$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: q3aSBg5CXogJvqQxbR+Pz1t2E99nMjc9W9BifG2/Hs8= Subject key identifier: CF:84:9B:F3:1B:FF:FB:77:48:9B:C5:DB:9A:2E:4B:CA:2E:BE:02:D1 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 14586FE31C3D36D6F57CC32EB46675D14503B86C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 021F Signing time: Sun 19 Apr 2026 00:21:44 +0000 Manifest this update: Sun 19 Apr 2026 00:16:44 +0000 Manifest next update: Wed 22 Apr 2026 05:45:44 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 2: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) 3: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: z76/liE3NzUgu7p6Nup9ceslheo9mAuM2WM06GC8hVI=) 4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:58:6f:e3:1c:3d:36:d6:f5:7c:c3:2e:b4:66:75:d1:45:03:b8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Apr 19 00:16:44 2026 GMT Not After : Apr 22 05:45:44 2026 GMT Subject: CN=CF849BF31BFFFB77489BC5DB9A2E4BCA2EBE02D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:de:9d:82:78:57:1f:bb:40:45:f2:49:e1: 5b:6b:bd:fc:8c:94:9d:a4:b1:22:e6:39:4d:33:83: 86:b3:ce:19:c6:1c:ff:b7:4e:6d:f7:35:84:3e:a2: a4:76:a5:2a:74:0a:cb:ab:5a:46:d8:66:95:3a:98: a6:ad:df:c6:0f:54:21:b8:77:d7:93:0d:2b:2e:9f: de:d8:d1:54:64:ea:40:a0:2b:fd:d9:b8:70:02:0b: 0c:67:a4:18:36:96:ca:91:72:b7:83:30:1c:c9:e8: c8:1a:ac:16:e7:29:16:48:cd:35:c5:57:45:58:2a: 39:9a:b6:8a:03:19:6a:34:04:d1:f1:c9:a1:34:7c: b2:3c:55:c3:6e:fc:a7:fb:70:30:3c:75:35:fd:14: b5:0d:a2:87:64:ca:c7:8a:61:ab:67:ed:ba:89:55: ad:a9:eb:ad:0e:db:d8:f7:22:61:61:d1:81:3b:80: 24:ca:2e:60:0e:21:6e:63:81:fd:ec:a0:0e:11:0b: c3:03:f8:c1:70:69:ed:07:de:4f:8a:fd:48:42:2b: 16:2d:90:f4:22:ed:c6:d0:f6:37:3a:05:62:00:6a: ec:d2:64:2e:64:51:b6:85:84:c2:be:11:d7:cf:57: a2:81:ba:e8:bb:f8:6a:71:05:42:fc:4e:42:9e:ab: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:9B:F3:1B:FF:FB:77:48:9B:C5:DB:9A:2E:4B:CA:2E:BE:02:D1 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:8d:a9:22:52:5c:67:ab:77:ef:53:e7:08:1a:77:b8:a7: 3d:e7:05:8f:c4:9f:45:25:77:b8:91:b1:de:f3:c2:e4:e9:dc: 0e:a4:99:c8:c2:37:06:93:f5:dc:d4:f6:d5:70:3c:f4:56:af: bd:dc:e7:de:27:83:24:ec:ed:a4:28:16:8e:bc:cc:89:c9:19: cb:dc:18:7b:da:f5:8c:71:63:90:cd:a3:42:1c:97:d5:9d:a4: fc:01:e4:66:41:1f:0c:1f:ff:82:d9:5e:92:6a:1f:d8:4a:2e: 5e:d3:f6:16:dc:a5:bf:3d:2e:f9:63:35:71:8f:be:d5:1e:9e: e4:2a:7c:d3:f3:22:5f:f0:35:df:44:b7:9c:7c:81:11:4b:60: 2d:83:60:f8:63:d1:77:af:91:ab:e4:0b:3b:54:22:9d:95:da: a9:b2:37:0c:ab:f0:ef:ee:b9:bf:71:d8:32:4b:e7:20:16:b8: 9b:aa:6e:58:5f:a8:a6:f6:77:5c:97:cc:35:f1:d9:0d:d6:39: aa:37:6f:58:87:ca:7d:8b:59:0d:ab:e4:cc:d7:e3:f6:fc:c4: fe:cb:8a:47:3b:e5:ac:9b:67:eb:81:53:37:44:f6:34:c6:c8: 77:ff:ac:e6:00:c1:d9:a2:47:7f:60:67:3c:87:c6:a7:97:1c: 01:14:2b:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFhv4xw9Ntb1fMMutGZ10UUDuGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNjA0MTkwMDE2NDRaFw0yNjA0MjIwNTQ1NDRaMDMxMTAvBgNV BAMTKENGODQ5QkYzMUJGRkZCNzc0ODlCQzVEQjlBMkU0QkNBMkVCRTAyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWN6dgnhXH7tARfJJ4VtrvfyM lJ2ksSLmOU0zg4azzhnGHP+3Tm33NYQ+oqR2pSp0CsurWkbYZpU6mKat38YPVCG4 d9eTDSsun97Y0VRk6kCgK/3ZuHACCwxnpBg2lsqRcreDMBzJ6MgarBbnKRZIzTXF V0VYKjmatooDGWo0BNHxyaE0fLI8VcNu/Kf7cDA8dTX9FLUNoodkyseKYatn7bqJ Va2p660O29j3ImFh0YE7gCTKLmAOIW5jgf3soA4RC8MD+MFwae0H3k+K/UhCKxYt kPQi7cbQ9jc6BWIAauzSZC5kUbaFhMK+EdfPV6KBuui7+GpxBUL8TkKeq3bFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4Sb8xv/+3dIm8Xbmi5Lyi6+AtEwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK3jakiUlxnq3fvU+cIGne4pz3nBY/En0Ul d7iRsd7zwuTp3A6kmcjCNwaT9dzU9tVwPPRWr73c594ngyTs7aQoFo68zInJGcvc GHva9YxxY5DNo0Icl9WdpPwB5GZBHwwf/4LZXpJqH9hKLl7T9hbcpb89LvljNXGP vtUenuQqfNPzIl/wNd9Et5x8gRFLYC2DYPhj0XevkavkCztUIp2V2qmyNwyr8O/u ub9x2DJL5yAWuJuqblhfqKb2d1yXzDXx2Q3WOao3b1iHyn2LWQ2r5MzX4/b8xP7L ikc75aybZ+uBUzdE9jTGyHf/rOYAwdmiR39gZzyHxqeXHAEUK24= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:23 2026 by rpki-client