$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: 0tQQRzJGrfzH/Sn70B+ChwvR15jkRIvAT2zt8TtCv7E= Subject key identifier: C3:57:99:AB:48:28:A2:D1:49:DE:04:7A:12:1B:EA:7F:26:7F:05:CA Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 4419B26213153DECBFE8FAEEAACB7B570F1A7F3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 01C0 Signing time: Fri 17 Apr 2026 21:42:39 +0000 Manifest this update: Fri 17 Apr 2026 21:37:39 +0000 Manifest next update: Tue 21 Apr 2026 09:31:39 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: Yk20WPEzKqGOYvnVWPBGFIHLqWb/+r2IhuQtRdJ7mNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:19:b2:62:13:15:3d:ec:bf:e8:fa:ee:aa:cb:7b:57:0f:1a:7f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Apr 17 21:37:39 2026 GMT Not After : Apr 21 09:31:39 2026 GMT Subject: CN=C35799AB4828A2D149DE047A121BEA7F267F05CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:b3:1c:9a:bb:58:8b:8a:8b:1e:a0:47:1b: f7:63:0a:47:05:ea:7f:8c:28:ac:cf:ae:de:96:2c: 14:b5:8c:10:b6:e9:94:04:40:3b:da:a5:6e:fd:21: 72:c1:13:23:b3:e5:dd:ea:d4:f5:4a:64:a5:a8:9b: b2:39:51:c0:09:f7:fa:fd:1d:9c:09:db:43:fd:09: be:dc:f2:1b:75:4e:af:79:6e:57:ab:b3:5b:03:e4: a6:30:53:cc:f4:21:4b:44:28:9f:3a:20:59:97:b7: 47:c0:87:cb:26:29:a1:ad:6c:b8:62:5e:48:f8:b8: b2:4c:ad:6a:3a:c6:d3:fc:1a:95:eb:7b:71:1f:55: 4e:03:21:40:a8:af:9d:89:7f:54:f7:9d:12:3d:ae: 68:0a:53:a9:62:29:42:73:6c:7e:cb:20:f2:ba:45: b7:ff:e2:9d:d4:9b:e2:8e:c8:2d:f2:b5:bb:0c:c9: 29:1b:41:0f:f5:4a:60:d2:67:a1:d9:c2:b7:8a:6c: 38:63:e2:3f:e6:32:af:7f:2b:c1:4c:16:77:d2:ef: da:bf:1c:02:62:82:22:0f:33:55:a8:08:6f:52:4d: 94:a1:17:49:6e:f2:67:72:c0:1c:0c:5e:4e:27:10: f9:8e:44:0c:ac:53:bd:11:01:a8:6c:a4:d8:0d:a6: ac:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:99:AB:48:28:A2:D1:49:DE:04:7A:12:1B:EA:7F:26:7F:05:CA X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ba:a3:60:70:df:42:86:79:f8:81:51:28:e3:3a:9f:59:7f: 70:34:0e:41:02:cd:5b:49:f2:03:b1:6a:55:1d:16:98:a2:12: 10:22:2d:b6:10:ac:b4:23:eb:c6:fc:17:5e:0b:eb:99:97:f9: e3:55:f2:43:1d:6a:b4:06:ba:4d:f2:e4:0a:ab:29:09:f9:5f: c8:17:3b:b1:d1:fb:8f:0b:b5:dc:40:18:a9:c1:8d:b5:60:95: 9b:be:f4:0f:79:62:1c:be:5d:1d:f6:ad:cd:be:7a:ee:f6:7e: 1d:45:5d:01:87:10:79:9b:31:33:0b:41:d4:b9:77:f1:98:7f: 5f:4e:90:df:9d:03:06:ff:fc:f4:c9:bb:7a:a2:5d:f0:df:45: e0:28:00:ca:a5:0c:c1:45:62:3c:16:22:21:73:8f:fe:22:47: 5a:c8:05:02:82:db:a6:5c:2c:d7:18:60:41:e5:20:37:eb:56: ba:be:2b:47:26:e0:98:98:31:ac:16:26:19:e6:a3:50:85:a4: 69:3f:a9:a1:b7:f9:dd:aa:bf:c9:03:fd:ce:19:a3:cf:cb:12: 92:b8:e6:02:f2:db:8a:dd:ad:5d:ea:b7:18:5d:fa:5b:2f:a2: 3d:48:0c:68:1c:80:98:9d:5f:52:3b:f0:37:df:7a:71:30:60: 78:cf:6c:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBmyYhMVPey/6Pruqst7Vw8afz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNjA0MTcyMTM3MzlaFw0yNjA0MjEwOTMxMzlaMDMxMTAvBgNV BAMTKEMzNTc5OUFCNDgyOEEyRDE0OURFMDQ3QTEyMUJFQTdGMjY3RjA1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuq7McmrtYi4qLHqBHG/djCkcF 6n+MKKzPrt6WLBS1jBC26ZQEQDvapW79IXLBEyOz5d3q1PVKZKWom7I5UcAJ9/r9 HZwJ20P9Cb7c8ht1Tq95blers1sD5KYwU8z0IUtEKJ86IFmXt0fAh8smKaGtbLhi Xkj4uLJMrWo6xtP8GpXre3EfVU4DIUCor52Jf1T3nRI9rmgKU6liKUJzbH7LIPK6 Rbf/4p3Um+KOyC3ytbsMySkbQQ/1SmDSZ6HZwreKbDhj4j/mMq9/K8FMFnfS79q/ HAJigiIPM1WoCG9STZShF0lu8mdywBwMXk4nEPmORAysU70RAahspNgNpqz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1eZq0gootFJ3gR6EhvqfyZ/BcowHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa6o2Bw30KGefiBUSjjOp9Zf3A0DkECzVtJ 8gOxalUdFpiiEhAiLbYQrLQj68b8F14L65mX+eNV8kMdarQGuk3y5AqrKQn5X8gX O7HR+48LtdxAGKnBjbVglZu+9A95Yhy+XR32rc2+eu72fh1FXQGHEHmbMTMLQdS5 d/GYf19OkN+dAwb//PTJu3qiXfDfReAoAMqlDMFFYjwWIiFzj/4iR1rIBQKC26Zc LNcYYEHlIDfrVrq+K0cm4JiYMawWJhnmo1CFpGk/qaG3+d2qv8kD/c4Zo8/LEpK4 5gLy24rdrV3qtxhd+lsvoj1IDGgcgJidX1I78DffenEwYHjPbPg= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:40 2026 by rpki-client