$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: rPf3ciKaqyDI7sOI9z7Kd+V5jtUuyw4fyDIa5siv7rc= Subject key identifier: 8A:F2:68:E8:91:7B:1E:C2:ED:CD:8C:4F:AC:5D:6F:78:46:E2:A0:09 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 098430660692C65CC864510CCC562E0F3AD4F950 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 03E5 Signing time: Fri 17 Apr 2026 13:12:18 +0000 Manifest this update: Fri 17 Apr 2026 13:07:18 +0000 Manifest next update: Mon 20 Apr 2026 20:06:18 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: Phgr/J3YO0DLGGyTB1vzl9uqxXbMr4C2uUn9DGwY+aI=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:84:30:66:06:92:c6:5c:c8:64:51:0c:cc:56:2e:0f:3a:d4:f9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Apr 17 13:07:18 2026 GMT Not After : Apr 20 20:06:18 2026 GMT Subject: CN=8AF268E8917B1EC2EDCD8C4FAC5D6F7846E2A009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:05:8c:19:e8:d0:99:75:04:15:c0:87:27: ef:e0:d8:40:bc:a2:ce:d4:9c:a9:d3:19:d0:b6:b7: 95:90:fa:8e:20:e0:dc:cb:6d:bc:b4:2c:4f:90:e7: 69:3c:6d:06:0a:59:c0:bb:e1:f7:e2:ca:4f:38:2d: 83:55:ab:48:23:e9:2c:54:9d:51:eb:2f:4c:77:04: cb:f1:c4:58:11:42:2d:ce:68:17:11:cf:61:2e:1b: 48:a6:a1:3a:ba:18:dc:e9:77:f4:d0:28:ae:73:08: f8:78:c2:96:c0:70:70:95:5b:1a:03:b8:ff:0e:cb: f2:14:4c:6b:c7:db:fb:7c:f1:a2:59:79:5f:f4:d5: d6:ae:f2:d3:f7:2b:93:e4:b7:e3:80:69:36:b8:cb: 0f:99:71:d9:46:d6:ca:2e:1b:bc:67:12:33:f8:d8: 30:80:9f:a5:b8:8c:7c:03:64:cb:18:b0:40:9f:a3: f9:f8:a0:f3:54:79:46:24:1d:32:95:42:d6:c3:54: 53:6b:86:35:e4:80:5e:52:c8:1a:f3:7e:50:47:4d: 59:cf:99:2b:5b:c7:43:6f:ef:5d:da:cc:32:09:58: 08:f8:97:5e:58:c5:c3:2f:2c:23:2c:db:94:6c:3f: 20:5f:6d:7c:75:de:f0:3f:96:90:ac:0d:f2:44:76: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:68:E8:91:7B:1E:C2:ED:CD:8C:4F:AC:5D:6F:78:46:E2:A0:09 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:54:90:11:10:f6:47:c7:a3:e5:74:64:24:43:e8:44:36:f8: 82:4c:92:0a:01:ae:fe:69:5c:df:f7:52:a0:4f:6e:b6:02:28: b3:6f:98:6a:99:a3:13:b1:d0:5e:5c:cd:27:91:d6:35:5b:02: 35:4d:e1:b8:fa:55:39:f9:67:9b:22:de:cd:64:80:1c:16:dc: 1a:1e:97:e4:a8:b2:18:72:ff:cb:45:cc:f8:9e:94:c7:dc:9c: d9:02:13:9d:30:a5:49:be:60:5c:07:82:e2:27:70:89:a5:53: 7c:12:98:88:4f:5d:6d:45:67:f1:77:23:5d:21:3c:cc:da:a7: 75:75:00:5b:26:9d:20:63:30:9e:6b:fc:b8:51:ae:e2:71:d0: 60:29:61:8f:7d:f3:fb:5c:b3:ec:2c:9d:e2:69:92:e6:10:01: 92:f0:c9:c6:57:b6:7d:9b:5e:8b:eb:fb:d6:a2:1c:85:99:48: cd:97:49:9d:17:ff:80:ca:e5:d5:42:e1:90:04:0b:c7:63:fa: ed:c5:38:ff:c6:dd:f6:be:c7:2f:cd:f3:d4:c1:75:64:c4:c3: e7:40:28:7d:83:a0:a4:ed:cd:3c:20:75:47:28:80:74:36:e5: cc:86:b4:1e:38:4a:88:06:cb:fe:32:23:ba:ca:31:80:19:20: de:7a:bb:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYQwZgaSxlzIZFEMzFYuDzrU+VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNjA0MTcxMzA3MThaFw0yNjA0MjAyMDA2MThaMDMxMTAvBgNV BAMTKDhBRjI2OEU4OTE3QjFFQzJFRENEOEM0RkFDNUQ2Rjc4NDZFMkEwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFQWMGejQmXUEFcCHJ+/g2EC8 os7UnKnTGdC2t5WQ+o4g4NzLbby0LE+Q52k8bQYKWcC74ffiyk84LYNVq0gj6SxU nVHrL0x3BMvxxFgRQi3OaBcRz2EuG0imoTq6GNzpd/TQKK5zCPh4wpbAcHCVWxoD uP8Oy/IUTGvH2/t88aJZeV/01dau8tP3K5Pkt+OAaTa4yw+ZcdlG1souG7xnEjP4 2DCAn6W4jHwDZMsYsECfo/n4oPNUeUYkHTKVQtbDVFNrhjXkgF5SyBrzflBHTVnP mStbx0Nv713azDIJWAj4l15YxcMvLCMs25RsPyBfbXx13vA/lpCsDfJEdqk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivJo6JF7HsLtzYxPrF1veEbioAkwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZUkBEQ9kfHo+V0ZCRD6EQ2+IJMkgoBrv5p XN/3UqBPbrYCKLNvmGqZoxOx0F5czSeR1jVbAjVN4bj6VTn5Z5si3s1kgBwW3Boe l+Soshhy/8tFzPielMfcnNkCE50wpUm+YFwHguIncImlU3wSmIhPXW1FZ/F3I10h PMzap3V1AFsmnSBjMJ5r/LhRruJx0GApYY998/tcs+wsneJpkuYQAZLwycZXtn2b Xovr+9aiHIWZSM2XSZ0X/4DK5dVC4ZAEC8dj+u3FOP/G3fa+xy/N89TBdWTEw+dA KH2DoKTtzTwgdUcogHQ25cyGtB44SogGy/4yI7rKMYAZIN56u38= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:58 2026 by rpki-client