$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: 74XYrJUlGlVsSVS7uzF5uRu1nze8vPAbCQLz1tEtoBg= Subject key identifier: AA:08:34:AE:0C:EB:7B:C9:82:CA:F9:11:D5:1B:CC:A6:86:13:03:9D Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 1229BB9A26275C0563B82426CCBCD63D7ED2D8A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 0119 Signing time: Thu 16 Apr 2026 20:50:00 +0000 Manifest this update: Thu 16 Apr 2026 20:45:00 +0000 Manifest next update: Mon 20 Apr 2026 00:49:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: e0nCVcLf0ztGUV8nAdg68HyAou1tw8AbVnsSjowFMu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:bb:9a:26:27:5c:05:63:b8:24:26:cc:bc:d6:3d:7e:d2:d8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Apr 16 20:45:00 2026 GMT Not After : Apr 20 00:49:00 2026 GMT Subject: CN=AA0834AE0CEB7BC982CAF911D51BCCA68613039D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:bd:90:c0:08:d9:c4:ba:34:fc:86:b8:a5: f0:2c:92:ab:27:d3:cd:e4:0f:a5:65:39:0e:e4:0a: bd:ea:84:2c:c6:41:6d:73:c5:51:71:f8:4b:0d:8e: 56:73:80:69:92:08:52:5e:5b:98:92:a9:27:00:88: 81:20:2d:86:b2:40:7a:ab:6c:fb:ba:e9:49:1d:a4: 47:d7:42:c2:44:5b:67:6d:6d:a4:35:de:b0:ed:97: b5:17:9e:dc:45:45:97:18:14:fc:08:bc:8a:cc:f1: 0a:d2:54:54:ea:bd:1c:16:1b:2e:86:13:d0:8a:34: fa:f5:5c:1b:42:6f:f5:c5:43:f9:11:b8:ac:79:27: 6c:c4:69:88:db:bf:95:92:2a:28:6c:93:64:8b:dd: 8e:0c:68:1f:b7:76:d7:77:5d:08:55:ed:39:c6:9d: bb:ce:b3:e2:bf:3c:71:31:3b:a8:87:c6:b0:d9:c4: d6:7a:48:65:a3:9a:7d:d1:39:c0:6d:de:40:3a:9b: ce:02:12:99:74:32:38:4e:df:50:5b:62:de:1b:ea: dd:0f:92:d7:e6:77:9b:99:82:42:0c:07:a7:98:31: 9a:72:ae:40:a0:dd:8f:d2:5f:ad:9a:43:55:dd:72: 6b:c4:cc:9f:e1:fd:1d:99:d0:b0:8a:cc:2c:f3:0a: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:34:AE:0C:EB:7B:C9:82:CA:F9:11:D5:1B:CC:A6:86:13:03:9D X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:94:95:08:60:ee:4f:64:bb:1c:3a:1c:dd:d7:c9:98:ef:89: f3:34:d0:f8:85:7d:8e:96:ae:d0:c3:77:e1:5b:43:17:3f:2e: 11:89:bb:ec:6b:dd:18:2c:5f:37:9d:bb:9b:4c:85:a7:9b:c0: c8:40:f7:1c:40:a1:da:de:d7:46:b5:e9:ce:85:66:28:3c:ed: 2f:59:58:a5:fb:1e:54:1b:48:ed:44:bb:e8:67:25:b5:d2:cc: 6d:e7:02:04:65:7c:84:a6:ba:bb:64:af:5d:1f:ab:de:46:4c: 9d:42:26:93:f2:d6:5a:71:be:9c:01:18:ef:90:f1:9f:40:d8: 4a:de:32:1a:6c:d4:94:34:a2:01:68:79:7c:ae:70:34:68:dc: 90:59:0f:06:fa:1f:44:57:97:a0:a4:e4:df:c7:c6:d1:3c:36: 0a:39:e2:14:4e:02:f3:31:a1:12:ac:31:b6:d9:3d:e4:02:5e: cb:fe:30:de:83:8a:e7:e0:cb:e8:cb:bd:bd:3d:30:6d:e4:59: 42:7a:ec:5d:dc:a8:af:f2:f2:78:c8:65:67:ff:90:21:ce:3e: 38:4d:82:9f:1f:ae:84:cb:37:5e:f8:94:bc:3c:50:4c:44:95: 44:1d:96:85:20:79:cc:c3:2a:e8:29:41:88:ae:1d:98:ff:95: bc:a3:66:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEim7miYnXAVjuCQmzLzWPX7S2KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNjA0MTYyMDQ1MDBaFw0yNjA0MjAwMDQ5MDBaMDMxMTAvBgNV BAMTKEFBMDgzNEFFMENFQjdCQzk4MkNBRjkxMUQ1MUJDQ0E2ODYxMzAzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Cb2QwAjZxLo0/Ia4pfAskqsn 083kD6VlOQ7kCr3qhCzGQW1zxVFx+EsNjlZzgGmSCFJeW5iSqScAiIEgLYayQHqr bPu66UkdpEfXQsJEW2dtbaQ13rDtl7UXntxFRZcYFPwIvIrM8QrSVFTqvRwWGy6G E9CKNPr1XBtCb/XFQ/kRuKx5J2zEaYjbv5WSKihsk2SL3Y4MaB+3dtd3XQhV7TnG nbvOs+K/PHExO6iHxrDZxNZ6SGWjmn3ROcBt3kA6m84CEpl0MjhO31BbYt4b6t0P ktfmd5uZgkIMB6eYMZpyrkCg3Y/SX62aQ1XdcmvEzJ/h/R2Z0LCKzCzzCoSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgg0rgzre8mCyvkR1RvMpoYTA50wHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOUlQhg7k9kuxw6HN3XyZjvifM00PiFfY6W rtDDd+FbQxc/LhGJu+xr3RgsXzedu5tMhaebwMhA9xxAodre10a16c6FZig87S9Z WKX7HlQbSO1Eu+hnJbXSzG3nAgRlfISmurtkr10fq95GTJ1CJpPy1lpxvpwBGO+Q 8Z9A2EreMhps1JQ0ogFoeXyucDRo3JBZDwb6H0RXl6Ck5N/HxtE8Ngo54hROAvMx oRKsMbbZPeQCXsv+MN6Diufgy+jLvb09MG3kWUJ67F3cqK/y8njIZWf/kCHOPjhN gp8froTLN174lLw8UExElUQdloUgeczDKugpQYiuHZj/lbyjZm4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:37 2026 by rpki-client