ 41GwyU7gPd2MIp6c24Xka4Xpm8DflF9t1/TIdb41mO2f2VL4VNnKjeD9Abon2t1Y PT+i4n7sTPd/PRgrmdwDOgLBt1sbef0cl4AMm+QChUT5IPNFm4RMXqVgW0pV5SQ0 rT8ePR9TDlhtV75FBZVWVXEgRuZ5veO/TQbI7zcHB+T+s3WYMgE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client