$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: 9U8Y2W1TQW7e5p9WpXjuqS4AFZOB25BPP6Pix9uwZ7U= Subject key identifier: 1C:91:ED:3D:F5:CE:39:0E:DF:D6:4C:C5:28:F9:F7:6F:84:14:E1:81 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 620E8758D8BE9972F147B7139CD4FBB58577FA39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 0119 Signing time: Sat 18 Apr 2026 04:32:51 +0000 Manifest this update: Sat 18 Apr 2026 04:27:51 +0000 Manifest next update: Tue 21 Apr 2026 07:45:51 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: viIMDthrb71zqv1fZqfsi9l1jzw0Csy97g9EKJWFEFg=) 2: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 3: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 4: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: GGAD4LvGlYdgNP9+29qheNrK1PBQRrpwT7C8oI+tuRM=) 5: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0e:87:58:d8:be:99:72:f1:47:b7:13:9c:d4:fb:b5:85:77:fa:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Apr 18 04:27:51 2026 GMT Not After : Apr 21 07:45:51 2026 GMT Subject: CN=1C91ED3DF5CE390EDFD64CC528F9F76F8414E181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:c0:f9:b1:18:d0:fc:ed:72:2c:10:40:d0: 68:09:0c:97:10:70:80:7f:77:6d:b9:38:fe:44:1c: 7d:8f:76:31:7b:7b:17:bb:de:2a:43:cc:36:b5:1b: f0:de:b6:58:1f:6e:99:42:69:eb:21:1b:57:e3:ff: f6:91:85:1c:8b:ed:78:41:6d:4c:b1:69:38:39:4c: f1:61:e7:45:ee:10:ed:99:08:73:cf:70:1b:1c:f8: 41:1d:4e:17:c9:e9:19:da:69:ac:fe:66:63:eb:70: f3:cf:a9:ea:26:fd:f6:dc:5a:25:b1:6d:5a:3f:6f: 5f:fc:df:94:e0:b1:b7:cd:2e:81:fb:64:5f:59:4a: 42:0f:3c:3a:c2:64:05:f9:79:ab:33:0d:d2:c1:29: fb:57:eb:63:eb:33:2c:87:4b:e2:75:05:1c:9e:8e: b1:59:9d:66:64:3a:83:14:a8:e7:9f:c2:32:2d:7b: 7f:44:42:0e:86:13:fc:0a:40:d5:67:7f:e9:79:c2: 0a:34:3d:01:87:c0:03:28:34:b3:6b:c2:07:08:5f: d2:df:31:d1:da:b6:80:99:33:2a:09:05:a5:e5:e8: 7e:8b:5c:03:f9:10:40:c9:c4:0d:80:8f:89:d3:c4: d2:b1:d9:78:71:75:2d:7b:7e:19:9f:99:8f:81:2c: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:91:ED:3D:F5:CE:39:0E:DF:D6:4C:C5:28:F9:F7:6F:84:14:E1:81 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:b6:de:43:7a:24:a6:8b:44:36:4e:35:e3:88:1f:b0:f9:0d: bd:cf:ba:55:22:b0:6e:c6:bf:da:d4:e1:90:67:47:d7:d3:73: 3b:a7:ba:20:81:8f:74:78:a7:3a:cf:45:70:cd:9e:be:89:f9: 7f:c3:40:99:c1:9b:a3:5a:a1:da:d4:18:9a:15:3c:c7:8f:aa: 44:de:04:ef:4f:41:c5:cc:18:68:5e:e0:da:b9:65:08:fc:db: 1b:14:7e:56:ae:f8:63:ca:94:38:45:21:49:87:73:b9:1e:ca: 4b:ea:58:46:d7:65:16:49:5c:39:15:b9:82:75:e2:ee:e7:91: a8:ef:cb:13:d0:9d:6d:5d:ac:05:95:7e:e4:35:64:ff:45:50: 90:39:9e:49:2a:d2:9b:f7:20:de:78:7f:69:80:65:cb:e2:8b: 73:0b:91:96:a8:ad:9d:e3:fe:fc:87:28:13:54:e1:1e:1e:92: eb:4f:9c:67:9b:b0:aa:d6:19:f4:ab:e4:41:cc:9b:97:56:63: e4:46:2e:88:e2:5c:99:ea:84:83:cc:ba:2f:97:8f:96:ef:4a: b3:bf:f5:1c:51:8f:bb:f6:b2:6b:b2:72:88:89:1e:fd:6a:60: a2:7c:f3:05:0d:e4:b8:de:cf:99:37:6a:1a:74:74:7b:64:f5: a4:18:01:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYg6HWNi+mXLxR7cTnNT7tYV3+jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNjA0MTgwNDI3NTFaFw0yNjA0MjEwNzQ1NTFaMDMxMTAvBgNV BAMTKDFDOTFFRDNERjVDRTM5MEVERkQ2NENDNTI4RjlGNzZGODQxNEUxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYwsD5sRjQ/O1yLBBA0GgJDJcQ cIB/d225OP5EHH2PdjF7exe73ipDzDa1G/DetlgfbplCaeshG1fj//aRhRyL7XhB bUyxaTg5TPFh50XuEO2ZCHPPcBsc+EEdThfJ6Rnaaaz+ZmPrcPPPqeom/fbcWiWx bVo/b1/835TgsbfNLoH7ZF9ZSkIPPDrCZAX5easzDdLBKftX62PrMyyHS+J1BRye jrFZnWZkOoMUqOefwjIte39EQg6GE/wKQNVnf+l5wgo0PQGHwAMoNLNrwgcIX9Lf MdHatoCZMyoJBaXl6H6LXAP5EEDJxA2Aj4nTxNKx2XhxdS17fhmfmY+BLNApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHJHtPfXOOQ7f1kzFKPn3b4QU4YEwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMq23kN6JKaLRDZONeOIH7D5Db3PulUisG7G v9rU4ZBnR9fTczunuiCBj3R4pzrPRXDNnr6J+X/DQJnBm6NaodrUGJoVPMePqkTe BO9PQcXMGGhe4Nq5ZQj82xsUflau+GPKlDhFIUmHc7keykvqWEbXZRZJXDkVuYJ1 4u7nkajvyxPQnW1drAWVfuQ1ZP9FUJA5nkkq0pv3IN54f2mAZcvii3MLkZaorZ3j /vyHKBNU4R4ekutPnGebsKrWGfSr5EHMm5dWY+RGLojiXJnqhIPMui+Xj5bvSrO/ 9RxRj7v2smuycoiJHv1qYKJ88wUN5Ljez5k3ahp0dHtk9aQYAe8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:19 2026 by rpki-client