$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: 3j0jM0lP9a82VAVd5SuGVAoQkS/wdd9Gtatd/cmDTYM= Subject key identifier: 1D:1D:73:AF:C6:C7:24:C1:C7:9C:74:4E:30:8B:56:0E:75:64:03:A2 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 6497C8C387E245529DD827133F68478438E84923 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 02C5 Signing time: Sat 18 Apr 2026 06:11:54 +0000 Manifest this update: Sat 18 Apr 2026 06:06:54 +0000 Manifest next update: Tue 21 Apr 2026 06:40:54 +0000 Files and hashes: 1: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 4: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: Go3z26lofAS0a+SJnzVaM1eCECl7hm7QlcvKZwkdjDQ=) 5: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:97:c8:c3:87:e2:45:52:9d:d8:27:13:3f:68:47:84:38:e8:49:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Apr 18 06:06:54 2026 GMT Not After : Apr 21 06:40:54 2026 GMT Subject: CN=1D1D73AFC6C724C1C79C744E308B560E756403A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:f5:d1:91:52:f7:80:cd:d6:5c:bf:80:74: 98:14:d6:40:b8:51:88:fe:59:17:92:6e:7f:1b:4a: 26:ce:b6:2a:93:23:cb:e5:ed:c3:89:46:4a:ef:b2: f4:08:7a:c0:0a:a4:9c:ac:7e:40:ca:16:ec:6b:d6: 4e:61:4b:e7:eb:5a:22:00:b8:76:67:69:39:31:4c: c4:44:68:3e:e1:11:0e:5f:a6:0b:7a:68:36:17:24: 3e:6f:fd:0a:d4:7d:95:9b:a1:c6:a9:42:18:8b:7d: c7:27:16:db:06:82:e6:80:69:ea:4b:87:fd:b8:ec: a1:f9:bf:87:e3:ae:f1:26:e3:83:03:60:6f:e6:a5: ae:f9:e3:bb:ed:0e:b9:cc:5c:4e:c9:2b:4d:c6:c6: 9a:d9:ff:33:7e:56:fe:aa:44:08:9d:72:1e:d8:99: 44:e4:03:d5:4c:6c:3f:54:77:b1:1c:e1:42:fd:5c: d6:37:d3:8b:33:f6:27:66:e2:ba:55:be:97:58:57: ea:86:3c:62:d2:35:63:12:2e:50:e0:2f:ec:45:cc: ba:08:69:92:35:8c:26:e8:30:df:aa:dc:52:23:e9: 3c:2b:62:6c:12:9f:29:61:f8:c9:a9:01:1c:d5:0d: c3:d6:c8:b3:5d:b1:a5:8c:56:83:78:e8:91:bb:f3: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:73:AF:C6:C7:24:C1:C7:9C:74:4E:30:8B:56:0E:75:64:03:A2 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:98:74:7c:be:8c:3f:75:2d:ef:f2:1d:c7:12:61:b8:60:f9: c0:43:b3:b8:0a:60:7a:f7:97:8c:96:29:81:8a:3a:01:b6:0e: 23:05:a6:d6:8e:81:ae:cd:d9:b2:54:e7:04:b6:ae:9e:0b:66: 37:5a:63:ac:70:09:37:f3:cb:8f:ee:22:79:bc:1c:3a:a1:7c: f5:98:90:8c:a3:ab:a5:a2:4a:6c:d9:30:e2:db:05:d9:c0:b2: c9:38:7f:14:01:e7:cd:27:41:61:0c:04:64:75:0f:94:5d:8a: 1a:56:8e:e0:26:ec:03:24:7b:6c:0f:a5:1d:ee:41:3b:7a:8a: 72:e2:15:4c:0c:62:15:10:9c:17:b4:fc:9d:2b:27:47:31:df: 31:41:b1:f0:f1:01:2b:f9:a9:29:63:35:b8:92:f7:35:b0:df: 8d:22:9b:ef:e0:0b:40:18:83:1f:20:a2:e2:73:a6:bf:9d:d0: 01:aa:d2:d0:31:f9:ed:99:0d:95:a4:b3:81:1f:b1:46:d9:98: 8a:1c:47:d1:da:37:1c:9d:25:28:a8:73:fa:46:f7:c5:e8:fa: 93:d3:42:e6:65:e1:d6:92:48:c7:f4:5a:65:bc:0f:33:f2:af: 84:86:fa:26:0e:bf:a4:10:10:c0:21:7e:ab:1c:5f:61:6a:f6: 96:aa:9d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJfIw4fiRVKd2CcTP2hHhDjoSSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNjA0MTgwNjA2NTRaFw0yNjA0MjEwNjQwNTRaMDMxMTAvBgNV BAMTKDFEMUQ3M0FGQzZDNzI0QzFDNzlDNzQ0RTMwOEI1NjBFNzU2NDAzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ivXRkVL3gM3WXL+AdJgU1kC4 UYj+WReSbn8bSibOtiqTI8vl7cOJRkrvsvQIesAKpJysfkDKFuxr1k5hS+frWiIA uHZnaTkxTMREaD7hEQ5fpgt6aDYXJD5v/QrUfZWbocapQhiLfccnFtsGguaAaepL h/247KH5v4fjrvEm44MDYG/mpa7547vtDrnMXE7JK03GxprZ/zN+Vv6qRAidch7Y mUTkA9VMbD9Ud7Ec4UL9XNY304sz9idm4rpVvpdYV+qGPGLSNWMSLlDgL+xFzLoI aZI1jCboMN+q3FIj6TwrYmwSnylh+MmpARzVDcPWyLNdsaWMVoN46JG782ePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHR1zr8bHJMHHnHROMItWDnVkA6IwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWYdHy+jD91Le/yHccSYbhg+cBDs7gKYHr3 l4yWKYGKOgG2DiMFptaOga7N2bJU5wS2rp4LZjdaY6xwCTfzy4/uInm8HDqhfPWY kIyjq6WiSmzZMOLbBdnAssk4fxQB580nQWEMBGR1D5RdihpWjuAm7AMke2wPpR3u QTt6inLiFUwMYhUQnBe0/J0rJ0cx3zFBsfDxASv5qSljNbiS9zWw340im+/gC0AY gx8gouJzpr+d0AGq0tAx+e2ZDZWks4EfsUbZmIocR9HaNxydJSioc/pG98Xo+pPT QuZl4daSSMf0WmW8DzPyr4SG+iYOv6QQEMAhfqscX2Fq9paqnUk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:57 2026 by rpki-client