$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: 1M8BOWK1c6zeBjjYk4MJqF/uaYR7nzSOdtJwBEQUpPc= Subject key identifier: 42:DF:98:32:74:F9:0C:1A:7B:B6:13:C0:9B:FA:E4:11:54:F0:47:CB Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 71AFE1AD6E61A49A180FE3CFD2A580A596F55A37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 022F Signing time: Fri 17 Apr 2026 16:00:57 +0000 Manifest this update: Fri 17 Apr 2026 15:55:57 +0000 Manifest next update: Tue 21 Apr 2026 01:37:57 +0000 Files and hashes: 1: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: BjN3ak7isKmJBvYoLqnEc4i3UIPIlgqIX7KTh0fQFIU=) 2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: DnN4DbVNjWnQCkjXwlNPMidCO0/mBYN6hm7/J4O2GDg=) 3: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: m5zVdj5eik3LoKH8n3yc9tou1o5tmBbi5H5pOVeGB1Y=) 4: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: /LiLN+J0a3bLX8pXdquoB9qjro5HIfp6bcZw4BWkMOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:af:e1:ad:6e:61:a4:9a:18:0f:e3:cf:d2:a5:80:a5:96:f5:5a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Apr 17 15:55:57 2026 GMT Not After : Apr 21 01:37:57 2026 GMT Subject: CN=42DF983274F90C1A7BB613C09BFAE41154F047CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:b2:92:e3:1b:dd:a8:ef:c0:53:63:ef:2e: 86:5e:dd:48:f7:13:91:a1:2c:32:26:7b:9c:3e:15: f2:f0:33:9e:b1:ad:db:38:82:8f:5a:46:40:cb:31: f3:4a:70:30:29:67:54:eb:85:ec:1c:2c:73:58:4c: 1b:09:3b:e6:a6:2a:64:08:cf:c7:ec:1b:13:e0:3c: fc:45:22:79:4f:de:f6:05:cb:7b:dd:8e:aa:d2:f5: d9:b3:09:f6:07:1c:2d:eb:4b:89:f0:69:bf:d4:d4: 42:bf:b7:d6:d4:50:fe:4a:bb:bf:60:ee:50:37:e8: 4e:67:26:b6:6b:aa:a5:b8:f7:16:4e:b8:c1:d1:5b: be:b9:93:37:19:db:7c:52:6b:c3:84:f1:71:ed:66: d5:a9:fc:5c:50:fc:f7:48:09:f0:92:3c:df:c2:1b: fa:01:ba:b6:d8:59:b4:c8:cb:46:5d:14:f7:25:c3: 27:70:a2:5d:b2:97:41:a5:bf:40:8e:ed:c4:21:ea: 76:09:49:68:c3:54:f1:32:39:28:99:6d:5f:f3:bc: 77:23:e0:44:55:de:16:38:d8:e7:36:43:e2:78:bf: 07:bf:f9:73:f6:fc:11:68:ae:05:96:6a:9b:13:2b: 77:c5:5a:32:37:2d:92:5f:4d:7c:f8:a5:45:c8:27: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:98:32:74:F9:0C:1A:7B:B6:13:C0:9B:FA:E4:11:54:F0:47:CB X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d0:e4:60:cb:3d:eb:d7:1d:70:45:48:15:40:90:38:db:6d: 3b:76:91:88:2c:60:aa:f4:34:d2:ac:17:c6:9d:90:09:16:c8: e7:5b:c8:db:84:98:3d:2e:01:65:be:2e:e1:30:32:53:b4:37: ac:b1:8e:ba:30:21:4e:50:b0:0f:70:47:82:43:6c:c4:09:31: e6:b7:8f:d7:17:06:8b:dc:03:ec:3a:56:42:89:c6:85:42:56: 11:75:68:70:eb:1e:15:38:f6:c1:09:bd:e2:71:81:16:12:50: 25:d8:6f:77:a6:be:43:cf:59:b0:8c:3c:47:15:4a:57:d2:44: dc:92:60:e4:a0:75:4f:06:ab:26:ab:b5:e8:b3:18:ea:5a:83: d9:42:7c:cd:5d:e3:0f:01:c4:05:13:8a:78:24:80:88:66:01: c7:a9:e3:70:ec:2d:a2:8c:7b:02:13:99:fd:ca:7a:60:3f:fb: d3:a2:f2:02:35:a0:3f:64:fe:7e:44:92:11:59:6a:9b:93:1f: ae:92:34:3a:fb:a0:2e:5e:96:55:99:c4:94:df:06:66:0e:a8: 70:e5:8a:6c:ea:6c:2c:db:3f:09:5d:ba:f3:06:f9:3b:c9:d1: 6d:be:f5:cc:05:f7:a1:46:35:0f:ca:7a:3e:56:f2:1b:27:1a: 8a:a3:a6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca/hrW5hpJoYD+PP0qWApZb1WjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNjA0MTcxNTU1NTdaFw0yNjA0MjEwMTM3NTdaMDMxMTAvBgNV BAMTKDQyREY5ODMyNzRGOTBDMUE3QkI2MTNDMDlCRkFFNDExNTRGMDQ3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp7KS4xvdqO/AU2PvLoZe3Uj3 E5GhLDIme5w+FfLwM56xrds4go9aRkDLMfNKcDApZ1TrhewcLHNYTBsJO+amKmQI z8fsGxPgPPxFInlP3vYFy3vdjqrS9dmzCfYHHC3rS4nwab/U1EK/t9bUUP5Ku79g 7lA36E5nJrZrqqW49xZOuMHRW765kzcZ23xSa8OE8XHtZtWp/FxQ/PdICfCSPN/C G/oBurbYWbTIy0ZdFPclwydwol2yl0Glv0CO7cQh6nYJSWjDVPEyOSiZbV/zvHcj 4ERV3hY42Oc2Q+J4vwe/+XP2/BForgWWapsTK3fFWjI3LZJfTXz4pUXIJ9p/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQt+YMnT5DBp7thPAm/rkEVTwR8swHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/Q5GDLPevXHXBFSBVAkDjbbTt2kYgsYKr0 NNKsF8adkAkWyOdbyNuEmD0uAWW+LuEwMlO0N6yxjrowIU5QsA9wR4JDbMQJMea3 j9cXBovcA+w6VkKJxoVCVhF1aHDrHhU49sEJveJxgRYSUCXYb3emvkPPWbCMPEcV SlfSRNySYOSgdU8GqyarteizGOpag9lCfM1d4w8BxAUTingkgIhmAcep43DsLaKM ewITmf3KemA/+9Oi8gI1oD9k/n5EkhFZapuTH66SNDr7oC5ellWZxJTfBmYOqHDl imzqbCzbPwlduvMG+TvJ0W2+9cwF96FGNQ/Kej5W8hsnGoqjpjo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:33 2026 by rpki-client