$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: dp+wlpf0Jipadw3lT9VuZJvBR1txFV/kRnU++wBunnc= Subject key identifier: 43:7E:A7:C8:09:10:E6:C0:A5:59:72:B4:0C:B7:25:1E:33:FB:F1:4C Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 2EF88D4F1D8B2E269B69D29EBAA11660C7358C08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: FE Signing time: Wed 15 Apr 2026 06:31:14 +0000 Manifest this update: Wed 15 Apr 2026 06:26:14 +0000 Manifest next update: Sat 18 Apr 2026 18:25:14 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) 2: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 3: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: 2uvYQyEJI5r1mp51p1tRcTMNkhWVyHXROmh4EEDreUU=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f8:8d:4f:1d:8b:2e:26:9b:69:d2:9e:ba:a1:16:60:c7:35:8c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Apr 15 06:26:14 2026 GMT Not After : Apr 18 18:25:14 2026 GMT Subject: CN=437EA7C80910E6C0A55972B40CB7251E33FBF14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:f9:03:48:07:ca:66:6e:c2:e7:63:b6:8d: 19:eb:61:b5:d3:f9:02:5a:2a:b3:fb:07:34:9d:1c: bd:51:19:de:eb:eb:42:82:f9:a1:d5:25:95:40:35: c9:31:36:ef:1f:91:f4:db:82:2e:29:23:4a:8c:74: 89:d9:2c:67:56:e9:a5:39:63:b0:ac:e3:01:fc:c6: 65:f1:a4:c8:5f:92:d7:57:eb:1d:58:85:ad:73:b9: ba:84:92:72:1b:bc:2e:e6:c5:72:36:92:33:da:e5: 16:de:30:52:cb:e4:92:21:2f:66:27:37:08:1e:39: d3:c3:49:47:57:f9:09:90:0b:93:d2:c8:5f:96:97: 2d:51:43:77:57:cc:74:88:c6:85:45:02:93:78:0f: 86:c5:c2:5f:ff:b7:9c:99:f1:c5:72:d2:1c:e2:63: 0e:fc:36:2e:2d:46:77:fb:89:b6:dd:c6:20:79:b6: 5f:68:60:bf:72:62:71:b1:e2:94:af:27:9d:30:6b: 10:b7:dc:23:b2:27:a7:20:9b:56:6a:27:42:01:95: 82:56:db:c7:e4:54:ee:11:67:52:53:b4:5f:17:78: c4:fe:b0:57:7a:c6:83:f0:44:c7:22:77:29:84:38: 9a:ce:fc:7d:72:aa:3b:7c:23:ba:b5:2e:95:e2:4f: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:A7:C8:09:10:E6:C0:A5:59:72:B4:0C:B7:25:1E:33:FB:F1:4C X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0e:07:78:13:96:94:2a:b9:8b:de:67:e7:fd:71:8d:99:df: 01:5d:87:b9:48:64:45:31:03:c2:52:43:b0:30:53:16:29:4e: 10:27:d3:f5:36:03:f0:a0:33:22:fd:7c:98:c9:35:ba:e4:3a: 3e:b3:38:1a:0c:17:f1:e2:85:da:a1:ce:e9:52:dc:04:80:56: d9:cf:a3:fc:c4:7b:84:9d:b2:e8:da:35:20:a7:af:96:14:64: 71:70:c2:e3:1f:bd:18:32:05:52:69:b5:03:40:7f:6f:d5:ab: 86:51:52:d3:d3:3f:76:5c:88:21:88:c1:ac:c1:89:d9:f1:93: d9:4a:34:9d:7e:47:70:e0:60:fa:3b:9b:61:12:19:dd:6c:f1: 20:fb:04:4a:8b:44:d2:12:b8:b5:8f:c1:d5:c1:76:5c:81:04: 13:26:ce:9a:f7:cf:cb:9f:b4:ca:c5:9f:91:a1:e1:bf:92:35: d2:0a:84:23:9b:74:37:01:10:1e:82:50:bd:17:8a:42:06:62: f6:84:09:85:51:58:a9:e2:9d:5e:9f:bc:5c:7b:50:61:a2:72: 23:74:44:39:03:95:83:3d:47:4d:a0:ed:9e:50:f6:9c:37:11: b1:42:ba:2e:c8:55:ed:f8:c9:8a:e8:9f:31:6f:0c:8d:4e:2d: dc:7a:a3:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULviNTx2LLiabadKeuqEWYMc1jAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNjA0MTUwNjI2MTRaFw0yNjA0MTgxODI1MTRaMDMxMTAvBgNV BAMTKDQzN0VBN0M4MDkxMEU2QzBBNTU5NzJCNDBDQjcyNTFFMzNGQkYxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADvkDSAfKZm7C52O2jRnrYbXT +QJaKrP7BzSdHL1RGd7r60KC+aHVJZVANckxNu8fkfTbgi4pI0qMdInZLGdW6aU5 Y7Cs4wH8xmXxpMhfktdX6x1Yha1zubqEknIbvC7mxXI2kjPa5RbeMFLL5JIhL2Yn NwgeOdPDSUdX+QmQC5PSyF+Wly1RQ3dXzHSIxoVFApN4D4bFwl//t5yZ8cVy0hzi Yw78Ni4tRnf7ibbdxiB5tl9oYL9yYnGx4pSvJ50waxC33COyJ6cgm1ZqJ0IBlYJW 28fkVO4RZ1JTtF8XeMT+sFd6xoPwRMcidymEOJrO/H1yqjt8I7q1LpXiTwQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ36nyAkQ5sClWXK0DLclHjP78UwwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoOB3gTlpQquYveZ+f9cY2Z3wFdh7lIZEUx A8JSQ7AwUxYpThAn0/U2A/CgMyL9fJjJNbrkOj6zOBoMF/HihdqhzulS3ASAVtnP o/zEe4SdsujaNSCnr5YUZHFwwuMfvRgyBVJptQNAf2/Vq4ZRUtPTP3ZciCGIwazB idnxk9lKNJ1+R3DgYPo7m2ESGd1s8SD7BEqLRNISuLWPwdXBdlyBBBMmzpr3z8uf tMrFn5Gh4b+SNdIKhCObdDcBEB6CUL0XikIGYvaECYVRWKninV6fvFx7UGGiciN0 RDkDlYM9R02g7Z5Q9pw3EbFCui7IVe34yYronzFvDI1OLdx6oz0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:40 2026 by rpki-client