$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: 6i84mHkbomvomxknWDaKRGlMeTn0/tLrDOA3Jn424F4= Subject key identifier: F1:26:7B:16:08:DE:6B:26:3E:C7:EC:DB:21:04:5B:76:19:78:59:B1 Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 42054B13F3B72220490B4571D25E976E0B46B238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 98 Signing time: Thu 16 Apr 2026 07:03:27 +0000 Manifest this update: Thu 16 Apr 2026 06:58:27 +0000 Manifest next update: Sun 19 Apr 2026 09:18:27 +0000 Files and hashes: 1: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: 57yyWbkroMXB7lH5L8gR3m698cj0kIc6OiPuzOQB18c=) 2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: fVCDZiCbLlSsN1wDrJuSbtyY561uyLBMZpAxJSo9NRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:05:4b:13:f3:b7:22:20:49:0b:45:71:d2:5e:97:6e:0b:46:b2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Apr 16 06:58:27 2026 GMT Not After : Apr 19 09:18:27 2026 GMT Subject: CN=F1267B1608DE6B263EC7ECDB21045B76197859B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:80:39:e3:2c:64:fa:14:bd:cb:32:99:a0: 3e:84:69:8c:f8:74:1c:5d:4d:6d:0c:ff:39:67:62: 40:a5:cb:c4:c1:74:3e:f0:3f:ca:33:78:79:d3:73: 0c:36:e5:b4:94:4b:4d:cc:11:07:fb:f5:05:1b:57: 69:ae:9d:0c:e9:02:d7:85:8c:12:c0:bf:22:3a:7f: 60:d8:13:1b:62:af:b8:b4:21:27:12:1f:1f:c5:65: 6b:4f:79:0a:9c:c9:d9:38:c6:2c:58:ad:16:c2:3d: dd:cf:1b:85:c5:a9:f5:f5:84:94:21:70:3e:03:8a: 10:6c:a8:25:cf:6d:0e:4d:95:1f:58:65:85:47:82: d9:c2:eb:5d:c1:d1:3b:6b:ec:05:33:34:16:bf:e0: d2:ee:f6:65:bd:15:78:fd:9c:89:fc:c2:5b:78:b8: a7:6a:f2:59:a7:bd:68:9e:9d:cc:cd:49:2e:68:ac: 63:db:5e:b2:3e:0e:35:37:15:fe:58:d8:66:b0:99: 55:9a:a2:07:d2:3f:ab:06:d2:dd:3d:ce:87:8f:e8: 7d:7c:1b:64:c0:4b:4e:47:29:4b:c1:f2:1e:82:96: b4:26:68:cf:bc:77:31:4b:e2:52:aa:e3:3d:72:cf: c2:e7:ab:be:4b:e5:36:31:33:32:c2:7f:a7:fa:f1: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:7B:16:08:DE:6B:26:3E:C7:EC:DB:21:04:5B:76:19:78:59:B1 X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:dc:5d:f2:d9:26:aa:1a:93:45:0c:c9:5f:03:06:a9:a3: 4c:12:b3:90:da:6a:58:59:a8:03:74:a9:a9:10:49:d4:ef:f5: 31:55:b5:15:3a:b8:7d:e4:bc:e9:d0:df:7e:52:0c:42:38:ae: 36:fd:96:34:16:9f:d2:6f:c3:9c:80:6f:33:46:84:fb:21:1a: dd:dd:8c:32:9d:68:71:7d:d6:cd:74:3b:d9:0d:37:a0:20:af: e5:2a:32:81:9a:cd:5e:99:e2:bd:24:61:cf:87:8d:df:38:f1: c3:d1:5f:8c:cd:c7:83:e6:7d:16:b3:23:b2:f2:92:82:1e:ec: 0a:ce:1e:d3:84:b2:8a:92:c4:56:e1:d9:ec:cb:13:d6:42:4d: ff:d3:80:20:d4:0c:71:b0:ef:24:8b:dd:49:0b:3a:e8:c3:82: 3d:8f:24:1f:fd:8a:cc:89:fc:c1:28:95:f7:e0:ba:0c:ad:70: dd:3c:91:7e:fc:5f:1b:08:2f:ee:20:d6:b8:33:65:ea:ce:d3: 29:f3:5a:98:96:cc:79:3f:80:a0:01:45:1f:01:86:50:43:46: 03:b5:df:44:e5:77:af:b3:ef:59:3a:a1:24:57:92:d5:5a:ed: 40:c4:eb:aa:81:b2:26:07:f2:84:a7:8c:71:73:d6:42:66:3f: 64:98:96:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgVLE/O3IiBJC0Vx0l6XbgtGsjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNjA0MTYwNjU4MjdaFw0yNjA0MTkwOTE4MjdaMDMxMTAvBgNV BAMTKEYxMjY3QjE2MDhERTZCMjYzRUM3RUNEQjIxMDQ1Qjc2MTk3ODU5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RIA54yxk+hS9yzKZoD6EaYz4 dBxdTW0M/zlnYkCly8TBdD7wP8ozeHnTcww25bSUS03MEQf79QUbV2munQzpAteF jBLAvyI6f2DYExtir7i0IScSHx/FZWtPeQqcydk4xixYrRbCPd3PG4XFqfX1hJQh cD4DihBsqCXPbQ5NlR9YZYVHgtnC613B0Ttr7AUzNBa/4NLu9mW9FXj9nIn8wlt4 uKdq8lmnvWienczNSS5orGPbXrI+DjU3Ff5Y2GawmVWaogfSP6sG0t09zoeP6H18 G2TAS05HKUvB8h6ClrQmaM+8dzFL4lKq4z1yz8Lnq75L5TYxMzLCf6f68bhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SZ7FgjeayY+x+zbIQRbdhl4WbEwHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNK3F3y2SaqGpNFDMlfAwapo0wSs5DaalhZ qAN0qakQSdTv9TFVtRU6uH3kvOnQ335SDEI4rjb9ljQWn9Jvw5yAbzNGhPshGt3d jDKdaHF91s10O9kNN6Agr+UqMoGazV6Z4r0kYc+Hjd848cPRX4zNx4PmfRazI7Ly koIe7ArOHtOEsoqSxFbh2ezLE9ZCTf/TgCDUDHGw7ySL3UkLOujDgj2PJB/9isyJ /MEolffgugytcN08kX78XxsIL+4g1rgzZerO0ynzWpiWzHk/gKABRR8BhlBDRgO1 30Tld6+z71k6oSRXktVa7UDE66qBsiYH8oSnjHFz1kJmP2SYlq8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:38 2026 by rpki-client