$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: W9N4caO+T2EjaxsEhZoDAeBNo02EBppqOMn4Gwd8jtw= Subject key identifier: BC:17:5E:93:9F:56:78:EE:AA:86:CA:63:2E:C2:A7:CB:35:0B:F1:64 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 706381FCAD9B49AC366FD8A0547709A6CC0FD1FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 028B Signing time: Thu 16 Apr 2026 18:30:03 +0000 Manifest this update: Thu 16 Apr 2026 18:25:03 +0000 Manifest next update: Mon 20 Apr 2026 02:19:03 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: wBa59HqF+Ycte53/tQLZLkuru7zDQbeF07E/ewJNEhU=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 3ORUUmkJ+o4nnE20LKRWQpDfQUx6WFMnIqRqb1dCAcA=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: PNalk4vA/Rkbr+Ga9Voh4gRAWTRSepvHB28AsR/h9Zs=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: xfBxO1cpwHLH3mPIYYSSSWYs4NXVE5RlSEpIHuIsrj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:63:81:fc:ad:9b:49:ac:36:6f:d8:a0:54:77:09:a6:cc:0f:d1:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Apr 16 18:25:03 2026 GMT Not After : Apr 20 02:19:03 2026 GMT Subject: CN=BC175E939F5678EEAA86CA632EC2A7CB350BF164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:08:5d:ca:0e:5a:f0:26:cc:cf:40:af:2a: 4d:19:7e:7f:d4:71:9c:b3:44:6b:d3:18:fc:ef:7f: f7:f1:ed:7d:02:c4:5e:f0:b7:31:b1:26:f3:23:2d: 73:19:0e:2e:ca:ba:df:67:00:f6:92:c0:e8:bf:6c: ff:d0:d4:c5:12:e1:1c:3b:b4:bc:06:68:32:2e:82: 9a:83:b5:79:a6:2e:57:11:ce:98:96:67:9e:18:d7: 8c:fd:f6:c3:18:09:64:e6:b4:19:1e:05:57:c2:63: c5:ae:10:1d:b6:6e:99:b9:ed:0a:1d:d6:bd:75:29: 4c:39:cc:1d:c9:5d:5f:d6:e4:87:ca:b1:36:14:5b: ab:a3:87:04:50:e0:68:6c:d0:42:96:3c:a9:ea:44: 33:09:b3:5a:ac:27:83:7c:37:5d:be:4e:48:62:98: c8:e9:f6:dc:e1:9f:92:a8:bc:03:46:6c:42:ed:34: 1f:cc:93:94:c4:bb:bd:dd:5f:d3:5f:1c:e6:f2:2d: ba:c1:1b:e1:21:cf:5f:b7:b1:a2:8d:7c:33:52:6b: 04:3c:fe:a8:7a:3e:98:de:27:35:85:88:4f:69:04: d6:33:00:8e:a1:a8:34:79:1c:63:ba:e9:2a:ee:86: 72:fa:d5:36:35:76:3f:88:e4:51:92:8a:6e:7e:7e: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:5E:93:9F:56:78:EE:AA:86:CA:63:2E:C2:A7:CB:35:0B:F1:64 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8f:29:e8:79:fc:50:45:6b:74:27:af:79:f3:d8:71:39:cf: 72:1a:05:51:91:05:09:c7:4c:be:e6:52:06:9b:07:d4:8a:2f: 22:5c:09:99:a6:cf:87:40:c2:85:82:db:92:39:2a:67:53:84: 7b:d7:24:4c:00:ee:4b:80:98:cf:b8:b2:52:f0:c1:b9:b1:88: 26:c4:44:e9:98:ba:9f:3b:eb:fe:90:ab:55:d2:e2:6e:06:44: e8:59:80:82:91:52:a0:72:35:ba:63:ab:de:cc:0a:2c:a3:f5: 40:93:d0:42:73:db:60:c5:e0:12:45:64:fd:6d:98:1c:84:93: c3:5c:10:6f:13:58:6c:b1:58:09:14:8d:7d:26:5a:7c:aa:a8: 2f:68:b8:ce:46:a9:d0:0f:6e:31:17:0c:22:6b:94:19:6a:c9: 8f:51:62:41:ee:36:73:64:0d:10:95:45:5d:ef:59:dd:8e:5d: 7d:df:39:99:6d:62:3f:3f:e6:28:5a:0a:96:a5:87:77:e5:5f: e5:51:a0:6a:b2:08:43:6a:b6:58:b5:d7:8b:ff:3b:7f:f5:21: 81:83:b3:83:69:d8:b6:7f:39:d4:f7:6d:03:d3:c1:79:96:28: 96:3d:0a:87:d1:f3:30:64:25:8e:cb:fc:c5:17:b7:25:96:07: 5c:06:9b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGOB/K2bSaw2b9igVHcJpswP0fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNjA0MTYxODI1MDNaFw0yNjA0MjAwMjE5MDNaMDMxMTAvBgNV BAMTKEJDMTc1RTkzOUY1Njc4RUVBQTg2Q0E2MzJFQzJBN0NCMzUwQkYxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaAhdyg5a8CbMz0CvKk0Zfn/U cZyzRGvTGPzvf/fx7X0CxF7wtzGxJvMjLXMZDi7Kut9nAPaSwOi/bP/Q1MUS4Rw7 tLwGaDIugpqDtXmmLlcRzpiWZ54Y14z99sMYCWTmtBkeBVfCY8WuEB22bpm57Qod 1r11KUw5zB3JXV/W5IfKsTYUW6ujhwRQ4Ghs0EKWPKnqRDMJs1qsJ4N8N12+Tkhi mMjp9tzhn5KovANGbELtNB/Mk5TEu73dX9NfHObyLbrBG+Ehz1+3saKNfDNSawQ8 /qh6PpjeJzWFiE9pBNYzAI6hqDR5HGO66SruhnL61TY1dj+I5FGSim5+fr35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvBdek59WeO6qhspjLsKnyzUL8WQwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuPKeh5/FBFa3Qnr3nz2HE5z3IaBVGRBQnH TL7mUgabB9SKLyJcCZmmz4dAwoWC25I5KmdThHvXJEwA7kuAmM+4slLwwbmxiCbE ROmYup876/6Qq1XS4m4GROhZgIKRUqByNbpjq97MCiyj9UCT0EJz22DF4BJFZP1t mByEk8NcEG8TWGyxWAkUjX0mWnyqqC9ouM5GqdAPbjEXDCJrlBlqyY9RYkHuNnNk DRCVRV3vWd2OXX3fOZltYj8/5ihaCpalh3flX+VRoGqyCENqtli114v/O3/1IYGD s4Np2LZ/OdT3bQPTwXmWKJY9CofR8zBkJY7L/MUXtyWWB1wGm0U= -----END CERTIFICATE-----Generated at Sat Apr 18 01:54:54 2026 by rpki-client