$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: 7k1CngKe8iwYaMNyg/Bm+r93yPo74txnqb3yir1a1e4= Subject key identifier: 21:FE:2E:8F:D0:0B:F5:86:07:58:BD:2A:90:A7:6B:6C:08:71:E8:74 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 6BDE70674FFE9AF8AB387DF7596C1894E2712FEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 027B Signing time: Sun 19 Apr 2026 00:00:52 +0000 Manifest this update: Sat 18 Apr 2026 23:55:52 +0000 Manifest next update: Wed 22 Apr 2026 03:29:52 +0000 Files and hashes: 1: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 2: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: 8ckQBdLaIL2NIYUyXS3HSSYHGIKdAcLoL05XhY/InoQ=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:de:70:67:4f:fe:9a:f8:ab:38:7d:f7:59:6c:18:94:e2:71:2f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Apr 18 23:55:52 2026 GMT Not After : Apr 22 03:29:52 2026 GMT Subject: CN=21FE2E8FD00BF5860758BD2A90A76B6C0871E874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:43:51:35:35:42:06:c5:1e:b0:6c:07:14: 1f:7b:af:19:09:d1:16:49:bf:2f:b4:9c:b3:05:12: 03:8a:2d:e2:3c:6f:d7:a0:50:ab:94:93:62:59:fb: de:2e:cb:bc:98:2d:2e:7a:75:0c:9e:bf:a9:f3:09: c0:7a:f2:25:c9:3a:65:57:85:d2:2f:7e:50:63:98: 42:c7:c8:21:2d:a0:72:e0:66:75:2b:30:4a:a7:68: f0:d7:f4:e9:64:94:00:43:3a:4a:ad:bd:b8:13:86: 20:60:26:94:57:45:cb:d8:49:d6:bc:04:fd:2d:ea: 63:fe:ce:da:a3:b8:08:d0:0e:9f:5a:d7:c7:f9:52: fc:7f:41:ed:35:27:65:c1:da:d1:f4:a2:c5:b4:c5: e5:c9:e8:42:b2:3b:e1:5c:eb:87:ef:6c:2a:ae:a9: 37:66:f6:0c:23:37:46:ec:2f:f1:ba:7e:5c:a2:14: 78:e2:20:a0:25:a3:52:1c:40:29:f1:69:41:2e:96: ed:61:8e:4a:70:ad:7e:16:86:e5:ec:77:31:7e:1d: 20:97:b3:3e:cf:46:f0:c0:fa:4e:af:68:8b:6d:c4: 07:56:0a:4b:e4:9a:38:a9:b3:aa:19:45:3f:2c:ad: 88:ed:dc:7f:cf:67:1f:8b:0d:62:e4:c4:1c:2c:ec: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:2E:8F:D0:0B:F5:86:07:58:BD:2A:90:A7:6B:6C:08:71:E8:74 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:52:87:dc:3f:b2:e9:2c:6f:79:7a:b7:ef:18:78:e4:a3:10: 29:71:ad:f3:de:9e:0a:c8:28:bb:07:26:5d:46:c2:e4:24:68: 11:69:69:80:e1:1e:8e:12:ac:85:55:c7:57:3d:1c:21:ac:19: ea:8d:48:f3:74:89:04:59:e7:48:d5:d6:39:32:67:15:78:f1: 97:10:49:dc:72:09:5e:46:85:d7:ef:f9:f0:e7:39:91:e3:ca: 87:44:b3:43:e1:f3:50:53:ba:46:89:15:96:44:88:b1:43:32: 5d:57:87:75:c6:69:39:30:73:88:d0:6b:52:33:eb:af:aa:a9: 4c:b1:c2:51:be:10:36:f6:32:9a:43:66:42:17:c4:24:49:29: 1c:33:a2:ac:b1:6c:85:81:9d:48:b7:fd:a6:b7:42:0a:bd:56: f0:91:d0:fd:51:dd:18:0b:ec:73:c5:0d:10:82:a6:3b:34:74: 26:c6:31:91:b6:74:b7:1a:cd:30:62:b8:62:75:cf:53:34:8d: 58:f6:d2:f6:a3:14:de:b5:b2:b2:46:9b:24:78:9f:aa:eb:d9: cc:64:7a:72:ee:32:a6:b1:45:04:c2:dd:b7:6e:d7:1d:13:36: ee:72:d2:ea:6f:d1:c3:db:00:da:09:46:2b:5a:6e:dd:e2:bd: 74:fe:8e:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa95wZ0/+mvirOH33WWwYlOJxL+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNjA0MTgyMzU1NTJaFw0yNjA0MjIwMzI5NTJaMDMxMTAvBgNV BAMTKDIxRkUyRThGRDAwQkY1ODYwNzU4QkQyQTkwQTc2QjZDMDg3MUU4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+UNRNTVCBsUesGwHFB97rxkJ 0RZJvy+0nLMFEgOKLeI8b9egUKuUk2JZ+94uy7yYLS56dQyev6nzCcB68iXJOmVX hdIvflBjmELHyCEtoHLgZnUrMEqnaPDX9OlklABDOkqtvbgThiBgJpRXRcvYSda8 BP0t6mP+ztqjuAjQDp9a18f5Uvx/Qe01J2XB2tH0osW0xeXJ6EKyO+Fc64fvbCqu qTdm9gwjN0bsL/G6flyiFHjiIKAlo1IcQCnxaUEulu1hjkpwrX4WhuXsdzF+HSCX sz7PRvDA+k6vaIttxAdWCkvkmjips6oZRT8srYjt3H/PZx+LDWLkxBws7K9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIf4uj9AL9YYHWL0qkKdrbAhx6HQwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRSh9w/suksb3l6t+8YeOSjEClxrfPengrI KLsHJl1GwuQkaBFpaYDhHo4SrIVVx1c9HCGsGeqNSPN0iQRZ50jV1jkyZxV48ZcQ SdxyCV5Ghdfv+fDnOZHjyodEs0Ph81BTukaJFZZEiLFDMl1Xh3XGaTkwc4jQa1Iz 66+qqUyxwlG+EDb2MppDZkIXxCRJKRwzoqyxbIWBnUi3/aa3Qgq9VvCR0P1R3RgL 7HPFDRCCpjs0dCbGMZG2dLcazTBiuGJ1z1M0jVj20vajFN61srJGmyR4n6rr2cxk enLuMqaxRQTC3bdu1x0TNu5y0upv0cPbANoJRitabt3ivXT+jo0= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:05 2026 by rpki-client