$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: kU+LmkI6MuH/LwrxSagdAHBbkwCHC7W0pr0J1OuAUPg= Subject key identifier: AD:2E:AB:03:CE:07:E8:96:6B:BA:A7:1F:9F:AD:39:E6:5C:CA:D5:49 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 2A10830F79FE85AFD5EEEB6DDC68DF561239AD06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 0300 Signing time: Wed 15 Apr 2026 17:52:14 +0000 Manifest this update: Wed 15 Apr 2026 17:47:14 +0000 Manifest next update: Sun 19 Apr 2026 04:03:14 +0000 Files and hashes: 1: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: b6Ze1Cmi7h0UbgRWSKjWyOEXa3332OwZs4ZuR8D6lzY=) 3: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: y3FP8talPWKm/5DPPnb5ky7NUhHestpkZ2pq1ui2tp0=) 4: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:10:83:0f:79:fe:85:af:d5:ee:eb:6d:dc:68:df:56:12:39:ad:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Apr 15 17:47:14 2026 GMT Not After : Apr 19 04:03:14 2026 GMT Subject: CN=AD2EAB03CE07E8966BBAA71F9FAD39E65CCAD549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:b2:ee:d7:38:ae:68:b7:6d:9c:c7:ca:65: ed:ef:5c:ed:c4:0b:25:0d:f3:58:cf:c4:32:b8:04: fb:0c:0b:56:09:bd:7e:ba:6c:31:8c:38:1a:f5:6a: c0:db:9f:24:78:e0:ed:5a:c2:fb:5a:2a:e2:ba:c2: 64:c5:3f:27:38:71:98:80:f1:4d:53:02:ae:c0:f8: d9:69:3b:d0:0f:87:a1:6f:48:fd:e8:8d:d0:8d:07: f9:d2:75:67:a1:f5:d1:60:63:0c:85:84:40:bc:e7: 34:8b:18:f3:f9:f3:e0:2f:dc:6f:e3:fd:81:75:52: 1e:aa:ca:2c:d2:2c:99:76:9f:6a:eb:26:9f:27:b8: 58:f5:63:61:95:41:d9:4f:45:a2:f7:87:ea:e6:96: da:fa:8e:c4:06:84:45:cc:91:ea:11:83:94:a6:35: fc:57:64:38:22:1a:8c:dd:5c:f3:a1:88:42:19:99: 71:83:cc:52:72:7e:4f:a9:78:75:a1:3c:b0:7f:a7: cd:4d:58:fc:b5:17:85:65:f5:2d:a6:1e:58:fd:c6: a1:f4:2d:8f:56:51:39:de:ce:1a:13:fc:05:c7:93: 6c:bf:80:c1:6f:d8:6f:08:bc:45:5b:ab:d7:3f:bf: e0:29:cb:b5:90:b2:e3:da:4a:52:c0:b6:d8:61:47: 3a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:AB:03:CE:07:E8:96:6B:BA:A7:1F:9F:AD:39:E6:5C:CA:D5:49 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:80:eb:a0:07:4c:e5:4e:98:1f:4d:a9:ad:be:7e:e5:1d:a4: d1:0d:07:fe:4c:c6:71:36:c2:58:3f:65:76:74:b4:1c:63:4f: af:b8:d8:ef:12:7f:35:65:22:48:88:ff:93:7e:d0:9c:81:d6: 0c:6a:75:f7:1d:15:87:0d:f7:e2:f5:a9:a1:b4:f4:e4:e6:d7: 56:1e:81:c6:d0:8c:e3:09:e6:f2:f0:5f:96:97:51:6c:1b:f5: aa:19:63:93:ef:64:4a:70:bc:e4:67:5c:cd:9c:a8:2c:a8:02: a8:43:0d:c3:c5:03:90:8b:48:5e:49:62:0d:53:53:74:cc:1b: 03:10:46:e5:99:ef:d6:f4:03:18:11:ae:0c:d4:cd:63:59:a6: 58:74:fa:a3:be:07:85:fc:06:d8:fa:de:df:4a:e1:ea:63:79: 60:9d:bf:47:6b:2f:6c:f5:10:8a:b8:5e:f9:27:37:66:5e:e8: f3:ca:0b:26:4b:ce:96:21:66:0d:1f:79:b3:80:e1:dd:9c:f8: 5f:28:24:99:8b:c3:fd:94:16:be:3d:30:5f:b0:1b:2e:c8:44: 06:91:1e:9e:5d:f7:d3:75:2c:e9:24:ef:ea:ad:0f:f3:48:5c: c4:1d:28:8c:59:30:15:ed:b7:c9:a8:fe:61:5e:46:33:07:64: 21:20:11:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhCDD3n+ha/V7utt3GjfVhI5rQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNjA0MTUxNzQ3MTRaFw0yNjA0MTkwNDAzMTRaMDMxMTAvBgNV BAMTKEFEMkVBQjAzQ0UwN0U4OTY2QkJBQTcxRjlGQUQzOUU2NUNDQUQ1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A7Lu1ziuaLdtnMfKZe3vXO3E CyUN81jPxDK4BPsMC1YJvX66bDGMOBr1asDbnyR44O1awvtaKuK6wmTFPyc4cZiA 8U1TAq7A+NlpO9APh6FvSP3ojdCNB/nSdWeh9dFgYwyFhEC85zSLGPP58+Av3G/j /YF1Uh6qyizSLJl2n2rrJp8nuFj1Y2GVQdlPRaL3h+rmltr6jsQGhEXMkeoRg5Sm NfxXZDgiGozdXPOhiEIZmXGDzFJyfk+peHWhPLB/p81NWPy1F4Vl9S2mHlj9xqH0 LY9WUTnezhoT/AXHk2y/gMFv2G8IvEVbq9c/v+Apy7WQsuPaSlLAtthhRzrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrS6rA84H6JZruqcfn6055lzK1UkwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+A66AHTOVOmB9Nqa2+fuUdpNENB/5MxnE2 wlg/ZXZ0tBxjT6+42O8SfzVlIkiI/5N+0JyB1gxqdfcdFYcN9+L1qaG09OTm11Ye gcbQjOMJ5vLwX5aXUWwb9aoZY5PvZEpwvORnXM2cqCyoAqhDDcPFA5CLSF5JYg1T U3TMGwMQRuWZ79b0AxgRrgzUzWNZplh0+qO+B4X8Btj63t9K4epjeWCdv0drL2z1 EIq4XvknN2Ze6PPKCyZLzpYhZg0febOA4d2c+F8oJJmLw/2UFr49MF+wGy7IRAaR Hp5d99N1LOkk7+qtD/NIXMQdKIxZMBXtt8mo/mFeRjMHZCEgEbo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:12 2026 by rpki-client