$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: +g9VFYSUXCtIba7xG8IOGH1ro9xpMgI2cvvCIvpZw8c= Subject key identifier: 43:7A:F5:48:D1:25:D2:E5:CC:04:90:53:EF:DD:11:45:10:5C:B7:71 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 615BA9B7E179FEB90F74D0B2F01FCD58C3183C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 016F Signing time: Fri 17 Apr 2026 18:21:12 +0000 Manifest this update: Fri 17 Apr 2026 18:16:12 +0000 Manifest next update: Tue 21 Apr 2026 04:26:12 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: Z9duB722e8xKdNDS1C84jJ4pt6wOzMQ0z4hK7+Q4jmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5b:a9:b7:e1:79:fe:b9:0f:74:d0:b2:f0:1f:cd:58:c3:18:3c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Apr 17 18:16:12 2026 GMT Not After : Apr 21 04:26:12 2026 GMT Subject: CN=437AF548D125D2E5CC049053EFDD1145105CB771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:45:ff:b9:08:0d:36:08:1a:4a:b8:23:f7: 95:cf:20:76:10:4b:bf:2b:87:81:2d:b7:46:b5:29: 65:1e:83:e2:02:09:59:eb:8d:9e:c0:40:73:d4:5f: 95:41:b8:57:f9:77:ac:a3:ab:f7:69:c4:ce:65:73: c6:63:73:d7:bd:57:35:18:ef:ba:7b:da:72:46:85: d9:79:9d:2b:1f:b9:a3:f0:1e:01:74:c8:a4:d8:73: 36:49:b4:2a:2f:9f:01:95:33:48:fa:3b:22:04:c1: 4d:72:f9:f1:3b:71:8a:46:30:b7:c1:10:86:f1:6f: cd:f4:c8:a9:ee:c9:3f:85:d6:13:e6:ae:18:c3:cd: 9d:2b:43:ce:2a:4a:fe:e6:a8:b7:19:94:e4:eb:0d: b1:e8:9a:04:ee:42:04:ec:23:8d:ef:4d:33:e3:38: 17:f9:e1:fc:d5:04:8a:44:64:62:27:34:1d:3b:18: cc:a4:d2:4c:06:37:96:08:93:f3:4e:c8:57:6c:7c: dd:f7:5b:8e:e9:c3:a5:e2:73:37:fc:30:81:9b:5e: c7:01:e5:fd:b6:6d:c3:8a:96:3a:10:93:74:91:05: aa:92:ec:b0:b0:5d:23:8d:40:e4:80:7f:0e:f2:50: c6:2b:30:28:b8:1f:13:21:91:44:c5:c4:ad:0d:3c: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:F5:48:D1:25:D2:E5:CC:04:90:53:EF:DD:11:45:10:5C:B7:71 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d7:ae:7b:9d:38:f3:66:9b:47:2a:d2:db:ff:92:be:b5:b4: 40:6f:40:65:35:83:87:f2:28:cb:d3:a5:cc:83:c7:88:9c:2e: 3a:03:a7:1f:04:5b:1f:b4:47:89:31:58:93:d1:05:a4:6f:6b: 9b:08:1d:7f:ee:a9:62:72:b0:d9:da:04:04:af:1a:bc:38:32: f1:9d:b3:e3:40:67:71:56:88:62:43:05:4e:da:a7:b7:98:6d: 2b:9c:13:b2:da:42:78:c4:61:93:db:08:62:11:7c:a5:65:c2: 16:ed:bc:b7:b9:03:23:82:6b:16:13:dc:99:62:af:4a:c1:03: 3f:26:1d:dc:a4:49:58:e4:50:e9:22:d5:bc:10:ae:df:49:d2: 2b:46:c9:9c:df:30:81:3c:98:e3:72:db:ad:c3:de:4a:14:56: b5:13:4b:b4:ed:67:a5:87:5a:c5:93:10:2c:9a:ca:90:be:b9: 48:89:99:0b:56:a8:d8:41:7f:10:ab:5f:ca:93:42:69:62:ce: 44:bc:bd:9d:03:56:e9:12:f3:ff:64:c8:16:ad:2a:b4:6e:67: 8b:cd:ca:ac:ed:17:c3:c7:2a:ca:66:62:c7:2e:86:b5:48:47: bf:86:6d:97:f0:1e:24:ca:b9:bd:4d:1b:59:5d:b7:e3:77:bc: 97:a0:02:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVupt+F5/rkPdNCy8B/NWMMYPJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNjA0MTcxODE2MTJaFw0yNjA0MjEwNDI2MTJaMDMxMTAvBgNV BAMTKDQzN0FGNTQ4RDEyNUQyRTVDQzA0OTA1M0VGREQxMTQ1MTA1Q0I3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nkX/uQgNNggaSrgj95XPIHYQ S78rh4Ett0a1KWUeg+ICCVnrjZ7AQHPUX5VBuFf5d6yjq/dpxM5lc8Zjc9e9VzUY 77p72nJGhdl5nSsfuaPwHgF0yKTYczZJtCovnwGVM0j6OyIEwU1y+fE7cYpGMLfB EIbxb830yKnuyT+F1hPmrhjDzZ0rQ84qSv7mqLcZlOTrDbHomgTuQgTsI43vTTPj OBf54fzVBIpEZGInNB07GMyk0kwGN5YIk/NOyFdsfN33W47pw6Xiczf8MIGbXscB 5f22bcOKljoQk3SRBaqS7LCwXSONQOSAfw7yUMYrMCi4HxMhkUTFxK0NPMhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3r1SNEl0uXMBJBT790RRRBct3EwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfXrnudOPNmm0cq0tv/kr61tEBvQGU1g4fy KMvTpcyDx4icLjoDpx8EWx+0R4kxWJPRBaRva5sIHX/uqWJysNnaBASvGrw4MvGd s+NAZ3FWiGJDBU7ap7eYbSucE7LaQnjEYZPbCGIRfKVlwhbtvLe5AyOCaxYT3Jli r0rBAz8mHdykSVjkUOki1bwQrt9J0itGyZzfMIE8mONy263D3koUVrUTS7TtZ6WH WsWTECyaypC+uUiJmQtWqNhBfxCrX8qTQmlizkS8vZ0DVukS8/9kyBatKrRuZ4vN yqztF8PHKspmYscuhrVIR7+GbZfwHiTKub1NG1ldt+N3vJegAr8= -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:08 2026 by rpki-client