$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: VJsmxabsUQv4VRAGAiKleuTqbP+ZXfPXjV4fX3tT8nM= Subject key identifier: 00:5A:FC:66:A6:92:2D:3D:78:5D:AC:13:D2:0A:6C:9D:81:1C:3D:A3 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 63984C5A9286C4F8D4DB0FE446E565F5C6F0686A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: E9 Signing time: Wed 15 Apr 2026 06:02:41 +0000 Manifest this update: Wed 15 Apr 2026 05:57:41 +0000 Manifest next update: Sat 18 Apr 2026 15:09:41 +0000 Files and hashes: 1: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: fXqdIyL9Jsha4yoo5dAqFp03iOzFBzcN7dQV/WWnzJo=) 2: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 3: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) 4: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:4c:5a:92:86:c4:f8:d4:db:0f:e4:46:e5:65:f5:c6:f0:68:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Apr 15 05:57:41 2026 GMT Not After : Apr 18 15:09:41 2026 GMT Subject: CN=005AFC66A6922D3D785DAC13D20A6C9D811C3DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:67:36:f0:db:15:a8:d0:db:f6:c1:87:c7: d4:df:b1:b8:18:64:2a:65:a1:57:ef:06:3a:ba:22: 1d:10:18:09:f8:71:aa:8e:17:51:1f:06:0a:4a:48: 2d:09:df:a2:34:db:60:d5:85:5a:ad:ab:60:01:77: 83:17:3b:33:4c:95:ad:9b:3b:a5:bb:36:b7:99:6a: 35:1c:11:aa:9e:1f:cd:2f:9b:0c:3c:90:d7:97:2f: 13:92:98:e5:07:44:95:6e:a3:95:f7:75:90:51:5a: 37:40:5f:6e:df:7d:b6:a2:79:d5:03:e7:91:74:b0: bd:94:5b:74:3c:20:2f:b7:98:2c:4f:4e:38:3c:3d: 87:7f:f0:50:b8:78:b6:bd:87:94:c6:5d:37:c3:f8: 3b:ac:fd:66:0f:34:a4:15:06:e1:46:91:61:0f:b7: d1:a8:87:e0:67:60:a8:45:8e:0e:b9:ec:9b:2c:42: cd:0c:d1:f7:65:3e:40:01:d4:a6:84:82:c9:f7:4a: 2f:81:6a:da:9b:18:35:c0:d1:d0:50:0c:43:8e:4e: 1c:be:65:9e:44:45:a9:19:07:bd:05:4a:e2:f1:b1: c8:ba:f1:e6:73:56:f7:dd:c2:38:e2:63:c2:23:b3: 6c:9d:70:d4:6c:9f:3f:0b:93:ac:e5:32:6a:52:45: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:FC:66:A6:92:2D:3D:78:5D:AC:13:D2:0A:6C:9D:81:1C:3D:A3 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2b:4f:a8:90:5d:fa:84:89:3f:4e:7a:55:4b:3d:87:40:42: 0c:07:75:1f:f6:c4:93:bd:6f:06:e0:9b:d1:09:b4:6f:ee:2d: e1:3c:8c:ca:69:98:1b:9b:75:17:ec:aa:0f:6a:0d:ad:dc:cc: 30:2f:da:fa:89:c6:f4:52:15:98:1d:48:a1:34:31:cd:de:e1: ac:47:8b:f9:8e:b2:a0:7d:a8:97:fc:51:98:fd:53:ca:f3:a8: d7:50:20:37:f8:16:af:e5:c5:f5:7a:7f:8b:e6:c8:bf:05:72: 78:aa:c0:6a:f8:66:40:f8:91:25:2c:fb:59:cf:2e:f7:f2:fe: aa:8d:7c:19:b0:79:31:e0:9f:ab:a4:d0:7a:40:99:be:cb:9e: 4e:db:b5:08:be:b4:4a:d3:f4:6d:a5:50:94:92:36:cc:bd:39: ef:a6:de:87:c2:9e:03:4f:d4:89:73:20:f7:94:13:92:0d:16: 54:9a:67:10:ec:78:2b:6d:0f:a3:7e:17:80:88:a3:be:35:cf: 78:76:ca:64:68:1a:57:79:42:f1:f3:ec:01:2b:39:ad:57:ea: a4:52:fa:65:89:fe:bf:6f:13:71:e1:ce:2a:1c:e1:53:dc:9e: d2:9c:f2:4c:b9:d8:8f:ad:e9:ae:b7:7f:fe:d2:44:03:be:e3: d5:e2:7f:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5hMWpKGxPjU2w/kRuVl9cbwaGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNjA0MTUwNTU3NDFaFw0yNjA0MTgxNTA5NDFaMDMxMTAvBgNV BAMTKDAwNUFGQzY2QTY5MjJEM0Q3ODVEQUMxM0QyMEE2QzlEODExQzNEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92Gc28NsVqNDb9sGHx9TfsbgY ZCploVfvBjq6Ih0QGAn4caqOF1EfBgpKSC0J36I022DVhVqtq2ABd4MXOzNMla2b O6W7NreZajUcEaqeH80vmww8kNeXLxOSmOUHRJVuo5X3dZBRWjdAX27ffbaiedUD 55F0sL2UW3Q8IC+3mCxPTjg8PYd/8FC4eLa9h5TGXTfD+Dus/WYPNKQVBuFGkWEP t9Goh+BnYKhFjg657JssQs0M0fdlPkAB1KaEgsn3Si+BatqbGDXA0dBQDEOOThy+ ZZ5ERakZB70FSuLxsci68eZzVvfdwjjiY8Ijs2ydcNRsnz8Lk6zlMmpSRX8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAFr8ZqaSLT14XawT0gpsnYEcPaMwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIrT6iQXfqEiT9OelVLPYdAQgwHdR/2xJO9 bwbgm9EJtG/uLeE8jMppmBubdRfsqg9qDa3czDAv2vqJxvRSFZgdSKE0Mc3e4axH i/mOsqB9qJf8UZj9U8rzqNdQIDf4Fq/lxfV6f4vmyL8FcniqwGr4ZkD4kSUs+1nP Lvfy/qqNfBmweTHgn6uk0HpAmb7Lnk7btQi+tErT9G2lUJSSNsy9Oe+m3ofCngNP 1IlzIPeUE5INFlSaZxDseCttD6N+F4CIo741z3h2ymRoGld5QvHz7AErOa1X6qRS +mWJ/r9vE3Hhzioc4VPcntKc8ky52I+t6a63f/7SRAO+49Xif2U= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:17 2026 by rpki-client