$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: mgFi3et3epfiaznZX3BL5jbP5XyMuYEKicAcTtc9NSM= Subject key identifier: AA:A9:A4:17:04:AC:0A:6E:60:C7:2B:39:A7:A0:52:00:55:2C:36:AD Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 0455174D0AD8C6B13E7BAC1999F3B0DCBA1F9C17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: 0107 Signing time: Sat 18 Apr 2026 16:10:03 +0000 Manifest this update: Sat 18 Apr 2026 16:05:03 +0000 Manifest next update: Wed 22 Apr 2026 03:10:03 +0000 Files and hashes: 1: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) 2: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: YlwvqwPuvM9nptouoplke3lF82ozvnsGpbQLeB9LXm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:55:17:4d:0a:d8:c6:b1:3e:7b:ac:19:99:f3:b0:dc:ba:1f:9c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Apr 18 16:05:03 2026 GMT Not After : Apr 22 03:10:03 2026 GMT Subject: CN=AAA9A41704AC0A6E60C72B39A7A05200552C36AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:f1:d0:5e:c0:01:23:12:83:2d:a1:42:bb: a4:ee:ec:35:b2:41:e7:18:bc:33:e9:5c:46:8f:de: a0:42:45:c5:fe:3b:34:55:0d:0f:36:06:ae:e5:b7: 21:1f:ec:8c:63:05:69:d2:47:0f:90:4f:29:c9:0b: 5f:4d:f7:43:48:63:1a:64:9e:88:87:e4:ff:2b:f4: 0a:0d:e0:4c:88:12:3d:d0:94:89:f9:1d:b1:96:bf: fe:17:d2:e4:c5:56:42:de:c7:5f:e8:aa:87:bc:c6: 22:86:45:68:d9:73:4a:5a:18:98:8b:40:39:d1:bf: 5b:fe:f3:ff:78:ba:55:90:0d:08:eb:2b:47:58:e5: e4:35:05:7f:b0:5f:0b:85:84:d6:5f:69:38:4d:0a: e0:08:6d:f5:9d:66:d7:fd:af:18:9c:cf:82:f4:23: 08:50:89:9a:95:47:41:b0:2e:d0:e6:d9:d5:41:e7: fc:82:2f:6b:aa:76:50:c8:be:7f:d5:b7:a0:b6:75: 1c:11:76:c6:3b:a9:9e:a5:52:93:37:9f:93:cf:90: 08:42:cd:85:2d:2a:7f:04:f2:fc:92:10:a0:cc:43: ed:d6:65:b7:93:c0:20:b5:27:ec:54:30:f2:6b:06: 8e:23:cb:39:0c:3a:fe:83:a6:9d:a6:dd:83:fb:a5: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:A4:17:04:AC:0A:6E:60:C7:2B:39:A7:A0:52:00:55:2C:36:AD X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:25:8c:09:27:11:e6:94:c9:c0:a3:61:db:86:6c:3c:28: 19:6a:50:20:47:79:97:b1:e1:f9:2f:e0:39:b8:17:b0:02:03: af:93:0b:03:27:af:e0:1a:bf:20:c9:fc:44:62:78:71:92:cb: 52:61:7c:dd:09:bd:e4:d2:1a:a6:16:48:f6:4b:2d:7a:f3:7e: 65:2b:11:4c:09:27:fe:b5:91:43:69:46:2a:0b:cb:61:ff:60: b1:37:4d:76:33:39:0f:45:5c:35:d5:87:9a:34:57:52:98:fa: 53:52:00:c7:2a:06:36:14:44:ee:89:2e:fb:b7:49:49:66:05: 67:cf:be:2e:ce:78:48:fa:cc:32:e6:51:8e:1d:a5:93:67:ca: c9:4d:09:50:0d:45:92:76:0b:21:84:9c:55:10:66:fc:ec:5f: 51:8e:3b:34:a8:4a:62:cc:db:96:19:3b:0e:77:9c:cc:ae:0b: e2:c5:cf:29:be:64:5a:7a:61:bc:d8:9f:09:10:cc:5a:cf:db: 4d:ac:34:30:70:04:85:b0:c3:15:c6:8f:7a:ec:f3:44:7f:be: 95:bc:1d:bd:5e:cb:ca:20:66:bf:8b:a6:40:58:ba:87:2e:61: 90:65:21:43:83:37:8f:73:79:03:88:77:82:05:52:e1:74:8f: 93:fb:53:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFUXTQrYxrE+e6wZmfOw3LofnBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNjA0MTgxNjA1MDNaFw0yNjA0MjIwMzEwMDNaMDMxMTAvBgNV BAMTKEFBQTlBNDE3MDRBQzBBNkU2MEM3MkIzOUE3QTA1MjAwNTUyQzM2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiavHQXsABIxKDLaFCu6Tu7DWy QecYvDPpXEaP3qBCRcX+OzRVDQ82Bq7ltyEf7IxjBWnSRw+QTynJC19N90NIYxpk noiH5P8r9AoN4EyIEj3QlIn5HbGWv/4X0uTFVkLex1/oqoe8xiKGRWjZc0paGJiL QDnRv1v+8/94ulWQDQjrK0dY5eQ1BX+wXwuFhNZfaThNCuAIbfWdZtf9rxicz4L0 IwhQiZqVR0GwLtDm2dVB5/yCL2uqdlDIvn/Vt6C2dRwRdsY7qZ6lUpM3n5PPkAhC zYUtKn8E8vySEKDMQ+3WZbeTwCC1J+xUMPJrBo4jyzkMOv6Dpp2m3YP7pXPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqmkFwSsCm5gxys5p6BSAFUsNq0wHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf0JYwJJxHmlMnAo2Hbhmw8KBlqUCBHeZex 4fkv4Dm4F7ACA6+TCwMnr+AavyDJ/ERieHGSy1JhfN0JveTSGqYWSPZLLXrzfmUr EUwJJ/61kUNpRioLy2H/YLE3TXYzOQ9FXDXVh5o0V1KY+lNSAMcqBjYURO6JLvu3 SUlmBWfPvi7OeEj6zDLmUY4dpZNnyslNCVANRZJ2CyGEnFUQZvzsX1GOOzSoSmLM 25YZOw53nMyuC+LFzym+ZFp6YbzYnwkQzFrP202sNDBwBIWwwxXGj3rs80R/vpW8 Hb1ey8ogZr+LpkBYuocuYZBlIUODN49zeQOId4IFUuF0j5P7U1Q= -----END CERTIFICATE-----Generated at Sun Apr 19 15:39:46 2026 by rpki-client