$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft File: 722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json) Hash identifier: lF9MTP5UxQb01voQ9UsyRiqDsrui3qUIwFuig0BYOLI= Subject key identifier: 56:F1:FA:FA:C4:9C:C3:E1:5C:78:42:A2:C1:91:82:97:0C:18:A7:7F Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505 Certificate serial: D92B7A050EAA92B349DCF0376B8094EA01C5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft Manifest number: 041E Signing time: Fri 17 Apr 2026 17:30:45 +0000 Manifest this update: Fri 17 Apr 2026 17:25:45 +0000 Manifest next update: Mon 20 Apr 2026 19:08:45 +0000 Files and hashes: 1: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: gxjALHEbHW92GdGOTxNMADVK9qRHCqtwF9yiaiRIXlQ=) 2: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: ajrahVRkRf5V7MAaMm9LdrvnMZj659X78GwlPmAMo/M=) 3: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: sCzn25/m0je6VeQbbVeLyb+BPsHQc3CBvZyRKt6D7A8=) 4: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: LCaSxIc71iZBDh0yi4LjrBXL1wqAIM0xU5o5V+eH4Rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d9:2b:7a:05:0e:aa:92:b3:49:dc:f0:37:6b:80:94:ea:01:c5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505 Validity Not Before: Apr 17 17:25:45 2026 GMT Not After : Apr 20 19:08:45 2026 GMT Subject: CN=56F1FAFAC49CC3E15C7842A2C19182970C18A77F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:a7:86:61:d2:61:0b:80:a7:a2:2a:ea:f9: aa:96:8e:97:35:3e:29:ea:38:aa:cf:76:1c:0e:d9: 4b:08:51:48:ab:f3:83:27:3f:24:b5:d3:fa:ad:1c: c5:24:28:ce:e4:ec:07:61:1b:28:06:4d:68:47:32: c2:0c:1f:07:82:d6:22:72:9f:46:7d:e4:db:45:cc: 3c:32:1e:bb:61:66:f0:6b:f9:4f:51:2e:89:f6:41: b4:b9:84:14:4b:00:62:d8:a8:3c:f0:9d:4a:87:9d: 36:e1:03:b4:49:5e:e3:a2:f4:82:a1:d1:5c:6d:d6: e6:65:35:81:65:8a:c5:5e:3e:f1:7c:01:f4:d3:d5: 0b:4f:96:27:31:5e:51:79:31:ae:0a:19:e9:cc:a0: 0d:44:cd:c5:c0:5a:64:48:53:41:97:1f:b5:17:cc: 88:26:28:99:99:ec:2a:e8:2d:dc:b0:da:5e:b1:d4: fd:b8:98:d1:ca:47:58:6c:f0:dc:05:25:90:4a:b6: 5d:30:7e:95:1b:f3:ee:ea:19:19:9f:48:ab:00:0b: 0b:81:e4:68:e5:d2:41:b0:ad:d0:9f:4a:21:06:31: 24:c2:b1:88:68:fe:74:9b:9e:2f:81:a2:72:57:f2: 13:0a:2c:8a:46:94:40:13:c7:e7:fb:ea:30:a5:39: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:FA:FA:C4:9C:C3:E1:5C:78:42:A2:C1:91:82:97:0C:18:A7:7F X509v3 Authority Key Identifier: keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:88:c5:51:09:25:0c:b3:8e:07:91:a4:24:4c:89:d1:cf:fc: c3:89:ff:26:26:93:f0:5c:95:f6:eb:59:16:b5:e0:a5:63:a5: 83:f9:26:cc:eb:bd:09:1b:51:e0:84:9d:72:bd:a1:fd:84:5a: 43:4d:28:47:12:3a:a4:0e:68:b2:98:f5:84:2e:57:ba:80:4a: 41:9c:f0:a9:87:3a:d9:d9:04:73:00:52:eb:e9:fc:f8:23:b3: 0d:af:b1:fa:04:e7:73:25:c4:f5:58:ea:4e:30:01:31:18:8a: f3:21:f1:05:5e:48:fd:dd:dd:f3:13:cd:7f:fb:22:01:69:57: 0b:df:cf:c2:ea:bf:04:0d:f1:41:c2:28:58:f4:8e:8b:ce:db: 20:8e:b3:81:d4:00:8b:72:31:a3:f7:87:b5:1f:52:93:ef:6c: 74:6e:d9:ac:98:9b:20:fd:9f:06:5a:23:be:a1:02:81:9a:f9: cf:ae:20:3c:01:4a:91:c3:b3:83:2a:f5:d2:70:f5:b6:b3:4d: 35:1e:4f:0d:77:54:85:77:25:a1:f1:1e:75:8a:83:c3:66:a1: 30:f6:5c:6f:29:ea:60:9e:ce:63:8a:51:5b:02:76:d8:34:a9: 76:0e:9a:23:05:45:36:24:05:6f:e4:b2:a3:c1:7a:3b:19:82: 15:a7:8a:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANkregUOqpKzSdzwN2uAlOoBxacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVD MjdCODUwNTAeFw0yNjA0MTcxNzI1NDVaFw0yNjA0MjAxOTA4NDVaMDMxMTAvBgNV BAMTKDU2RjFGQUZBQzQ5Q0MzRTE1Qzc4NDJBMkMxOTE4Mjk3MEMxOEE3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2qeGYdJhC4Cnoirq+aqWjpc1 PinqOKrPdhwO2UsIUUir84MnPyS10/qtHMUkKM7k7AdhGygGTWhHMsIMHweC1iJy n0Z95NtFzDwyHrthZvBr+U9RLon2QbS5hBRLAGLYqDzwnUqHnTbhA7RJXuOi9IKh 0Vxt1uZlNYFlisVePvF8AfTT1QtPlicxXlF5Ma4KGenMoA1EzcXAWmRIU0GXH7UX zIgmKJmZ7CroLdyw2l6x1P24mNHKR1hs8NwFJZBKtl0wfpUb8+7qGRmfSKsACwuB 5Gjl0kGwrdCfSiEGMSTCsYho/nSbni+BonJX8hMKLIpGlEATx+f76jClOQKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvH6+sScw+FceEKiwZGClwwYp38wHwYDVR0j BBgwFoAUci/nljjm0U5HlIFRIiR8vsJ7hQUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTQwY2Y4MC05MzE1LTQyYzEtODQ0ZS1iYjAzNjIyYTA1YzEvMC83MjJGRTc5NjM4 RTZEMTRFNDc5NDgxNTEyMjI0N0NCRUMyN0I4NTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVDMjdC ODUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdD QkVDMjdCODUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByIxVEJJQyzjgeRpCRMidHP/MOJ/yYmk/Bc lfbrWRa14KVjpYP5JszrvQkbUeCEnXK9of2EWkNNKEcSOqQOaLKY9YQuV7qASkGc 8KmHOtnZBHMAUuvp/Pgjsw2vsfoE53MlxPVY6k4wATEYivMh8QVeSP3d3fMTzX/7 IgFpVwvfz8LqvwQN8UHCKFj0jovO2yCOs4HUAItyMaP3h7UfUpPvbHRu2ayYmyD9 nwZaI76hAoGa+c+uIDwBSpHDs4Mq9dJw9bazTTUeTw13VIV3JaHxHnWKg8NmoTD2 XG8p6mCezmOKUVsCdtg0qXYOmiMFRTYkBW/ksqPBejsZghWnimQ= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:03 2026 by rpki-client