$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: mActpl0D1yshcZzyycmA09HFcMK0K9u8XI3Z2CRFvBo= Subject key identifier: 61:75:3E:8B:72:0C:3F:90:ED:0D:7C:A2:40:41:65:FA:07:38:D4:C7 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 60FEECE2ED57BA1858E7EF3A0609EB8E0AAF98AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0567 Signing time: Fri 17 Apr 2026 18:42:45 +0000 Manifest this update: Fri 17 Apr 2026 18:37:45 +0000 Manifest next update: Tue 21 Apr 2026 01:36:45 +0000 Files and hashes: 1: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: gG9HuDl3ACIMeM67EwdbfAfYugzGmun+XQ2J77GYtZQ=) 2: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 3: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: Jtgb1GmrFRQ4cpKfP6dk+0sfbheEljd6r8vfGr6lzqY=) 4: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 5: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: nNWu0/8/Y5E5+PXCyMclVWwSb+pcTn695z1dKn4epRk=) 6: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 7: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fe:ec:e2:ed:57:ba:18:58:e7:ef:3a:06:09:eb:8e:0a:af:98:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Apr 17 18:37:45 2026 GMT Not After : Apr 21 01:36:45 2026 GMT Subject: CN=61753E8B720C3F90ED0D7CA2404165FA0738D4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d8:e0:68:78:b6:04:6b:9e:90:c9:e3:fa:9d: f8:71:96:20:68:f2:ca:fd:79:71:42:34:5e:5d:82: 4b:eb:01:8f:00:8d:1d:5a:7b:9c:c2:e9:ee:cb:48: f4:2f:fa:d5:31:a8:fc:e1:09:bf:87:dd:ac:a9:1b: 66:09:4d:75:d3:0e:76:b7:40:80:e8:b5:75:0e:28: bd:fb:87:09:0a:e2:9e:48:aa:44:e9:07:bd:66:ad: 33:93:54:13:27:94:7f:8d:b9:64:16:c1:4e:a9:35: 61:99:7d:af:b0:1e:f1:6b:88:a9:45:cf:99:3b:16: 54:f9:0e:e8:23:5b:5f:23:89:f4:a7:6f:eb:d9:6d: e8:1f:0e:86:a6:5e:33:10:2c:c7:85:47:5c:53:ec: 65:0f:a5:77:24:f0:2f:7b:03:28:aa:dc:6d:9a:c2: b0:39:17:8d:cb:96:2e:2c:79:f8:b5:05:eb:09:fe: be:66:51:4f:4e:73:15:e5:ca:dc:5c:0a:25:40:28: 5c:0e:cf:33:5d:30:2e:d5:f4:d0:c8:bf:a3:16:9f: 2d:2b:9f:55:51:39:bc:8e:44:7f:80:9d:49:11:10: dc:fb:ba:ee:03:6f:75:66:fe:20:5f:51:4d:a6:c5: 66:7f:85:3d:48:36:f1:c1:e5:41:55:1d:c8:b5:54: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:75:3E:8B:72:0C:3F:90:ED:0D:7C:A2:40:41:65:FA:07:38:D4:C7 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a4:f8:a7:b5:ae:72:66:90:6b:03:2e:82:88:37:9c:85:5b: d7:f5:12:71:f4:3d:e3:b1:a0:c3:32:4d:37:11:06:24:38:d1: b7:f9:d1:ec:cd:f3:10:a6:cc:01:d6:06:73:01:94:e5:41:72: ad:13:04:ad:fc:4a:bc:d2:65:2d:68:64:52:31:4b:42:49:55: 5b:11:90:a1:7f:75:a1:7b:97:7c:e6:c2:5e:28:db:e4:2c:91: 37:a3:5a:51:2a:63:e7:40:af:53:16:c4:8d:08:d2:a9:82:72: 7e:1e:fe:dd:49:76:e8:78:50:22:3e:2e:7e:93:7a:49:13:bb: 65:55:d4:50:b7:1b:5a:07:d5:28:5f:db:0a:5d:72:2d:86:45: f7:06:f5:78:76:e3:11:9f:4f:3a:21:84:d1:15:07:3b:8f:79: 04:b7:ad:3d:d6:9b:75:0e:7d:63:a0:8d:c2:6d:63:2b:69:25: 1e:b0:1b:7d:a5:74:16:b2:dc:55:4d:dd:68:77:9e:65:3f:15: d6:d0:af:e5:f2:ff:b6:a0:81:a9:30:89:bd:71:a4:2a:84:3f: 9d:a0:96:2e:c4:25:04:9a:66:81:4a:7e:b7:30:f0:8b:71:4b: 45:76:94:da:3b:62:85:82:c8:9f:ac:26:08:be:0f:ab:2c:75: 48:db:d1:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP7s4u1XuhhY5+86BgnrjgqvmKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNjA0MTcxODM3NDVaFw0yNjA0MjEwMTM2NDVaMDMxMTAvBgNV BAMTKDYxNzUzRThCNzIwQzNGOTBFRDBEN0NBMjQwNDE2NUZBMDczOEQ0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2OBoeLYEa56QyeP6nfhxliBo 8sr9eXFCNF5dgkvrAY8AjR1ae5zC6e7LSPQv+tUxqPzhCb+H3aypG2YJTXXTDna3 QIDotXUOKL37hwkK4p5IqkTpB71mrTOTVBMnlH+NuWQWwU6pNWGZfa+wHvFriKlF z5k7FlT5DugjW18jifSnb+vZbegfDoamXjMQLMeFR1xT7GUPpXck8C97Ayiq3G2a wrA5F43Lli4sefi1BesJ/r5mUU9OcxXlytxcCiVAKFwOzzNdMC7V9NDIv6MWny0r n1VRObyORH+AnUkRENz7uu4Db3Vm/iBfUU2mxWZ/hT1INvHB5UFVHci1VO49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYXU+i3IMP5DtDXyiQEFl+gc41McwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALik+Ke1rnJmkGsDLoKIN5yFW9f1EnH0PeOx oMMyTTcRBiQ40bf50ezN8xCmzAHWBnMBlOVBcq0TBK38SrzSZS1oZFIxS0JJVVsR kKF/daF7l3zmwl4o2+QskTejWlEqY+dAr1MWxI0I0qmCcn4e/t1Jduh4UCI+Ln6T ekkTu2VV1FC3G1oH1Shf2wpdci2GRfcG9Xh24xGfTzohhNEVBzuPeQS3rT3Wm3UO fWOgjcJtYytpJR6wG32ldBay3FVN3Wh3nmU/FdbQr+Xy/7aggakwib1xpCqEP52g li7EJQSaZoFKfrcw8ItxS0V2lNo7YoWCyJ+sJgi+D6ssdUjb0aA= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:37 2026 by rpki-client