$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: al9BI54UAUenrmiKiduUosL/YkA5J5VeMprBiayZ4+M= Subject key identifier: C4:F9:A3:5D:16:38:08:37:84:0F:FC:CF:D3:96:BD:96:7B:7A:A6:2C Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 258F921CCAE687496F949A4D8D391A7230D592C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 0588 Signing time: Fri 17 Apr 2026 07:42:19 +0000 Manifest this update: Fri 17 Apr 2026 07:37:19 +0000 Manifest next update: Mon 20 Apr 2026 13:14:19 +0000 Files and hashes: 1: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: z3iW77g/ONC409qXyLvfTjxbOYVOUzAQ0lCwbGi3LDY=) 2: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: XFEPxT5rgKneUguYZI7iHSi0r6woQzAHzM7M2WIoeNI=) 3: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: 6q6G3WlaBoWOxOrDz9l3FTN6AH7AT8Eijh6MTkRhXls=) 4: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: UcZisdRV6VpbDwvpN9+PovvAC3nXLEWnKVwQNbh4YQE=) 5: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: U/6aanmiS3G1NNN9piNHjwZVd8g8y5TJEUDFQPXUGlk=) 6: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: EADkNzeGnGCmwQU5JKqfE+M8ZMnucERvk9U//gfvfYM=) 7: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=) 8: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: XaCxNhVFk1U1KTVB2CbYanrzfxuEtPcg5wcygy4gOYY=) 9: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: W0KpE+rUhEn171HevcbczmdRBRinyTjaRQYX3+eLx8w=) 10: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: +seHZcuWtkwwgdY5gf9yiLnl5NtpTzkJHA183uWwsjQ=) 11: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: gXLN3MXkJce/eFsTQ9PNYvadHko8wdBPO3cRtiaDQ0I=) 12: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: /z09OiRj3X3jdpAzL2zzsyQl3NVUfWX0DmTJAQJUjoA=) 13: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: aI1tvHYppd3YXyR/O37hfeObUgos+GLtu2SX+nqPoQU=) 14: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: G9QQEUF/JEpvuMiEFjI454QFIL6ErRBbxzNtJBadEKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8f:92:1c:ca:e6:87:49:6f:94:9a:4d:8d:39:1a:72:30:d5:92:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Apr 17 07:37:19 2026 GMT Not After : Apr 20 13:14:19 2026 GMT Subject: CN=C4F9A35D16380837840FFCCFD396BD967B7AA62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:a6:89:3a:28:aa:73:54:5a:5d:be:9e:c1: 88:08:d2:0a:60:df:46:1a:bc:35:21:68:72:c1:ab: 50:cf:66:08:79:63:ec:a8:9e:b6:b9:79:26:1c:a1: 91:82:cc:85:2a:ab:7f:80:4f:3c:28:07:0c:5a:d4: d5:06:7e:7b:67:97:6e:39:c4:c3:b6:7f:74:ae:0b: 83:71:5c:3d:8a:3c:a3:07:3c:31:6c:42:c4:5a:53: 46:cb:86:3b:5b:72:04:47:2e:a3:26:a3:e5:51:78: a6:1c:cf:6d:3b:66:1e:70:52:5a:29:a0:e2:fb:39: 14:a8:c3:5c:0c:61:7e:fe:0d:4f:fb:e4:5a:9e:ec: 10:19:ee:46:30:26:c6:a5:4c:bf:a2:de:6a:09:4e: c6:88:ca:03:05:17:be:9b:77:b5:ad:1f:80:cc:e1: 38:db:87:9b:04:6a:d5:dd:5f:21:85:2b:14:e1:e1: 90:00:12:9f:fd:c8:87:12:61:fc:8f:80:bc:cf:05: de:00:59:4b:67:1e:ba:b0:6e:47:90:c4:cb:b8:f6: ec:8d:6f:cd:81:bb:7d:cc:a8:d6:7c:f7:27:23:53: ed:b5:c5:42:17:3d:89:fd:25:b4:52:d0:f2:38:c0: ad:8e:27:fb:e1:77:03:c9:f9:c0:50:ad:bd:55:1f: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:A3:5D:16:38:08:37:84:0F:FC:CF:D3:96:BD:96:7B:7A:A6:2C X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9f:84:b2:85:8c:8b:47:ea:44:22:9f:48:78:11:96:8f:b9: db:ef:72:a3:d3:52:b5:c7:ea:ce:09:b3:b3:39:0d:56:67:4f: ab:d5:d5:39:e4:d7:a8:82:91:3f:02:6b:f2:f9:03:ef:e4:1a: 72:7a:1d:a4:d2:0a:f9:b4:4c:20:c6:aa:5f:a2:7a:d3:aa:c6: 04:ea:d9:5a:60:88:3a:cb:1d:5f:35:29:07:1d:da:dc:59:0a: 96:7b:e6:2d:6a:19:10:bf:29:94:64:8e:00:66:5e:65:5e:fc: 1a:19:ca:47:ff:49:e5:2f:b4:7e:d5:88:85:2d:a6:40:92:92: 82:da:c2:b9:18:a1:cd:96:f5:b0:c4:7c:a6:cd:b1:1c:43:d4: 4f:5e:d1:df:22:38:e8:0a:48:f2:62:e4:2c:96:22:b7:4d:56: 1c:34:5a:42:39:70:ab:f2:0a:1e:87:d4:5a:d4:4a:72:a5:2f: 5d:d7:3f:3b:e6:f9:b1:9a:57:98:d2:2a:62:81:d2:3d:ed:76: 7f:48:5b:c0:fb:a7:71:01:e5:be:0d:b7:ab:42:77:f0:da:0f: 63:d6:71:ad:45:5d:ef:2a:1b:21:a6:8a:ca:69:5f:fa:8c:68: c7:f2:37:45:94:09:7b:04:9f:c3:e0:ba:42:bd:20:4d:24:f8: 3d:f3:ab:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJY+SHMrmh0lvlJpNjTkacjDVkskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjA0MTcwNzM3MTlaFw0yNjA0MjAxMzE0MTlaMDMxMTAvBgNV BAMTKEM0RjlBMzVEMTYzODA4Mzc4NDBGRkNDRkQzOTZCRDk2N0I3QUE2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlYKaJOiiqc1RaXb6ewYgI0gpg 30YavDUhaHLBq1DPZgh5Y+yonra5eSYcoZGCzIUqq3+ATzwoBwxa1NUGfntnl245 xMO2f3SuC4NxXD2KPKMHPDFsQsRaU0bLhjtbcgRHLqMmo+VReKYcz207Zh5wUlop oOL7ORSow1wMYX7+DU/75Fqe7BAZ7kYwJsalTL+i3moJTsaIygMFF76bd7WtH4DM 4Tjbh5sEatXdXyGFKxTh4ZAAEp/9yIcSYfyPgLzPBd4AWUtnHrqwbkeQxMu49uyN b82Bu33MqNZ89ycjU+21xUIXPYn9JbRS0PI4wK2OJ/vhdwPJ+cBQrb1VHxYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPmjXRY4CDeED/zP05a9lnt6piwwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKifhLKFjItH6kQin0h4EZaPudvvcqPTUrXH 6s4Js7M5DVZnT6vV1Tnk16iCkT8Ca/L5A+/kGnJ6HaTSCvm0TCDGql+ietOqxgTq 2VpgiDrLHV81KQcd2txZCpZ75i1qGRC/KZRkjgBmXmVe/BoZykf/SeUvtH7ViIUt pkCSkoLawrkYoc2W9bDEfKbNsRxD1E9e0d8iOOgKSPJi5CyWIrdNVhw0WkI5cKvy Ch6H1FrUSnKlL13XPzvm+bGaV5jSKmKB0j3tdn9IW8D7p3EB5b4Nt6tCd/DaD2PW ca1FXe8qGyGmisppX/qMaMfyN0WUCXsEn8PgukK9IE0k+D3zq1E= -----END CERTIFICATE-----Generated at Fri Apr 17 15:15:45 2026 by rpki-client