$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: glgm1XYPSYYrvHKXGYrupVd8cCfdtMc0a+JIcohmFAc= Subject key identifier: AB:76:E5:93:65:4B:B5:A5:7B:9D:8E:FA:3A:6F:13:79:2C:ED:C3:11 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 18F4C617FA9E10C300463B8B1B85273FAF317566 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 9F Signing time: Thu 16 Apr 2026 12:32:09 +0000 Manifest this update: Thu 16 Apr 2026 12:27:09 +0000 Manifest next update: Sun 19 Apr 2026 20:39:09 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: Os8vsU+/VKyhTkpnzrGeGcPnuWFFmfYZOu9lC7Wna4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f4:c6:17:fa:9e:10:c3:00:46:3b:8b:1b:85:27:3f:af:31:75:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Apr 16 12:27:09 2026 GMT Not After : Apr 19 20:39:09 2026 GMT Subject: CN=AB76E593654BB5A57B9D8EFA3A6F13792CEDC311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:7a:2a:de:d2:c5:ed:98:2d:b5:bf:1e:7f: b2:7f:51:c0:20:76:84:d7:bd:eb:ba:80:a4:0e:4a: d7:1a:2d:f3:5a:17:24:a2:d9:b0:2d:09:fd:c0:02: cb:c2:24:f6:3e:c7:8c:27:0d:28:b6:af:d2:6d:e4: 81:ec:00:30:6d:7d:a4:80:a0:8f:ad:98:d6:b3:80: 28:d4:be:2e:58:7a:d0:3a:17:ab:75:28:cf:0e:87: 84:26:d1:64:57:1d:9d:07:3f:c4:dc:25:0a:fa:5d: 87:13:a5:02:54:04:0f:0a:b5:8d:77:98:5e:57:77: 71:75:65:74:a7:d4:86:8e:96:78:e7:63:7d:e1:c8: e1:fe:dc:06:6d:21:33:3e:68:c0:45:ab:15:cf:57: 10:52:5f:b5:8e:de:6b:33:20:cd:62:51:c8:5b:60: 0d:96:b1:ea:ca:b4:5f:1e:ce:4c:47:98:c9:5a:26: bf:84:3c:b4:2c:20:89:69:a8:9a:dc:bb:89:d4:39: 85:6c:8c:c3:12:98:8e:46:86:36:92:0c:82:82:fd: 7b:60:1d:7c:f2:18:6e:b7:65:e9:97:2f:4f:8d:c0: 4f:8c:c2:6b:fd:03:e6:75:db:b5:3a:e0:7c:fd:b1: cf:96:21:cf:2b:c7:65:e1:f0:29:82:ee:5e:8d:dc: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:E5:93:65:4B:B5:A5:7B:9D:8E:FA:3A:6F:13:79:2C:ED:C3:11 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ee:1e:11:04:72:77:1d:2b:ff:d7:c7:64:c0:55:e1:7c:e5: c3:4d:a9:5a:a5:a1:0e:7c:d3:7c:a0:b8:ea:9e:94:26:68:a7: e3:06:8b:21:85:be:b1:61:88:ab:7b:d2:9f:33:dc:ce:31:69: a3:08:f6:10:1e:56:26:da:a6:b8:68:c8:dd:03:d3:49:35:7a: 64:dc:f1:ae:be:c6:47:2a:3a:e8:d6:e6:67:75:8b:f4:18:a4: 9d:47:9a:bd:10:e6:67:6b:99:7a:d5:95:95:d5:ac:1f:a8:76: 30:ae:f0:35:e2:33:6a:5e:03:a1:e7:62:65:3b:9a:9a:52:f8: 08:a6:79:a5:8b:54:e3:d0:cd:18:e8:48:70:03:84:b7:fe:ca: b2:c5:50:25:2d:b5:b5:d8:c6:6a:3c:c8:1a:9b:e0:b6:16:fe: f8:a2:c9:0e:67:16:56:09:e9:6c:48:b3:ad:6b:9a:75:76:e5: 1b:91:ee:3d:31:46:ee:d6:2e:5a:26:b4:d9:83:fe:09:df:58: ab:fe:c3:03:9e:a2:30:b0:5b:59:b5:14:64:de:4d:4c:4b:95: 7a:ed:f7:10:d1:25:9e:ff:75:45:e6:be:31:2c:06:02:8c:07: a2:e5:59:4a:54:b3:b1:de:ef:34:ef:a4:e0:d8:b4:47:81:1b: b4:9d:f1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPTGF/qeEMMARjuLG4UnP68xdWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNjA0MTYxMjI3MDlaFw0yNjA0MTkyMDM5MDlaMDMxMTAvBgNV BAMTKEFCNzZFNTkzNjU0QkI1QTU3QjlEOEVGQTNBNkYxMzc5MkNFREMzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49noq3tLF7Zgttb8ef7J/UcAg doTXveu6gKQOStcaLfNaFySi2bAtCf3AAsvCJPY+x4wnDSi2r9Jt5IHsADBtfaSA oI+tmNazgCjUvi5YetA6F6t1KM8Oh4Qm0WRXHZ0HP8TcJQr6XYcTpQJUBA8KtY13 mF5Xd3F1ZXSn1IaOlnjnY33hyOH+3AZtITM+aMBFqxXPVxBSX7WO3mszIM1iUchb YA2WserKtF8ezkxHmMlaJr+EPLQsIIlpqJrcu4nUOYVsjMMSmI5GhjaSDIKC/Xtg HXzyGG63ZemXL0+NwE+Mwmv9A+Z127U64Hz9sc+WIc8rx2Xh8CmC7l6N3AKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3blk2VLtaV7nY76Om8TeSztwxEwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIruHhEEcncdK//Xx2TAVeF85cNNqVqloQ58 03yguOqelCZop+MGiyGFvrFhiKt70p8z3M4xaaMI9hAeVibaprhoyN0D00k1emTc 8a6+xkcqOujW5md1i/QYpJ1Hmr0Q5mdrmXrVlZXVrB+odjCu8DXiM2peA6HnYmU7 mppS+AimeaWLVOPQzRjoSHADhLf+yrLFUCUttbXYxmo8yBqb4LYW/viiyQ5nFlYJ 6WxIs61rmnV25RuR7j0xRu7WLlomtNmD/gnfWKv+wwOeojCwW1m1FGTeTUxLlXrt 9xDRJZ7/dUXmvjEsBgKMB6LlWUpUs7He7zTvpODYtEeBG7Sd8eU= -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:00 2026 by rpki-client