$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: ma4Y63upGsAIQkajnS+hPCxuTlAo4OOgsEgiB7fAVj8= Subject key identifier: 5D:46:C2:AC:21:4D:9C:4E:09:75:33:97:8E:DB:13:D7:BA:AE:70:FF Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 3E68E6909CEF9A51BBBE7DC5E33B92FBA34E13AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0557 Signing time: Sat 18 Apr 2026 07:20:44 +0000 Manifest this update: Sat 18 Apr 2026 07:15:44 +0000 Manifest next update: Tue 21 Apr 2026 07:55:44 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: HZC6euRIE0hqIq8Pf01cgP5w8fit3IFoZ3Ieq7RJo+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:68:e6:90:9c:ef:9a:51:bb:be:7d:c5:e3:3b:92:fb:a3:4e:13:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Apr 18 07:15:44 2026 GMT Not After : Apr 21 07:55:44 2026 GMT Subject: CN=5D46C2AC214D9C4E097533978EDB13D7BAAE70FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d7:56:a1:7b:18:52:b8:3f:80:45:7e:29:4b: a4:2b:55:ae:af:2b:b9:6d:6f:43:ce:68:9b:03:ba: 04:35:b3:f8:d6:78:bc:f3:79:6b:e5:72:b4:5c:57: 49:ec:5d:8d:15:b6:d8:a4:5b:41:1d:19:f9:27:06: fd:95:10:7e:35:03:f6:3c:fb:86:61:73:5e:a6:7c: 92:cc:18:02:35:e6:84:c4:c0:bf:47:75:dd:ab:d4: b8:43:bb:37:f0:ef:8b:77:af:b6:3c:1a:90:89:be: 8d:a9:ab:c0:c5:dd:8d:4e:d7:5e:f1:b7:68:28:a5: 5d:9f:05:de:98:30:9c:e9:7a:73:4a:63:aa:4c:a1: 14:79:22:6e:0d:59:5c:f7:71:9f:bc:75:6b:d7:bd: 73:75:d3:a1:3d:dd:01:65:20:d7:ab:9e:ce:89:f7: 70:42:1b:27:7d:1e:21:c0:20:6b:18:4f:65:87:d0: b8:4e:3f:a2:bb:35:1a:59:78:40:3f:c5:e3:7c:34: 11:35:ce:e7:3b:01:83:f3:60:d6:75:7d:19:c1:98: b7:cb:cb:3d:9d:26:e7:be:83:a8:33:6d:9f:76:5e: 20:63:9c:a6:71:79:33:c7:94:cd:a7:28:32:f1:7e: 23:e6:21:69:71:e2:b9:76:29:f1:f3:b9:07:48:c6: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:46:C2:AC:21:4D:9C:4E:09:75:33:97:8E:DB:13:D7:BA:AE:70:FF X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:7b:1a:83:09:df:94:22:ae:0f:30:46:61:30:c7:ad:be: c1:67:00:45:5c:27:21:f6:63:e3:26:7d:ab:95:be:7e:0d:59: 67:12:84:53:1c:87:75:46:e3:a0:94:0c:47:e2:4a:78:1e:5c: 0a:75:67:fe:51:32:b2:56:ce:98:7b:c3:ab:4a:b8:79:15:3e: 53:b4:73:5b:f2:0f:d9:58:58:d5:c4:a0:22:4e:70:02:47:3f: 17:ea:84:b7:86:b0:46:89:65:cb:d7:bd:7d:06:d9:6b:0d:21: b4:9f:d4:35:2f:8c:60:23:91:e6:f7:2d:d2:2d:74:a6:a7:c0: b3:65:ab:05:19:db:05:58:73:a2:57:f6:d7:c7:c4:43:ee:c8: 78:41:e1:1f:d4:b4:ae:46:e1:8d:fe:d5:e1:8c:a1:a6:7e:0b: d9:7a:50:24:39:1d:88:67:7e:da:c5:04:07:ca:eb:22:75:35: f9:de:fc:77:3f:b0:36:d4:1d:e3:77:b3:70:30:c6:0c:a7:e2: 9b:a1:91:72:5b:50:5e:4a:d4:9d:7d:49:34:19:f0:77:cd:00: 3d:e9:8b:9f:65:b8:9c:e2:06:de:fc:05:3e:ec:00:e3:1d:bc: 26:25:f2:e2:a3:96:17:10:f8:6f:b5:a6:f9:ab:dc:48:46:ed: 26:13:c4:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmjmkJzvmlG7vn3F4zuS+6NOE6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNjA0MTgwNzE1NDRaFw0yNjA0MjEwNzU1NDRaMDMxMTAvBgNV BAMTKDVENDZDMkFDMjE0RDlDNEUwOTc1MzM5NzhFREIxM0Q3QkFBRTcwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs11ahexhSuD+ARX4pS6QrVa6v K7ltb0POaJsDugQ1s/jWeLzzeWvlcrRcV0nsXY0VttikW0EdGfknBv2VEH41A/Y8 +4Zhc16mfJLMGAI15oTEwL9Hdd2r1LhDuzfw74t3r7Y8GpCJvo2pq8DF3Y1O117x t2gopV2fBd6YMJzpenNKY6pMoRR5Im4NWVz3cZ+8dWvXvXN106E93QFlINerns6J 93BCGyd9HiHAIGsYT2WH0LhOP6K7NRpZeEA/xeN8NBE1zuc7AYPzYNZ1fRnBmLfL yz2dJue+g6gzbZ92XiBjnKZxeTPHlM2nKDLxfiPmIWlx4rl2KfHzuQdIxm39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUbCrCFNnE4JdTOXjtsT17qucP8wHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+CexqDCd+UIq4PMEZhMMetvsFnAEVcJyH2 Y+MmfauVvn4NWWcShFMch3VG46CUDEfiSngeXAp1Z/5RMrJWzph7w6tKuHkVPlO0 c1vyD9lYWNXEoCJOcAJHPxfqhLeGsEaJZcvXvX0G2WsNIbSf1DUvjGAjkeb3LdIt dKanwLNlqwUZ2wVYc6JX9tfHxEPuyHhB4R/UtK5G4Y3+1eGMoaZ+C9l6UCQ5HYhn ftrFBAfK6yJ1Nfne/Hc/sDbUHeN3s3Awxgyn4puhkXJbUF5K1J19STQZ8HfNAD3p i59luJziBt78BT7sAOMdvCYl8uKjlhcQ+G+1pvmr3EhG7SYTxOE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:43 2026 by rpki-client