$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: 16dUtc5N6NQQkyrje2xzUCuFHEdJrSlRyNNIg7q8VPg= Subject key identifier: 78:19:61:51:B3:A1:B1:33:8E:63:B0:47:19:9D:01:D0:6A:99:5E:4B Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 26F7CE8CC914AD3E004829E20CE06023F26E9C3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 0146 Signing time: Fri 17 Apr 2026 18:22:26 +0000 Manifest this update: Fri 17 Apr 2026 18:17:26 +0000 Manifest next update: Tue 21 Apr 2026 04:22:26 +0000 Files and hashes: 1: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: NJkqDR9HQ7LfoZbjRuIQJFuNSuzxghvk0tFp0SWuT4k=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: IyPHx8aV4XIvWehNSAX5HTGcu8KRFs0fdi9byvOJbdI=) 3: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: fD+JsAF5IMBZc8QZtWqpSCsBTsofz/k3tLOOnt504Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f7:ce:8c:c9:14:ad:3e:00:48:29:e2:0c:e0:60:23:f2:6e:9c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Apr 17 18:17:26 2026 GMT Not After : Apr 21 04:22:26 2026 GMT Subject: CN=78196151B3A1B1338E63B047199D01D06A995E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b5:aa:cf:b1:8f:1b:0e:65:2a:9e:7a:0e:6e: fa:65:0a:d1:4d:3d:45:f3:da:6e:47:c8:93:c3:57: e3:d1:17:2c:2b:e8:48:fc:81:a6:69:77:61:ad:30: 04:12:8b:3d:48:a6:57:80:c6:31:70:ce:ff:3f:52: 88:79:76:01:2d:01:a6:bb:bc:93:f8:15:a6:1d:f4: 56:7a:f8:eb:3c:3c:0b:1a:d9:85:14:6a:56:c6:ab: 8b:3d:a2:69:6a:4f:1a:cb:02:82:df:a1:c8:97:85: 97:6d:2e:10:3e:e6:81:86:87:69:58:d6:13:62:37: 37:7e:bb:55:be:b8:f8:b0:b0:5f:b3:1a:77:6f:15: 96:23:0c:99:cb:ed:e4:d1:1d:9e:90:cc:4b:14:62: 8b:d9:c4:01:a2:13:15:fc:3b:8c:19:2b:13:16:bf: 5a:a6:cf:a0:e6:79:31:db:d1:85:83:8b:27:83:1c: 65:4a:d9:83:a4:3a:ac:50:ee:9d:8e:c8:16:c4:8a: 22:b8:4a:da:af:eb:7f:e8:00:0c:42:51:90:14:34: 45:43:14:d9:55:d6:1a:65:1f:c6:a4:15:c0:2e:56: 83:fd:b5:97:c8:40:91:12:3e:14:b8:f6:77:b5:15: e2:84:34:8b:74:0d:a4:37:b7:aa:9e:d6:79:39:ef: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:19:61:51:B3:A1:B1:33:8E:63:B0:47:19:9D:01:D0:6A:99:5E:4B X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0d:52:2d:46:17:54:c5:29:b5:3b:65:1d:d0:a7:8d:ac:91: 61:b0:91:cb:65:c5:97:b6:ba:dc:d7:08:fc:4b:6f:ab:58:d1: 54:3f:1a:70:39:f3:37:8e:30:d9:76:4f:af:ea:2e:59:f1:84: 0a:64:cf:ce:85:1b:50:38:0f:ce:3c:6c:c0:a7:6c:e1:5f:83: 59:b3:d6:8f:27:a6:3c:31:e1:b6:c2:06:20:52:97:78:d0:bc: e3:91:b7:72:41:42:21:eb:a4:0d:db:87:3a:04:c4:3b:af:0e: c8:99:88:4b:b0:18:25:14:45:d8:f6:ba:da:f9:0c:fa:37:af: 12:d1:6f:c2:57:ed:e2:94:57:9e:6b:1e:f0:6e:cf:19:d6:c7: 70:32:de:f5:88:42:48:97:42:ee:f6:e1:73:11:20:72:2a:87: 08:24:da:92:fb:20:8c:26:68:fb:12:2a:bc:3c:82:26:4a:17: 32:8a:e5:21:db:45:f1:ce:be:b1:00:62:08:c4:28:53:81:75: e6:7a:1c:cf:88:fa:62:23:a6:5d:7a:1d:9a:0e:6d:de:cf:70: da:45:1a:7a:44:d3:23:11:4b:aa:d8:c4:bb:04:13:ea:0c:a3: b2:9e:7b:a6:0a:21:f8:e6:37:2c:47:ee:ad:7d:e3:a9:85:a0: 4b:76:fc:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvfOjMkUrT4ASCniDOBgI/JunDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNjA0MTcxODE3MjZaFw0yNjA0MjEwNDIyMjZaMDMxMTAvBgNV BAMTKDc4MTk2MTUxQjNBMUIxMzM4RTYzQjA0NzE5OUQwMUQwNkE5OTVFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmtarPsY8bDmUqnnoObvplCtFN PUXz2m5HyJPDV+PRFywr6Ej8gaZpd2GtMAQSiz1IpleAxjFwzv8/Uoh5dgEtAaa7 vJP4FaYd9FZ6+Os8PAsa2YUUalbGq4s9omlqTxrLAoLfociXhZdtLhA+5oGGh2lY 1hNiNzd+u1W+uPiwsF+zGndvFZYjDJnL7eTRHZ6QzEsUYovZxAGiExX8O4wZKxMW v1qmz6DmeTHb0YWDiyeDHGVK2YOkOqxQ7p2OyBbEiiK4Stqv63/oAAxCUZAUNEVD FNlV1hplH8akFcAuVoP9tZfIQJESPhS49ne1FeKENIt0DaQ3t6qe1nk57yeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBlhUbOhsTOOY7BHGZ0B0GqZXkswHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcNUi1GF1TFKbU7ZR3Qp42skWGwkctlxZe2 utzXCPxLb6tY0VQ/GnA58zeOMNl2T6/qLlnxhApkz86FG1A4D848bMCnbOFfg1mz 1o8npjwx4bbCBiBSl3jQvOORt3JBQiHrpA3bhzoExDuvDsiZiEuwGCUURdj2utr5 DPo3rxLRb8JX7eKUV55rHvBuzxnWx3Ay3vWIQkiXQu724XMRIHIqhwgk2pL7IIwm aPsSKrw8giZKFzKK5SHbRfHOvrEAYgjEKFOBdeZ6HM+I+mIjpl16HZoObd7PcNpF GnpE0yMRS6rYxLsEE+oMo7Kee6YKIfjmNyxH7q1946mFoEt2/Hs= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:49 2026 by rpki-client