$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: /Pt+Azu9VkNKaviLx1uRrj0yVP/kqjTGCgFMnvDy0xw= Subject key identifier: E7:94:0B:65:C6:47:25:0A:B0:19:61:85:8F:D0:00:B8:F3:26:56:29 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 2D7C9B5AD9232CF580E8DD7E7045EBA66195F2A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 0246 Signing time: Fri 17 Apr 2026 14:41:30 +0000 Manifest this update: Fri 17 Apr 2026 14:36:30 +0000 Manifest next update: Mon 20 Apr 2026 15:46:30 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 2: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: jXmf5oADp8KueZoosw4CLRFruxf41wZLSTk2fMUZ14E=) 3: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) 4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 1f/T8Rp4kDNe7xFNVY+aeyPqNEObhKmytjK3fag8EPM=) 5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: f8W5FJ9iU4t8t9EU3XiXSZ62Db4DfGqKJl32gKMiJc8=) 6: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: 2oouebf7UsPHLpt9830VcwSE4wBkUD3e0RYeB8qNtMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7c:9b:5a:d9:23:2c:f5:80:e8:dd:7e:70:45:eb:a6:61:95:f2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Apr 17 14:36:30 2026 GMT Not After : Apr 20 15:46:30 2026 GMT Subject: CN=E7940B65C647250AB01961858FD000B8F3265629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:56:50:36:5f:e3:ec:62:0d:53:2d:bb:08: 3d:f7:5a:17:63:84:73:2b:dc:60:7a:a8:0a:d1:dc: 84:3f:20:dd:e3:bf:ab:e8:f0:04:fe:2d:b2:ca:28: fa:e8:d9:ba:8e:40:af:a3:86:54:69:60:10:a1:b8: 4d:30:eb:b0:19:bc:f0:28:88:84:a6:c9:67:24:90: e0:b2:33:35:0b:61:d1:18:ce:84:88:c6:d7:98:39: 85:11:8d:c1:4d:2c:75:b2:67:fe:3f:ce:d1:ef:e6: 63:f0:52:00:4b:07:0d:f5:18:8a:ff:f7:db:74:ba: aa:bb:69:47:7b:7e:dc:b5:d8:d4:1d:ab:83:62:6c: e2:fa:76:35:08:bd:30:85:47:b5:73:69:50:9e:e9: 39:1e:d2:f0:f5:c3:a6:fb:6f:77:cb:3a:99:33:22: 6d:d3:af:86:11:32:21:15:2b:f8:43:ed:22:b8:6c: d7:ba:1e:67:70:8d:d1:04:0b:44:12:4f:53:56:26: 31:11:9c:65:0b:04:35:56:fa:00:e8:8d:dc:27:15: 1b:62:c3:9a:42:f7:d5:a1:9b:a3:bb:cf:3c:14:69: 6c:82:ac:00:cb:55:2c:45:df:65:f4:5d:df:cf:96: 38:d1:2c:ca:4a:93:04:7e:c6:32:20:15:76:6b:bb: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:0B:65:C6:47:25:0A:B0:19:61:85:8F:D0:00:B8:F3:26:56:29 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:79:51:dd:c4:e1:03:9b:24:52:5d:7d:ca:ff:d1:93:de:50: b7:36:24:d3:b8:9a:70:93:4a:b0:b8:22:ee:57:8f:c9:4c:59: af:f9:e1:3a:b9:b5:a8:62:9b:13:56:69:30:45:54:7b:b2:65: 2c:c9:34:f2:61:09:1b:6e:c1:5e:e5:e1:47:ab:30:cd:ba:c1: 03:b7:be:21:2c:3a:7c:c1:7e:6e:c2:6f:85:fa:f8:78:bd:7e: 75:5b:73:55:50:8a:85:9c:b8:4d:9f:a8:bb:88:da:b8:b6:58: 85:4e:bb:a2:f9:0e:74:9f:3e:f1:6c:f9:10:e5:31:93:e2:6a: ed:4a:b3:04:0a:15:5f:c1:6f:46:ba:ca:bb:96:97:23:69:79: f3:9c:15:cb:d3:7c:07:80:5a:ad:43:96:32:90:bd:20:b5:cb: b7:29:87:7d:0e:84:f9:18:94:0a:b9:45:ba:0c:8c:a3:5c:af: cd:8a:43:d6:da:33:0f:cc:1b:23:ea:9b:68:5e:61:b0:cf:bd: 4c:a9:3b:c1:68:1a:0f:51:a1:27:3d:03:50:cb:13:b1:16:6d: 0f:9a:02:97:8d:36:3c:a3:b2:51:31:c9:9e:5f:dc:3b:cf:c3: 81:54:0a:31:77:c3:4b:7f:f0:a9:90:45:bb:be:12:3a:89:ec: 2f:55:48:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXybWtkjLPWA6N1+cEXrpmGV8qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNjA0MTcxNDM2MzBaFw0yNjA0MjAxNTQ2MzBaMDMxMTAvBgNV BAMTKEU3OTQwQjY1QzY0NzI1MEFCMDE5NjE4NThGRDAwMEI4RjMyNjU2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eFZQNl/j7GINUy27CD33Whdj hHMr3GB6qArR3IQ/IN3jv6vo8AT+LbLKKPro2bqOQK+jhlRpYBChuE0w67AZvPAo iISmyWckkOCyMzULYdEYzoSIxteYOYURjcFNLHWyZ/4/ztHv5mPwUgBLBw31GIr/ 99t0uqq7aUd7fty12NQdq4NibOL6djUIvTCFR7VzaVCe6Tke0vD1w6b7b3fLOpkz Im3Tr4YRMiEVK/hD7SK4bNe6HmdwjdEEC0QST1NWJjERnGULBDVW+gDojdwnFRti w5pC99Whm6O7zzwUaWyCrADLVSxF32X0Xd/PljjRLMpKkwR+xjIgFXZru4p1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55QLZcZHJQqwGWGFj9AAuPMmVikwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt5Ud3E4QObJFJdfcr/0ZPeULc2JNO4mnCT SrC4Iu5Xj8lMWa/54Tq5tahimxNWaTBFVHuyZSzJNPJhCRtuwV7l4UerMM26wQO3 viEsOnzBfm7Cb4X6+Hi9fnVbc1VQioWcuE2fqLuI2ri2WIVOu6L5DnSfPvFs+RDl MZPiau1KswQKFV/Bb0a6yruWlyNpefOcFcvTfAeAWq1DljKQvSC1y7cph30OhPkY lAq5RboMjKNcr82KQ9baMw/MGyPqm2heYbDPvUypO8FoGg9RoSc9A1DLE7EWbQ+a ApeNNjyjslExyZ5f3DvPw4FUCjF3w0t/8KmQRbu+EjqJ7C9VSKc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:41 2026 by rpki-client