$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: 3iYco2jrVz+7rBB2oDaU08mcYOEm8hEOxut+tJjXNAk= Subject key identifier: 55:A3:60:D8:3F:61:74:31:A7:5F:B1:B2:A4:64:69:45:E2:05:9B:FC Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 41EB97256CAD49BE9D2790DE42AD92A9AA6B32FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: EE Signing time: Thu 16 Apr 2026 01:11:21 +0000 Manifest this update: Thu 16 Apr 2026 01:06:21 +0000 Manifest next update: Sun 19 Apr 2026 11:38:21 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 3suFDOf6KtJmH0pcMkJcASCS/DpmKgc6snBJsCzz5Vo=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:eb:97:25:6c:ad:49:be:9d:27:90:de:42:ad:92:a9:aa:6b:32:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Apr 16 01:06:21 2026 GMT Not After : Apr 19 11:38:21 2026 GMT Subject: CN=55A360D83F617431A75FB1B2A4646945E2059BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:16:4e:9d:f5:1b:15:1e:e2:ee:43:12:8f: b5:0c:41:87:64:49:86:50:bd:00:2f:05:c7:ef:6b: a5:85:90:4b:cd:9a:99:79:e3:5c:4b:a6:50:b5:61: f6:6c:53:18:93:3a:b7:fa:27:2a:94:0c:04:61:ce: 80:07:3f:d9:af:99:7c:6d:eb:01:14:ea:92:a3:56: af:52:21:d3:11:a8:4b:0a:87:f5:85:cc:d0:77:93: 3a:95:bb:ae:4c:d4:79:78:56:fa:42:55:ff:14:1e: 96:62:3c:fe:9e:63:df:92:e3:74:b9:4d:09:f9:f7: 9f:cc:b8:85:c4:4c:19:71:e8:7c:e8:40:aa:fe:aa: e2:45:70:c9:67:52:e9:ac:13:1d:d8:20:e6:83:ba: 64:ee:7d:8c:65:42:4f:f1:02:8a:b2:72:fa:fb:fd: f7:00:b0:1a:6a:68:60:01:57:40:0c:78:46:fc:4f: e2:0b:1c:49:0e:92:0e:27:2e:32:39:74:21:ec:c2: 9d:4e:50:e4:99:06:85:ba:8e:d0:b5:30:4d:ef:08: 19:0a:c2:e9:55:02:65:95:2d:38:0a:f5:56:87:48: b1:ee:ac:0a:38:17:f9:92:7e:f3:99:57:46:1b:a6: 91:60:18:0e:23:22:67:9c:9e:2b:25:28:52:5c:00: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A3:60:D8:3F:61:74:31:A7:5F:B1:B2:A4:64:69:45:E2:05:9B:FC X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1f:3d:c2:e9:55:50:fc:f9:5b:bd:07:01:11:df:b1:f8:7f: 75:25:9d:07:f4:3b:42:4f:a2:c4:b2:33:a1:72:cf:88:3f:d1: e5:3f:75:b6:45:18:3d:53:ce:a9:79:e6:9f:d2:4d:5f:7e:5d: 96:b1:60:bd:b6:8a:32:32:6d:c7:de:7f:47:2e:e4:f2:91:04: d7:4c:0b:ec:ca:56:0d:7a:ce:ea:f5:55:c1:e7:29:d5:bb:a4: 7e:58:2f:b3:f1:50:5f:02:25:f8:ba:61:a0:3c:02:06:a3:d8: 48:d9:fc:76:aa:75:39:36:05:db:40:1f:d1:53:a2:a9:87:c6: 0b:49:b0:b7:54:59:4f:74:ec:3c:b3:01:86:55:e8:62:64:4a: cb:62:48:91:76:fb:d4:9a:60:81:96:d7:2b:cc:db:fe:35:72: 86:3d:c6:5f:a1:e9:ad:4a:3e:04:e5:11:85:7d:40:41:45:a7: d6:25:7e:16:79:ce:f7:e7:95:c3:72:73:da:89:10:30:a8:bb: ec:42:09:fe:30:81:13:b2:b1:10:9a:83:e0:5b:f9:61:5f:9b: 75:ea:14:1c:b4:8e:99:90:14:36:b8:22:b6:69:b4:1e:3e:8c: a7:1b:c5:16:3a:88:ac:b6:3e:26:61:5a:80:40:44:a5:51:d7: d4:f6:48:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeuXJWytSb6dJ5DeQq2SqaprMv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNjA0MTYwMTA2MjFaFw0yNjA0MTkxMTM4MjFaMDMxMTAvBgNV BAMTKDU1QTM2MEQ4M0Y2MTc0MzFBNzVGQjFCMkE0NjQ2OTQ1RTIwNTlCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrBZOnfUbFR7i7kMSj7UMQYdk SYZQvQAvBcfva6WFkEvNmpl541xLplC1YfZsUxiTOrf6JyqUDARhzoAHP9mvmXxt 6wEU6pKjVq9SIdMRqEsKh/WFzNB3kzqVu65M1Hl4VvpCVf8UHpZiPP6eY9+S43S5 TQn595/MuIXETBlx6HzoQKr+quJFcMlnUumsEx3YIOaDumTufYxlQk/xAoqycvr7 /fcAsBpqaGABV0AMeEb8T+ILHEkOkg4nLjI5dCHswp1OUOSZBoW6jtC1ME3vCBkK wulVAmWVLTgK9VaHSLHurAo4F/mSfvOZV0YbppFgGA4jImecnislKFJcAOcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVaNg2D9hdDGnX7GypGRpReIFm/wwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwfPcLpVVD8+Vu9BwER37H4f3UlnQf0O0JP osSyM6Fyz4g/0eU/dbZFGD1Tzql55p/STV9+XZaxYL22ijIybcfef0cu5PKRBNdM C+zKVg16zur1VcHnKdW7pH5YL7PxUF8CJfi6YaA8Agaj2EjZ/HaqdTk2BdtAH9FT oqmHxgtJsLdUWU907DyzAYZV6GJkSstiSJF2+9SaYIGW1yvM2/41coY9xl+h6a1K PgTlEYV9QEFFp9YlfhZ5zvfnlcNyc9qJEDCou+xCCf4wgROysRCag+Bb+WFfm3Xq FBy0jpmQFDa4IrZptB4+jKcbxRY6iKy2PiZhWoBARKVR19T2SAI= -----END CERTIFICATE-----Generated at Sat Apr 18 00:01:11 2026 by rpki-client