$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: +dnnZQI9bVpME0hPPh0BY94reUcEe3zvjqZnpsKn+Uw= Subject key identifier: 8D:8D:C8:2C:4E:5E:EC:5B:83:F0:99:07:FC:63:A4:BE:6C:68:CD:0E Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 5FD13B2859BB4B51E1C5C9D40E6A82B1D1172F1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 01ED Signing time: Sat 18 Apr 2026 19:21:31 +0000 Manifest this update: Sat 18 Apr 2026 19:16:31 +0000 Manifest next update: Tue 21 Apr 2026 23:46:31 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: 1voL9wkw3AmKHYF9xEfIdX/0TupHIuTblxg4b1ycg+I=) 2: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: PiBS1eSkYGruf0EzBSz7Vd15f3UebbGpvtV9QFzbfxg=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: ql1r6btRm6e6TWZ741/BEGV0DvzwRTbZXBQKsJR8lTg=) 4: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 5: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: wTxXY4luz0/VtdzVzXPjy+UsX7yymtg7UjU8UOo7Pyk=) 6: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: i3sO/S07jEPRYcvnHXfiuZ1cxqgCcK6SbsDRRhfjCrE=) 7: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: KAmpBoTLVKtQpzZQRpEjJRr9zTKNjSVFlisu1/zsLDs=) 8: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 5AML7OT3k9a5b/ingHxdGH73yfCaKOAVp9rvZR6enlw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d1:3b:28:59:bb:4b:51:e1:c5:c9:d4:0e:6a:82:b1:d1:17:2f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Apr 18 19:16:31 2026 GMT Not After : Apr 21 23:46:31 2026 GMT Subject: CN=8D8DC82C4E5EEC5B83F09907FC63A4BE6C68CD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:26:a4:3b:0b:e6:bf:c1:7b:b4:78:01:96: c2:68:fc:84:24:73:df:89:b7:bb:9d:5b:4f:11:c1: 43:f4:cd:af:5a:ba:50:2a:fc:27:34:9e:6c:13:22: 26:52:94:54:12:d9:06:ab:ad:c0:93:f1:65:d5:03: f2:db:28:1f:9e:8f:08:5b:16:5b:5e:05:b7:12:25: 4f:1e:0d:bc:9b:70:cc:da:02:6d:1e:41:85:ee:f3: 28:82:50:99:7c:af:56:31:04:93:7c:2f:6f:d3:14: c8:b4:17:87:98:0b:21:3a:78:e4:5f:75:e2:ec:89: bb:ee:4e:8a:de:c8:e8:15:7c:f9:35:26:95:82:04: c8:52:6c:29:d8:8e:32:a0:e6:9d:ef:b7:29:3b:ec: db:ed:35:d3:20:86:05:ac:64:50:d1:2e:ab:8c:e6: 34:2c:2a:29:c1:9d:31:67:24:a1:60:ae:e3:82:49: 65:4d:2a:dd:05:e4:b7:a5:31:dd:ef:d5:af:3c:e2: 26:45:6c:df:ce:42:68:46:df:67:1f:5d:b0:e3:93: 6c:18:10:cf:9a:57:0d:bf:ef:96:d1:4e:41:09:2e: d6:70:6a:1c:73:9b:a7:4e:0a:ab:c9:83:ea:b4:c8: 3f:9b:79:b3:a8:84:f9:24:f6:68:05:f3:fe:ef:30: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:C8:2C:4E:5E:EC:5B:83:F0:99:07:FC:63:A4:BE:6C:68:CD:0E X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:50:80:08:70:00:a1:43:51:5c:78:e3:f3:28:5e:b0:af: 39:c3:75:b1:9c:84:1f:81:e2:f0:43:b6:2b:b2:d3:61:1d:3a: 85:7f:28:11:1c:a8:0d:95:b4:aa:06:c6:47:c9:fd:19:8b:44: 72:82:d3:ba:ec:92:7e:f4:75:1d:b4:79:4d:99:1c:27:a1:08: 68:8e:ef:d7:95:0f:29:d0:b2:f2:97:72:46:13:bd:90:53:4e: d2:03:6e:15:0c:ef:94:57:a8:33:1e:31:bc:57:dc:1e:49:1d: c9:46:88:b2:68:a3:8d:f9:6b:29:e3:8e:b0:cf:a6:58:56:37: 2b:e0:ef:fc:3e:df:e2:e4:ce:59:e5:24:3c:be:95:59:45:7b: 95:45:6a:fc:03:82:53:d6:67:4f:c5:75:b1:62:ab:2c:91:32: 9b:60:52:07:5e:d0:3d:10:71:2c:20:34:73:80:8a:55:c8:6d: 68:de:fc:d4:33:82:f1:42:07:43:99:6b:11:11:41:04:2d:8c: 50:e1:8b:5f:89:1a:d5:98:2f:30:39:44:a7:30:31:90:92:9b: 2f:e7:a0:37:bc:8b:07:08:25:7f:87:b2:af:10:3c:8c:b4:fb: 63:cf:8a:c8:6d:cc:7c:80:a6:39:85:19:36:16:21:0e:81:67: fe:2c:b3:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9E7KFm7S1HhxcnUDmqCsdEXLx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNjA0MTgxOTE2MzFaFw0yNjA0MjEyMzQ2MzFaMDMxMTAvBgNV BAMTKDhEOERDODJDNEU1RUVDNUI4M0YwOTkwN0ZDNjNBNEJFNkM2OENEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMiakOwvmv8F7tHgBlsJo/IQk c9+Jt7udW08RwUP0za9aulAq/Cc0nmwTIiZSlFQS2QarrcCT8WXVA/LbKB+ejwhb FlteBbcSJU8eDbybcMzaAm0eQYXu8yiCUJl8r1YxBJN8L2/TFMi0F4eYCyE6eORf deLsibvuToreyOgVfPk1JpWCBMhSbCnYjjKg5p3vtyk77NvtNdMghgWsZFDRLquM 5jQsKinBnTFnJKFgruOCSWVNKt0F5LelMd3v1a884iZFbN/OQmhG32cfXbDjk2wY EM+aVw2/75bRTkEJLtZwahxzm6dOCqvJg+q0yD+bebOohPkk9mgF8/7vMOMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjY3ILE5e7FuD8JkH/GOkvmxozQ4wHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIDUIAIcAChQ1FceOPzKF6wrznDdbGchB+B 4vBDtiuy02EdOoV/KBEcqA2VtKoGxkfJ/RmLRHKC07rskn70dR20eU2ZHCehCGiO 79eVDynQsvKXckYTvZBTTtIDbhUM75RXqDMeMbxX3B5JHclGiLJoo435aynjjrDP plhWNyvg7/w+3+LkzlnlJDy+lVlFe5VFavwDglPWZ0/FdbFiqyyRMptgUgde0D0Q cSwgNHOAilXIbWje/NQzgvFCB0OZaxERQQQtjFDhi1+JGtWYLzA5RKcwMZCSmy/n oDe8iwcIJX+Hsq8QPIy0+2PPishtzHyApjmFGTYWIQ6BZ/4sswM= -----END CERTIFICATE-----Generated at Sun Apr 19 11:33:29 2026 by rpki-client