$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: yN3NettGI8/zOZdjpZLPcDicVOkcjz1K8mKD1J0z8y8= Subject key identifier: 4C:F4:E7:B4:D6:69:FF:5C:73:53:2C:31:11:D3:02:BE:7D:EB:02:46 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 1E8F17C127BD98D318810DABA05267D0C36B10F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 0287 Signing time: Wed 15 Apr 2026 23:31:33 +0000 Manifest this update: Wed 15 Apr 2026 23:26:33 +0000 Manifest next update: Sun 19 Apr 2026 02:59:33 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: S3rzXKlZfTSEv/Pc9qK555wJstPWA1weX2Foh18lnFQ=) 2: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: xeD/YllWFCTWKN8FmaZ048uAzBYKKQbFMiLVY9cdDqs=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: Wg06GQde+GCq5aqBDprKyhd1BT39yXsvRMMpYz9sEns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8f:17:c1:27:bd:98:d3:18:81:0d:ab:a0:52:67:d0:c3:6b:10:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Apr 15 23:26:33 2026 GMT Not After : Apr 19 02:59:33 2026 GMT Subject: CN=4CF4E7B4D669FF5C73532C3111D302BE7DEB0246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:b9:10:33:72:0d:d5:74:1a:0c:aa:75:5e: 17:e5:c9:3d:51:06:70:ae:71:0f:f1:81:6b:93:04: 8a:13:ba:8b:72:ee:97:62:49:f9:f7:15:ba:e3:ff: e7:93:ae:b6:d9:22:94:d8:da:78:f0:63:c9:8b:e4: db:a0:aa:ce:8f:d0:10:76:07:af:4f:e0:1e:b3:d9: 36:5b:86:33:9b:24:22:f0:df:bb:73:6e:6a:90:16: 79:5a:22:6b:61:52:d8:19:34:af:07:d1:1e:a3:74: 19:63:28:ec:e6:54:ed:dd:ef:fa:54:5a:19:a5:2f: 61:09:23:f3:b0:4c:ac:c6:5a:10:7f:4c:5a:d8:a8: af:74:01:6f:db:c8:f8:f5:eb:79:ec:9c:96:93:5b: 16:fe:85:49:d4:f4:98:f5:22:08:26:84:c0:62:6e: 66:34:ac:d2:8e:d1:4a:e1:e5:03:1b:95:43:f1:6e: 88:f4:70:a0:71:62:39:28:21:1a:ea:14:3f:e3:a3: 57:8c:e9:6f:20:36:3f:22:a6:aa:d6:43:53:7d:7a: f8:06:dc:cb:46:0d:a1:c2:bf:72:f9:bb:ad:1f:22: 1f:c1:3d:84:0a:36:18:8d:53:db:14:95:05:44:0b: e1:05:ee:fd:0c:37:b1:59:e9:28:06:8a:b3:fe:b5: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:E7:B4:D6:69:FF:5C:73:53:2C:31:11:D3:02:BE:7D:EB:02:46 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:78:24:fa:ce:fa:35:ba:d6:1f:62:09:f1:5f:02:e9:43:0d: af:ec:f7:5b:26:78:09:cc:57:20:89:ea:fb:5a:b2:9f:46:5d: c9:11:d3:64:ba:92:a5:0e:b0:44:6c:96:d9:13:ea:e1:18:b5: bc:2b:03:ef:c9:f5:29:77:dc:8b:4b:6f:b6:f0:e5:37:c0:bc: a0:58:40:8f:27:72:e6:5e:0e:42:bc:43:40:9a:69:31:3b:3a: bf:fd:b1:6d:6f:02:47:8b:fc:6c:39:4e:cb:b8:22:3f:7e:ee: 05:23:10:30:cb:c8:85:30:3f:85:49:4a:5e:08:28:87:cd:b2: bc:35:30:13:b8:55:7d:61:8a:22:31:3f:b4:06:7f:b8:fc:73: 4b:25:49:e7:1b:1e:8a:f6:54:65:c5:6d:45:a8:57:4c:08:c3: c7:a8:2c:f1:b0:8e:cf:e8:4c:c3:5a:6c:bd:cd:11:57:65:e6: 6c:3a:89:ff:e2:c3:72:ec:d5:0b:d4:b1:5d:bf:69:fc:ef:c1: 5f:ea:99:fb:f3:c7:45:f4:67:60:0d:e7:81:f2:c5:e4:30:cc: dc:2b:f1:36:21:46:50:4e:1d:7a:ef:f1:eb:52:1a:e7:f5:09: dc:d0:be:23:55:54:fb:7c:18:fe:73:5c:6b:84:ae:45:7c:06: e1:ca:79:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHo8XwSe9mNMYgQ2roFJn0MNrEPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNjA0MTUyMzI2MzNaFw0yNjA0MTkwMjU5MzNaMDMxMTAvBgNV BAMTKDRDRjRFN0I0RDY2OUZGNUM3MzUzMkMzMTExRDMwMkJFN0RFQjAyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74LkQM3IN1XQaDKp1XhflyT1R BnCucQ/xgWuTBIoTuoty7pdiSfn3Fbrj/+eTrrbZIpTY2njwY8mL5Nugqs6P0BB2 B69P4B6z2TZbhjObJCLw37tzbmqQFnlaImthUtgZNK8H0R6jdBljKOzmVO3d7/pU WhmlL2EJI/OwTKzGWhB/TFrYqK90AW/byPj163nsnJaTWxb+hUnU9Jj1IggmhMBi bmY0rNKO0Urh5QMblUPxboj0cKBxYjkoIRrqFD/jo1eM6W8gNj8ipqrWQ1N9evgG 3MtGDaHCv3L5u60fIh/BPYQKNhiNU9sUlQVEC+EF7v0MN7FZ6SgGirP+teTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPTntNZp/1xzUywxEdMCvn3rAkYwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF54JPrO+jW61h9iCfFfAulDDa/s91smeAnM VyCJ6vtasp9GXckR02S6kqUOsERsltkT6uEYtbwrA+/J9Sl33ItLb7bw5TfAvKBY QI8ncuZeDkK8Q0CaaTE7Or/9sW1vAkeL/Gw5Tsu4Ij9+7gUjEDDLyIUwP4VJSl4I KIfNsrw1MBO4VX1hiiIxP7QGf7j8c0slSecbHor2VGXFbUWoV0wIw8eoLPGwjs/o TMNabL3NEVdl5mw6if/iw3Ls1QvUsV2/afzvwV/qmfvzx0X0Z2AN54HyxeQwzNwr 8TYhRlBOHXrv8etSGuf1CdzQviNVVPt8GP5zXGuErkV8BuHKecQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:40:31 2026 by rpki-client