$ rpki-client -vvf repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft File: 779E25B9DB276068183F9078FE6306678EBE79BE.mft (raw, json) Hash identifier: Q3h4pXHFzuy2ucPoaFJyhKCJ+urGCvcpfOJ6pEwn6t4= Subject key identifier: D1:CC:CB:97:80:35:BE:2F:91:95:0A:2B:8C:93:63:AE:B8:8E:20:5E Authority key identifier: 77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE Certificate issuer: /CN=779E25B9DB276068183F9078FE6306678EBE79BE Certificate serial: 738267A75A663D791173E4D3B934A34E3EA663CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft Manifest number: 44 Signing time: Tue 21 Apr 2026 09:22:28 +0000 Manifest this update: Tue 21 Apr 2026 09:17:28 +0000 Manifest next update: Fri 24 Apr 2026 20:45:28 +0000 Files and hashes: 1: 779E25B9DB276068183F9078FE6306678EBE79BE.crl (hash: 70DdXPtuaBZ3UxL8oAkO17Z/o//O3lhmprSERDnzrZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:82:67:a7:5a:66:3d:79:11:73:e4:d3:b9:34:a3:4e:3e:a6:63:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779E25B9DB276068183F9078FE6306678EBE79BE Validity Not Before: Apr 21 09:17:28 2026 GMT Not After : Apr 24 20:45:28 2026 GMT Subject: CN=D1CCCB978035BE2F91950A2B8C9363AEB88E205E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:0a:2f:76:07:c4:4a:94:23:be:3c:de:8a: ca:c9:c2:02:51:f8:fc:b3:92:26:6c:38:ab:44:cb: 1e:56:4c:ed:6f:2c:de:d3:61:49:25:aa:d3:7f:34: a7:78:d9:42:fe:fe:fa:01:de:17:2b:4b:7c:1b:c4: 12:27:75:96:e5:54:1b:33:c5:f2:9c:70:ef:c2:ea: 99:82:3a:22:9f:17:11:39:eb:03:ea:69:eb:72:84: 5c:ad:c6:0e:eb:c9:14:24:8a:7c:02:9e:5c:3a:17: ae:75:16:e9:ed:3c:d2:57:e9:a9:f3:4b:60:d9:0b: ec:57:c6:60:7f:75:2e:12:71:3d:4a:28:b5:93:bc: e7:fe:7e:26:68:52:9f:64:aa:a3:42:09:ea:45:20: 33:f0:30:a3:64:b0:0a:c2:45:f4:16:8e:97:3e:3c: 2d:bc:77:a6:11:5e:28:d0:85:9b:87:ef:d0:28:f1: 8e:87:58:08:d5:d9:89:c1:82:5e:ad:40:6f:7f:9a: 4b:b7:46:7a:f1:57:7c:e5:ad:28:32:10:1f:00:94: 6e:d8:68:ca:6b:92:e0:81:49:46:67:69:ca:4b:6d: ba:41:c9:13:fc:bf:53:e5:29:84:af:f7:2b:e1:e9: 71:78:ac:bf:fc:71:b2:61:c2:3e:28:16:f2:1a:86: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CC:CB:97:80:35:BE:2F:91:95:0A:2B:8C:93:63:AE:B8:8E:20:5E X509v3 Authority Key Identifier: keyid:77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:eb:88:d6:75:ee:f3:70:f7:10:3c:d9:75:79:aa:69:6d:3e: 22:ea:d3:a3:9a:1d:54:99:02:1c:28:cf:92:b3:78:cd:20:9f: d6:6a:be:49:ef:65:f7:be:3b:a5:68:38:b4:75:7c:22:fe:5f: 7e:27:65:cf:f6:fb:be:1c:6c:29:1f:2d:a5:0e:de:cc:f7:3e: 84:88:7f:32:25:99:95:f3:ca:54:a8:d5:52:de:26:52:1c:a6: 28:34:d8:92:32:0c:91:6c:93:a8:32:e5:01:04:e2:d6:d1:82: 6c:e2:ed:5c:bd:f7:17:e6:6a:b0:29:34:42:4f:88:70:a4:06: 1f:68:91:6e:5c:2c:ca:32:c3:34:8e:6c:e7:fb:5a:aa:46:b3: 47:1c:4e:1e:5d:90:fa:ba:fb:27:72:7c:54:69:e9:fb:b1:5c: 30:02:0f:b8:6e:12:dc:01:ca:45:0a:6f:36:f2:92:20:26:69: 28:48:8a:05:b1:1e:b0:dc:e2:fb:03:88:ed:a0:7d:f6:ca:f2: ba:f4:3b:4f:84:14:43:bd:01:93:71:d9:dd:bc:57:4f:dc:c1: bf:0c:12:2f:f8:f0:26:ba:9c:5e:0d:d4:9b:66:5e:58:00:c8: 84:3a:ba:ed:e0:49:fc:43:f7:3b:7f:32:d8:c8:97:35:6f:95: 36:9e:ad:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4Jnp1pmPXkRc+TTuTSjTj6mY84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2Njc4 RUJFNzlCRTAeFw0yNjA0MjEwOTE3MjhaFw0yNjA0MjQyMDQ1MjhaMDMxMTAvBgNV BAMTKEQxQ0NDQjk3ODAzNUJFMkY5MTk1MEEyQjhDOTM2M0FFQjg4RTIwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXwovdgfESpQjvjzeisrJwgJR +PyzkiZsOKtEyx5WTO1vLN7TYUklqtN/NKd42UL+/voB3hcrS3wbxBIndZblVBsz xfKccO/C6pmCOiKfFxE56wPqaetyhFytxg7ryRQkinwCnlw6F651FuntPNJX6anz S2DZC+xXxmB/dS4ScT1KKLWTvOf+fiZoUp9kqqNCCepFIDPwMKNksArCRfQWjpc+ PC28d6YRXijQhZuH79Ao8Y6HWAjV2YnBgl6tQG9/mku3RnrxV3zlrSgyEB8AlG7Y aMprkuCBSUZnacpLbbpByRP8v1PlKYSv9yvh6XF4rL/8cbJhwj4oFvIahkrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0czLl4A1vi+RlQorjJNjrriOIF4wHwYDVR0j BBgwFoAUd54ludsnYGgYP5B4/mMGZ46+eb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODg0YzkzNS0zZTMzLTQ0NTYtYWNhNy0yNGYzM2ExN2ExYTQvMC83NzlFMjVCOURC Mjc2MDY4MTgzRjkwNzhGRTYzMDY2NzhFQkU3OUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2Njc4RUJF NzlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg4NGM5MzUtM2UzMy00NDU2LWFj YTctMjRmMzNhMTdhMWE0LzAvNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2 Njc4RUJFNzlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfriNZ17vNw9xA82XV5qmltPiLq06OaHVSZ Ahwoz5KzeM0gn9ZqvknvZfe+O6VoOLR1fCL+X34nZc/2+74cbCkfLaUO3sz3PoSI fzIlmZXzylSo1VLeJlIcpig02JIyDJFsk6gy5QEE4tbRgmzi7Vy99xfmarApNEJP iHCkBh9okW5cLMoywzSObOf7WqpGs0ccTh5dkPq6+ydyfFRp6fuxXDACD7huEtwB ykUKbzbykiAmaShIigWxHrDc4vsDiO2gffbK8rr0O0+EFEO9AZNx2d28V0/cwb8M Ei/48Ca6nF4N1JtmXlgAyIQ6uu3gSfxD9zt/MtjIlzVvlTaerbk= -----END CERTIFICATE-----Generated at Wed Apr 22 05:05:57 2026 by rpki-client